This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KQ1cvOwVfCetOLZn5PiL1vlby5Y.roa File: KQ1cvOwVfCetOLZn5PiL1vlby5Y.roa (raw, json) Hash identifier: 5P0Y8IyDFw3FKNorF2UISwlzSeLPTC9FKECNMhgmf8U= Subject key identifier: 29:0D:5C:BC:EC:15:7C:27:AD:38:B6:67:E4:F8:8B:D6:F9:5B:CB:96 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B26ED31DF6E736B6C84AB3225CC353436 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KQ1cvOwVfCetOLZn5PiL1vlby5Y.roa Signing time: Tue 16 Dec 2025 11:30:37 +0000 ROA not before: Tue 16 Dec 2025 11:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61087 IP address blocks: 45.89.60.0/24 maxlen: 24 45.150.66.0/24 maxlen: 24 138.124.181.0/24 maxlen: 24 194.39.110.0/24 maxlen: 24 2a0e:4007:fff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:ed:31:df:6e:73:6b:6c:84:ab:32:25:cc:35:34:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Dec 16 11:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=290d5cbcec157c27ad38b667e4f88bd6f95bcb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:cd:48:14:0e:62:74:f5:3c:7e:65:64:59: 27:72:1e:fa:f8:91:e6:f8:66:a2:8a:29:2c:c4:65: 30:c3:67:aa:c9:50:de:e5:3c:86:81:11:27:8c:35: 23:4d:d1:f5:22:31:7e:f1:84:57:b5:97:62:0c:5d: c7:3f:b1:5e:56:9f:65:f9:dd:7a:37:d7:8a:aa:15: e9:f2:a4:15:a5:5c:f4:19:94:26:a1:88:a1:71:83: ca:9b:b5:00:fb:2f:bc:32:e4:fd:10:22:5a:f1:4d: 86:b3:06:cb:06:ac:52:ac:98:ee:bc:10:e4:1b:e8: 5e:3a:7f:df:61:19:fa:f0:3b:b1:0a:04:03:cd:41: ad:cd:b2:ad:81:fe:30:6b:c7:16:72:6e:a2:db:26: 20:c2:c0:dd:8e:91:e1:69:63:cc:39:89:e5:cd:47: f7:13:df:95:3c:fa:44:f5:33:7e:8c:9d:a7:ee:26: 1b:96:03:94:69:f7:19:3a:c6:ed:1a:27:20:d7:7a: c6:63:ed:be:45:d8:be:ba:31:c6:8d:fe:27:92:52: 8a:06:43:ab:f0:c7:03:9a:de:07:e2:4b:6d:29:da: 74:49:e7:e5:17:8b:e8:61:10:7b:b9:c8:bc:19:15: 4a:b8:28:0f:df:0c:24:80:be:09:32:6c:5f:8a:c6: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0D:5C:BC:EC:15:7C:27:AD:38:B6:67:E4:F8:8B:D6:F9:5B:CB:96 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KQ1cvOwVfCetOLZn5PiL1vlby5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.60.0/24 45.150.66.0/24 138.124.181.0/24 194.39.110.0/24 IPv6: 2a0e:4007:fff4::/48 Signature Algorithm: sha256WithRSAEncryption 79:b9:92:35:1b:dc:a2:ba:f4:7c:88:98:e3:9c:90:7b:1e:36: e1:73:2f:41:71:16:b4:d8:69:eb:60:02:e1:09:d3:5f:32:17: 65:17:24:58:d8:2d:30:0b:57:e3:19:0c:0b:1f:16:f4:54:cf: d8:81:bf:95:90:7e:29:5c:3d:97:ec:9a:a8:1e:89:20:5b:8b: dd:9f:3c:68:d5:5e:79:f1:05:36:37:24:86:de:f7:18:de:f9: 04:7e:6a:88:fa:7b:76:b5:fc:e8:a1:c8:4d:1f:00:7f:b7:60: fd:d8:83:44:c5:2e:c6:ec:51:d1:21:4b:6a:d7:45:f4:d0:ef: a4:ba:21:26:9c:5d:48:d1:15:22:80:e7:a6:3a:16:2e:86:e4: 43:32:3b:25:4b:a0:3a:df:f7:6a:93:f3:8b:3a:15:8d:12:bc: 85:56:a5:59:55:91:ae:36:37:6a:5b:a6:1c:58:43:06:1f:c9: 49:21:92:8d:1d:ca:a0:11:ee:25:1a:3c:9c:bf:50:c7:ad:0a: bf:aa:9f:c0:c1:7d:bc:89:52:3b:8c:85:e5:8c:f9:7a:09:ff: fa:64:cc:13:16:56:dd:c7:10:20:8f:a2:d4:ed:88:12:ab:d2: 78:b8:a2:5e:9b:86:62:21:5a:2b:fc:09:eb:df:05:65:f1:3a: 99:d0:09:64 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZsm7THfbnNrbISrMiXMNTQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMjE2MTEzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTBkNWNiY2VjMTU3YzI3YWQzOGI2NjdlNGY4OGJkNmY5NWJjYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3jNSBQOYnT1PH5lZFknch76+JHm +GaiiiksxGUww2eqyVDe5TyGgREnjDUjTdH1IjF+8YRXtZdiDF3HP7FeVp9l+d16 N9eKqhXp8qQVpVz0GZQmoYihcYPKm7UA+y+8MuT9ECJa8U2GswbLBqxSrJjuvBDk G+heOn/fYRn68DuxCgQDzUGtzbKtgf4wa8cWcm6i2yYgwsDdjpHhaWPMOYnlzUf3 E9+VPPpE9TN+jJ2n7iYblgOUafcZOsbtGicg13rGY+2+Rdi+ujHGjf4nklKKBkOr 8McDmt4H4kttKdp0SeflF4voYRB7uci8GRVKuCgP3wwkgL4JMmxfisYaswIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFCkNXLzsFXwnrTi2Z+T4i9b5W8uWMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvS1ExY3ZPd1ZmQ2V0T0xabjVQaUwxdmxieTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALVk8AwQA LZZCAwQAiny1AwQAwiduMA8EAgACMAkDBwAqDkAH//QwDQYJKoZIhvcNAQELBQAD ggEBAHm5kjUb3KK69HyImOOckHseNuFzL0FxFrTYaetgAuEJ018yF2UXJFjYLTAL V+MZDAsfFvRUz9iBv5WQfilcPZfsmqgeiSBbi92fPGjVXnnxBTY3JIbe9xje+QR+ aoj6e3a1/OihyE0fAH+3YP3Yg0TFLsbsUdEhS2rXRfTQ76S6ISacXUjRFSKA56Y6 Fi6G5EMyOyVLoDrf92qT84s6FY0SvIVWpVlVka42N2pbphxYQwYfyUkhko0dyqAR 7iUaPJy/UMetCr+qn8DBfbyJUjuMheWM+XoJ//pkzBMWVt3HECCPotTtiBKr0ni4 ol6bhmIhWiv8CevfBWXxOpnQCWQ= -----END CERTIFICATE-----Generated at Thu Dec 18 17:55:15 2025 by rpki-client