This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/kRViFV84QiCQrgo4yYmWKRh5CzU.roa File: kRViFV84QiCQrgo4yYmWKRh5CzU.roa (raw, json) Hash identifier: 6PeAm40biQyAtXjJ6bGkrq1TCpNcQvYYhMRNmz/ZkGo= Subject key identifier: 91:15:62:15:5F:38:42:20:90:AE:0A:38:C9:89:96:29:18:79:0B:35 Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e Certificate serial: 019AA07506A6E2E6990FF4C60431B87E16AA Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/kRViFV84QiCQrgo4yYmWKRh5CzU.roa Signing time: Thu 20 Nov 2025 08:50:15 +0000 ROA not before: Thu 20 Nov 2025 08:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206268 IP address blocks: 185.190.176.0/24 maxlen: 24 185.190.177.0/24 maxlen: 24 2a0c:3fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:75:06:a6:e2:e6:99:0f:f4:c6:04:31:b8:7e:16:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e Validity Not Before: Nov 20 08:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=911562155f38422090ae0a38c989962918790b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:7a:a1:6a:4b:97:eb:fc:5d:9e:13:c8:cc: 56:62:10:13:9a:4f:9e:b5:2c:9e:b7:e7:fe:a4:36: 2f:45:57:1e:22:f3:d2:83:3d:1c:8e:1b:8a:cd:b2: 91:16:4b:a5:e3:78:75:1b:e9:04:bf:4d:ae:a4:c6: 79:3f:6d:59:f1:4f:fc:e3:fe:6c:44:a9:cd:b7:83: ea:ea:30:23:d6:46:3b:ba:9b:b9:3e:d7:ab:16:61: 2f:e1:88:fe:ca:91:d1:8c:70:33:fb:0d:98:7c:90: ef:e1:6a:d0:c8:0d:a3:31:31:3e:bd:b1:a2:ad:0c: e3:08:88:e3:cd:4d:ee:7e:26:2f:7f:3b:1f:7c:94: 86:73:2d:99:7c:35:4d:6d:36:ea:eb:39:16:c1:41: 62:a8:a5:af:79:2f:8a:12:8e:3d:a8:38:9a:ac:39: 29:b6:85:c6:d8:54:cb:62:16:a3:a9:48:c1:9d:35: 01:48:42:d9:23:32:be:b9:be:9c:45:a3:35:fd:0c: 73:34:ad:ee:18:bd:84:94:b7:91:90:fd:e6:ac:c1: 9e:f0:66:78:60:ad:38:46:fd:74:6b:2f:4b:de:2c: 73:93:5d:6b:43:df:53:78:30:d7:65:25:c4:45:a6: f6:61:0c:3b:60:19:35:76:4f:8c:27:94:1d:46:36: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:15:62:15:5F:38:42:20:90:AE:0A:38:C9:89:96:29:18:79:0B:35 X509v3 Authority Key Identifier: keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/kRViFV84QiCQrgo4yYmWKRh5CzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.176.0/23 IPv6: 2a0c:3fc0::/29 Signature Algorithm: sha256WithRSAEncryption ac:1c:d5:cd:f1:83:9d:f4:44:7c:d3:fe:ed:d4:06:e3:58:d1: 5f:77:86:cf:18:e7:81:58:a3:1c:65:2d:06:ae:ed:ae:4b:a2: 93:55:94:db:dd:69:db:36:59:a6:7e:a0:c3:75:62:50:be:5e: a1:e2:52:7b:41:ad:27:a4:6e:e1:6d:48:c2:06:1e:f8:d6:28: ef:0b:33:de:9b:33:be:95:ec:9d:2a:17:5b:9b:e3:16:94:a5: b2:c1:4e:f2:fb:bb:46:c0:cf:1f:5c:e1:81:c4:ed:a1:06:e7: 63:a5:24:d2:9a:76:4c:74:43:f2:f4:6d:1c:a0:08:c0:50:17: 1a:eb:33:79:d8:03:95:74:45:29:c6:53:3e:36:64:28:0f:93: 79:24:22:e9:cf:cb:73:4c:10:35:5d:e6:62:30:ee:3c:db:07: 90:a0:21:19:7d:3b:2f:8e:f3:a0:52:c1:a7:8d:65:1b:a9:81: a1:e7:0f:54:e8:48:e3:ab:ff:98:aa:cf:e4:70:05:40:80:35: 6a:f6:a6:16:ea:83:5a:86:87:36:66:29:3a:8f:bc:57:00:5d: 61:f3:b3:d3:3d:dc:2a:f1:cf:fb:55:01:c7:94:a6:8c:27:5c: 5e:d6:e0:78:f8:9a:db:6f:19:46:44:85:eb:a8:96:17:e0:3c: 7e:17:9b:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZqgdQam4uaZD/TGBDG4fhaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYWY0MWQwNGJjNjg3ZDBmZjk4YWQ3ZDQwNzY4NDc1MWM0 NmNhM2UwHhcNMjUxMTIwMDg1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTE1NjIxNTVmMzg0MjIwOTBhZTBhMzhjOTg5OTYyOTE4NzkwYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjt6oWpLl+v8XZ4TyMxWYhATmk+e tSyet+f+pDYvRVceIvPSgz0cjhuKzbKRFkul43h1G+kEv02upMZ5P21Z8U/84/5s RKnNt4Pq6jAj1kY7upu5PterFmEv4Yj+ypHRjHAz+w2YfJDv4WrQyA2jMTE+vbGi rQzjCIjjzU3ufiYvfzsffJSGcy2ZfDVNbTbq6zkWwUFiqKWveS+KEo49qDiarDkp toXG2FTLYhajqUjBnTUBSELZIzK+ub6cRaM1/QxzNK3uGL2ElLeRkP3mrMGe8GZ4 YK04Rv10ay9L3ixzk11rQ99TeDDXZSXERab2YQw7YBk1dk+MJ5QdRja8kwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJEVYhVfOEIgkK4KOMmJlikYeQs1MB8GA1UdIwQY MBaAFP2vQdBLxofQ/5itfUB2hHUcRso+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEt ZWEyMDIxODAwMzQyLzEva1JWaUZWODRRaUNRcmdvNHlZbVdLUmg1Q3pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEtZWEyMDIxODAwMzQy LzEvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBub6wMA0E AgACMAcDBQMqDD/AMA0GCSqGSIb3DQEBCwUAA4IBAQCsHNXN8YOd9ER80/7t1Abj WNFfd4bPGOeBWKMcZS0Gru2uS6KTVZTb3WnbNlmmfqDDdWJQvl6h4lJ7Qa0npG7h bUjCBh741ijvCzPemzO+leydKhdbm+MWlKWywU7y+7tGwM8fXOGBxO2hBudjpSTS mnZMdEPy9G0coAjAUBca6zN52AOVdEUpxlM+NmQoD5N5JCLpz8tzTBA1XeZiMO48 2weQoCEZfTsvjvOgUsGnjWUbqYGh5w9U6Ejjq/+Yqs/kcAVAgDVq9qYW6oNahoc2 Zik6j7xXAF1h87PTPdwq8c/7VQHHlKaMJ1xe1uB4+JrbbxlGRIXrqJYX4Dx+F5sO -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:40 2025 by rpki-client