This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kWrvWODOyg6iSMjH3Hw5I_lIZXA.roa File: kWrvWODOyg6iSMjH3Hw5I_lIZXA.roa (raw, json) Hash identifier: ka6caC3zry3XA50F43H1tHS16GjYeDeq7J0mZeRIgzs= Subject key identifier: 91:6A:EF:58:E0:CE:CA:0E:A2:48:C8:C7:DC:7C:39:23:F9:48:65:70 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A036CB262AA291AE7A1C46BC3BED Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kWrvWODOyg6iSMjH3Hw5I_lIZXA.roa Signing time: Fri 02 Jan 2026 00:20:19 +0000 ROA not before: Fri 02 Jan 2026 00:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215703 IP address blocks: 185.194.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a0:36:cb:26:2a:a2:91:ae:7a:1c:46:bc:3b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=916aef58e0ceca0ea248c8c7dc7c3923f9486570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:64:c6:22:ec:f8:92:cf:a5:2b:1d:7f:7c: bf:ac:8b:72:8e:ab:17:19:1f:57:2d:4a:3e:fb:54: 1a:40:44:b2:4f:83:cd:1f:b6:31:a6:5b:01:7e:bd: 3a:5f:60:b9:94:01:23:32:6d:49:69:06:10:38:a1: 94:40:1d:a4:1d:50:88:de:ff:e1:56:18:8e:d9:e7: 2f:ce:f2:c9:b1:9e:73:31:65:1c:fe:07:94:7b:3c: ae:84:c3:3b:f7:c3:ca:c6:a2:19:4a:63:80:c6:4f: df:4f:10:98:03:04:82:71:9a:d8:65:d0:07:a1:f1: bd:b1:3c:17:1f:33:8c:1c:fa:47:7a:59:ab:08:87: be:ca:e0:a6:af:f7:ba:1e:fb:49:f5:24:02:41:bf: 8a:96:c0:47:49:97:f0:8b:8f:92:60:84:4a:37:b9: 7f:1f:14:01:c8:df:56:c3:f5:e8:ec:01:c8:58:00: 0b:9d:54:24:fb:bf:e7:92:5e:b5:04:19:12:d7:8b: 2a:c7:81:94:da:87:c4:6d:53:8f:c5:23:29:4c:15: c7:37:0c:66:a4:b9:37:7f:76:a1:ca:a9:c6:f1:a4: fd:e5:48:06:39:c8:f2:87:57:d0:2e:a7:52:67:0e: 90:5f:64:76:55:d3:dc:13:94:0b:4a:b2:33:80:82: 79:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6A:EF:58:E0:CE:CA:0E:A2:48:C8:C7:DC:7C:39:23:F9:48:65:70 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kWrvWODOyg6iSMjH3Hw5I_lIZXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.177.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:63:9b:e1:18:63:d1:23:a8:1e:1a:d2:0c:b1:fd:95:86:df: 58:f7:21:3c:e2:71:e7:18:46:f4:d2:2b:0d:32:b4:0d:9c:ee: 0a:c9:97:96:5f:13:82:cb:76:72:e9:22:6f:cd:07:83:c4:f3: b9:1c:61:ee:38:cb:18:78:55:4a:cb:82:19:2c:f9:fc:62:09: 4f:7f:97:e7:3d:29:9c:bf:84:aa:22:1a:da:c9:26:68:d6:b9: aa:1a:04:2c:d4:bb:15:23:61:45:1f:7e:4c:e3:a0:f8:bb:30: e6:cf:1c:cc:4a:64:ce:bd:24:b9:0e:78:58:14:bd:27:75:51: 8c:19:83:ac:cf:30:72:69:ff:e1:ea:8f:72:6c:b7:70:8f:3e: 27:d3:48:87:30:a1:93:8d:f4:b1:b5:a2:c2:11:a3:d8:9f:ff: c8:c1:7c:0d:c9:6b:1a:53:1b:6d:28:e3:bb:4c:e0:35:cd:23: c4:93:62:06:54:6b:a9:fc:63:2f:a3:d0:e6:27:4b:a4:96:2b: 82:c5:59:0e:30:7f:49:a5:82:c2:6f:22:f7:d4:8f:d8:d0:54: 8f:57:19:30:95:b0:50:09:2a:1c:48:2d:b1:85:49:e5:55:a2: 66:bd:31:b9:ab:08:3b:f3:a6:07:e5:34:ca:32:8c:52:08:d4: b6:cf:c4:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6A2yyYqopGuehxGvDvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTZhZWY1OGUwY2VjYTBlYTI0OGM4YzdkYzdjMzkyM2Y5NDg2NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc1kxiLs+JLPpSsdf3y/rItyjqsX GR9XLUo++1QaQESyT4PNH7YxplsBfr06X2C5lAEjMm1JaQYQOKGUQB2kHVCI3v/h VhiO2ecvzvLJsZ5zMWUc/geUezyuhMM798PKxqIZSmOAxk/fTxCYAwSCcZrYZdAH ofG9sTwXHzOMHPpHelmrCIe+yuCmr/e6HvtJ9SQCQb+KlsBHSZfwi4+SYIRKN7l/ HxQByN9Ww/Xo7AHIWAALnVQk+7/nkl61BBkS14sqx4GU2ofEbVOPxSMpTBXHNwxm pLk3f3ahyqnG8aT95UgGOcjyh1fQLqdSZw6QX2R2VdPcE5QLSrIzgIJ5FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFq71jgzsoOokjIx9x8OSP5SGVwMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEva1dydldPRE95ZzZpU01qSDNIdzVJX2xJWlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucKxMA0G CSqGSIb3DQEBCwUAA4IBAQB/Y5vhGGPRI6geGtIMsf2Vht9Y9yE84nHnGEb00isN MrQNnO4KyZeWXxOCy3Zy6SJvzQeDxPO5HGHuOMsYeFVKy4IZLPn8YglPf5fnPSmc v4SqIhraySZo1rmqGgQs1LsVI2FFH35M46D4uzDmzxzMSmTOvSS5DnhYFL0ndVGM GYOszzByaf/h6o9ybLdwjz4n00iHMKGTjfSxtaLCEaPYn//IwXwNyWsaUxttKOO7 TOA1zSPEk2IGVGup/GMvo9DmJ0ukliuCxVkOMH9JpYLCbyL31I/Y0FSPVxkwlbBQ CSocSC2xhUnlVaJmvTG5qwg786YH5TTKMoxSCNS2z8QT -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:23 2026 by rpki-client