This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/KwOOI4nyHLltSmxmCqXmNAWGCTk.roa File: KwOOI4nyHLltSmxmCqXmNAWGCTk.roa (raw, json) Hash identifier: Cn4AENaFj3iDaJ2ynDP4Br7mPiKHlqswys3FUBKbke4= Subject key identifier: 2B:03:8E:23:89:F2:1C:B9:6D:4A:6C:66:0A:A5:E6:34:05:86:09:39 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B791058CF891448DC8FED5D86D745DD0F Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/KwOOI4nyHLltSmxmCqXmNAWGCTk.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 188.191.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:58:cf:89:14:48:dc:8f:ed:5d:86:d7:45:dd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b038e2389f21cb96d4a6c660aa5e63405860939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:64:e5:0d:6a:80:34:31:9c:47:0c:67:36: 76:1a:3f:a4:08:6e:59:80:a6:9e:dc:b3:7c:5f:22: fd:db:c9:dc:29:b6:8b:93:eb:b7:28:13:8f:63:da: ff:71:2d:0e:f4:52:e4:02:8d:06:82:8c:bf:37:0b: a1:a1:5e:fd:90:cc:60:06:b6:c1:1c:7f:fc:b6:ab: 14:e7:b6:a5:b7:ec:f0:18:f5:b6:9c:89:f7:93:0a: 66:f4:11:1f:84:a1:e5:f0:89:b3:20:ef:88:39:ea: c1:8f:dc:e4:ef:b2:5f:a4:d0:cb:00:42:d2:3f:12: df:e8:83:ff:30:1a:c7:0a:21:67:34:a4:68:10:e3: 8b:b2:ff:45:8e:b9:be:07:b9:65:9c:2c:08:a2:96: 10:9f:d2:18:c3:55:a0:24:4e:d1:22:17:8a:ea:90: d1:91:44:ac:20:21:4c:e1:e9:f7:93:e2:c6:af:aa: 83:10:a1:cc:c7:0c:0d:51:3d:44:ad:b7:65:35:6a: 3e:5f:18:d9:6a:83:d5:99:aa:6f:fc:f9:d3:2f:8e: 09:31:21:e8:5f:6f:3c:29:f1:3f:32:36:2e:df:a0: ad:18:b0:16:27:63:fc:65:d6:2a:e5:08:8b:7a:49: fd:83:71:6a:ab:8d:d4:c2:e1:1a:55:d7:81:4f:e9: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:8E:23:89:F2:1C:B9:6D:4A:6C:66:0A:A5:E6:34:05:86:09:39 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/KwOOI4nyHLltSmxmCqXmNAWGCTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.96.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:86:e3:dd:7e:c9:12:11:09:5b:03:4e:4e:04:c1:ed:ae:27: 86:c6:e0:26:a7:87:a3:d7:54:a6:05:0f:36:ee:26:d2:17:fb: 1c:c2:27:7b:74:cd:97:27:20:ba:f5:5d:1d:3c:2d:e3:6d:04: 42:66:2c:c1:32:3d:41:32:2a:41:d2:d0:57:bd:24:68:f1:57: 80:69:17:a8:e1:e5:4f:37:fe:87:e9:31:a7:36:6d:3e:0f:f4: df:57:51:a7:17:cc:1e:c3:68:e6:6a:1a:10:9d:38:a6:57:c3: d9:59:0f:74:0e:b5:c6:32:ab:26:61:54:9a:95:be:30:c9:a5: f1:3b:7d:53:c2:6b:0d:23:08:53:26:c6:d3:cc:e1:95:d6:8d: 2f:a1:bb:21:62:b4:99:0f:a0:2a:b0:92:6d:fc:9b:ff:a1:a2: 90:5c:da:df:21:3f:1c:9a:38:fc:df:7a:49:ae:87:17:3c:a5: 22:04:43:58:96:19:06:96:71:20:e1:2c:1f:12:6e:15:00:28: 8c:4c:35:85:cd:37:76:b8:54:c2:39:c0:42:78:95:5f:09:c4: 15:62:f0:3b:5d:13:45:8c:2a:43:dc:0e:cb:08:c9:80:2a:b4: 03:40:f0:f0:7f:57:ab:3e:a0:06:07:f6:c2:fc:92:15:c7:03: e1:32:a4:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFjPiRRI3I/tXYbXRd0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjAzOGUyMzg5ZjIxY2I5NmQ0YTZjNjYwYWE1ZTYzNDA1ODYwOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdNk5Q1qgDQxnEcMZzZ2Gj+kCG5Z gKae3LN8XyL928ncKbaLk+u3KBOPY9r/cS0O9FLkAo0Ggoy/NwuhoV79kMxgBrbB HH/8tqsU57alt+zwGPW2nIn3kwpm9BEfhKHl8ImzIO+IOerBj9zk77JfpNDLAELS PxLf6IP/MBrHCiFnNKRoEOOLsv9Fjrm+B7llnCwIopYQn9IYw1WgJE7RIheK6pDR kUSsICFM4en3k+LGr6qDEKHMxwwNUT1ErbdlNWo+XxjZaoPVmapv/PnTL44JMSHo X288KfE/MjYu36CtGLAWJ2P8ZdYq5QiLekn9g3Fqq43UwuEaVdeBT+l3/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsDjiOJ8hy5bUpsZgql5jQFhgk5MB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvS3dPT0k0bnlITGx0U214bUNxWG1OQVdHQ1RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9gMA0G CSqGSIb3DQEBCwUAA4IBAQBehuPdfskSEQlbA05OBMHtrieGxuAmp4ej11SmBQ82 7ibSF/scwid7dM2XJyC69V0dPC3jbQRCZizBMj1BMipB0tBXvSRo8VeAaReo4eVP N/6H6TGnNm0+D/TfV1GnF8wew2jmahoQnTimV8PZWQ90DrXGMqsmYVSalb4wyaXx O31TwmsNIwhTJsbTzOGV1o0vobshYrSZD6AqsJJt/Jv/oaKQXNrfIT8cmjj833pJ rocXPKUiBENYlhkGlnEg4SwfEm4VACiMTDWFzTd2uFTCOcBCeJVfCcQVYvA7XRNF jCpD3A7LCMmAKrQDQPDwf1erPqAGB/bC/JIVxwPhMqTc -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:07 2026 by rpki-client