This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/KJRHlioCmueXrp8BQh01_p8EnRA.roa File: KJRHlioCmueXrp8BQh01_p8EnRA.roa (raw, json) Hash identifier: +sq9qLL3Z0LGHm3NSGDmnSZ0MO+ik5ZHfhd1GnM1VYs= Subject key identifier: 28:94:47:96:2A:02:9A:E7:97:AE:9F:01:42:1D:35:FE:9F:04:9D:10 Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Certificate serial: 019A72FD85203620E91F7BA05500E2BF769B Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/KJRHlioCmueXrp8BQh01_p8EnRA.roa Signing time: Tue 11 Nov 2025 12:56:48 +0000 ROA not before: Tue 11 Nov 2025 12:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210423 IP address blocks: 79.108.228.0/22 maxlen: 22 81.172.72.0/21 maxlen: 21 93.157.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:fd:85:20:36:20:e9:1f:7b:a0:55:00:e2:bf:76:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Validity Not Before: Nov 11 12:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=289447962a029ae797ae9f01421d35fe9f049d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:15:d8:bc:a4:0c:fa:ef:c2:47:65:82:d0: 86:bf:4e:cd:9a:6a:e8:fb:7f:8d:97:76:7b:72:7a: bd:c9:54:ad:2d:c9:85:bd:52:48:ad:21:26:c1:79: 9d:23:03:b6:19:7c:9d:c4:d0:5e:3b:05:96:17:63: 5f:97:69:99:b9:2c:38:ff:ba:28:0d:fa:9b:c1:07: f2:fe:23:0a:bf:95:8b:1d:8f:34:61:45:0b:13:44: fd:a5:99:67:bb:95:4e:ef:f0:e3:b0:cf:54:5a:e4: 14:0e:81:11:f9:37:bc:b8:31:53:ee:f0:4d:71:f8: 3a:cf:11:6d:8f:ce:b8:93:0b:c1:1d:5a:c9:eb:68: ba:b6:da:10:c5:e8:fe:0f:24:0d:53:88:77:e3:d2: 9a:35:7f:41:2a:c8:be:1f:64:40:f7:5e:15:0f:6e: 88:0a:19:36:60:0a:6a:5b:e4:e6:81:90:e3:ca:c5: 76:fa:fe:ab:ac:cf:27:d0:51:f6:48:bd:d9:71:0a: ad:6d:01:03:d6:1e:6e:f5:94:82:53:1f:28:8d:1d: 82:fc:88:7d:40:20:52:98:27:d0:20:cc:07:f6:81: 0e:11:62:85:36:0f:52:ef:45:1a:0a:3d:de:c0:4c: 0a:c9:7f:b5:ef:c2:88:50:cd:0b:da:c2:aa:df:c2: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:47:96:2A:02:9A:E7:97:AE:9F:01:42:1D:35:FE:9F:04:9D:10 X509v3 Authority Key Identifier: keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/KJRHlioCmueXrp8BQh01_p8EnRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.108.228.0/22 81.172.72.0/21 93.157.107.0/24 Signature Algorithm: sha256WithRSAEncryption 16:af:12:6e:fb:62:51:00:99:12:01:aa:8f:e2:aa:e8:b6:82: 38:ac:0e:2b:91:06:51:18:6d:03:da:24:00:c1:0e:c4:a5:ba: ca:74:93:9f:ec:49:8b:b8:d3:f9:95:16:ef:1e:9c:f4:1e:d3: 6a:e8:93:6b:c5:67:22:59:10:bb:f8:b6:bb:c4:ad:c8:6d:24: ed:91:41:a8:58:01:1d:02:e3:70:7e:9e:37:70:c0:6d:74:94: 13:7e:b7:ef:89:8a:78:92:28:fc:e1:b1:1c:8a:37:a3:2f:a3: 8b:d4:05:4a:cd:5f:a7:1b:4d:0f:bf:e8:5d:a4:c2:ef:39:8f: 61:73:da:29:d5:c2:14:a2:a1:f7:dc:5f:96:c2:e0:b4:ab:de: ec:65:40:04:41:a4:6c:15:1c:3b:ad:ea:73:83:b4:73:74:b2: 86:ad:8d:50:5f:45:5a:18:68:cf:8e:15:57:3e:ad:c7:d4:31: 56:70:b9:1c:7a:4c:c2:1c:3d:49:ff:f6:fc:51:dc:22:07:a1: ff:30:95:16:53:24:67:ff:4a:a6:c4:97:78:4f:7b:98:84:07: 62:ca:95:69:65:fd:c4:04:61:db:54:8c:88:f4:8d:e4:15:c4: eb:d1:36:a3:93:f4:56:ca:91:bf:34:fd:cd:9d:ff:b9:79:d7: 76:d7:fe:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpy/YUgNiDpH3ugVQDiv3abMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy YjI5MzAwHhcNMjUxMTExMTI1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODk0NDc5NjJhMDI5YWU3OTdhZTlmMDE0MjFkMzVmZTlmMDQ5ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/kV2LykDPrvwkdlgtCGv07Nmmro +3+Nl3Z7cnq9yVStLcmFvVJIrSEmwXmdIwO2GXydxNBeOwWWF2Nfl2mZuSw4/7oo DfqbwQfy/iMKv5WLHY80YUULE0T9pZlnu5VO7/DjsM9UWuQUDoER+Te8uDFT7vBN cfg6zxFtj864kwvBHVrJ62i6ttoQxej+DyQNU4h349KaNX9BKsi+H2RA914VD26I Chk2YApqW+TmgZDjysV2+v6rrM8n0FH2SL3ZcQqtbQED1h5u9ZSCUx8ojR2C/Ih9 QCBSmCfQIMwH9oEOEWKFNg9S70UaCj3ewEwKyX+178KIUM0L2sKq38LW3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCiUR5YqAprnl66fAUIdNf6fBJ0QMB8GA1UdIwQY MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt YTc2MjkyZTIwNDU4LzEvS0pSSGxpb0NtdWVYcnA4QlFoMDFfcDhFblJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4 LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCT2zkAwQD UaxIAwQAXZ1rMA0GCSqGSIb3DQEBCwUAA4IBAQAWrxJu+2JRAJkSAaqP4qrotoI4 rA4rkQZRGG0D2iQAwQ7EpbrKdJOf7EmLuNP5lRbvHpz0HtNq6JNrxWciWRC7+La7 xK3IbSTtkUGoWAEdAuNwfp43cMBtdJQTfrfviYp4kij84bEcijejL6OL1AVKzV+n G00Pv+hdpMLvOY9hc9op1cIUoqH33F+WwuC0q97sZUAEQaRsFRw7repzg7RzdLKG rY1QX0VaGGjPjhVXPq3H1DFWcLkcekzCHD1J//b8UdwiB6H/MJUWUyRn/0qmxJd4 T3uYhAdiypVpZf3EBGHbVIyI9I3kFcTr0Tajk/RWypG/NP3Nnf+5edd21/7a -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:39 2025 by rpki-client