This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/KCT3SvLM78fZHK_bwx-01sokz2Q.roa File: KCT3SvLM78fZHK_bwx-01sokz2Q.roa (raw, json) Hash identifier: OoFA7HfGIfDwj/WUeEPXL8zVfd0rTjqyDSVQwZXvdKY= Subject key identifier: 28:24:F7:4A:F2:CC:EF:C7:D9:1C:AF:DB:C3:1F:B4:D6:CA:24:CF:64 Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa Certificate serial: 019B7C80D35CA717AF893AC157472A0D6ED3 Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/KCT3SvLM78fZHK_bwx-01sokz2Q.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35535 IP address blocks: 80.241.112.0/20 maxlen: 20 80.241.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d3:5c:a7:17:af:89:3a:c1:57:47:2a:0d:6e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2824f74af2ccefc7d91cafdbc31fb4d6ca24cf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f4:ad:53:45:16:30:22:3b:1d:a1:2a:5b:51: f7:63:3b:b4:d0:2d:c8:4d:9a:11:d3:35:83:45:3d: 60:76:3b:06:9e:99:85:34:45:e4:f7:8f:d5:90:8f: 64:51:9e:5e:68:f2:d9:8d:4f:30:74:2e:8b:32:62: 8a:59:ae:fe:46:b4:cc:51:fd:2e:a0:63:6d:62:0f: f4:9f:29:55:6a:3d:5b:71:06:9a:e0:42:07:d0:80: 8f:12:dc:f0:b2:21:b1:6e:98:61:b1:1a:cc:9b:9c: 1e:98:99:90:2c:2f:4b:9b:24:a0:5f:a7:64:0b:35: 5f:49:c1:3d:77:1c:5e:6c:17:a6:cf:4f:a7:38:92: 44:ed:79:61:fa:9b:61:67:27:6b:89:cf:a3:32:7e: 5c:4b:10:2d:01:db:14:68:96:be:2f:97:75:e3:23: 64:95:c0:65:53:e3:23:53:a1:c5:0f:6d:63:cd:47: 22:9b:ab:24:31:65:20:eb:2e:a7:a6:83:d4:4e:5b: 66:ea:46:00:a9:4a:4b:e8:18:3e:a9:97:ba:72:59: 38:ca:96:bb:59:18:e2:c0:9f:ea:66:e4:01:80:43: c0:99:9c:a4:5e:75:bc:73:95:00:56:f6:57:b6:bb: 51:42:50:17:1f:f1:f7:09:b2:05:f5:4f:d9:d3:2a: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:24:F7:4A:F2:CC:EF:C7:D9:1C:AF:DB:C3:1F:B4:D6:CA:24:CF:64 X509v3 Authority Key Identifier: keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/KCT3SvLM78fZHK_bwx-01sokz2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.241.112.0/20 Signature Algorithm: sha256WithRSAEncryption 99:6e:d7:cd:ea:57:50:4d:e6:12:85:cf:73:32:2d:70:b6:53: 7f:4d:5f:ef:0c:48:87:c4:40:cf:75:44:ad:03:83:ed:82:23: 8d:85:ed:c8:db:1f:99:e3:0c:9a:24:ca:ff:94:d4:05:71:e9: bf:73:1d:52:d7:6c:89:bd:eb:4b:d0:33:ce:f7:f7:62:fd:26: 3a:21:e9:da:05:b4:04:60:f1:98:d5:8b:b5:ff:97:b0:43:12: eb:59:16:62:7b:49:f6:fd:91:e0:d2:66:a4:74:9b:6a:14:07: 0b:25:dd:31:9b:d7:11:a3:af:34:15:7d:a5:6a:f0:9d:df:11: f9:f2:d7:eb:57:53:42:2e:d0:e5:e0:f4:53:b5:6e:71:79:39: ff:06:9d:1d:32:58:d4:c3:d9:fd:a9:3e:6b:c1:61:a5:68:3a: a3:84:55:0f:09:1c:ba:69:e8:72:02:12:66:36:58:f9:a9:c7: 7b:91:82:0f:d0:85:e0:ea:16:49:2b:e0:8c:b7:c7:7c:92:35: e6:ba:18:32:b3:1b:d6:b8:84:6d:eb:ae:93:7f:a3:64:43:d0: 68:8b:ed:b2:e5:1f:60:32:d0:a6:5a:65:9e:5c:46:3f:07:fe: a7:21:6f:39:0f:fe:10:6e:df:ee:0c:d7:8c:dc:bd:b8:dd:8c: c6:b3:75:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNNcpxeviTrBV0cqDW7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWEyYWJlZDg5MDhmMzI3Zjg2ZTJiMGFmMTVkNDgzMTA0 OWNlYWEwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODI0Zjc0YWYyY2NlZmM3ZDkxY2FmZGJjMzFmYjRkNmNhMjRjZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PStU0UWMCI7HaEqW1H3Yzu00C3I TZoR0zWDRT1gdjsGnpmFNEXk94/VkI9kUZ5eaPLZjU8wdC6LMmKKWa7+RrTMUf0u oGNtYg/0nylVaj1bcQaa4EIH0ICPEtzwsiGxbphhsRrMm5wemJmQLC9LmySgX6dk CzVfScE9dxxebBemz0+nOJJE7Xlh+pthZydric+jMn5cSxAtAdsUaJa+L5d14yNk lcBlU+MjU6HFD21jzUcim6skMWUg6y6npoPUTltm6kYAqUpL6Bg+qZe6clk4ypa7 WRjiwJ/qZuQBgEPAmZykXnW8c5UAVvZXtrtRQlAXH/H3CbIF9U/Z0yo0vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgk90ryzO/H2Ryv28MftNbKJM9kMB8GA1UdIwQY MBaAFDbqKr7YkI8yf4bisK8V1IMQSc6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYt N2E2MzU5MGEwNmJkLzEvS0NUM1N2TE03OGZaSEtfYnd4LTAxc29rejJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYtN2E2MzU5MGEwNmJk LzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPFwMA0G CSqGSIb3DQEBCwUAA4IBAQCZbtfN6ldQTeYShc9zMi1wtlN/TV/vDEiHxEDPdUSt A4PtgiONhe3I2x+Z4wyaJMr/lNQFcem/cx1S12yJvetL0DPO9/di/SY6IenaBbQE YPGY1Yu1/5ewQxLrWRZie0n2/ZHg0makdJtqFAcLJd0xm9cRo680FX2lavCd3xH5 8tfrV1NCLtDl4PRTtW5xeTn/Bp0dMljUw9n9qT5rwWGlaDqjhFUPCRy6aehyAhJm Nlj5qcd7kYIP0IXg6hZJK+CMt8d8kjXmuhgysxvWuIRt666Tf6NkQ9Boi+2y5R9g MtCmWmWeXEY/B/6nIW85D/4Qbt/uDNeM3L243YzGs3VW -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:06 2026 by rpki-client