This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/KWE3M70sDcdzbGUDzkIHTbsCxOk.roa File: KWE3M70sDcdzbGUDzkIHTbsCxOk.roa (raw, json) Hash identifier: coZwB6MM6YyaakbxM3r6Pr+BZjVFbJhu/1xom1a40N8= Subject key identifier: 29:61:37:33:BD:2C:0D:C7:73:6C:65:03:CE:42:07:4D:BB:02:C4:E9 Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f Certificate serial: 019B7CEDBE335F958EAB368AD75EDFFEC339 Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/KWE3M70sDcdzbGUDzkIHTbsCxOk.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198955 IP address blocks: 91.240.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:be:33:5f:95:8e:ab:36:8a:d7:5e:df:fe:c3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29613733bd2c0dc7736c6503ce42074dbb02c4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:1f:6d:41:15:37:51:5a:b8:c4:65:93:cf: 12:b8:c3:7e:be:99:cc:94:05:af:6d:ba:0c:5c:1d: 47:e2:04:1a:98:a7:58:06:93:2d:b7:f4:cd:ae:56: 5c:b1:bb:f3:1b:2b:98:10:9c:ea:a6:49:26:4a:91: 6e:fe:6f:50:e4:66:27:91:98:fa:b1:10:65:c8:e8: 04:91:44:99:fc:e9:cb:3e:01:37:4f:f1:62:7c:92: b6:84:ca:e5:4d:6f:bd:34:3b:e8:38:e0:cd:81:72: c2:3d:7c:7e:46:43:09:f1:e3:08:86:19:8d:f5:6f: 74:b4:40:57:ed:12:a3:46:34:d2:4a:93:37:69:cb: 85:a1:e2:2b:9f:50:e5:b3:4d:d3:f3:b3:b4:d2:a7: fc:e9:29:5f:e8:11:19:71:4c:8c:9c:37:b5:58:b5: 6f:04:14:9a:46:47:af:74:aa:42:e1:68:ba:da:3d: 0b:fb:1e:5a:b3:2f:0c:d0:6a:ac:ca:7f:a5:78:c0: 99:a1:39:b0:a1:42:8c:bb:5e:0d:5f:6b:b9:17:97: 7f:a7:06:82:6a:e9:f2:b0:55:68:eb:f5:50:f8:95: 2c:17:df:2d:95:76:8f:9a:74:e0:9d:dc:3b:6b:97: 26:12:e5:7f:62:cf:21:b2:f9:43:d4:5b:6d:60:aa: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:61:37:33:BD:2C:0D:C7:73:6C:65:03:CE:42:07:4D:BB:02:C4:E9 X509v3 Authority Key Identifier: keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/KWE3M70sDcdzbGUDzkIHTbsCxOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.155.0/24 Signature Algorithm: sha256WithRSAEncryption a2:af:d7:4a:46:dd:73:44:c0:99:4d:33:0e:3d:16:84:83:7e: 58:3c:37:cf:4c:92:28:c7:92:3f:d2:82:0b:fc:19:ca:ab:74: 9a:3f:f4:bc:bb:3c:52:40:ca:32:db:b9:7d:0d:04:4e:36:41: 63:18:8f:54:df:10:4f:d5:84:8b:86:fe:09:8d:d3:78:46:b1: 5a:7e:8c:dd:51:27:58:4b:38:05:8a:46:5c:77:21:57:d4:66: e9:ce:40:51:bb:68:b6:7f:e2:5c:9c:ec:73:7e:ec:a0:f0:78: 3d:31:b8:c4:f0:63:57:56:9f:f6:94:41:67:05:b1:ef:a7:a4: ef:21:e3:93:8c:ff:21:ba:18:c8:50:29:5b:df:6a:a9:51:0f: f2:d0:e0:fb:00:21:bf:75:22:f6:2c:db:64:1e:c1:3b:8b:07: 5e:ef:36:7c:f7:84:2a:49:b0:94:9f:03:82:9e:cd:60:0f:41: d9:76:50:ec:e6:9b:55:31:92:1e:8a:31:d3:a4:c0:bc:59:55: 3d:5a:08:cc:9c:a0:f8:bb:21:a1:2f:95:4c:26:29:66:70:04: 0e:ec:22:27:23:b9:02:c4:a0:17:2a:4d:68:1c:3a:2b:b4:34: 6e:f1:01:05:da:0b:64:75:9f:a3:49:10:98:2b:98:d5:a8:ad: 1c:e7:5d:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87b4zX5WOqzaK117f/sM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyN2U5ZjlkNWZkNDVkYTAxMDY5NWNjNDIxMmFmN2U2N2I3 YjM0OGYwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTYxMzczM2JkMmMwZGM3NzM2YzY1MDNjZTQyMDc0ZGJiMDJjNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KcfbUEVN1FauMRlk88SuMN+vpnM lAWvbboMXB1H4gQamKdYBpMtt/TNrlZcsbvzGyuYEJzqpkkmSpFu/m9Q5GYnkZj6 sRBlyOgEkUSZ/OnLPgE3T/FifJK2hMrlTW+9NDvoOODNgXLCPXx+RkMJ8eMIhhmN 9W90tEBX7RKjRjTSSpM3acuFoeIrn1Dls03T87O00qf86Slf6BEZcUyMnDe1WLVv BBSaRkevdKpC4Wi62j0L+x5asy8M0Gqsyn+leMCZoTmwoUKMu14NX2u5F5d/pwaC aunysFVo6/VQ+JUsF98tlXaPmnTgndw7a5cmEuV/Ys8hsvlD1FttYKq3TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClhNzO9LA3Hc2xlA85CB027AsTpMB8GA1UdIwQY MBaAFBJ+n51f1F2gEGlcxCEq9+Z7ezSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzIt MTVhOWYyMWNhYTg1LzEvS1dFM003MHNEY2R6YkdVRHprSUhUYnNDeE9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzItMTVhOWYyMWNhYTg1 LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/CbMA0G CSqGSIb3DQEBCwUAA4IBAQCir9dKRt1zRMCZTTMOPRaEg35YPDfPTJIox5I/0oIL /BnKq3SaP/S8uzxSQMoy27l9DQRONkFjGI9U3xBP1YSLhv4JjdN4RrFafozdUSdY SzgFikZcdyFX1GbpzkBRu2i2f+JcnOxzfuyg8Hg9MbjE8GNXVp/2lEFnBbHvp6Tv IeOTjP8huhjIUClb32qpUQ/y0OD7ACG/dSL2LNtkHsE7iwde7zZ894QqSbCUnwOC ns1gD0HZdlDs5ptVMZIeijHTpMC8WVU9WgjMnKD4uyGhL5VMJilmcAQO7CInI7kC xKAXKk1oHDortDRu8QEF2gtkdZ+jSRCYK5jVqK0c5131 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:16 2026 by rpki-client