This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Kh9CFo_fzQmeCRkWsx-MB1hPAqU.roa File: Kh9CFo_fzQmeCRkWsx-MB1hPAqU.roa (raw, json) Hash identifier: NTQdAIhGSfv9XKb84zCW/nnXj4IjWj0LFKwcFujYliA= Subject key identifier: 2A:1F:42:16:8F:DF:CD:09:9E:09:19:16:B3:1F:8C:07:58:4F:02:A5 Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Certificate serial: 019A979332EBED65FE325C1374DAE5240F53 Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Kh9CFo_fzQmeCRkWsx-MB1hPAqU.roa Signing time: Tue 18 Nov 2025 15:26:37 +0000 ROA not before: Tue 18 Nov 2025 15:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50611 IP address blocks: 185.119.136.0/22 maxlen: 24 195.253.64.0/24 maxlen: 24 195.253.65.0/24 maxlen: 24 195.253.66.0/24 maxlen: 24 195.253.88.0/23 maxlen: 23 195.253.90.0/23 maxlen: 23 195.253.92.0/22 maxlen: 24 195.253.96.0/19 maxlen: 24 195.253.126.0/24 maxlen: 24 2a01:5b0:4::/48 maxlen: 48 2a01:5b0:5::/48 maxlen: 48 2a01:5b0:6::/48 maxlen: 48 2a01:5b0:8::/46 maxlen: 48 2a01:5b0:10::/45 maxlen: 48 2a01:5b0:12::/47 maxlen: 47 2a01:5b0:20::/43 maxlen: 48 2a01:5b0:2a::/48 maxlen: 48 2a01:5b0:2b::/48 maxlen: 48 2a01:5b0:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:93:32:eb:ed:65:fe:32:5c:13:74:da:e5:24:0f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Validity Not Before: Nov 18 15:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a1f42168fdfcd099e091916b31f8c07584f02a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:a8:7a:81:33:8c:63:91:40:2f:51:57:90: 69:80:94:56:85:79:48:4f:91:4a:e5:4c:4a:c7:fc: 25:94:8f:01:19:97:99:c8:d2:10:bd:57:62:5f:49: 82:7a:c5:81:18:8e:1f:33:b0:69:73:58:c2:b4:b0: a1:41:7a:d6:6f:e1:ca:d4:66:ca:94:49:e9:5a:e5: c2:eb:51:a9:59:bd:85:18:d3:99:7b:fa:b2:24:b1: 04:8d:73:e1:2d:9d:93:c2:25:08:a6:3f:b7:59:c3: 0c:f2:2a:cd:a5:eb:54:cd:b2:70:23:ae:20:48:dd: e6:f0:dd:13:fb:59:3d:e8:4d:f7:a3:dd:d2:35:a4: 86:de:a9:04:52:03:b2:98:46:57:40:bf:56:e8:59: 15:22:0b:56:01:1e:bb:dc:19:8f:9f:bd:80:b1:a7: 04:90:c9:b7:c3:bb:cf:4b:cf:07:33:6a:2e:5e:7e: f3:12:cb:05:ba:75:3e:6b:70:df:80:5d:da:71:59: 44:63:7f:e9:5f:b1:08:9e:ba:3a:36:13:c2:79:35: 1d:0b:2b:f4:7e:dc:2c:67:43:8b:d6:11:b9:e0:f2: 42:34:d9:62:33:fd:b3:94:a9:9c:09:b7:60:c1:1d: 8c:03:7e:5c:fe:22:eb:22:d9:53:0f:cd:7a:ed:92: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:42:16:8F:DF:CD:09:9E:09:19:16:B3:1F:8C:07:58:4F:02:A5 X509v3 Authority Key Identifier: keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Kh9CFo_fzQmeCRkWsx-MB1hPAqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.136.0/22 195.253.64.0-195.253.66.255 195.253.88.0-195.253.127.255 IPv6: 2a01:5b0:4::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff 2a01:5b0:8::/46 2a01:5b0:10::/45 2a01:5b0:20::/43 Signature Algorithm: sha256WithRSAEncryption 57:f8:cf:d5:72:0d:26:66:73:87:36:62:e6:49:84:c3:69:f2: 5c:c6:da:14:27:e4:59:76:f0:ea:a8:96:86:6c:e6:8e:90:64: 80:42:9b:2b:f7:7a:70:6b:ff:19:d2:83:14:49:1d:72:e4:40: 57:0f:76:a0:31:0b:f8:c5:2d:9d:74:f5:7d:8b:83:80:2c:67: 10:96:67:d4:31:80:91:b4:27:38:9a:39:83:0a:e0:c3:5b:6b: 10:e8:d5:c2:0a:1c:bc:98:0a:38:e2:a7:d3:fa:14:10:5d:fb: ed:32:05:82:7a:da:94:7b:9b:19:ca:86:4a:d3:f9:8d:5f:0e: e5:90:33:52:8e:4e:d7:f8:55:59:a4:c8:49:3d:da:42:c3:1d: 5e:25:69:32:d8:d6:e0:55:4e:50:02:86:c7:f9:97:e9:e2:50: ac:5c:1b:f9:9e:91:36:8a:bb:4a:e2:36:d9:a5:00:7a:61:d2: 83:61:00:2f:28:b2:c0:24:c7:dd:dd:fe:ab:79:cc:1a:31:1b: d3:f1:49:ef:7b:f8:68:ef:95:c9:ba:32:aa:60:7d:7d:e3:36: 63:2b:cc:34:84:8e:53:86:51:e4:50:31:5b:41:6e:73:24:5b: b0:3b:fc:16:07:85:e8:27:d8:ab:73:96:09:25:64:8c:19:cf: 10:e3:40:22 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZqXkzLr7WX+MlwTdNrlJA9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk ODViMzAwHhcNMjUxMTE4MTUyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTFmNDIxNjhmZGZjZDA5OWUwOTE5MTZiMzFmOGMwNzU4NGYwMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjuoeoEzjGORQC9RV5BpgJRWhXlI T5FK5UxKx/wllI8BGZeZyNIQvVdiX0mCesWBGI4fM7Bpc1jCtLChQXrWb+HK1GbK lEnpWuXC61GpWb2FGNOZe/qyJLEEjXPhLZ2TwiUIpj+3WcMM8irNpetUzbJwI64g SN3m8N0T+1k96E33o93SNaSG3qkEUgOymEZXQL9W6FkVIgtWAR673BmPn72AsacE kMm3w7vPS88HM2ouXn7zEssFunU+a3DfgF3acVlEY3/pX7EInro6NhPCeTUdCyv0 ftwsZ0OL1hG54PJCNNliM/2zlKmcCbdgwR2MA35c/iLrItlTD8167ZJAfwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFCofQhaP380JngkZFrMfjAdYTwKlMB8GA1UdIwQY MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt MDYzY2U2Y2Y0NjBkLzEvS2g5Q0ZvX2Z6UW1lQ1JrV3N4LU1CMWhQQXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAoBAIAATAiAwQCuXeIMAwD BAbD/UADBADD/UIwDAMEA8P9WAMEB8P9ADA1BAIAAjAvMBIDBwIqAQWwAAQDBwAq AQWwAAYDBwIqAQWwAAgDBwMqAQWwABADBwUqAQWwACAwDQYJKoZIhvcNAQELBQAD ggEBAFf4z9VyDSZmc4c2YuZJhMNp8lzG2hQn5Fl28OqoloZs5o6QZIBCmyv3enBr /xnSgxRJHXLkQFcPdqAxC/jFLZ109X2Lg4AsZxCWZ9QxgJG0JziaOYMK4MNbaxDo 1cIKHLyYCjjip9P6FBBd++0yBYJ62pR7mxnKhkrT+Y1fDuWQM1KOTtf4VVmkyEk9 2kLDHV4laTLY1uBVTlAChsf5l+niUKxcG/mekTaKu0riNtmlAHph0oNhAC8ossAk x93d/qt5zBoxG9PxSe97+Gjvlcm6MqpgfX3jNmMrzDSEjlOGUeRQMVtBbnMkW7A7 /BYHhegn2KtzlgklZIwZzxDjQCI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:31 2025 by rpki-client