This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/KCWWQiwpRHcCp-WmG9X3RegXgvs.roa File: KCWWQiwpRHcCp-WmG9X3RegXgvs.roa (raw, json) Hash identifier: GUTf882QMqY1JyQACTlFxulzKh2ZRBTS6bUDnTJot/M= Subject key identifier: 28:25:96:42:2C:29:44:77:02:A7:E5:A6:1B:D5:F7:45:E8:17:82:FB Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b Certificate serial: 019B7DC95C263B050DFCE420A5CB2998B578 Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/KCWWQiwpRHcCp-WmG9X3RegXgvs.roa Signing time: Fri 02 Jan 2026 08:18:26 +0000 ROA not before: Fri 02 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44071 IP address blocks: 185.167.188.0/24 maxlen: 24 185.167.189.0/24 maxlen: 24 185.167.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:5c:26:3b:05:0d:fc:e4:20:a5:cb:29:98:b5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b Validity Not Before: Jan 2 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=282596422c29447702a7e5a61bd5f745e81782fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:69:34:18:9a:c2:24:66:88:39:26:91:f5: e7:53:25:73:6d:a5:b2:bc:8c:bb:bf:e2:b7:51:fa: b9:8f:da:34:a5:c9:53:f2:0c:87:73:01:a0:b3:e0: ee:78:28:c5:dd:eb:86:7d:9b:d3:4b:bf:3c:9a:28: 0b:5b:ef:78:84:88:ae:5f:3f:e2:0d:eb:65:a1:b4: 71:10:44:59:92:e7:d2:6b:84:2e:77:27:d3:6c:ea: 06:d6:84:fc:7a:cb:7e:3a:4b:49:1a:ae:19:20:9a: 9e:0f:a8:f7:17:d4:3a:b4:ba:36:92:42:e4:7e:ea: 77:f0:25:b7:5a:04:c1:71:1b:3d:1f:55:d5:22:38: b3:16:8f:46:7d:11:ff:94:65:47:71:5a:cb:84:1c: 86:0e:bb:7b:04:56:cf:f2:29:f6:34:d2:3c:a6:73: cb:f3:b2:21:3d:84:01:08:f1:9b:bb:c9:ff:2d:60: 96:4a:e0:e7:28:d7:f0:e7:da:8b:9f:a2:9c:2a:be: 14:57:12:e4:3d:16:cd:9a:c4:39:67:1a:f7:83:e3: b7:6b:73:f4:6a:cb:c9:49:c6:d2:e3:11:ce:fa:f5: b6:b5:2d:cf:e8:c7:23:d7:3c:43:43:77:79:f4:a1: c9:a8:cc:29:51:56:f8:ef:63:98:9d:33:40:11:79: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:96:42:2C:29:44:77:02:A7:E5:A6:1B:D5:F7:45:E8:17:82:FB X509v3 Authority Key Identifier: keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/KCWWQiwpRHcCp-WmG9X3RegXgvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.188.0-185.167.190.255 Signature Algorithm: sha256WithRSAEncryption 4f:a3:31:25:99:df:5d:0b:92:bc:51:fb:df:71:a1:78:70:13: fe:4b:34:49:bc:87:a1:02:5b:1f:3f:f8:6b:e8:e8:45:b6:ed: 9c:09:3b:73:42:82:f7:29:ad:5b:ff:1d:88:fa:a7:95:3d:57: 00:fa:c8:b2:33:c4:b7:40:53:b3:63:73:12:fc:49:12:ae:f4: 1a:dd:ec:a7:6f:1c:14:cb:61:1f:da:0f:92:fc:1b:9d:e8:8d: f0:9c:d7:48:d0:cd:e6:f8:ec:b0:56:c7:66:b2:7b:33:c9:70: 2c:ef:f1:2b:d6:9a:08:d9:ac:f0:fa:6e:fd:d4:80:a7:a6:07: a3:38:93:b6:15:de:42:4a:e0:27:6d:f2:cc:de:50:de:cb:66: e3:10:21:47:27:7d:4e:24:93:5f:fd:82:bd:8f:ca:38:98:b8: 0b:a5:42:4c:21:e1:4b:30:47:3e:30:00:5a:23:76:63:ed:c6: 8c:b8:7a:49:1a:09:6e:d5:55:05:ab:b1:e4:ca:33:e5:90:b9: 87:9e:92:e4:84:09:aa:59:1a:9c:1a:35:21:66:c3:a6:86:81: 20:92:f1:df:48:28:34:46:ca:b6:44:d2:ed:21:60:eb:39:46: 3a:90:c3:1b:19:94:e2:56:72:8a:5d:9c:da:97:be:98:f9:5f: 24:b1:d5:7b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yVwmOwUN/OQgpcspmLV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMzk5ZDQ0MzViYjg1ZmFlOTEwYWJlMzhlNjg1MzMyMDRk ZmQ2MGIwHhcNMjYwMTAyMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODI1OTY0MjJjMjk0NDc3MDJhN2U1YTYxYmQ1Zjc0NWU4MTc4MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ntpNBiawiRmiDkmkfXnUyVzbaWy vIy7v+K3Ufq5j9o0pclT8gyHcwGgs+DueCjF3euGfZvTS788migLW+94hIiuXz/i DetlobRxEERZkufSa4QudyfTbOoG1oT8est+OktJGq4ZIJqeD6j3F9Q6tLo2kkLk fup38CW3WgTBcRs9H1XVIjizFo9GfRH/lGVHcVrLhByGDrt7BFbP8in2NNI8pnPL 87IhPYQBCPGbu8n/LWCWSuDnKNfw59qLn6KcKr4UVxLkPRbNmsQ5Zxr3g+O3a3P0 asvJScbS4xHO+vW2tS3P6Mcj1zxDQ3d59KHJqMwpUVb472OYnTNAEXmoywIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCgllkIsKUR3AqflphvV90XoF4L7MB8GA1UdIwQY MBaAFFA5nUQ1u4X66RCr445oUzIE39YLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQt MzRmZmRiNDQyMTEzLzEvS0NXV1Fpd3BSSGNDcC1XbUc5WDNSZWdYZ3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQtMzRmZmRiNDQyMTEz LzEvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5p7wD BAC5p74wDQYJKoZIhvcNAQELBQADggEBAE+jMSWZ310LkrxR+99xoXhwE/5LNEm8 h6ECWx8/+Gvo6EW27ZwJO3NCgvcprVv/HYj6p5U9VwD6yLIzxLdAU7NjcxL8SRKu 9Brd7KdvHBTLYR/aD5L8G53ojfCc10jQzeb47LBWx2ayezPJcCzv8SvWmgjZrPD6 bv3UgKemB6M4k7YV3kJK4Cdt8szeUN7LZuMQIUcnfU4kk1/9gr2PyjiYuAulQkwh 4UswRz4wAFojdmPtxoy4ekkaCW7VVQWrseTKM+WQuYeekuSECapZGpwaNSFmw6aG gSCS8d9IKDRGyrZE0u0hYOs5RjqQwxsZlOJWcopdnNqXvpj5XySx1Xs= -----END CERTIFICATE-----Generated at Wed Jan 21 20:23:53 2026 by rpki-client