This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/KRbV-MNWRxAjm7Ctjhzy8C1XgVQ.roa File: KRbV-MNWRxAjm7Ctjhzy8C1XgVQ.roa (raw, json) Hash identifier: C/hBs+kMg4joqqgJdT9WQAAShLEFg3fI49RXJ2R8ftg= Subject key identifier: 29:16:D5:F8:C3:56:47:10:23:9B:B0:AD:8E:1C:F2:F0:2D:57:81:54 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019A9C4548E4CC764CE178947EA4A58E6378 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/KRbV-MNWRxAjm7Ctjhzy8C1XgVQ.roa Signing time: Wed 19 Nov 2025 13:19:37 +0000 ROA not before: Wed 19 Nov 2025 13:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213438 IP address blocks: 94.26.105.0/24 maxlen: 24 192.109.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:45:48:e4:cc:76:4c:e1:78:94:7e:a4:a5:8e:63:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Nov 19 13:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2916d5f8c3564710239bb0ad8e1cf2f02d578154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:b4:bc:dd:62:21:11:af:50:ec:15:99:db: a6:5f:65:89:b4:f7:6e:d8:2a:46:68:54:28:96:fa: 4e:bc:73:19:74:25:7f:f0:03:a5:ad:0c:c2:d8:d9: 99:18:95:36:4f:00:be:d2:3c:a6:52:d1:ce:94:ff: 9e:65:d6:7c:c5:ed:38:70:31:b4:50:06:a8:83:a1: 2b:9c:f8:c4:1e:d6:8a:8a:4a:59:a2:9c:33:b0:b9: 75:88:d2:9b:d8:6f:71:ef:46:e1:e5:5c:be:b0:16: 53:45:44:76:b4:2a:3e:d0:8f:45:1f:3c:c8:b7:a2: 7a:cf:6f:c1:11:6b:d8:6d:f2:b8:80:61:3b:01:b3: 6b:59:bc:23:5c:09:7d:c5:9b:ff:09:cf:b0:05:92: 90:23:0b:a5:2b:79:3e:3c:bc:59:58:e8:68:d9:13: 01:69:5f:4c:6a:c8:42:51:84:d8:7c:66:ff:32:14: 2c:f5:3b:43:1c:57:54:ab:80:6d:ef:a2:49:c1:d7: da:fe:9d:28:ab:17:e1:4a:59:6c:a7:b6:03:5f:b4: da:8d:57:b4:47:d0:b9:04:37:2f:26:22:43:ae:e9: e6:2d:7e:4e:2c:07:f5:13:c9:7f:89:5d:35:1c:c0: b7:0c:02:31:ec:c0:60:5b:44:61:a2:02:45:b9:73: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:D5:F8:C3:56:47:10:23:9B:B0:AD:8E:1C:F2:F0:2D:57:81:54 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/KRbV-MNWRxAjm7Ctjhzy8C1XgVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.105.0/24 192.109.138.0/24 Signature Algorithm: sha256WithRSAEncryption 89:5f:55:0d:66:99:73:19:9a:ac:d4:8c:cc:70:39:e1:78:7c: bb:55:b2:24:7b:97:7c:24:de:9b:43:24:4f:9c:ca:dc:13:e9: b6:ad:9f:29:81:a4:54:10:12:8f:d4:a7:14:db:66:55:f6:ef: a0:b5:b8:1d:0b:f0:fb:c5:38:02:2b:f6:ba:fb:13:07:94:c1: fb:2a:70:a1:1e:58:a1:0f:58:e2:9f:97:25:e6:28:60:3e:cb: 02:00:46:cc:f5:fd:bb:a3:56:ba:a8:4c:fb:54:dd:5d:eb:c0: bc:99:8e:68:27:20:a7:9d:fb:16:9c:2c:68:9e:e1:54:53:f2: 24:08:65:67:8d:ae:d2:e8:7d:f9:88:63:39:5b:43:86:41:e8: ba:39:b7:b6:fa:7b:79:e2:0a:82:78:3b:b3:58:d9:17:46:7c: 0f:c0:36:a7:6a:4e:ea:3a:a2:ee:48:7d:f9:58:bf:d1:9f:9e: eb:1c:e9:56:d1:b9:dc:23:6b:43:f6:76:d1:04:09:1b:e1:f1: 24:13:75:5c:31:95:91:73:77:9e:ee:89:c9:0c:d4:2c:68:1b: 9c:4e:38:f4:80:d4:35:5a:aa:c2:35:e6:e2:e7:4e:eb:6f:0c: 40:93:48:2c:11:58:da:91:f3:e8:b4:27:62:35:1a:92:ac:b5: ea:68:6a:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqcRUjkzHZM4XiUfqSljmN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMTE5MTMxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTE2ZDVmOGMzNTY0NzEwMjM5YmIwYWQ4ZTFjZjJmMDJkNTc4MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiW0vN1iIRGvUOwVmdumX2WJtPdu 2CpGaFQolvpOvHMZdCV/8AOlrQzC2NmZGJU2TwC+0jymUtHOlP+eZdZ8xe04cDG0 UAaog6ErnPjEHtaKikpZopwzsLl1iNKb2G9x70bh5Vy+sBZTRUR2tCo+0I9FHzzI t6J6z2/BEWvYbfK4gGE7AbNrWbwjXAl9xZv/Cc+wBZKQIwulK3k+PLxZWOho2RMB aV9MashCUYTYfGb/MhQs9TtDHFdUq4Bt76JJwdfa/p0oqxfhSllsp7YDX7TajVe0 R9C5BDcvJiJDrunmLX5OLAf1E8l/iV01HMC3DAIx7MBgW0RhogJFuXOWWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCkW1fjDVkcQI5uwrY4c8vAtV4FUMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvS1JiVi1NTldSeEFqbTdDdGpoenk4QzFYZ1ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXhppAwQA wG2KMA0GCSqGSIb3DQEBCwUAA4IBAQCJX1UNZplzGZqs1IzMcDnheHy7VbIke5d8 JN6bQyRPnMrcE+m2rZ8pgaRUEBKP1KcU22ZV9u+gtbgdC/D7xTgCK/a6+xMHlMH7 KnChHlihD1jin5cl5ihgPssCAEbM9f27o1a6qEz7VN1d68C8mY5oJyCnnfsWnCxo nuFUU/IkCGVnja7S6H35iGM5W0OGQei6Obe2+nt54gqCeDuzWNkXRnwPwDanak7q OqLuSH35WL/Rn57rHOlW0bncI2tD9nbRBAkb4fEkE3VcMZWRc3ee7onJDNQsaBuc Tjj0gNQ1WqrCNebi507rbwxAk0gsEVjakfPotCdiNRqSrLXqaGrb -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:25 2025 by rpki-client