This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa File: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (raw, json) Hash identifier: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI= Subject key identifier: 91:65:9D:B4:48:6A:83:57:42:36:05:C6:5A:86:06:B5:9F:41:79:60 Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e Certificate serial: 019B79ED3EFF830E417B7048DBF185617B62 Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207185 IP address blocks: 185.90.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3e:ff:83:0e:41:7b:70:48:db:f1:85:61:7b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91659db4486a8357423605c65a8606b59f417960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:bc:b3:a1:0b:d7:f0:d6:12:08:19:20:c1: 68:c7:56:bd:64:56:27:5b:99:5f:9b:99:55:cf:56: ea:5e:72:4b:fa:e9:7c:99:9c:f3:b3:0c:f9:e7:2a: 60:a6:ee:f9:85:fd:a8:c7:96:10:78:ff:5e:8d:45: c8:90:e8:f4:67:f8:aa:b7:8b:d4:6a:2b:51:df:b2: 6b:a6:99:9b:cd:16:81:2b:70:be:c8:47:8d:a8:c5: 71:66:95:0d:d1:ea:45:e0:43:ec:14:a8:5a:a8:9f: d3:d7:d0:55:01:b6:2b:9f:44:b2:6e:a5:c5:fd:90: 44:e7:36:44:6d:41:57:11:fd:62:43:d6:4b:85:c4: 58:a7:04:0d:92:c3:07:ef:00:18:b3:5f:d9:8f:65: 29:75:06:30:53:78:94:06:e1:4c:c7:cf:e5:ae:78: 05:4f:22:7f:f5:02:73:7b:2d:6f:ff:3a:a7:5a:f7: c5:33:69:28:e5:18:3d:f6:1e:24:32:5d:64:d2:15: 4f:6c:40:ca:19:9d:85:bd:b4:3f:49:71:d6:ec:f1: 91:eb:04:d2:84:9c:3a:75:d6:be:25:11:59:7f:c3: 14:eb:24:54:16:a0:c2:7b:67:de:27:28:b4:f5:e0: 12:0f:4a:3b:16:5e:44:e0:ee:21:67:65:1b:bb:ce: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:9D:B4:48:6A:83:57:42:36:05:C6:5A:86:06:B5:9F:41:79:60 X509v3 Authority Key Identifier: keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.208.0/22 Signature Algorithm: sha256WithRSAEncryption 16:ff:72:1f:04:da:f7:61:96:ed:72:03:aa:d3:79:6d:06:ee: 8d:1b:f5:1f:0c:ff:9c:92:e3:cf:e5:e0:fb:e8:53:43:d8:7b: 41:46:5b:78:cb:2b:04:cd:4c:b1:8a:66:c7:9e:2b:f8:f1:80: 86:fe:75:fc:29:e8:94:32:cc:70:b6:c3:66:ea:70:35:f6:5c: 8b:2a:c2:2d:da:7f:55:af:89:7d:02:45:5b:e9:e1:7f:02:76: e1:84:5b:3d:1c:1f:f3:09:9a:81:92:c9:6f:7f:40:c8:e6:c2: 31:6b:2e:0f:d0:de:4e:5e:c5:e1:f5:85:10:92:63:84:bb:9d: 67:ed:e9:23:4e:f5:89:e0:65:09:fe:5f:51:88:fe:6e:2d:35: 41:b9:42:7d:46:39:22:39:cb:6a:c0:83:4d:f1:28:2c:25:ac: 93:eb:7b:9d:fe:ff:c0:6c:16:04:c6:e2:ac:9b:54:a3:98:04: 23:d6:fc:ea:9a:4a:0f:97:d3:8a:e4:a1:95:91:8c:c0:35:65: 69:89:ae:44:48:9d:96:b2:e4:ac:19:5d:b8:5a:44:f1:6e:ca: 5c:ff:e2:cf:2c:92:a1:1e:4f:a9:8e:ed:e3:4d:e4:bc:5e:7d: 00:21:43:f7:a8:1f:a2:4a:ed:37:81:da:1f:de:21:6e:fb:b2: eb:dd:16:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57T7/gw5Be3BI2/GFYXtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy ZjFkNWUwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTY1OWRiNDQ4NmE4MzU3NDIzNjA1YzY1YTg2MDZiNTlmNDE3OTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ei8s6EL1/DWEggZIMFox1a9ZFYn W5lfm5lVz1bqXnJL+ul8mZzzswz55ypgpu75hf2ox5YQeP9ejUXIkOj0Z/iqt4vU aitR37JrppmbzRaBK3C+yEeNqMVxZpUN0epF4EPsFKhaqJ/T19BVAbYrn0SybqXF /ZBE5zZEbUFXEf1iQ9ZLhcRYpwQNksMH7wAYs1/Zj2UpdQYwU3iUBuFMx8/lrngF TyJ/9QJzey1v/zqnWvfFM2ko5Rg99h4kMl1k0hVPbEDKGZ2FvbQ/SXHW7PGR6wTS hJw6dda+JRFZf8MU6yRUFqDCe2feJyi09eASD0o7Fl5E4O4hZ2Ubu87ntwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFlnbRIaoNXQjYFxlqGBrWfQXlgMB8GA1UdIwQY MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct OTc4NWEzMzU1NDJhLzEva1dXZHRFaHFnMWRDTmdYR1dvWUd0WjlCZVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVrQMA0G CSqGSIb3DQEBCwUAA4IBAQAW/3IfBNr3YZbtcgOq03ltBu6NG/UfDP+ckuPP5eD7 6FND2HtBRlt4yysEzUyximbHniv48YCG/nX8KeiUMsxwtsNm6nA19lyLKsIt2n9V r4l9AkVb6eF/AnbhhFs9HB/zCZqBkslvf0DI5sIxay4P0N5OXsXh9YUQkmOEu51n 7ekjTvWJ4GUJ/l9RiP5uLTVBuUJ9RjkiOctqwINN8SgsJayT63ud/v/AbBYExuKs m1SjmAQj1vzqmkoPl9OK5KGVkYzANWVpia5ESJ2WsuSsGV24WkTxbspc/+LPLJKh Hk+pju3jTeS8Xn0AIUP3qB+iSu03gdof3iFu+7Lr3Rb4 -----END CERTIFICATE-----Generated at Mon Jan 26 18:15:57 2026 by rpki-client