This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/kMWSysbBsMqlXuTaQ6EgsY6hfxg.roa File: kMWSysbBsMqlXuTaQ6EgsY6hfxg.roa (raw, json) Hash identifier: 2RHp0NzQ4Xm2ijusQnNDw/6Xw7WkgJBLq25UTMY/YTc= Subject key identifier: 90:C5:92:CA:C6:C1:B0:CA:A5:5E:E4:DA:43:A1:20:B1:8E:A1:7F:18 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F141166069458AF9277B84F79249B83 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/kMWSysbBsMqlXuTaQ6EgsY6hfxg.roa Signing time: Fri 02 Jan 2026 14:19:40 +0000 ROA not before: Fri 02 Jan 2026 14:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197450 IP address blocks: 84.37.0.0/23 maxlen: 24 84.37.6.0/23 maxlen: 24 84.37.18.0/23 maxlen: 24 84.37.26.0/23 maxlen: 24 84.37.30.0/23 maxlen: 24 84.37.56.0/23 maxlen: 24 84.37.60.0/23 maxlen: 24 84.37.72.0/21 maxlen: 24 84.37.76.0/23 maxlen: 24 84.37.88.0/23 maxlen: 24 84.37.92.0/23 maxlen: 24 84.37.96.0/23 maxlen: 24 84.37.100.0/23 maxlen: 24 84.37.128.0/23 maxlen: 24 84.37.142.0/23 maxlen: 24 84.37.152.0/23 maxlen: 24 84.37.156.0/23 maxlen: 24 84.37.160.0/23 maxlen: 24 84.37.164.0/23 maxlen: 24 84.37.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:11:66:06:94:58:af:92:77:b8:4f:79:24:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c592cac6c1b0caa55ee4da43a120b18ea17f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:ed:6c:13:0d:8f:7a:c1:a1:7d:fe:29:82: 53:1e:a1:f7:7f:71:05:b6:00:92:6f:07:1c:af:fd: 96:56:b2:aa:48:8e:46:af:9e:f4:6d:1e:e0:18:01: 58:c6:86:4b:ca:ee:0c:55:8d:13:68:41:7c:d9:0e: 59:4c:d8:d3:5d:c1:06:88:15:01:47:ef:28:21:82: ad:59:43:2f:3a:d7:08:ca:59:80:6d:60:8d:ab:c6: 0e:28:63:88:c4:d4:18:e6:de:c4:75:07:93:5c:69: 47:6e:03:f8:16:a6:b5:b6:64:33:38:ee:1a:76:11: e2:70:43:f9:c3:82:91:5c:c0:e3:c1:2d:d4:5b:a8: 59:ec:7b:82:64:29:99:9d:f2:45:63:f8:cd:aa:32: 89:8f:e9:17:c3:a3:56:92:00:58:7d:42:75:fc:71: 9a:54:fe:93:25:6f:b3:fc:c9:b7:6f:f3:14:64:0d: 2c:67:b2:0d:35:66:55:9f:95:57:21:3c:e1:aa:1c: ef:3f:47:9c:c6:56:3d:c9:b6:bc:a2:ca:26:0e:ac: 71:d0:26:0f:35:5b:e7:14:53:f0:b7:0e:e2:c8:4a: e6:9b:e2:1c:80:53:f9:27:b1:b9:5a:d1:32:d1:fc: c1:b7:28:d1:50:4f:46:0a:d5:02:f9:22:39:fb:04: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C5:92:CA:C6:C1:B0:CA:A5:5E:E4:DA:43:A1:20:B1:8E:A1:7F:18 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/kMWSysbBsMqlXuTaQ6EgsY6hfxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.37.0.0/23 84.37.6.0/23 84.37.18.0/23 84.37.26.0/23 84.37.30.0/23 84.37.56.0/23 84.37.60.0/23 84.37.72.0/21 84.37.88.0/23 84.37.92.0/23 84.37.96.0/23 84.37.100.0/23 84.37.128.0/23 84.37.142.0/23 84.37.152.0/23 84.37.156.0/23 84.37.160.0/23 84.37.164.0/23 84.37.172.0/23 Signature Algorithm: sha256WithRSAEncryption 56:b7:82:46:2b:f3:f6:17:69:67:12:68:53:18:5f:a0:1b:f7: 12:5f:2b:46:7b:a7:e6:c3:e9:dc:2c:c6:92:f0:a5:bf:14:cb: c9:1f:89:6c:37:71:40:18:33:40:c3:93:4a:8c:4f:d2:ed:b1: 6e:92:24:a4:1a:64:d1:bf:e5:0b:22:b3:b9:7b:50:60:cc:8d: ce:3a:2a:36:dd:d0:81:24:22:4b:9c:6a:ff:ca:44:ca:c7:b1: 9e:6d:e5:69:31:e2:2d:30:e4:9d:55:76:f6:c1:33:96:f5:be: 27:eb:a9:a7:68:73:8f:04:71:bd:ec:8f:62:8c:01:bd:b5:07: 8e:c4:2b:27:81:91:3e:e6:50:c4:ae:4c:70:3f:92:6d:cc:ef: 16:d4:f2:76:05:08:4c:bd:99:aa:b3:ab:52:f8:48:8a:eb:12: 66:5a:6a:74:d4:e8:a2:2f:3a:db:e2:a2:2f:d3:7c:09:31:59: 49:47:7d:27:fe:40:d1:04:6c:4f:f1:ec:57:bd:c9:7f:d2:6c: cf:af:e2:bc:6f:fe:ec:af:e7:8b:38:cb:f5:a9:46:82:58:a0: 1a:df:6e:cc:aa:b0:d6:99:d9:2f:56:14:f6:ff:b5:a9:2d:55: 10:e2:cf:eb:8b:ba:87:a8:d0:4c:04:d3:53:b1:0e:de:23:38: 86:d2:26:c8 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt/FBFmBpRYr5J3uE95JJuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGM1OTJjYWM2YzFiMGNhYTU1ZWU0ZGE0M2ExMjBiMThlYTE3ZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbrtbBMNj3rBoX3+KYJTHqH3f3EF tgCSbwccr/2WVrKqSI5Gr570bR7gGAFYxoZLyu4MVY0TaEF82Q5ZTNjTXcEGiBUB R+8oIYKtWUMvOtcIylmAbWCNq8YOKGOIxNQY5t7EdQeTXGlHbgP4Fqa1tmQzOO4a dhHicEP5w4KRXMDjwS3UW6hZ7HuCZCmZnfJFY/jNqjKJj+kXw6NWkgBYfUJ1/HGa VP6TJW+z/Mm3b/MUZA0sZ7INNWZVn5VXITzhqhzvP0ecxlY9yba8osomDqxx0CYP NVvnFFPwtw7iyErmm+IcgFP5J7G5WtEy0fzBtyjRUE9GCtUC+SI5+wS8cQIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFJDFksrGwbDKpV7k2kOhILGOoX8YMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEva01XU3lzYkJzTXFsWHVUYVE2RWdzWTZoZnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAVQlAAME AVQlBgMEAVQlEgMEAVQlGgMEAVQlHgMEAVQlOAMEAVQlPAMEA1QlSAMEAVQlWAME AVQlXAMEAVQlYAMEAVQlZAMEAVQlgAMEAVQljgMEAVQlmAMEAVQlnAMEAVQloAME AVQlpAMEAVQlrDANBgkqhkiG9w0BAQsFAAOCAQEAVreCRivz9hdpZxJoUxhfoBv3 El8rRnun5sPp3CzGkvClvxTLyR+JbDdxQBgzQMOTSoxP0u2xbpIkpBpk0b/lCyKz uXtQYMyNzjoqNt3QgSQiS5xq/8pEysexnm3laTHiLTDknVV29sEzlvW+J+upp2hz jwRxveyPYowBvbUHjsQrJ4GRPuZQxK5McD+SbczvFtTydgUITL2ZqrOrUvhIiusS ZlpqdNTooi862+KiL9N8CTFZSUd9J/5A0QRsT/HsV73Jf9Jsz6/ivG/+7K/nizjL 9alGgligGt9uzKqw1pnZL1YU9v+1qS1VEOLP64u6h6jQTATTU7EO3iM4htImyA== -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:42 2026 by rpki-client