This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/KHAwuQ1HxELA824F70IJNfkTRsU.roa File: KHAwuQ1HxELA824F70IJNfkTRsU.roa (raw, json) Hash identifier: evVI3gxgUmxRxW7XXHCtUJPkEUre6fGSTQv2MlBCGho= Subject key identifier: 28:70:30:B9:0D:47:C4:42:C0:F3:6E:05:EF:42:09:35:F9:13:46:C5 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019AFE13EC1E8B6058EB38E8F6039C7126B5 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/KHAwuQ1HxELA824F70IJNfkTRsU.roa Signing time: Mon 08 Dec 2025 13:08:29 +0000 ROA not before: Mon 08 Dec 2025 13:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211507 IP address blocks: 45.67.138.0/24 maxlen: 24 45.133.73.0/24 maxlen: 24 45.137.69.0/24 maxlen: 24 45.137.201.0/24 maxlen: 24 45.141.117.0/24 maxlen: 24 45.141.119.0/24 maxlen: 24 92.119.164.0/24 maxlen: 24 92.119.165.0/24 maxlen: 24 185.132.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:13:ec:1e:8b:60:58:eb:38:e8:f6:03:9c:71:26:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Dec 8 13:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=287030b90d47c442c0f36e05ef420935f91346c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:b7:82:bc:c1:82:fa:d7:a5:bc:f1:65:c6: 3f:e0:18:a8:36:a4:33:80:d5:74:fa:e0:a6:c7:09: 36:6b:ea:14:76:11:e2:a0:1d:73:f2:c3:3b:8c:f4: 40:bc:89:98:4f:4b:b7:7c:54:50:f1:f0:63:f7:de: ff:0c:e7:99:9c:07:6e:13:66:28:9c:49:d3:b3:3e: ae:bc:d8:85:59:6e:c6:31:03:08:08:c4:98:47:e5: 90:51:08:0b:44:87:df:a9:42:73:a9:a4:90:52:93: c2:c2:2a:c3:34:bd:7a:a6:6f:c3:bc:d8:bb:ef:36: a3:f7:b5:88:6a:23:9b:94:e4:61:a3:e3:91:dc:26: 1d:5d:d3:0e:6f:2a:3a:f3:97:06:1e:89:f4:b9:41: 21:d6:ee:8e:1b:63:11:15:e5:07:ce:79:c1:71:6d: 9e:6d:b3:ad:ef:ec:b4:17:fd:20:20:5a:42:e9:7e: a3:55:bd:af:b9:4c:88:87:3b:a5:62:29:51:63:c4: 8c:1c:f5:c8:4f:42:b9:92:0b:09:b8:54:06:d9:1d: 97:7a:d7:a3:ab:96:84:9b:03:7e:2d:26:51:74:e3: bb:72:f6:76:34:75:cf:ef:5c:a8:d4:28:2c:bf:95: 73:f3:05:e7:7d:0c:00:a0:7b:31:67:03:31:09:ae: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:70:30:B9:0D:47:C4:42:C0:F3:6E:05:EF:42:09:35:F9:13:46:C5 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/KHAwuQ1HxELA824F70IJNfkTRsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.138.0/24 45.133.73.0/24 45.137.69.0/24 45.137.201.0/24 45.141.117.0/24 45.141.119.0/24 92.119.164.0/23 185.132.53.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:75:5b:89:d6:9f:2b:08:e7:6e:0d:f0:89:ed:97:6f:1b:22: fe:6c:d7:a9:44:bf:12:8d:34:66:35:a7:bf:d3:df:82:49:bf: 82:3f:5a:c4:45:4a:a6:55:9b:72:dd:40:9a:97:7d:af:bd:9e: df:0e:80:06:08:95:bb:62:cf:e6:3b:79:88:b2:d4:73:d0:60: f6:c7:a3:c3:a4:1c:24:fd:37:c2:2f:31:95:db:6c:c8:65:c3: 0f:23:17:35:d7:80:6b:24:74:76:d7:37:b9:fb:67:2f:fc:68: 7b:06:35:3c:72:e9:7b:14:dc:9b:90:02:17:f2:c1:82:06:87: f2:49:ff:a5:6a:42:14:9a:32:06:4e:ec:8c:37:68:64:43:85: e9:bb:1d:8b:77:b5:c0:a7:c1:42:08:63:f5:33:82:4e:9e:2b: 22:48:6b:b9:53:90:81:d8:c1:8e:87:b6:77:41:80:4a:df:91: 73:c9:10:7d:48:d8:49:c1:37:18:0f:d2:80:9a:03:07:2d:48: 46:a6:6c:b2:b7:a8:32:e3:0c:ca:57:18:30:cd:67:88:2d:8f: bc:1c:8f:c3:91:48:63:97:66:b3:64:17:76:d5:61:81:11:64: 99:34:78:ba:84:87:42:2f:d3:dd:a5:69:7d:b8:fb:f8:ea:02: 12:d4:10:f4 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZr+E+wei2BY6zjo9gOccSa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjUxMjA4MTMwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODcwMzBiOTBkNDdjNDQyYzBmMzZlMDVlZjQyMDkzNWY5MTM0NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC23grzBgvrXpbzxZcY/4BioNqQz gNV0+uCmxwk2a+oUdhHioB1z8sM7jPRAvImYT0u3fFRQ8fBj997/DOeZnAduE2Yo nEnTsz6uvNiFWW7GMQMICMSYR+WQUQgLRIffqUJzqaSQUpPCwirDNL16pm/DvNi7 7zaj97WIaiOblORho+OR3CYdXdMObyo685cGHon0uUEh1u6OG2MRFeUHznnBcW2e bbOt7+y0F/0gIFpC6X6jVb2vuUyIhzulYilRY8SMHPXIT0K5kgsJuFQG2R2Xetej q5aEmwN+LSZRdOO7cvZ2NHXP71yo1Cgsv5Vz8wXnfQwAoHsxZwMxCa4oTQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFChwMLkNR8RCwPNuBe9CCTX5E0bFMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvS0hBd3VRMUh4RUxBODI0RjcwSUpOZmtUUnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALUOKAwQA LYVJAwQALYlFAwQALYnJAwQALY11AwQALY13AwQBXHekAwQAuYQ1MA0GCSqGSIb3 DQEBCwUAA4IBAQBedVuJ1p8rCOduDfCJ7ZdvGyL+bNepRL8SjTRmNae/09+CSb+C P1rERUqmVZty3UCal32vvZ7fDoAGCJW7Ys/mO3mIstRz0GD2x6PDpBwk/TfCLzGV 22zIZcMPIxc114BrJHR21ze5+2cv/Gh7BjU8cul7FNybkAIX8sGCBofySf+lakIU mjIGTuyMN2hkQ4Xpux2Ld7XAp8FCCGP1M4JOnisiSGu5U5CB2MGOh7Z3QYBK35Fz yRB9SNhJwTcYD9KAmgMHLUhGpmyyt6gy4wzKVxgwzWeILY+8HI/DkUhjl2azZBd2 1WGBEWSZNHi6hIdCL9PdpWl9uPv46gIS1BD0 -----END CERTIFICATE-----Generated at Wed Dec 17 20:09:26 2025 by rpki-client