This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/K-PsOdX8Bz4MKp0czXMCbwL_uwE.roa File: K-PsOdX8Bz4MKp0czXMCbwL_uwE.roa (raw, json) Hash identifier: DmX9cz1iVlEDY0NwcFX3F1vAYNyYSnFfClTEpwbK4YA= Subject key identifier: 2B:E3:EC:39:D5:FC:07:3E:0C:2A:9D:1C:CD:73:02:6F:02:FF:BB:01 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A7794E3781E2A310EC6340D6F0BC970CB Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/K-PsOdX8Bz4MKp0czXMCbwL_uwE.roa Signing time: Wed 12 Nov 2025 10:20:37 +0000 ROA not before: Wed 12 Nov 2025 10:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56286 IP address blocks: 195.86.194.0/24 maxlen: 24 195.86.195.0/24 maxlen: 24 195.86.207.0/24 maxlen: 24 195.86.232.0/24 maxlen: 24 195.86.233.0/24 maxlen: 24 195.86.234.0/24 maxlen: 24 195.86.247.0/24 maxlen: 24 195.86.249.0/24 maxlen: 24 195.86.254.0/24 maxlen: 24 195.86.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:94:e3:78:1e:2a:31:0e:c6:34:0d:6f:0b:c9:70:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 12 10:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2be3ec39d5fc073e0c2a9d1ccd73026f02ffbb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:73:20:aa:53:fb:67:85:98:68:37:17:8f: de:ac:fa:3d:e3:ba:3b:0a:a1:ad:92:a5:e2:36:ff: 38:ce:a6:ec:b1:fd:65:a1:76:c7:dd:cf:5a:80:88: 92:af:4a:e9:db:dc:ce:55:71:9b:24:95:58:a6:69: 5c:14:50:52:6e:14:34:a0:9c:79:8a:5e:d8:41:b1: 1f:db:b5:0c:9c:e0:eb:06:6a:0f:fa:f5:e8:0e:ac: d9:17:d1:d2:7f:35:33:2c:9a:e5:15:ab:03:e1:1d: c9:16:af:47:b5:ef:6c:ae:97:3a:5b:35:98:16:5d: 73:49:67:b0:67:12:4d:4e:b3:fa:65:3a:af:81:97: ed:b1:6c:88:35:6d:c0:05:93:9a:2f:1a:50:26:2e: 0b:ca:00:28:08:49:21:47:f2:e5:22:ae:72:5f:d5: 34:d8:42:36:7e:d9:db:3b:7a:a0:3e:9e:67:03:f0: 03:d7:09:70:e7:94:9a:e6:b7:2f:4c:07:6f:ed:9c: 5e:94:bc:40:46:8a:6e:e1:c4:69:e5:91:fb:77:55: 20:be:22:cd:a2:0a:2c:29:da:8f:73:ed:9d:61:0c: f9:2d:31:c1:d2:f9:ce:70:08:0d:ca:5d:b4:6f:63: 87:3e:76:de:29:a7:bb:6a:1a:fc:d8:25:03:b1:92: b1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:EC:39:D5:FC:07:3E:0C:2A:9D:1C:CD:73:02:6F:02:FF:BB:01 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/K-PsOdX8Bz4MKp0czXMCbwL_uwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.86.194.0/23 195.86.207.0/24 195.86.232.0-195.86.234.255 195.86.247.0/24 195.86.249.0/24 195.86.254.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:92:f9:2c:85:ad:90:1c:69:50:b4:fd:80:46:ac:79:1c:24: 81:91:f1:ed:51:a4:ad:15:a0:1f:7d:b9:3e:64:c0:b8:ef:68: bf:53:24:34:02:88:04:42:46:6f:73:3f:00:45:a9:4e:d6:d0: 88:bd:21:c0:a2:93:c3:54:97:ef:ae:a7:70:e0:80:7f:e2:8c: da:1d:05:f8:4a:2a:70:92:bd:31:e7:40:ea:b2:ec:6c:72:d3: ab:b8:78:ce:20:da:76:f3:cc:69:fe:9e:36:24:a2:76:ad:fe: ef:df:7e:ef:cc:fa:95:0d:a2:5c:8d:56:71:41:cf:a6:43:1b: 60:fe:2b:ef:bc:8d:f4:e2:89:07:9f:2a:37:0b:a1:b7:83:f5: ba:6a:75:88:d8:9a:ed:e5:c7:ed:9b:3d:f0:3a:c4:95:bc:31: 9a:6c:67:bf:17:e2:5d:be:ce:29:3e:02:5a:7b:76:f7:54:1e: 9e:c3:42:34:e8:60:4f:05:02:21:02:12:39:a8:9d:48:0f:97: 56:11:4e:43:22:3d:91:f4:6f:5a:5f:0c:6e:e9:1e:9f:39:a9: 09:4f:b2:44:e0:ed:6c:7b:57:6f:26:0d:3a:dc:94:f4:04:90: 44:3e:f0:53:cc:cc:e0:e6:2e:fd:93:1f:ca:6a:63:44:5b:dd: 17:c3:e2:c8 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZp3lON4HioxDsY0DW8LyXDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTEyMTAyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmUzZWMzOWQ1ZmMwNzNlMGMyYTlkMWNjZDczMDI2ZjAyZmZiYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH1zIKpT+2eFmGg3F4/erPo947o7 CqGtkqXiNv84zqbssf1loXbH3c9agIiSr0rp29zOVXGbJJVYpmlcFFBSbhQ0oJx5 il7YQbEf27UMnODrBmoP+vXoDqzZF9HSfzUzLJrlFasD4R3JFq9Hte9srpc6WzWY Fl1zSWewZxJNTrP6ZTqvgZftsWyINW3ABZOaLxpQJi4LygAoCEkhR/LlIq5yX9U0 2EI2ftnbO3qgPp5nA/AD1wlw55Sa5rcvTAdv7ZxelLxARopu4cRp5ZH7d1UgviLN ogosKdqPc+2dYQz5LTHB0vnOcAgNyl20b2OHPnbeKae7ahr82CUDsZKxIQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCvj7DnV/Ac+DCqdHM1zAm8C/7sBMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSy1Qc09kWDhCejRNS3AwY3pYTUNid0xfdXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBw1bCAwQA w1bPMAwDBAPDVugDBADDVuoDBADDVvcDBADDVvkDBAHDVv4wDQYJKoZIhvcNAQEL BQADggEBAC+S+SyFrZAcaVC0/YBGrHkcJIGR8e1RpK0VoB99uT5kwLjvaL9TJDQC iARCRm9zPwBFqU7W0Ii9IcCik8NUl++up3DggH/ijNodBfhKKnCSvTHnQOqy7Gxy 06u4eM4g2nbzzGn+njYkonat/u/ffu/M+pUNolyNVnFBz6ZDG2D+K++8jfTiiQef KjcLobeD9bpqdYjYmu3lx+2bPfA6xJW8MZpsZ78X4l2+zik+Alp7dvdUHp7DQjTo YE8FAiECEjmonUgPl1YRTkMiPZH0b1pfDG7pHp85qQlPskTg7Wx7V28mDTrclPQE kEQ+8FPMzODmLv2TH8pqY0Rb3RfD4sg= -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:50 2025 by rpki-client