This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KRrmKpMBCAuz0ycR3DqqV_RSLZI.roa File: KRrmKpMBCAuz0ycR3DqqV_RSLZI.roa (raw, json) Hash identifier: 6JV0pm5KSl7dgRvcSyUz9iCbmsYOfYCoAcyuqvbgp6w= Subject key identifier: 29:1A:E6:2A:93:01:08:0B:B3:D3:27:11:DC:3A:AA:57:F4:52:2D:92 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019A973C39C1DAB3A107E38549A2EF7D9F45 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KRrmKpMBCAuz0ycR3DqqV_RSLZI.roa Signing time: Tue 18 Nov 2025 13:51:37 +0000 ROA not before: Tue 18 Nov 2025 13:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211381 IP address blocks: 45.14.14.0/24 maxlen: 24 80.89.224.0/22 maxlen: 24 80.89.237.0/24 maxlen: 24 80.89.238.0/24 maxlen: 24 85.208.186.0/24 maxlen: 24 89.105.213.0/24 maxlen: 24 89.105.217.0/24 maxlen: 24 185.224.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:3c:39:c1:da:b3:a1:07:e3:85:49:a2:ef:7d:9f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Nov 18 13:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=291ae62a9301080bb3d32711dc3aaa57f4522d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:72:46:80:ea:41:5f:15:4e:cf:2f:2f:78: 67:34:7e:e1:60:4b:3c:98:61:f7:0f:17:63:65:43: 1e:14:20:24:f3:c6:64:42:a1:7a:a5:a7:2d:a9:df: 83:16:1b:2e:5c:8a:6e:44:06:4d:f4:a5:14:1c:d7: 87:af:46:46:44:27:6c:34:b9:04:67:52:9a:e0:fd: 44:d2:2d:52:7b:0e:1a:86:6e:f3:33:6a:47:fd:9d: 55:d9:ef:b7:57:9e:4a:65:a1:26:7f:31:ee:4d:5d: c6:c4:96:0f:4c:94:ba:40:a1:c1:f5:cf:7d:dc:86: 09:04:0b:ac:7a:d6:93:28:41:88:4a:62:c3:0d:f2: f1:ea:97:2b:3d:ec:9c:23:44:06:21:6b:50:3c:0d: 90:7f:b5:17:e6:a6:11:42:c2:6f:b9:0b:18:1e:e0: b7:cc:c1:fc:95:39:ea:71:94:14:16:7a:ed:ee:59: c5:ff:ff:de:63:07:94:6b:37:15:1d:a2:73:39:50: af:0f:ef:50:93:81:ef:e7:5c:f2:fa:fa:95:db:11: 9b:ce:0e:60:f1:b0:23:af:49:3d:17:6a:e4:8f:72: 9b:d9:83:6b:60:c1:9a:28:a2:a5:9d:6a:7b:58:50: 8d:3d:1e:a4:df:61:cf:4e:73:0d:ac:ba:dd:75:81: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:E6:2A:93:01:08:0B:B3:D3:27:11:DC:3A:AA:57:F4:52:2D:92 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KRrmKpMBCAuz0ycR3DqqV_RSLZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.14.0/24 80.89.224.0/22 80.89.237.0-80.89.238.255 85.208.186.0/24 89.105.213.0/24 89.105.217.0/24 185.224.215.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:5d:65:dd:88:23:cd:38:28:db:f8:26:07:70:9d:5a:37:99: c9:c3:3d:c7:6d:91:bc:40:5f:ef:ea:e8:c9:cc:4d:f7:35:5a: a5:19:72:dc:73:4d:b2:5b:92:85:29:d4:a1:ca:b1:5a:45:61: 02:8c:40:a3:bb:a3:ff:f1:ba:db:19:6a:6b:5b:6e:6d:7b:47: 7e:ca:e8:72:59:6c:e0:8f:7c:e0:e7:1b:85:11:dc:7f:f4:60: d4:57:5e:0b:23:1a:e2:6f:d2:a8:f5:76:22:7e:13:bc:47:1b: cf:54:4e:5f:86:05:2b:02:46:20:f7:1b:56:11:fa:20:df:8c: af:1b:ed:c0:ff:c2:d7:e4:5e:65:3d:48:80:72:03:90:93:66: 40:30:08:f6:28:08:27:58:79:64:d1:4a:2d:5c:dc:49:31:04: aa:2e:a1:a0:74:78:c0:12:eb:33:ab:78:28:5b:1e:9d:81:dc: 22:00:c8:49:92:21:52:10:0c:fc:02:e3:1a:79:29:0e:4a:b0: 74:71:66:7b:7f:14:f2:97:82:cc:28:78:ed:c8:66:18:c1:4c: 1f:de:90:01:8a:d0:0f:2b:e6:1f:bc:a9:b4:a0:b6:23:65:dc: c6:75:ee:e0:34:e9:b1:94:42:c9:4a:8e:b8:66:3d:47:1e:af: 5c:83:af:f5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZqXPDnB2rOhB+OFSaLvfZ9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjUxMTE4MTM1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTFhZTYyYTkzMDEwODBiYjNkMzI3MTFkYzNhYWE1N2Y0NTIyZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA9yRoDqQV8VTs8vL3hnNH7hYEs8 mGH3DxdjZUMeFCAk88ZkQqF6pactqd+DFhsuXIpuRAZN9KUUHNeHr0ZGRCdsNLkE Z1Ka4P1E0i1Sew4ahm7zM2pH/Z1V2e+3V55KZaEmfzHuTV3GxJYPTJS6QKHB9c99 3IYJBAusetaTKEGISmLDDfLx6pcrPeycI0QGIWtQPA2Qf7UX5qYRQsJvuQsYHuC3 zMH8lTnqcZQUFnrt7lnF///eYweUazcVHaJzOVCvD+9Qk4Hv51zy+vqV2xGbzg5g 8bAjr0k9F2rkj3Kb2YNrYMGaKKKlnWp7WFCNPR6k32HPTnMNrLrddYHY+wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFCka5iqTAQgLs9MnEdw6qlf0Ui2SMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvS1JybUtwTUJDQXV6MHljUjNEcXFWX1JTTFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALQ4OAwQC UFngMAwDBABQWe0DBABQWe4DBABV0LoDBABZadUDBABZadkDBAC54NcwDQYJKoZI hvcNAQELBQADggEBAH5dZd2II804KNv4JgdwnVo3mcnDPcdtkbxAX+/q6MnMTfc1 WqUZctxzTbJbkoUp1KHKsVpFYQKMQKO7o//xutsZamtbbm17R37K6HJZbOCPfODn G4UR3H/0YNRXXgsjGuJv0qj1diJ+E7xHG89UTl+GBSsCRiD3G1YR+iDfjK8b7cD/ wtfkXmU9SIByA5CTZkAwCPYoCCdYeWTRSi1c3EkxBKouoaB0eMAS6zOreChbHp2B 3CIAyEmSIVIQDPwC4xp5KQ5KsHRxZnt/FPKXgswoeO3IZhjBTB/ekAGK0A8r5h+8 qbSgtiNl3MZ17uA06bGUQslKjrhmPUcer1yDr/U= -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:46 2025 by rpki-client