This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kKk3n0ceHTr8SUypg-5J9iLA4Vk.roa File: kKk3n0ceHTr8SUypg-5J9iLA4Vk.roa (raw, json) Hash identifier: v99v32hw5qSprHgqTzRkvaN/lUeFjFHAbi/O3sdI/r0= Subject key identifier: 90:A9:37:9F:47:1E:1D:3A:FC:49:4C:A9:83:EE:49:F6:22:C0:E1:59 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019A8215CBB7199E36E8965744AB6E2F0038 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kKk3n0ceHTr8SUypg-5J9iLA4Vk.roa Signing time: Fri 14 Nov 2025 11:17:37 +0000 ROA not before: Fri 14 Nov 2025 11:17:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215540 IP address blocks: 45.93.213.0/24 maxlen: 24 45.93.214.0/24 maxlen: 24 45.151.234.0/24 maxlen: 24 45.151.235.0/24 maxlen: 24 77.83.245.0/24 maxlen: 24 77.83.246.0/24 maxlen: 24 160.20.156.0/24 maxlen: 24 160.20.157.0/24 maxlen: 24 185.68.186.0/24 maxlen: 24 185.68.187.0/24 maxlen: 24 185.71.214.0/24 maxlen: 24 185.71.215.0/24 maxlen: 24 185.73.180.0/24 maxlen: 24 185.73.181.0/24 maxlen: 24 185.75.132.0/24 maxlen: 24 185.75.135.0/24 maxlen: 24 185.76.243.0/24 maxlen: 24 185.77.138.0/24 maxlen: 24 185.77.139.0/24 maxlen: 24 185.79.132.0/24 maxlen: 24 185.79.133.0/24 maxlen: 24 185.88.98.0/24 maxlen: 24 185.88.99.0/24 maxlen: 24 185.95.228.0/24 maxlen: 24 185.100.156.0/24 maxlen: 24 185.100.159.0/24 maxlen: 24 185.102.114.0/24 maxlen: 24 185.111.24.0/24 maxlen: 24 185.112.59.0/24 maxlen: 24 185.168.208.0/24 maxlen: 24 185.177.238.0/24 maxlen: 24 185.182.130.0/24 maxlen: 24 185.182.131.0/24 maxlen: 24 193.38.228.0/24 maxlen: 24 193.38.229.0/24 maxlen: 24 193.38.230.0/24 maxlen: 24 193.38.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:15:cb:b7:19:9e:36:e8:96:57:44:ab:6e:2f:00:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Nov 14 11:17:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=90a9379f471e1d3afc494ca983ee49f622c0e159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1f:28:da:44:83:25:9d:6c:4a:68:b1:ea:b5: 29:ec:1c:63:b8:ed:04:17:b9:13:e1:e5:e0:88:7f: 14:c3:fd:2a:fd:ce:84:0a:8f:9c:bc:2b:9e:ba:46: dc:45:dc:bc:53:13:30:4c:1d:bd:47:ca:e3:de:f4: 51:b5:cd:4e:6e:bd:94:a8:54:e9:df:b5:70:c6:21: 93:02:e4:b7:14:b7:30:03:6f:c6:b3:9c:e4:f8:bd: b7:d8:30:e6:84:04:11:63:30:d5:c0:31:ff:db:fd: db:c9:60:81:e3:d9:ad:72:aa:41:b2:c5:95:65:65: 3a:7f:2d:37:08:98:cb:d3:22:70:1d:2d:ef:fd:d0: 28:73:b3:53:fe:9d:96:34:2c:99:28:b5:ab:9a:17: 58:a9:95:84:63:68:87:6e:0e:d2:f4:04:9c:fe:f7: 03:5c:97:ca:c0:76:73:e6:a5:11:45:19:f9:0a:27: 1c:15:b0:a5:5c:bd:10:e0:6f:25:bd:89:6f:75:af: 8c:e4:de:b1:3d:0e:a0:9f:97:11:e3:e2:19:fd:32: 83:9a:44:12:ac:09:59:aa:da:69:d7:39:f4:76:de: a4:af:5a:de:44:88:41:d2:5c:07:89:78:e9:b1:63: 29:d4:b7:00:b9:ef:99:75:97:20:53:6f:40:62:5c: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A9:37:9F:47:1E:1D:3A:FC:49:4C:A9:83:EE:49:F6:22:C0:E1:59 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kKk3n0ceHTr8SUypg-5J9iLA4Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.213.0-45.93.214.255 45.151.234.0/23 77.83.245.0-77.83.246.255 160.20.156.0/23 185.68.186.0/23 185.71.214.0/23 185.73.180.0/23 185.75.132.0/24 185.75.135.0/24 185.76.243.0/24 185.77.138.0/23 185.79.132.0/23 185.88.98.0/23 185.95.228.0/24 185.100.156.0/24 185.100.159.0/24 185.102.114.0/24 185.111.24.0/24 185.112.59.0/24 185.168.208.0/24 185.177.238.0/24 185.182.130.0/23 193.38.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:f9:f7:37:7e:b4:27:7b:f6:0f:22:59:06:c1:23:b1:63:b9: 83:30:e4:42:a9:6b:13:b0:f3:0a:8a:03:43:8c:eb:66:3a:94: a2:b8:ca:60:3c:e5:da:ea:8c:e2:05:d0:4c:1a:e2:e5:ae:8e: b9:1c:6c:1c:84:d7:a6:29:0d:69:6f:f8:d5:58:c3:8f:4d:90: 2e:d4:a7:d2:ff:e4:7d:0e:b8:2f:a4:57:96:9e:c5:ab:7f:07: 5a:ca:04:61:77:79:36:de:7c:74:30:2e:40:36:09:1d:fe:0d: 22:96:8a:cf:4f:6c:a1:d3:1a:53:20:7a:85:57:e3:c6:4b:a7: 9c:13:6e:25:5b:d7:bd:01:b4:34:60:2a:dc:5b:18:1e:42:a9: e9:f3:78:27:fd:50:ec:c2:db:2e:ae:76:9e:dc:9c:4f:cf:bd: d9:2b:36:f7:73:ed:42:6c:49:42:e7:1f:be:04:d1:f8:2c:59: 5b:35:25:73:2b:9d:3a:fa:63:b5:f3:69:da:a8:f9:ed:fd:0f: 60:ea:87:4c:97:37:ec:2f:47:83:f6:b5:7e:b8:bd:e5:49:8e: 33:eb:ce:91:27:c3:71:cd:1f:d2:c1:de:c4:c8:12:2a:7a:94: 93:19:7f:5d:0e:50:55:47:c0:16:88:9b:5f:b5:ff:f8:8f:42: eb:14:fb:e3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZqCFcu3GZ426JZXRKtuLwA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMTE0MTExNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE5Mzc5ZjQ3MWUxZDNhZmM0OTRjYTk4M2VlNDlmNjIyYzBlMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR8o2kSDJZ1sSmix6rUp7BxjuO0E F7kT4eXgiH8Uw/0q/c6ECo+cvCueukbcRdy8UxMwTB29R8rj3vRRtc1Obr2UqFTp 37VwxiGTAuS3FLcwA2/Gs5zk+L232DDmhAQRYzDVwDH/2/3byWCB49mtcqpBssWV ZWU6fy03CJjL0yJwHS3v/dAoc7NT/p2WNCyZKLWrmhdYqZWEY2iHbg7S9ASc/vcD XJfKwHZz5qURRRn5CiccFbClXL0Q4G8lvYlvda+M5N6xPQ6gn5cR4+IZ/TKDmkQS rAlZqtpp1zn0dt6kr1reRIhB0lwHiXjpsWMp1LcAue+ZdZcgU29AYlxKyQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFJCpN59HHh06/ElMqYPuSfYiwOFZMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEva0trM24wY2VIVHI4U1V5cGctNUo5aUxBNFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZowDAME AC1d1QMEAC1d1gMEAS2X6jAMAwQATVP1AwQATVP2AwQBoBScAwQBuUS6AwQBuUfW AwQBuUm0AwQAuUuEAwQAuUuHAwQAuUzzAwQBuU2KAwQBuU+EAwQBuVhiAwQAuV/k AwQAuWScAwQAuWSfAwQAuWZyAwQAuW8YAwQAuXA7AwQAuajQAwQAubHuAwQBubaC AwQCwSbkMA0GCSqGSIb3DQEBCwUAA4IBAQAN+fc3frQne/YPIlkGwSOxY7mDMORC qWsTsPMKigNDjOtmOpSiuMpgPOXa6oziBdBMGuLlro65HGwchNemKQ1pb/jVWMOP TZAu1KfS/+R9DrgvpFeWnsWrfwdaygRhd3k23nx0MC5ANgkd/g0ilorPT2yh0xpT IHqFV+PGS6ecE24lW9e9AbQ0YCrcWxgeQqnp83gn/VDswtsurnae3JxPz73ZKzb3 c+1CbElC5x++BNH4LFlbNSVzK506+mO182naqPnt/Q9g6odMlzfsL0eD9rV+uL3l SY4z686RJ8NxzR/Swd7EyBIqepSTGX9dDlBVR8AWiJtftf/4j0LrFPvj -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:43 2025 by rpki-client