This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/KwmyiRC_z9hBeAnC7i3MkCttPhg.roa File: KwmyiRC_z9hBeAnC7i3MkCttPhg.roa (raw, json) Hash identifier: RYQ+8HBwCcHX5dXE4t1Fu0qIu5oQb2OLAyRR/Oum9+k= Subject key identifier: 2B:09:B2:89:10:BF:CF:D8:41:78:09:C2:EE:2D:CC:90:2B:6D:3E:18 Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Certificate serial: 019B7B35BD4C2D0D341A27B9E7CDB2704635 Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/KwmyiRC_z9hBeAnC7i3MkCttPhg.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.239.188.0/24 maxlen: 24 185.239.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bd:4c:2d:0d:34:1a:27:b9:e7:cd:b2:70:46:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b09b28910bfcfd8417809c2ee2dcc902b6d3e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:cf:6b:44:7e:90:cd:89:d9:e8:fc:2c:c6: 7b:76:b4:3a:9c:7e:ca:d6:cd:0a:7b:d7:a1:bd:46: 9a:d9:eb:d3:cf:b1:0a:e5:cd:cc:be:de:64:01:71: 58:d5:9c:ae:13:a7:c0:3f:9c:83:b6:7f:d5:52:14: 82:d4:17:6c:c9:2d:ae:3c:a5:f1:92:4a:29:7d:31: 89:b4:12:d8:5d:2b:29:86:92:1a:bf:b7:ab:e9:e3: 74:be:6e:55:9e:c3:1a:bc:fb:1e:88:cf:1c:12:4f: 10:1f:0b:59:8f:f0:b5:1e:2a:cd:30:ea:79:05:f5: 40:ec:03:dd:c7:d9:05:bd:be:6e:fb:45:5b:48:1a: 73:17:6c:d2:c4:4b:60:a5:28:57:0b:6b:e6:34:e4: 1e:ec:4c:7b:5b:4a:f8:ed:59:aa:d5:2d:a1:fb:45: 71:c8:0b:e3:e1:df:f0:52:cb:b2:89:86:60:bd:14: ca:46:8d:03:b6:8a:1f:9d:3c:a8:82:f5:32:68:4b: 3a:60:a8:1d:5e:4b:33:63:3d:e6:53:ff:3e:c6:f8: 55:c6:94:0e:ec:bf:c0:15:b3:66:f3:ad:97:72:d3: 88:3f:f6:f8:43:cb:d9:49:3a:83:57:34:06:d1:1f: 3d:d8:3d:50:f4:a6:70:f9:85:69:7b:a3:a8:97:71: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:09:B2:89:10:BF:CF:D8:41:78:09:C2:EE:2D:CC:90:2B:6D:3E:18 X509v3 Authority Key Identifier: keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/KwmyiRC_z9hBeAnC7i3MkCttPhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.188.0/24 185.239.190.0/24 Signature Algorithm: sha256WithRSAEncryption 21:89:4b:a6:78:37:ec:33:8c:d1:43:ad:65:74:88:7c:6d:00: 42:a4:42:db:30:19:cd:61:cb:81:11:0c:58:b7:d2:e4:6b:30: d6:b0:e4:9b:1a:2c:19:74:93:83:81:df:36:12:1a:80:52:72: d0:6f:9f:85:1d:5f:5b:32:01:d6:25:b6:45:5a:4c:01:23:ec: a1:0d:ff:be:df:5f:d7:b2:d5:2e:00:91:5a:3d:3c:15:d3:4d: 9f:35:28:bb:70:74:b0:18:cb:ea:f3:3a:a2:7c:03:07:4e:12: 55:07:94:64:7f:b3:04:9d:42:d6:96:3f:a7:fc:c0:b2:2f:6c: ee:d0:39:2d:7e:1f:84:53:9e:90:fa:3c:4f:1f:42:fe:5d:78: 06:a2:02:82:c6:82:11:70:c6:01:f0:03:ed:9b:25:44:88:9d: 6c:24:ba:d5:8f:b3:af:1f:53:87:37:2a:31:6d:5b:ac:31:37: 39:b8:40:af:8f:60:53:93:ee:b3:f2:b2:06:56:bf:83:96:fb: 9c:f3:e6:ae:d3:c0:bc:b9:d7:6e:ed:64:a8:dc:fa:a5:8c:4c: 9c:f5:67:ac:06:1e:2e:01:e9:c2:1d:ba:64:5d:fc:3c:5c:7f: 47:86:d4:fd:3d:c0:43:f7:a2:f0:4b:e5:9e:51:dd:91:88:19: 93:94:d3:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nb1MLQ00Gie5582ycEY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDAzNTlmOWY4YjIwODE1Y2U0ZDk4OGUxMDliZjgyMzA2 ZTRjNzQwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjA5YjI4OTEwYmZjZmQ4NDE3ODA5YzJlZTJkY2M5MDJiNmQzZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1HPa0R+kM2J2ej8LMZ7drQ6nH7K 1s0Ke9ehvUaa2evTz7EK5c3Mvt5kAXFY1ZyuE6fAP5yDtn/VUhSC1BdsyS2uPKXx kkopfTGJtBLYXSsphpIav7er6eN0vm5VnsMavPseiM8cEk8QHwtZj/C1HirNMOp5 BfVA7APdx9kFvb5u+0VbSBpzF2zSxEtgpShXC2vmNOQe7Ex7W0r47Vmq1S2h+0Vx yAvj4d/wUsuyiYZgvRTKRo0DtoofnTyogvUyaEs6YKgdXkszYz3mU/8+xvhVxpQO 7L/AFbNm862XctOIP/b4Q8vZSTqDVzQG0R892D1Q9KZw+YVpe6Ool3FTyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCsJsokQv8/YQXgJwu4tzJArbT4YMB8GA1UdIwQY MBaAFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTkt YTZjNDljZTkwNzU2LzEvS3dteWlSQ196OWhCZUFuQzdpM01rQ3R0UGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTktYTZjNDljZTkwNzU2 LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue+8AwQA ue++MA0GCSqGSIb3DQEBCwUAA4IBAQAhiUumeDfsM4zRQ61ldIh8bQBCpELbMBnN YcuBEQxYt9LkazDWsOSbGiwZdJODgd82EhqAUnLQb5+FHV9bMgHWJbZFWkwBI+yh Df++31/XstUuAJFaPTwV002fNSi7cHSwGMvq8zqifAMHThJVB5Rkf7MEnULWlj+n /MCyL2zu0Dktfh+EU56Q+jxPH0L+XXgGogKCxoIRcMYB8APtmyVEiJ1sJLrVj7Ov H1OHNyoxbVusMTc5uECvj2BTk+6z8rIGVr+Dlvuc8+au08C8uddu7WSo3PqljEyc 9WesBh4uAenCHbpkXfw8XH9HhtT9PcBD96LwS+WeUd2RiBmTlNOy -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:01 2026 by rpki-client