This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/KXOgKF9ToP-QnSRqqqDvDca4CRs.roa File: KXOgKF9ToP-QnSRqqqDvDca4CRs.roa (raw, json) Hash identifier: 3ID517A5cdHZzJ1LOc50CxGLwqSACg6grnxMrHtB8i8= Subject key identifier: 29:73:A0:28:5F:53:A0:FF:90:9D:24:6A:AA:A0:EF:0D:C6:B8:09:1B Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B11F404068AC4EFC1A10A4E9667DE42B1 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/KXOgKF9ToP-QnSRqqqDvDca4CRs.roa Signing time: Fri 12 Dec 2025 09:46:02 +0000 ROA not before: Fri 12 Dec 2025 09:46:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 83.147.194.0/24 maxlen: 24 91.186.194.0/24 maxlen: 24 91.186.220.0/22 maxlen: 22 94.241.160.0/23 maxlen: 24 178.253.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:f4:04:06:8a:c4:ef:c1:a1:0a:4e:96:67:de:42:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Dec 12 09:46:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2973a0285f53a0ff909d246aaaa0ef0dc6b8091b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:d6:09:1c:78:22:58:61:a1:99:06:a5:f3: 1d:39:06:d7:9f:60:54:ae:cb:25:a8:9c:de:57:27: 7f:33:f0:71:52:fe:96:8e:e9:11:01:ae:97:c9:15: 5b:f4:e0:04:8f:84:ae:4b:50:1f:9b:81:a5:64:be: 29:29:e4:0d:de:75:7d:67:16:87:95:60:e4:f7:67: 6f:cd:88:89:6b:d2:0b:d5:38:a5:68:01:5d:69:a6: 0e:22:b6:4f:55:57:c9:e9:03:de:f7:b8:56:92:ee: 20:a1:30:55:a8:ab:7f:76:5f:ca:32:5c:75:31:6e: 9e:ba:79:33:a5:d4:11:c7:48:14:14:37:56:ad:64: 11:97:44:ac:e5:da:e0:3b:c9:da:46:12:52:5d:0c: 2e:bc:b0:12:71:bc:18:c6:a1:38:a3:8d:2d:82:e8: e7:88:20:48:8c:68:56:0f:5f:37:9b:b3:a5:90:d9: fa:d2:d6:30:2b:5f:76:5e:f6:35:7b:e1:57:e9:a6: d7:da:d1:44:bd:5e:2c:c2:bb:97:43:71:e5:7a:d6: f6:c8:fe:d2:b3:52:4e:eb:7b:04:7d:60:80:60:bd: 34:77:d7:a8:b2:4c:3b:34:53:0b:60:b6:89:b0:e6: 2e:b1:52:ff:a4:82:bf:cc:f5:1d:4e:8e:91:dd:3f: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:73:A0:28:5F:53:A0:FF:90:9D:24:6A:AA:A0:EF:0D:C6:B8:09:1B X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/KXOgKF9ToP-QnSRqqqDvDca4CRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.194.0/24 91.186.194.0/24 91.186.220.0/22 94.241.160.0/23 178.253.38.0/23 Signature Algorithm: sha256WithRSAEncryption 80:03:50:3b:d5:56:ec:28:55:ff:0a:60:ca:ac:fa:04:2b:f9: f0:ff:06:9a:d5:5b:9a:90:9e:91:b3:05:f5:cd:84:80:f5:27: da:e3:4f:57:e5:fa:68:57:84:0c:2f:68:40:a0:d8:dc:19:d3: 1b:b0:0a:7f:28:70:63:13:8d:97:2d:73:a7:76:07:57:d2:b1: 3f:68:e9:02:c5:ff:85:fd:34:d1:ef:6b:50:98:5e:22:4b:d8: 3d:4f:0e:10:27:ae:fe:21:7e:5a:ce:5b:53:3e:83:90:b4:ed: 71:ca:33:8e:c1:32:b0:be:6a:7a:8f:8a:a8:00:fb:95:c4:e3: 4c:af:e4:c0:46:d9:fc:3b:c6:25:f9:e3:f2:65:9b:38:b4:26: 8a:f2:11:35:63:ef:35:7e:4f:f7:45:a4:90:c4:ac:d6:8c:57: ff:98:4e:fb:b3:96:dc:b8:7c:d6:ef:4e:18:68:64:f9:78:61: c0:90:b1:bc:fb:be:72:3f:1a:04:dc:dd:52:7b:92:3d:66:67: 29:89:d9:51:37:8e:72:62:9b:7c:eb:7d:c9:ed:6a:8e:0b:06: d6:53:ee:17:5c:52:3e:6f:d0:4f:1a:4a:f9:b1:d5:00:db:0d: ee:c0:96:9a:3e:32:c8:e2:fc:21:d2:32:66:d5:ea:bb:5a:a3: e1:0a:f4:53 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsR9AQGisTvwaEKTpZn3kKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUxMjEyMDk0NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTczYTAyODVmNTNhMGZmOTA5ZDI0NmFhYWEwZWYwZGM2YjgwOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0rWCRx4IlhhoZkGpfMdOQbXn2BU rsslqJzeVyd/M/BxUv6WjukRAa6XyRVb9OAEj4SuS1Afm4GlZL4pKeQN3nV9ZxaH lWDk92dvzYiJa9IL1TilaAFdaaYOIrZPVVfJ6QPe97hWku4goTBVqKt/dl/KMlx1 MW6eunkzpdQRx0gUFDdWrWQRl0Ss5drgO8naRhJSXQwuvLAScbwYxqE4o40tgujn iCBIjGhWD183m7OlkNn60tYwK192XvY1e+FX6abX2tFEvV4swruXQ3Hletb2yP7S s1JO63sEfWCAYL00d9eoskw7NFMLYLaJsOYusVL/pIK/zPUdTo6R3T8JWwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFClzoChfU6D/kJ0kaqqg7w3GuAkbMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvS1hPZ0tGOVRvUC1RblNScXFxRHZEY2E0Q1JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU5PCAwQA W7rCAwQCW7rcAwQBXvGgAwQBsv0mMA0GCSqGSIb3DQEBCwUAA4IBAQCAA1A71Vbs KFX/CmDKrPoEK/nw/waa1VuakJ6RswX1zYSA9Sfa409X5fpoV4QML2hAoNjcGdMb sAp/KHBjE42XLXOndgdX0rE/aOkCxf+F/TTR72tQmF4iS9g9Tw4QJ67+IX5azltT PoOQtO1xyjOOwTKwvmp6j4qoAPuVxONMr+TARtn8O8Yl+ePyZZs4tCaK8hE1Y+81 fk/3RaSQxKzWjFf/mE77s5bcuHzW704YaGT5eGHAkLG8+75yPxoE3N1Se5I9Zmcp idlRN45yYpt8633J7WqOCwbWU+4XXFI+b9BPGkr5sdUA2w3uwJaaPjLI4vwh0jJm 1eq7WqPhCvRT -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:44 2025 by rpki-client