This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/k9zIQCiqas1TRGoqv37rXBLRZzk.roa File: k9zIQCiqas1TRGoqv37rXBLRZzk.roa (raw, json) Hash identifier: 4PtU3p40NZZnlg7tWWfnlqh+Jp+eJZnf9Rb+7srSa5U= Subject key identifier: 93:DC:C8:40:28:AA:6A:CD:53:44:6A:2A:BF:7E:EB:5C:12:D1:67:39 Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6 Certificate serial: 019A717F93EDA6B3A1822E29651F459E58B6 Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/k9zIQCiqas1TRGoqv37rXBLRZzk.roa Signing time: Tue 11 Nov 2025 05:59:37 +0000 ROA not before: Tue 11 Nov 2025 05:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8528 IP address blocks: 138.21.0.0/16 maxlen: 24 138.21.3.0/24 maxlen: 24 138.21.4.0/24 maxlen: 24 138.21.12.0/24 maxlen: 24 138.21.23.0/24 maxlen: 24 138.21.37.0/24 maxlen: 24 138.21.47.0/24 maxlen: 24 138.21.50.0/24 maxlen: 24 138.21.55.0/24 maxlen: 24 138.21.113.0/24 maxlen: 24 138.21.117.0/24 maxlen: 24 138.21.119.0/24 maxlen: 24 138.21.148.0/24 maxlen: 24 193.8.143.0/24 maxlen: 24 193.194.132.0/22 maxlen: 22 193.194.134.0/24 maxlen: 24 193.194.135.0/24 maxlen: 24 194.41.4.0/22 maxlen: 22 194.146.54.0/24 maxlen: 24 2a00:7ec0::/32 maxlen: 32 2a00:7ec0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:7f:93:ed:a6:b3:a1:82:2e:29:65:1f:45:9e:58:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6 Validity Not Before: Nov 11 05:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93dcc84028aa6acd53446a2abf7eeb5c12d16739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:4f:ec:be:9a:65:36:09:4d:ec:db:3a:c1: a6:b4:64:6c:89:5a:6d:83:0e:96:6a:4e:f7:92:38: e6:ca:f1:21:88:a5:ef:7a:03:b9:c5:07:6f:64:12: 9b:5e:74:a7:96:c8:ca:98:68:e0:c0:48:71:5e:b8: 19:92:fb:0e:f0:c1:bd:f2:ba:1e:25:a7:ed:07:f0: 7d:c4:bb:a9:c3:46:2a:f9:87:5a:51:c1:32:ea:02: 73:68:64:ff:14:33:4f:56:cf:ff:af:91:8f:00:6d: 17:f0:9a:5f:60:b3:fb:29:34:52:0e:f4:fb:ef:4b: 7b:4a:e2:57:24:ae:da:20:5d:5b:e8:8b:d6:aa:0a: 41:6c:cf:9f:a9:47:b4:f9:50:11:c4:eb:b7:84:f7: dd:b5:11:5a:64:14:74:8b:5f:0d:cb:21:57:5e:a4: a9:42:23:4b:a6:fe:02:a1:3b:30:6b:22:73:75:bd: 93:96:54:cb:76:a2:d7:21:0f:67:9a:90:60:ba:dd: f2:52:ef:cd:4f:a7:69:8e:e3:39:6b:d4:be:07:73: 8e:8d:0e:47:3c:a8:2b:c0:c2:d5:cc:40:1e:a7:77: e6:5d:95:d3:75:dc:72:88:b2:11:16:d8:5c:08:92: 85:3b:09:63:f1:75:c6:fd:63:01:14:c4:d7:c0:d9: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DC:C8:40:28:AA:6A:CD:53:44:6A:2A:BF:7E:EB:5C:12:D1:67:39 X509v3 Authority Key Identifier: keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/k9zIQCiqas1TRGoqv37rXBLRZzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.21.0.0/16 193.8.143.0/24 193.194.132.0/22 194.41.4.0/22 194.146.54.0/24 IPv6: 2a00:7ec0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:64:b7:a4:42:62:66:82:33:0c:30:05:14:a5:8a:5b:e2:80: 47:2c:ba:55:55:9c:8e:33:09:f7:d1:c3:d8:d1:90:89:6d:12: d9:17:d9:fc:4c:ab:3d:bb:45:ef:3d:bb:e3:2b:40:89:97:5d: eb:f8:a1:12:e1:9b:91:a4:5d:eb:76:5e:16:78:9f:2e:a3:d6: b9:0f:f2:1d:bc:c8:bb:0c:5b:be:c6:29:82:0e:b6:09:c0:be: 6f:6d:21:c5:c5:1c:8e:18:33:0f:da:f1:d6:44:94:c3:0b:ec: e4:3f:13:51:55:cb:21:ac:3d:8e:25:a4:7f:58:0b:87:bf:54: 80:df:c6:b1:0a:8b:56:75:92:fb:80:59:6f:87:aa:56:71:75: 8e:2f:20:d9:5e:b2:66:41:91:dd:7f:62:2b:7f:e2:a6:34:16: 6a:56:f6:11:50:9b:c9:54:13:99:1a:70:92:63:8b:7f:d9:56: e3:f6:86:cf:86:a8:cf:d2:69:44:61:a8:ba:86:35:77:e3:5a: 6d:b3:03:9f:ec:39:d2:4c:f7:9b:54:4f:91:ed:5c:f5:27:db: f5:4d:9a:24:6b:c3:e1:1c:65:09:83:1d:f7:86:49:90:14:19: 29:1c:a7:da:88:61:a0:a4:67:d6:40:a4:8d:00:83:af:c8:14: c2:44:db:03 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZpxf5PtprOhgi4pZR9Fnli2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZTk4ZGVlOWFhZGM4NmI0ZGZhOWUxNjhkOTIxYmQ4MGJh M2YzYTYwHhcNMjUxMTExMDU1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2RjYzg0MDI4YWE2YWNkNTM0NDZhMmFiZjdlZWI1YzEyZDE2NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9BP7L6aZTYJTezbOsGmtGRsiVpt gw6Wak73kjjmyvEhiKXvegO5xQdvZBKbXnSnlsjKmGjgwEhxXrgZkvsO8MG98roe JaftB/B9xLupw0Yq+YdaUcEy6gJzaGT/FDNPVs//r5GPAG0X8JpfYLP7KTRSDvT7 70t7SuJXJK7aIF1b6IvWqgpBbM+fqUe0+VARxOu3hPfdtRFaZBR0i18NyyFXXqSp QiNLpv4CoTswayJzdb2TllTLdqLXIQ9nmpBgut3yUu/NT6dpjuM5a9S+B3OOjQ5H PKgrwMLVzEAep3fmXZXTddxyiLIRFthcCJKFOwlj8XXG/WMBFMTXwNkNbQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJPcyEAoqmrNU0RqKr9+61wS0Wc5MB8GA1UdIwQY MBaAFHjpje6archrTfqeFo2SG9gLo/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMt NWM3MTk1NmE1Mzc3LzEvazl6SVFDaXFhczFUUkdvcXYzN3JYQkxSWnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMtNWM3MTk1NmE1Mzc3 LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwMAihUDBADB CI8DBALBwoQDBALCKQQDBADCkjYwDQQCAAIwBwMFACoAfsAwDQYJKoZIhvcNAQEL BQADggEBAHxkt6RCYmaCMwwwBRSlilvigEcsulVVnI4zCffRw9jRkIltEtkX2fxM qz27Re89u+MrQImXXev4oRLhm5GkXet2XhZ4ny6j1rkP8h28yLsMW77GKYIOtgnA vm9tIcXFHI4YMw/a8dZElMML7OQ/E1FVyyGsPY4lpH9YC4e/VIDfxrEKi1Z1kvuA WW+HqlZxdY4vINlesmZBkd1/Yit/4qY0FmpW9hFQm8lUE5kacJJji3/ZVuP2hs+G qM/SaURhqLqGNXfjWm2zA5/sOdJM95tUT5HtXPUn2/VNmiRrw+EcZQmDHfeGSZAU GSkcp9qIYaCkZ9ZApI0Ag6/IFMJE2wM= -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:43 2025 by rpki-client