This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ksgIhlX9YivjsK364CK-_XrpX5M.roa File: ksgIhlX9YivjsK364CK-_XrpX5M.roa (raw, json) Hash identifier: AuBhRWWRhqWSHl89QN4ZA47AX6TffPwL8jbW8tYSX8U= Subject key identifier: 92:C8:08:86:55:FD:62:2B:E3:B0:AD:FA:E0:22:BE:FD:7A:E9:5F:93 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AEE0E5C5C3AC43E8A6D5CE41BF5D5D85C Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ksgIhlX9YivjsK364CK-_XrpX5M.roa Signing time: Fri 05 Dec 2025 10:28:29 +0000 ROA not before: Fri 05 Dec 2025 10:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5650 IP address blocks: 158.173.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:0e:5c:5c:3a:c4:3e:8a:6d:5c:e4:1b:f5:d5:d8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 5 10:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92c8088655fd622be3b0adfae022befd7ae95f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:82:b6:c8:06:2c:eb:85:b0:21:79:13:06: e8:51:09:38:60:d2:a7:c1:db:5b:79:4d:28:c9:9f: 3f:4d:7a:07:d1:05:5e:01:cb:79:76:0d:66:b9:c6: 0c:db:29:43:f7:e6:4e:bf:b3:2a:63:ca:e5:7c:0f: e8:a4:5d:10:76:ed:b1:17:10:e1:1b:43:ce:da:54: 44:2d:e5:22:93:54:cf:8f:02:c4:51:b9:57:63:44: 0d:66:9b:cd:4e:79:5f:8d:9b:87:48:45:b4:5b:0c: 05:34:87:c0:fe:ca:35:99:92:13:11:ac:7c:d9:10: 37:fc:0c:0f:06:e6:eb:12:8d:1c:60:46:6f:0f:e4: 17:0d:5a:2d:c4:7a:f2:e7:99:c3:10:57:6e:8e:86: 40:d4:40:5c:af:f4:28:4c:14:7d:a6:1f:08:a3:ab: cb:6b:d3:7d:ee:f9:7f:b8:8f:51:cf:5b:cc:62:23: 2a:45:f8:52:20:99:7d:74:38:8f:c3:7e:b2:e5:da: b1:c7:a4:27:19:60:a5:f2:93:58:eb:68:b3:22:58: 16:ab:53:81:98:63:bb:86:52:c7:29:8c:cf:20:4c: f1:5f:54:52:8b:77:74:87:f8:cd:ec:9d:c5:ec:5d: 85:9a:3f:49:c0:3e:54:c4:89:f6:bb:11:54:d5:58: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C8:08:86:55:FD:62:2B:E3:B0:AD:FA:E0:22:BE:FD:7A:E9:5F:93 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ksgIhlX9YivjsK364CK-_XrpX5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.180.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:f5:c0:80:06:a2:60:39:6c:64:a4:8a:75:7b:c2:a8:b0:7b: 95:bd:48:f9:96:93:e6:b4:f2:a7:53:1b:88:3c:65:47:d0:9c: c7:23:65:d7:d1:2f:9f:90:b7:f9:6c:d0:2f:fd:d4:81:82:bd: 0c:82:ca:09:98:9f:f9:7e:ed:c8:1b:82:56:e3:e7:fb:c4:4b: 8c:0b:04:78:b7:32:04:f2:9b:ae:81:98:ee:9f:38:3e:70:de: a6:30:d1:b7:d9:3f:f0:5c:e5:65:e0:77:fe:d0:e1:98:1a:b5: 5f:82:c4:b8:64:ee:f2:d6:37:e5:06:6b:54:0c:1a:97:ed:06: 79:f0:82:fc:df:7a:97:30:2c:97:44:ae:54:be:da:f5:2b:49: f9:09:3c:aa:b6:a4:f1:be:d6:18:9c:dd:e9:a2:f2:b7:73:a2: 7b:35:fc:32:8d:4d:03:82:92:89:be:92:cb:c3:6d:fc:dd:e6: 4d:18:3a:a2:22:0c:aa:3c:f8:ad:89:af:1a:97:bd:39:5d:d9: 55:ae:a1:82:9d:da:06:f7:9f:59:70:e2:b2:26:fd:90:48:f6: 28:fe:a6:72:91:ab:76:77:55:0a:b5:68:a4:80:5b:e3:21:52: 73:39:9e:09:10:e4:c1:2d:08:11:8b:fa:9a:bb:22:d6:76:c6: 6d:14:84:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZruDlxcOsQ+im1c5Bv11dhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjA1MTAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM4MDg4NjU1ZmQ2MjJiZTNiMGFkZmFlMDIyYmVmZDdhZTk1ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApESCtsgGLOuFsCF5EwboUQk4YNKn wdtbeU0oyZ8/TXoH0QVeAct5dg1mucYM2ylD9+ZOv7MqY8rlfA/opF0Qdu2xFxDh G0PO2lRELeUik1TPjwLEUblXY0QNZpvNTnlfjZuHSEW0WwwFNIfA/so1mZITEax8 2RA3/AwPBubrEo0cYEZvD+QXDVotxHry55nDEFdujoZA1EBcr/QoTBR9ph8Io6vL a9N97vl/uI9Rz1vMYiMqRfhSIJl9dDiPw36y5dqxx6QnGWCl8pNY62izIlgWq1OB mGO7hlLHKYzPIEzxX1RSi3d0h/jN7J3F7F2Fmj9JwD5UxIn2uxFU1ViK1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLICIZV/WIr47Ct+uAivv166V+TMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEva3NnSWhsWDlZaXZqc0szNjRDSy1fWHJwWDVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnq20MA0G CSqGSIb3DQEBCwUAA4IBAQAb9cCABqJgOWxkpIp1e8KosHuVvUj5lpPmtPKnUxuI PGVH0JzHI2XX0S+fkLf5bNAv/dSBgr0MgsoJmJ/5fu3IG4JW4+f7xEuMCwR4tzIE 8puugZjunzg+cN6mMNG32T/wXOVl4Hf+0OGYGrVfgsS4ZO7y1jflBmtUDBqX7QZ5 8IL833qXMCyXRK5Uvtr1K0n5CTyqtqTxvtYYnN3povK3c6J7NfwyjU0DgpKJvpLL w2383eZNGDqiIgyqPPitia8al705XdlVrqGCndoG959ZcOKyJv2QSPYo/qZykat2 d1UKtWikgFvjIVJzOZ4JEOTBLQgRi/qauyLWdsZtFIQK -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:31 2025 by rpki-client