This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa File: kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa (raw, json) Hash identifier: FazW3OzSsWSS9InjuTMHlSSn57uFOu+iI9WBoJvuTOc= Subject key identifier: 92:05:86:03:6B:1C:3B:2E:EF:2F:50:47:A4:FD:20:FB:95:9F:44:24 Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8 Certificate serial: 019B7D5C78ACD9EE1374B400FD2EFD272E03 Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47829 IP address blocks: 2.58.236.0/22 maxlen: 24 193.176.236.0/24 maxlen: 24 2001:67c:2c8::/48 maxlen: 48 2a09:ed40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:78:ac:d9:ee:13:74:b4:00:fd:2e:fd:27:2e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=920586036b1c3b2eef2f5047a4fd20fb959f4424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:1e:a5:c7:74:92:ec:c5:49:86:e3:d9:b1: f1:85:20:57:f1:23:30:f2:b3:3f:bc:53:91:aa:cf: 60:e0:6d:23:d0:84:d2:48:6e:e4:64:9e:b6:15:2f: 1f:31:a1:88:0b:ee:f5:77:7e:c0:c5:79:06:db:a3: 28:76:b0:cb:38:e0:85:11:06:8f:c7:a2:81:23:b4: c6:cc:26:cd:a3:e2:1e:42:96:5e:9a:0d:bc:e8:a5: ef:d5:27:7e:c9:63:cb:88:9a:c8:81:fe:03:e7:56: cd:75:00:bb:9e:45:53:f4:fa:7d:e1:e3:17:b2:01: 5e:9e:b6:22:bc:fd:21:dd:85:db:c1:8c:a7:95:88: 42:98:56:67:74:60:fa:71:d0:40:2a:f4:1a:e9:11: 0e:ee:6d:79:03:93:2f:e0:35:9a:89:b0:ad:2e:70: 55:d3:df:e0:28:40:fc:a5:4c:b4:35:cf:d4:9f:d7: 9e:e9:dd:49:79:40:02:d7:70:0a:5e:be:42:12:03: 45:cd:3a:e0:35:0c:ad:ec:df:87:93:e4:82:de:a1: 87:53:84:2c:ca:5b:cc:a8:fb:04:65:82:2c:98:06: b6:6f:52:51:71:4e:b3:b3:fa:62:80:ff:b4:55:e7: 53:b1:1b:1d:66:79:50:3b:49:be:28:7a:83:4f:d0: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:05:86:03:6B:1C:3B:2E:EF:2F:50:47:A4:FD:20:FB:95:9F:44:24 X509v3 Authority Key Identifier: keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.236.0/22 193.176.236.0/24 IPv6: 2001:67c:2c8::/48 2a09:ed40::/29 Signature Algorithm: sha256WithRSAEncryption 95:a6:73:0a:13:5d:13:42:d0:50:00:2a:d4:ac:63:8f:d7:d8: ea:64:05:b2:c7:7d:47:f4:45:95:c5:1b:6e:0c:5d:23:ce:51: 81:b5:f2:9d:99:87:c1:a9:d4:0e:0d:c4:7c:7b:74:08:21:c9: df:8d:a4:4d:0b:f7:5c:6d:5d:31:0b:a1:32:6d:7a:f0:af:dd: 01:de:93:ea:3e:82:59:b1:82:f5:06:f7:dc:07:de:14:1f:f6: 3d:d2:ed:a2:d7:ea:54:7d:19:e6:80:25:91:a4:d4:62:81:25: ba:a1:7e:ac:9e:1b:c8:b4:35:c0:84:3a:fb:d8:8a:73:15:78: 05:83:27:c7:fd:23:ac:d4:0c:91:57:08:54:3c:97:43:a9:a0: 7f:01:f8:b9:11:28:79:ee:fe:b8:0b:47:e5:9d:93:a6:f2:ce: 5f:79:36:a2:d8:a3:83:98:05:86:fa:66:d2:00:f7:e6:3b:e0: ba:1d:b1:6c:f7:53:fd:3f:9c:46:a2:5e:2f:02:79:34:a3:00: fa:fd:d1:56:89:fc:3d:e7:20:23:7f:94:e3:0e:23:8c:93:c1: 95:53:0c:b2:d4:ba:48:b0:8f:27:3b:cd:08:0c:1e:c3:05:fc: 0d:5d:72:8b:c3:9c:21:fd:f0:27:23:56:51:20:77:9a:4d:70: 8f:00:e2:f6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XHis2e4TdLQA/S79Jy4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTBhYjczOTE3NjliNWYyYzU0ZTMzYzhiNWE3ZGY5ZjM3 YTMzYTgwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjA1ODYwMzZiMWMzYjJlZWYyZjUwNDdhNGZkMjBmYjk1OWY0NDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YEepcd0kuzFSYbj2bHxhSBX8SMw 8rM/vFORqs9g4G0j0ITSSG7kZJ62FS8fMaGIC+71d37AxXkG26ModrDLOOCFEQaP x6KBI7TGzCbNo+IeQpZemg286KXv1Sd+yWPLiJrIgf4D51bNdQC7nkVT9Pp94eMX sgFenrYivP0h3YXbwYynlYhCmFZndGD6cdBAKvQa6REO7m15A5Mv4DWaibCtLnBV 09/gKED8pUy0Nc/Un9ee6d1JeUAC13AKXr5CEgNFzTrgNQyt7N+Hk+SC3qGHU4Qs ylvMqPsEZYIsmAa2b1JRcU6zs/pigP+0VedTsRsdZnlQO0m+KHqDT9DWeQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJIFhgNrHDsu7y9QR6T9IPuVn0QkMB8GA1UdIwQY MBaAFAAQq3ORdptfLFTjPItaffnzejOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jMjJmNjEtMTMzYy00ZDBjLTg4Y2Yt YTE1NWUzZjlkNTI5LzEva2dXR0Eyc2NPeTd2TDFCSHBQMGctNVdmUkNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jMjJmNjEtMTMzYy00ZDBjLTg4Y2YtYTE1NWUzZjlkNTI5 LzEvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCAjrsAwQA wbDsMBYEAgACMBADBwAgAQZ8AsgDBQMqCe1AMA0GCSqGSIb3DQEBCwUAA4IBAQCV pnMKE10TQtBQACrUrGOP19jqZAWyx31H9EWVxRtuDF0jzlGBtfKdmYfBqdQODcR8 e3QIIcnfjaRNC/dcbV0xC6EybXrwr90B3pPqPoJZsYL1BvfcB94UH/Y90u2i1+pU fRnmgCWRpNRigSW6oX6snhvItDXAhDr72IpzFXgFgyfH/SOs1AyRVwhUPJdDqaB/ Afi5ESh57v64C0flnZOm8s5feTai2KODmAWG+mbSAPfmO+C6HbFs91P9P5xGol4v Ank0owD6/dFWifw95yAjf5TjDiOMk8GVUwyy1LpIsI8nO80IDB7DBfwNXXKLw5wh /fAnI1ZRIHeaTXCPAOL2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:46 2026 by rpki-client