This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa File: KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa (raw, json) Hash identifier: Hj7QzIpBoHLwEb/zGFK9zyG2I+wY870ZVTkhagEh2v4= Subject key identifier: 2A:43:B9:5E:B6:0E:48:36:26:C9:4D:46:0C:BB:22:58:F1:D0:7A:AB Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019A774782402F23FED59C34D2F6F38BA92F Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa Signing time: Wed 12 Nov 2025 08:56:06 +0000 ROA not before: Wed 12 Nov 2025 08:56:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205614 IP address blocks: 45.89.160.0/22 maxlen: 24 45.135.124.0/22 maxlen: 24 185.171.44.0/22 maxlen: 24 193.22.251.0/24 maxlen: 24 2a0d:1f80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:47:82:40:2f:23:fe:d5:9c:34:d2:f6:f3:8b:a9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Nov 12 08:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a43b95eb60e483626c94d460cbb2258f1d07aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:d0:77:4e:f8:14:c6:3a:c1:69:7e:94:69: b6:4e:4f:0e:23:04:47:41:22:aa:42:15:20:53:73: 97:a9:4e:14:14:d2:1d:08:f5:07:51:40:24:19:40: e9:b0:69:ad:e8:c5:41:88:0e:14:dd:f9:b4:59:df: 5a:3d:96:e0:cd:09:c4:85:39:f8:18:be:d8:fd:f9: 8c:39:da:44:c8:62:99:51:74:a0:2c:38:fe:7d:9f: d1:e3:05:38:1c:4e:3f:8e:15:1a:87:cd:08:f2:9e: 00:15:2f:15:76:c7:4c:54:7f:8c:f4:24:be:66:58: 70:f5:f1:2f:e1:83:18:12:ed:b0:30:03:6a:ce:ff: d1:6b:67:9c:0b:83:c4:3c:7d:0d:e4:5f:4e:b1:cd: 07:f0:83:97:58:0c:ed:41:f4:ee:28:21:5a:96:0c: 9d:48:68:26:0c:70:ed:e2:2a:23:45:12:51:07:3a: 17:f0:5f:b2:31:94:fb:87:ac:a9:a7:e9:82:cf:c3: 95:5c:8b:a3:62:92:0a:1f:c0:d6:cc:f7:ee:a4:a6: 8c:d7:42:20:03:5c:d3:09:30:c4:54:ad:8c:cc:a4: 2a:49:a6:78:8a:64:cf:12:90:b8:7f:7e:17:60:c8: 9b:2c:2d:b1:23:74:d4:2e:de:8b:c0:4d:f2:53:90: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:B9:5E:B6:0E:48:36:26:C9:4D:46:0C:BB:22:58:F1:D0:7A:AB X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.160.0/22 45.135.124.0/22 185.171.44.0/22 193.22.251.0/24 IPv6: 2a0d:1f80::/32 Signature Algorithm: sha256WithRSAEncryption b9:f7:28:24:20:2a:41:4d:53:cb:d2:3b:6d:a1:69:f2:bb:d5: d9:8c:90:31:b9:a3:ae:db:3c:5e:26:05:98:f5:49:49:cb:05: 4e:7e:6f:a9:9c:e3:e2:a3:50:04:5e:21:ee:41:33:d3:4b:c3: cd:1c:a3:3a:93:99:cb:32:b0:d6:df:a8:14:90:c8:49:72:c8: 5b:91:cf:dc:aa:6a:d7:6b:e2:32:37:41:94:fa:5a:0b:35:54: a6:0a:c6:6f:54:17:01:c6:98:81:8a:36:cc:2f:d5:ad:0c:e9: 50:00:75:e8:c5:57:77:f2:9a:d1:45:45:f7:bb:4d:e1:d7:8c: 14:04:28:06:1e:a7:43:6c:77:bb:1a:1a:cf:ca:92:f9:b0:96: be:66:fa:6b:43:5c:00:cf:50:ba:5c:58:80:38:47:7f:2e:c7: c1:0a:92:5d:5b:f6:10:63:c9:1d:53:61:50:de:d3:1a:26:ad: cb:e7:6c:56:78:56:18:4c:4f:27:45:9e:ae:4c:e4:db:4e:1e: c3:e7:bb:72:89:e9:f9:06:f7:97:c9:2c:a4:cf:f2:2d:fe:55: 0b:a3:06:57:99:8b:b3:03:c1:39:c0:a6:72:3c:7a:7a:82:0d: 06:aa:49:ba:da:20:41:47:d7:0c:4c:05:fc:c0:c2:22:31:ab: d0:a0:13:08 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZp3R4JALyP+1Zw00vbzi6kvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjUxMTEyMDg1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTQzYjk1ZWI2MGU0ODM2MjZjOTRkNDYwY2JiMjI1OGYxZDA3YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uHQd074FMY6wWl+lGm2Tk8OIwRH QSKqQhUgU3OXqU4UFNIdCPUHUUAkGUDpsGmt6MVBiA4U3fm0Wd9aPZbgzQnEhTn4 GL7Y/fmMOdpEyGKZUXSgLDj+fZ/R4wU4HE4/jhUah80I8p4AFS8VdsdMVH+M9CS+ Zlhw9fEv4YMYEu2wMANqzv/Ra2ecC4PEPH0N5F9Osc0H8IOXWAztQfTuKCFalgyd SGgmDHDt4iojRRJRBzoX8F+yMZT7h6ypp+mCz8OVXIujYpIKH8DWzPfupKaM10Ig A1zTCTDEVK2MzKQqSaZ4imTPEpC4f34XYMibLC2xI3TULt6LwE3yU5DrkQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCpDuV62Dkg2JslNRgy7Iljx0HqrMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvS2tPNVhyWU9TRFlteVUxR0RMc2lXUEhRZXFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLVmgAwQC LYd8AwQCuassAwQAwRb7MA0EAgACMAcDBQAqDR+AMA0GCSqGSIb3DQEBCwUAA4IB AQC59ygkICpBTVPL0jttoWnyu9XZjJAxuaOu2zxeJgWY9UlJywVOfm+pnOPio1AE XiHuQTPTS8PNHKM6k5nLMrDW36gUkMhJcshbkc/cqmrXa+IyN0GU+loLNVSmCsZv VBcBxpiBijbML9WtDOlQAHXoxVd38prRRUX3u03h14wUBCgGHqdDbHe7GhrPypL5 sJa+ZvprQ1wAz1C6XFiAOEd/LsfBCpJdW/YQY8kdU2FQ3tMaJq3L52xWeFYYTE8n RZ6uTOTbTh7D57tyien5BveXySykz/It/lULowZXmYuzA8E5wKZyPHp6gg0Gqkm6 2iBBR9cMTAX8wMIiMavQoBMI -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:50 2025 by rpki-client