This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kqmOcOnG479AZQjtalnQzrs-SjE.roa File: kqmOcOnG479AZQjtalnQzrs-SjE.roa (raw, json) Hash identifier: LtOhGkwvbRLi0xJJpIFjd7Dx3T/dBBaZ3TGG7uUlKUI= Subject key identifier: 92:A9:8E:70:E9:C6:E3:BF:40:65:08:ED:6A:59:D0:CE:BB:3E:4A:31 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0291DB536E6D408FC90E67287B3F306E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kqmOcOnG479AZQjtalnQzrs-SjE.roa Signing time: Tue 09 Dec 2025 10:04:31 +0000 ROA not before: Tue 09 Dec 2025 10:04:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 82.152.142.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:91:db:53:6e:6d:40:8f:c9:0e:67:28:7b:3f:30:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 9 10:04:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92a98e70e9c6e3bf406508ed6a59d0cebb3e4a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:a4:af:14:c4:86:96:22:f7:47:72:38:40: cc:fc:e2:72:71:41:ef:98:13:56:8e:ca:54:e7:08: af:45:9c:5e:9e:60:1f:9c:60:f6:04:08:ba:84:6b: 30:2b:8b:b0:36:36:a1:55:c1:09:87:bf:ea:b7:38: 2c:de:a7:00:6a:ff:e0:3c:da:b8:c5:38:dc:81:eb: 39:bd:4c:b5:17:38:c4:f3:c6:34:8c:c1:53:dd:39: 62:16:da:6d:b5:22:d1:1f:68:82:b7:cc:93:97:60: 3c:f8:9d:f9:8d:15:52:24:36:fd:dd:55:fe:ac:36: 40:19:5d:73:be:b8:44:14:07:46:b3:be:33:66:40: 6d:fc:3d:14:4a:76:73:81:14:de:a1:74:ef:0e:5a: a3:95:8a:1c:49:d8:e0:16:14:f0:b5:3e:9b:0c:9f: b2:f7:26:54:3d:72:4e:c2:a5:83:42:2d:78:6c:37: 6b:7a:97:1c:05:d4:8d:43:fd:18:48:f8:ff:2e:47: 29:11:ab:2c:9e:2b:36:b8:5e:17:66:e3:8c:0b:0c: a4:dd:07:78:12:5b:60:5e:5d:31:6d:44:97:7c:98: 0c:2e:d8:20:15:01:59:ce:88:1b:38:4f:d2:03:78: c5:dd:b8:cd:94:6b:70:34:58:36:68:b8:cd:a4:79: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A9:8E:70:E9:C6:E3:BF:40:65:08:ED:6A:59:D0:CE:BB:3E:4A:31 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kqmOcOnG479AZQjtalnQzrs-SjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.142.0/24 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 07:9b:49:58:c7:cb:34:de:d2:84:47:bd:f9:ec:fa:b1:f1:59: a4:46:45:a6:ef:45:90:68:17:28:30:b0:6d:56:a5:44:eb:dc: 3f:4b:2d:4c:65:35:99:d8:65:fc:96:7c:02:a3:20:0b:e8:f6: 24:64:a5:b0:24:1c:7f:6b:6e:7d:93:f6:ba:4e:9c:d2:0a:ce: 67:cc:62:95:db:6b:26:ef:de:01:da:bd:d1:d4:cc:33:5d:ca: 6e:53:e6:6e:16:91:12:b8:18:01:1a:6a:22:c1:03:c1:51:2a: da:88:c3:4c:64:5c:e0:fa:0c:eb:18:83:9f:74:a1:2c:51:51: 23:97:f2:6f:92:6d:3c:aa:89:38:72:a3:96:a9:c4:2e:73:ca: d1:62:2d:cd:31:19:ab:dd:49:8c:d6:08:08:bf:58:7a:9d:3a: c9:f0:79:15:1b:8a:4b:78:e6:18:29:91:84:38:b1:c4:d6:4f: 57:e1:86:b7:20:9b:da:f5:56:82:3d:a6:09:46:ce:69:dd:2f: c1:9a:2a:39:2e:f5:6a:fb:b5:69:cc:ef:a3:cc:14:d0:ca:ed: 4a:f8:4a:50:67:39:e4:f9:d5:a6:05:94:18:a8:8c:69:1c:39: 4a:cc:f4:68:07:b9:75:cd:d4:7b:16:b9:ba:75:61:df:bc:28: c8:48:6b:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsCkdtTbm1Aj8kOZyh7PzBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA5MTAwNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmE5OGU3MGU5YzZlM2JmNDA2NTA4ZWQ2YTU5ZDBjZWJiM2U0YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0KkrxTEhpYi90dyOEDM/OJycUHv mBNWjspU5wivRZxenmAfnGD2BAi6hGswK4uwNjahVcEJh7/qtzgs3qcAav/gPNq4 xTjcges5vUy1FzjE88Y0jMFT3TliFtpttSLRH2iCt8yTl2A8+J35jRVSJDb93VX+ rDZAGV1zvrhEFAdGs74zZkBt/D0USnZzgRTeoXTvDlqjlYocSdjgFhTwtT6bDJ+y 9yZUPXJOwqWDQi14bDdrepccBdSNQ/0YSPj/LkcpEassnis2uF4XZuOMCwyk3Qd4 EltgXl0xbUSXfJgMLtggFQFZzogbOE/SA3jF3bjNlGtwNFg2aLjNpHmXhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJKpjnDpxuO/QGUI7WpZ0M67PkoxMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEva3FtT2NPbkc0NzlBWlFqdGFsblF6cnMtU2pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpiOAwQA 2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQAHm0lYx8s03tKER7357Pqx8VmkRkWm70WQ aBcoMLBtVqVE69w/Sy1MZTWZ2GX8lnwCoyAL6PYkZKWwJBx/a259k/a6TpzSCs5n zGKV22sm794B2r3R1MwzXcpuU+ZuFpESuBgBGmoiwQPBUSraiMNMZFzg+gzrGIOf dKEsUVEjl/Jvkm08qok4cqOWqcQuc8rRYi3NMRmr3UmM1ggIv1h6nTrJ8HkVG4pL eOYYKZGEOLHE1k9X4Ya3IJva9VaCPaYJRs5p3S/Bmio5LvVq+7VpzO+jzBTQyu1K +EpQZznk+dWmBZQYqIxpHDlKzPRoB7l1zdR7Frm6dWHfvCjISGvQ -----END CERTIFICATE-----Generated at Wed Dec 17 17:07:45 2025 by rpki-client