This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ksXEhE7St8zg0wF1VWLtgn0Du_U.roa File: ksXEhE7St8zg0wF1VWLtgn0Du_U.roa (raw, json) Hash identifier: gqyoC25IT19SupIQ1QxCiD0tRUUt0eHIXDD0/8pkBbU= Subject key identifier: 92:C5:C4:84:4E:D2:B7:CC:E0:D3:01:75:55:62:ED:82:7D:03:BB:F5 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019A6D6F8A7C3EC713949D1F1285BDB51F87 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ksXEhE7St8zg0wF1VWLtgn0Du_U.roa Signing time: Mon 10 Nov 2025 11:03:37 +0000 ROA not before: Mon 10 Nov 2025 11:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203576 IP address blocks: 78.135.110.0/24 maxlen: 24 188.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:6f:8a:7c:3e:c7:13:94:9d:1f:12:85:bd:b5:1f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Nov 10 11:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92c5c4844ed2b7cce0d301755562ed827d03bbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:77:70:00:bc:29:ed:a6:f7:4e:f5:61:ae:b7: dc:f2:78:36:78:5b:e4:27:9b:06:3c:25:16:54:c7: 6c:bf:94:45:b0:5e:2e:d3:f4:f6:c1:4a:64:f9:c3: c5:d9:3c:46:f3:e5:9d:79:5e:b0:a7:1e:7c:c4:91: 09:2a:ab:64:cc:ee:a8:c9:92:2a:8c:dc:f1:04:85: ed:cb:5b:43:f2:88:dc:1e:6c:2c:09:7e:8a:a6:2a: dc:a3:4f:b6:b2:40:c2:cb:0a:b8:67:e2:e5:6f:2e: d7:b5:db:0a:91:c2:95:b4:c3:ad:01:9c:1a:6e:c5: 83:33:46:2c:28:62:bb:42:d1:4c:06:89:d9:68:fe: c9:72:76:e3:ad:29:a9:8a:86:47:04:81:31:fe:88: 6a:03:ca:4c:a8:10:81:5f:cf:4f:a0:68:7b:99:6d: 97:46:55:04:d8:bc:14:0a:5f:7a:16:eb:64:45:0b: 67:4e:89:bc:5f:a3:a7:23:d7:79:ed:e9:51:57:1f: 1d:8e:00:cd:df:25:7d:0d:43:a8:9d:bd:77:a7:57: 26:34:c9:80:72:f9:0e:09:eb:4f:a3:5a:2c:04:a1: ee:e9:33:af:37:86:41:1e:b3:ae:0f:a3:d0:74:39: 4c:03:8b:61:98:e9:4f:cd:2d:ff:56:55:bc:c3:50: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C5:C4:84:4E:D2:B7:CC:E0:D3:01:75:55:62:ED:82:7D:03:BB:F5 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ksXEhE7St8zg0wF1VWLtgn0Du_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.110.0/24 188.132.196.0/24 Signature Algorithm: sha256WithRSAEncryption 73:25:9e:cc:22:20:48:0b:2b:78:44:7c:0c:46:50:39:05:41: 67:d0:ca:dc:e2:6e:00:f7:29:74:58:b4:3b:4e:04:a7:f5:30: 59:9b:b2:30:dd:9d:4a:65:27:fb:fc:66:0c:45:bd:00:40:8f: 0d:71:63:b3:3f:e9:e4:53:cf:2f:8f:66:e3:6d:f1:2e:11:e9: a9:3c:92:17:1f:f5:b2:32:55:b8:ed:1c:ca:c1:94:22:ca:ba: 6a:00:2e:4e:1e:51:d3:ca:30:d3:c4:81:1e:f3:7f:a4:82:e3: 7f:ac:cf:54:a0:73:ab:e1:50:00:f1:38:87:a9:19:4b:53:a3: 23:e2:67:48:2b:d7:46:e1:92:0a:27:80:72:d2:e3:e8:66:b3: 72:57:c2:df:1b:87:0f:11:d1:7e:98:58:13:c9:4c:04:bf:47: e7:44:2d:78:c6:7e:ce:30:52:f9:9e:1f:f0:4b:81:44:49:86: af:23:e8:76:a8:d3:22:6c:3f:0d:60:88:04:67:05:b3:d7:10: 38:5e:4d:8f:d3:b0:8d:8c:18:47:a6:68:08:be:ca:62:7e:b1: a7:e8:92:21:fb:b8:89:e2:c7:7d:e6:39:54:ab:2c:e9:78:90: a8:dc:58:70:23:f8:b2:92:30:02:26:c1:23:d6:c0:8d:3d:be: fc:b7:f9:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZptb4p8PscTlJ0fEoW9tR+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMTEwMTEwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM1YzQ4NDRlZDJiN2NjZTBkMzAxNzU1NTYyZWQ4MjdkMDNiYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XdwALwp7ab3TvVhrrfc8ng2eFvk J5sGPCUWVMdsv5RFsF4u0/T2wUpk+cPF2TxG8+WdeV6wpx58xJEJKqtkzO6oyZIq jNzxBIXty1tD8ojcHmwsCX6Kpirco0+2skDCywq4Z+Llby7XtdsKkcKVtMOtAZwa bsWDM0YsKGK7QtFMBonZaP7JcnbjrSmpioZHBIEx/ohqA8pMqBCBX89PoGh7mW2X RlUE2LwUCl96FutkRQtnTom8X6OnI9d57elRVx8djgDN3yV9DUOonb13p1cmNMmA cvkOCetPo1osBKHu6TOvN4ZBHrOuD6PQdDlMA4thmOlPzS3/VlW8w1CKYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJLFxIRO0rfM4NMBdVVi7YJ9A7v1MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEva3NYRWhFN1N0OHpnMHdGMVZXTHRnbjBEdV9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAToduAwQA vITEMA0GCSqGSIb3DQEBCwUAA4IBAQBzJZ7MIiBICyt4RHwMRlA5BUFn0Mrc4m4A 9yl0WLQ7TgSn9TBZm7Iw3Z1KZSf7/GYMRb0AQI8NcWOzP+nkU88vj2bjbfEuEemp PJIXH/WyMlW47RzKwZQiyrpqAC5OHlHTyjDTxIEe83+kguN/rM9UoHOr4VAA8TiH qRlLU6Mj4mdIK9dG4ZIKJ4By0uPoZrNyV8LfG4cPEdF+mFgTyUwEv0fnRC14xn7O MFL5nh/wS4FESYavI+h2qNMibD8NYIgEZwWz1xA4Xk2P07CNjBhHpmgIvspifrGn 6JIh+7iJ4sd95jlUqyzpeJCo3FhwI/iykjACJsEj1sCNPb78t/nG -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:26 2025 by rpki-client