This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Kpu-woyfQvXBZfd1b22Idh3h33U.roa File: Kpu-woyfQvXBZfd1b22Idh3h33U.roa (raw, json) Hash identifier: qJO2UPFNA1dZx3ehm0lE/hT5Zn8Q29+wMwWC8D8ulww= Subject key identifier: 2A:9B:BE:C2:8C:9F:42:F5:C1:65:F7:75:6F:6D:88:76:1D:E1:DF:75 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B223928F36EC4DB35772545448AF5920D Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Kpu-woyfQvXBZfd1b22Idh3h33U.roa Signing time: Mon 15 Dec 2025 13:35:29 +0000 ROA not before: Mon 15 Dec 2025 13:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.42.0/24 maxlen: 24 91.109.44.0/24 maxlen: 24 91.109.45.0/24 maxlen: 24 91.109.46.0/24 maxlen: 24 147.185.196.0/24 maxlen: 24 147.185.197.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 207.244.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:39:28:f3:6e:c4:db:35:77:25:45:44:8a:f5:92:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Dec 15 13:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a9bbec28c9f42f5c165f7756f6d88761de1df75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b2:9f:bf:65:10:12:32:c0:cc:94:a7:cf:1c: b8:e0:21:5b:52:f2:1b:3e:d4:85:96:20:16:e8:1d: c4:91:b5:82:ad:fa:28:50:88:40:93:95:5f:e8:36: 77:98:44:1d:15:c4:ae:5e:4b:10:31:51:96:0a:c7: 8e:a0:0c:1a:5e:5d:49:74:49:a1:1a:6c:25:24:89: 74:59:e5:d6:3b:85:7b:71:a0:08:53:ca:16:34:ee: a4:cb:52:2c:13:4b:b1:e1:6e:ce:e6:d3:95:29:d6: 98:5b:6b:f5:58:a9:a4:b0:b1:1f:2e:60:46:ec:e0: 61:b3:35:61:bf:cc:4f:fb:b4:df:61:de:76:99:9e: 27:3d:db:fd:7c:88:d0:a6:26:64:5b:cd:60:50:88: 3a:d7:cd:90:96:3c:2c:7f:04:c9:c3:aa:32:7f:c1: 25:0f:53:34:f5:30:ea:0a:82:fd:22:9a:2c:a6:ec: 5c:83:96:94:55:53:f5:45:d3:da:02:93:9d:09:a1: e9:12:b6:ae:e6:63:78:b4:5d:80:23:d5:41:1e:92: 52:7c:bf:c3:c8:20:bd:8c:a5:e4:36:dc:b4:44:e0: 8a:e7:2f:5b:18:e5:5a:80:b4:2e:a8:8b:ca:48:df: 2d:cc:05:aa:b7:b9:1f:53:d1:dd:17:5d:31:4f:8a: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:BE:C2:8C:9F:42:F5:C1:65:F7:75:6F:6D:88:76:1D:E1:DF:75 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Kpu-woyfQvXBZfd1b22Idh3h33U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0-91.109.42.255 91.109.44.0-91.109.46.255 147.185.196.0/23 193.168.200.0/24 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 54:de:7b:b2:99:45:3d:fb:4d:c7:7d:6b:92:88:2c:10:fa:83: 0d:d8:83:16:7c:17:28:d8:3d:cc:7b:ea:af:49:24:34:92:60: c5:7f:aa:fb:ad:2d:31:3b:6f:61:78:77:fb:77:15:64:25:51: d3:18:7a:cc:32:8b:1a:2a:eb:18:58:7c:17:e5:ca:95:2b:e9: 17:20:7e:42:24:b0:fe:5d:f7:6b:a0:30:84:dc:b7:34:60:2d: b7:b8:61:74:68:12:11:40:92:cc:6c:09:ff:0b:99:c2:b9:bb: f4:6c:64:84:7e:b5:a3:55:dd:ec:34:31:14:2c:31:8e:3c:56: 61:15:63:76:c9:e8:aa:ed:aa:02:8c:e9:ed:dd:9d:4e:96:3c: f9:24:ab:80:c2:f5:5f:22:e1:f7:7f:00:be:c1:db:87:17:c2: 62:87:64:f1:37:7c:30:20:4d:19:91:57:3d:27:84:b9:6c:9e: 3f:9d:ed:57:5d:06:f9:da:da:cc:b6:31:51:99:5b:c5:a6:b9: c7:5e:33:48:3c:86:0e:a4:21:f3:40:4f:f2:b1:dd:1c:c8:c0: 03:e7:54:47:3e:8a:62:9c:ba:f9:ca:3c:90:4d:05:5e:cf:44: b4:80:ec:a2:64:52:e3:e6:df:fa:97:03:ec:70:a8:3f:c8:64: 80:a3:09:c3 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZsiOSjzbsTbNXclRUSK9ZINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMjE1MTMzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTliYmVjMjhjOWY0MmY1YzE2NWY3NzU2ZjZkODg3NjFkZTFkZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrKfv2UQEjLAzJSnzxy44CFbUvIb PtSFliAW6B3EkbWCrfooUIhAk5Vf6DZ3mEQdFcSuXksQMVGWCseOoAwaXl1JdEmh GmwlJIl0WeXWO4V7caAIU8oWNO6ky1IsE0ux4W7O5tOVKdaYW2v1WKmksLEfLmBG 7OBhszVhv8xP+7TfYd52mZ4nPdv9fIjQpiZkW81gUIg6182QljwsfwTJw6oyf8El D1M09TDqCoL9Ipospuxcg5aUVVP1RdPaApOdCaHpErau5mN4tF2AI9VBHpJSfL/D yCC9jKXkNty0ROCK5y9bGOVagLQuqIvKSN8tzAWqt7kfU9HdF10xT4o0YQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFCqbvsKMn0L1wWX3dW9tiHYd4d91MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvS3B1LXdveWZRdlhCWmZkMWIyMklkaDNoMzNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBANbbSgD BABbbSowDAMEAlttLAMEAFttLgMEAZO5xAMEAMGoyAMEAM/0xjANBgkqhkiG9w0B AQsFAAOCAQEAVN57splFPftNx31rkogsEPqDDdiDFnwXKNg9zHvqr0kkNJJgxX+q +60tMTtvYXh3+3cVZCVR0xh6zDKLGirrGFh8F+XKlSvpFyB+QiSw/l33a6AwhNy3 NGAtt7hhdGgSEUCSzGwJ/wuZwrm79GxkhH61o1Xd7DQxFCwxjjxWYRVjdsnoqu2q Aozp7d2dTpY8+SSrgML1XyLh938AvsHbhxfCYodk8Td8MCBNGZFXPSeEuWyeP53t V10G+drazLYxUZlbxaa5x14zSDyGDqQh80BP8rHdHMjAA+dURz6KYpy6+co8kE0F Xs9EtIDsomRS4+bf+pcD7HCoP8hkgKMJww== -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:25 2025 by rpki-client