This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/KQKnhvNwWTU2NwWKmxos8lsTq2w.roa File: KQKnhvNwWTU2NwWKmxos8lsTq2w.roa (raw, json) Hash identifier: Ob2XqyhjsR1rJOoaGwq+W5YGqKxtaeb2w0HEJGVT8k0= Subject key identifier: 29:02:A7:86:F3:70:59:35:36:37:05:8A:9B:1A:2C:F2:5B:13:AB:6C Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019ADF088293D8B1F9288331DB144491FFB3 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/KQKnhvNwWTU2NwWKmxos8lsTq2w.roa Signing time: Tue 02 Dec 2025 12:27:48 +0000 ROA not before: Tue 02 Dec 2025 12:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9318 IP address blocks: 89.149.25.0/24 maxlen: 24 89.149.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:08:82:93:d8:b1:f9:28:83:31:db:14:44:91:ff:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Dec 2 12:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2902a786f37059353637058a9b1a2cf25b13ab6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:75:a5:55:8a:40:ad:8e:98:61:04:cf:1f: ab:86:e8:d7:38:c9:42:5f:81:64:06:18:55:92:f5: 71:69:70:81:a1:1d:7b:76:b5:79:35:b2:a4:9c:eb: 8e:84:23:d9:09:97:fa:ae:47:7c:dd:db:6c:e5:da: f4:6b:16:2f:8f:83:17:0f:c4:c7:dc:89:3c:d5:53: 75:28:0b:b6:a2:49:16:a1:2a:ed:c2:2a:32:13:1d: dd:5e:5b:67:bc:fc:4f:9d:19:42:1d:d4:86:cb:b7: 08:5b:0a:8a:b0:ef:0f:28:36:b2:7b:7e:32:e8:e0: c1:bc:81:ce:01:80:7e:13:34:a2:09:5b:97:4f:02: 16:87:00:6c:61:5b:9c:7b:fa:85:77:f8:b8:32:56: d6:69:ae:7c:47:03:1d:9b:8c:48:a6:14:74:32:4a: 7e:19:05:0b:53:61:e0:0e:6e:f3:1b:be:3f:e2:db: 60:0a:1e:b1:b3:ab:5d:ce:dd:de:d2:f4:5e:a8:65: 39:67:7f:1f:2b:6f:a6:7c:ed:dc:f7:92:ed:09:e9: 62:77:f2:e1:17:bf:25:7b:69:f5:d8:e8:93:52:9b: 90:37:d0:af:94:32:16:90:50:28:56:f0:0d:91:d9: b6:16:9e:ec:2c:06:89:0a:78:7a:f1:e5:a6:1d:e9: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:A7:86:F3:70:59:35:36:37:05:8A:9B:1A:2C:F2:5B:13:AB:6C X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/KQKnhvNwWTU2NwWKmxos8lsTq2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.149.25.0/24 89.149.38.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:2e:5f:16:a8:1a:0d:f9:f9:2b:78:51:5d:6b:10:bd:02:e3: b8:f3:49:ce:9a:5b:98:cc:a5:8b:9d:34:a1:9c:fc:81:31:91: a5:94:a9:66:bb:c6:a3:2c:cc:22:74:8e:e2:27:a1:34:dc:3d: 9f:a4:0a:61:61:f1:83:03:59:62:2f:3a:dd:e9:1d:85:21:f5: 67:b0:20:86:3c:91:53:93:cc:b5:83:d9:1f:93:9b:b3:74:4a: ad:7b:e6:14:8e:ca:79:85:df:b3:3d:64:a3:bb:4b:f9:e1:17: 87:0b:a5:82:f3:3f:e5:fd:d8:55:1c:ef:99:c5:d8:93:72:cb: 99:dd:e6:00:05:f0:03:0a:35:60:b3:3a:0a:bc:79:81:e8:01: 59:3d:01:fa:32:51:d2:db:54:78:32:3e:e1:8b:3d:1b:3f:d0: de:46:08:56:08:98:55:dd:bc:61:c6:cd:f6:0a:9d:5e:1d:34: f0:e0:a1:4c:09:cd:52:f6:df:87:51:69:a5:0e:9b:2b:38:a8: dc:ba:a6:3d:3c:b3:0f:5f:1f:9c:7c:bd:92:e3:5f:ac:5d:af: 4f:1f:ea:ea:64:14:32:0c:ba:91:b2:cf:df:14:80:9b:bb:26: 08:81:82:0b:c0:b8:3d:df:e9:54:b8:39:4c:a1:4a:5d:d6:8e: 75:4a:cd:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrfCIKT2LH5KIMx2xREkf+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjUxMjAyMTIyNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTAyYTc4NmYzNzA1OTM1MzYzNzA1OGE5YjFhMmNmMjViMTNhYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn11pVWKQK2OmGEEzx+rhujXOMlC X4FkBhhVkvVxaXCBoR17drV5NbKknOuOhCPZCZf6rkd83dts5dr0axYvj4MXD8TH 3Ik81VN1KAu2okkWoSrtwioyEx3dXltnvPxPnRlCHdSGy7cIWwqKsO8PKDaye34y 6ODBvIHOAYB+EzSiCVuXTwIWhwBsYVuce/qFd/i4MlbWaa58RwMdm4xIphR0Mkp+ GQULU2HgDm7zG74/4ttgCh6xs6tdzt3e0vReqGU5Z38fK2+mfO3c95LtCelid/Lh F78le2n12OiTUpuQN9CvlDIWkFAoVvANkdm2Fp7sLAaJCnh68eWmHel/eQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCkCp4bzcFk1NjcFipsaLPJbE6tsMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvS1FLbmh2TndXVFUyTndXS214b3M4bHNUcTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZUZAwQA WZUmMA0GCSqGSIb3DQEBCwUAA4IBAQCMLl8WqBoN+fkreFFdaxC9AuO480nOmluY zKWLnTShnPyBMZGllKlmu8ajLMwidI7iJ6E03D2fpAphYfGDA1liLzrd6R2FIfVn sCCGPJFTk8y1g9kfk5uzdEqte+YUjsp5hd+zPWSju0v54ReHC6WC8z/l/dhVHO+Z xdiTcsuZ3eYABfADCjVgszoKvHmB6AFZPQH6MlHS21R4Mj7hiz0bP9DeRghWCJhV 3bxhxs32Cp1eHTTw4KFMCc1S9t+HUWmlDpsrOKjcuqY9PLMPXx+cfL2S41+sXa9P H+rqZBQyDLqRss/fFICbuyYIgYILwLg93+lUuDlMoUpd1o51Ss0H -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:54 2025 by rpki-client