This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/KvzDHgVmpEkdkjHPk99sFJrY1zs.roa File: KvzDHgVmpEkdkjHPk99sFJrY1zs.roa (raw, json) Hash identifier: l/TyURMCTytuEA/n9GPaS9YbOV/gxZwZ/TqXXQqrbdc= Subject key identifier: 2A:FC:C3:1E:05:66:A4:49:1D:92:31:CF:93:DF:6C:14:9A:D8:D7:3B Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636 Certificate serial: 019B79ED31002C364F2FDD701D8FE50DC2DD Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/KvzDHgVmpEkdkjHPk99sFJrY1zs.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198290 IP address blocks: 185.44.56.0/22 maxlen: 24 193.169.158.0/23 maxlen: 24 2a01:7360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:31:00:2c:36:4f:2f:dd:70:1d:8f:e5:0d:c2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2afcc31e0566a4491d9231cf93df6c149ad8d73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:c2:a6:0f:e1:d7:b6:a9:8b:e0:1d:92:c6: 47:1a:00:80:25:50:15:59:6c:c7:3b:d4:69:97:2a: 8e:ec:eb:e0:30:d8:2e:ff:e1:04:a4:50:02:e8:f6: 2d:d9:5f:85:4a:4e:22:55:81:8d:60:a5:f9:f9:62: d9:15:c8:5d:f1:9e:6f:29:19:3c:79:9f:48:eb:fa: 6f:33:dd:6d:01:05:c6:03:85:cc:1a:47:08:3d:e4: 9b:88:d1:66:f0:c8:59:85:24:9d:77:88:d3:81:7f: 6c:b9:c2:06:c2:82:15:fc:c9:8d:0f:bd:4d:d7:5f: d2:d2:80:05:49:62:a2:79:92:ea:1b:21:23:bd:37: b4:ac:52:3c:37:cc:0a:d9:63:da:da:e6:2a:2e:53: d4:10:ff:1f:d8:ce:23:42:4d:6d:b8:60:b6:bf:a4: 6c:21:4a:d2:b9:44:a3:86:38:89:ed:2f:22:52:14: 1e:be:03:77:9d:64:c7:30:46:5f:e8:29:cb:9e:1f: 54:c9:f0:f1:88:5a:2c:11:ad:88:2b:9f:4b:b5:28: 3e:aa:5f:37:6d:1f:d7:56:67:95:53:5e:b8:55:31: 84:18:8f:4c:dc:80:1d:50:76:b1:52:7f:ff:7e:21: 94:3b:50:f9:94:1d:6c:40:6f:3b:0f:53:ba:7f:bd: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FC:C3:1E:05:66:A4:49:1D:92:31:CF:93:DF:6C:14:9A:D8:D7:3B X509v3 Authority Key Identifier: keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/KvzDHgVmpEkdkjHPk99sFJrY1zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.56.0/22 193.169.158.0/23 IPv6: 2a01:7360::/32 Signature Algorithm: sha256WithRSAEncryption 18:25:53:c0:cd:76:a4:07:05:79:1d:8a:17:fc:69:40:49:24: d3:71:36:12:6f:cd:d9:48:4f:52:37:73:a9:74:7f:91:89:64: 4e:5b:13:8b:51:f8:13:27:48:ef:69:61:dd:93:92:14:a2:b4: ba:eb:99:ca:3d:84:c2:bd:4b:29:a1:53:8c:51:47:b9:4d:f7: f8:b1:61:76:76:aa:fe:8e:e2:f8:e4:89:9e:e8:e3:7a:10:69: b9:27:47:7f:35:a7:a0:31:69:5f:be:2d:ec:ea:fc:49:f8:c8: 05:a9:12:62:a6:da:43:05:70:66:b4:4b:d1:6e:7b:af:86:c1: d2:4d:90:8f:da:ba:cf:b9:12:5d:8c:7a:8a:e0:0e:e1:78:1c: 0d:b7:1a:a3:3e:ca:b6:3c:08:4f:05:9f:97:2c:8d:1a:40:28: 38:1f:8d:72:dc:04:ea:16:06:01:dc:c0:63:71:30:b0:bc:15: 94:c7:3f:a1:d9:5d:0d:cf:2b:17:95:f5:3d:b8:f8:de:26:46: 5f:b5:0d:3e:b2:ed:81:32:37:c5:02:97:84:d7:10:69:95:d1: 7d:16:46:a2:3c:dd:79:63:42:f0:b3:be:ea:54:31:6b:8e:30: d8:ee:79:80:27:ef:f9:80:36:9b:58:57:3a:4f:89:4a:d4:80: fd:f1:55:85 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57TEALDZPL91wHY/lDcLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmExNmIyMDdlM2I2ZjZmNzJkM2QwYWQ1ZmNlYmE4ZWEx MDM2MzYwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWZjYzMxZTA1NjZhNDQ5MWQ5MjMxY2Y5M2RmNmMxNDlhZDhkNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumLCpg/h17api+AdksZHGgCAJVAV WWzHO9RplyqO7OvgMNgu/+EEpFAC6PYt2V+FSk4iVYGNYKX5+WLZFchd8Z5vKRk8 eZ9I6/pvM91tAQXGA4XMGkcIPeSbiNFm8MhZhSSdd4jTgX9sucIGwoIV/MmND71N 11/S0oAFSWKieZLqGyEjvTe0rFI8N8wK2WPa2uYqLlPUEP8f2M4jQk1tuGC2v6Rs IUrSuUSjhjiJ7S8iUhQevgN3nWTHMEZf6CnLnh9UyfDxiFosEa2IK59LtSg+ql83 bR/XVmeVU164VTGEGI9M3IAdUHaxUn//fiGUO1D5lB1sQG87D1O6f71jwwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCr8wx4FZqRJHZIxz5PfbBSa2Nc7MB8GA1UdIwQY MBaAFMMqFrIH47b29y09CtX866jqEDY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2Ut NGRjMmY3OTNjM2NkLzEvS3Z6REhnVm1wRWtka2pIUGs5OXNGSnJZMXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2UtNGRjMmY3OTNjM2Nk LzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSw4AwQB wameMA0EAgACMAcDBQAqAXNgMA0GCSqGSIb3DQEBCwUAA4IBAQAYJVPAzXakBwV5 HYoX/GlASSTTcTYSb83ZSE9SN3OpdH+RiWROWxOLUfgTJ0jvaWHdk5IUorS665nK PYTCvUspoVOMUUe5Tff4sWF2dqr+juL45Ime6ON6EGm5J0d/NaegMWlfvi3s6vxJ +MgFqRJiptpDBXBmtEvRbnuvhsHSTZCP2rrPuRJdjHqK4A7heBwNtxqjPsq2PAhP BZ+XLI0aQCg4H41y3ATqFgYB3MBjcTCwvBWUxz+h2V0NzysXlfU9uPjeJkZftQ0+ su2BMjfFApeE1xBpldF9FkaiPN15Y0Lws77qVDFrjjDY7nmAJ+/5gDabWFc6T4lK 1ID98VWF -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:21 2026 by rpki-client