This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/kwICd-Vs81pcwvCcYZ6zEK19fBw.roa File: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (raw, json) Hash identifier: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8= Subject key identifier: 93:02:02:77:E5:6C:F3:5A:5C:C2:F0:9C:61:9E:B3:10:AD:7D:7C:1C Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Certificate serial: 019B7B36CDA02A37FB6EA0918A5F6110F98A Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/kwICd-Vs81pcwvCcYZ6zEK19fBw.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 192.104.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cd:a0:2a:37:fb:6e:a0:91:8a:5f:61:10:f9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93020277e56cf35a5cc2f09c619eb310ad7d7c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:da:ea:83:d1:dd:95:2e:2d:62:ab:68:21: a8:da:8a:63:c3:8e:fa:28:73:4b:57:6f:0a:aa:eb: 29:2f:52:af:33:11:19:b5:9b:e7:c5:59:c8:1c:66: bd:32:73:78:76:65:84:7f:78:da:29:63:c3:a1:e9: 56:80:51:56:c2:93:6e:db:1e:33:f5:50:39:d2:ed: 67:70:0f:12:0c:66:15:a7:7f:57:20:dc:e0:0d:3c: a3:c4:c8:c5:19:50:e4:08:ea:03:1b:2b:05:ee:49: 62:97:4c:fe:06:d0:09:27:6b:e2:a6:5d:d9:6b:a3: 22:9f:ac:db:fd:06:92:72:c3:86:fa:2a:50:9f:5c: 0e:99:98:a2:e2:04:90:81:64:6b:26:43:72:73:5e: 38:aa:8a:9b:37:77:51:0a:68:dd:40:7d:25:af:0d: df:4f:12:11:59:fa:c0:82:48:dc:99:9c:53:ee:35: 01:b0:2d:e7:d6:50:31:40:36:6a:ea:1e:5c:6c:06: 18:05:e2:c9:f7:8d:55:ec:15:51:27:bc:0f:65:c0: f0:a5:4a:2a:5e:48:9e:e6:4f:9b:0d:3b:21:45:00: c1:89:87:9d:93:d3:10:68:3f:76:20:e8:36:34:e3: 26:be:0c:04:3e:1b:dc:10:46:5f:e2:0d:0f:cf:5f: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:02:77:E5:6C:F3:5A:5C:C2:F0:9C:61:9E:B3:10:AD:7D:7C:1C X509v3 Authority Key Identifier: keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/kwICd-Vs81pcwvCcYZ6zEK19fBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.104.36.0/24 Signature Algorithm: sha256WithRSAEncryption 48:fd:09:ac:19:ea:91:e3:c3:7f:2a:28:e4:ec:b1:b2:97:48: 34:12:f3:96:3c:52:6d:7c:ae:37:82:29:de:ce:05:99:f3:74: 51:d7:af:e9:62:69:aa:22:4b:40:b7:33:91:97:c5:1f:75:33: f1:0f:70:d4:36:77:42:ea:b8:03:2f:ba:65:c5:52:81:56:cf: 72:83:fa:56:4b:e2:a9:eb:a9:1d:71:43:06:b9:3e:f7:58:87: 33:b1:ce:2e:20:b5:98:65:eb:04:bf:00:92:24:af:37:32:a1: 99:57:9a:7f:ef:c7:25:75:cd:7f:52:4f:02:a8:bd:f3:5b:f1: 58:67:3c:36:76:71:06:0f:1e:bd:98:c3:3f:90:c3:0b:25:fe: 8a:e1:90:da:29:1d:3b:ca:e6:99:c6:f3:5a:6a:ef:8d:f6:06: 78:72:0d:67:75:9d:6d:df:de:4c:ca:1f:53:5c:a6:18:0a:f2: 28:b9:a1:99:84:71:cb:bb:95:69:fe:3c:e8:01:c1:16:f3:d4: f5:fc:49:21:28:75:12:f1:6f:47:14:e5:68:70:0b:ea:26:5d: 2b:7d:89:de:02:12:4c:db:9c:20:ea:d4:b8:64:01:e7:b3:b8: c0:c2:8a:ac:39:d4:4f:d1:63:68:d3:b5:b3:32:64:4e:73:34: 51:5a:66:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ns2gKjf7bqCRil9hEPmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl MjIxOWYwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzAyMDI3N2U1NmNmMzVhNWNjMmYwOWM2MTllYjMxMGFkN2Q3YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFra6oPR3ZUuLWKraCGo2opjw476 KHNLV28KquspL1KvMxEZtZvnxVnIHGa9MnN4dmWEf3jaKWPDoelWgFFWwpNu2x4z 9VA50u1ncA8SDGYVp39XINzgDTyjxMjFGVDkCOoDGysF7klil0z+BtAJJ2vipl3Z a6Min6zb/QaScsOG+ipQn1wOmZii4gSQgWRrJkNyc144qoqbN3dRCmjdQH0lrw3f TxIRWfrAgkjcmZxT7jUBsC3n1lAxQDZq6h5cbAYYBeLJ941V7BVRJ7wPZcDwpUoq Xkie5k+bDTshRQDBiYedk9MQaD92IOg2NOMmvgwEPhvcEEZf4g0Pz1+/PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMCAnflbPNaXMLwnGGesxCtfXwcMB8GA1UdIwQY MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt OTVmMjdkM2U4YWJiLzEva3dJQ2QtVnM4MXBjd3ZDY1laNnpFSzE5ZkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGgkMA0G CSqGSIb3DQEBCwUAA4IBAQBI/QmsGeqR48N/Kijk7LGyl0g0EvOWPFJtfK43gine zgWZ83RR16/pYmmqIktAtzORl8UfdTPxD3DUNndC6rgDL7plxVKBVs9yg/pWS+Kp 66kdcUMGuT73WIczsc4uILWYZesEvwCSJK83MqGZV5p/78cldc1/Uk8CqL3zW/FY Zzw2dnEGDx69mMM/kMMLJf6K4ZDaKR07yuaZxvNaau+N9gZ4cg1ndZ1t395Myh9T XKYYCvIouaGZhHHLu5Vp/jzoAcEW89T1/EkhKHUS8W9HFOVocAvqJl0rfYneAhJM 25wg6tS4ZAHns7jAwoqsOdRP0WNo07WzMmROczRRWma0 -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:47 2026 by rpki-client