This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KXED9rrUnATm2HT5r87fJz4MRTE.roa File: KXED9rrUnATm2HT5r87fJz4MRTE.roa (raw, json) Hash identifier: WD7c26VJ25NRAqLKK6r6eY3ZZAou/6DJ9fCBqVQsQ1Q= Subject key identifier: 29:71:03:F6:BA:D4:9C:04:E6:D8:74:F9:AF:CE:DF:27:3E:0C:45:31 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AD063733FDA9C91909EB4E7BDD173C7E8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KXED9rrUnATm2HT5r87fJz4MRTE.roa Signing time: Sat 29 Nov 2025 16:12:49 +0000 ROA not before: Sat 29 Nov 2025 16:12:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40676 IP address blocks: 31.58.100.0/22 maxlen: 24 31.58.103.0/24 maxlen: 24 31.59.29.0/24 maxlen: 24 31.59.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:63:73:3f:da:9c:91:90:9e:b4:e7:bd:d1:73:c7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 29 16:12:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=297103f6bad49c04e6d874f9afcedf273e0c4531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:66:f3:7d:fb:c8:50:d4:04:47:9a:de:55: 09:d3:e1:94:25:14:c9:71:7d:0f:d3:7f:d0:d3:68: c3:99:b0:1f:80:66:e8:61:54:63:ee:3c:bd:7a:0b: a9:e5:38:57:de:c4:e8:dd:f2:46:f0:77:c4:82:10: 1c:3f:d4:89:49:e1:72:0a:e2:aa:18:f0:7b:dc:cd: 42:3a:1d:38:68:cb:ec:9b:5e:fa:0d:ed:a4:83:af: 2c:82:50:8d:31:c0:af:65:06:8d:b8:05:c0:1b:39: f7:17:08:c2:8b:69:50:27:ba:b2:ed:34:d5:85:6c: 7f:be:83:fe:02:1a:38:b4:e4:b2:bf:9e:36:cc:95: 91:51:f4:e9:0b:5f:a9:44:fc:c0:b8:2d:4f:4e:19: ad:09:f0:74:9e:2e:6e:16:f3:6b:10:a7:80:3d:56: 69:fe:4a:a5:c0:b9:93:5c:b5:cc:1e:42:be:22:ce: 18:ee:a9:ea:74:0a:78:3c:f5:63:13:86:c9:a3:37: 05:a3:7b:91:79:b1:32:1f:a4:5d:1c:74:f8:4a:55: e6:36:3a:a5:80:8d:1e:2d:ba:02:9e:52:96:32:03: 3b:88:45:e2:53:ea:83:8f:62:bd:dc:0f:fa:ae:a4: e9:75:59:a2:02:e4:12:c3:b3:06:58:4b:62:0d:ab: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:71:03:F6:BA:D4:9C:04:E6:D8:74:F9:AF:CE:DF:27:3E:0C:45:31 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KXED9rrUnATm2HT5r87fJz4MRTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.100.0/22 31.59.29.0/24 31.59.34.0/24 Signature Algorithm: sha256WithRSAEncryption 65:ec:cd:68:c3:f0:22:41:7e:5d:46:9d:c3:4d:15:36:84:93: 89:55:58:20:11:ec:98:25:4d:23:27:b9:ee:94:10:b4:2d:25: 94:31:e9:be:29:a1:7e:3b:54:53:b6:a4:77:e1:0b:95:13:3d: 73:5d:a6:d0:eb:93:ff:a9:73:fa:79:8a:2e:2d:61:2f:91:cf: 5f:44:bf:ae:21:db:02:cf:78:f9:c4:a2:42:57:ec:2b:9a:b4: 1a:1d:96:f0:ce:f6:13:64:2e:3b:ae:3b:7b:52:05:2f:f8:bb: d2:d6:bc:5b:36:d1:15:fa:d1:d6:fb:5b:d9:ac:31:8d:be:1a: 71:a8:ee:ce:9a:de:7d:a4:60:3e:23:4f:65:95:64:81:79:bf: 70:cf:dd:b4:53:87:98:e5:07:c6:f0:4e:93:6a:e7:71:5d:98: 57:fa:0e:25:b7:78:fc:95:f8:0a:0e:10:2b:4a:1c:59:5a:0e: ea:35:01:f4:36:86:32:f3:57:e2:3c:fd:e5:e0:00:a7:bd:73: 7f:44:a4:12:a1:de:93:f5:8d:65:8c:9b:4a:f9:59:dc:5c:30: c7:5d:35:bf:35:db:9e:bd:ab:f3:6b:a3:e1:f3:fb:96:20:45: 98:bf:30:73:1a:6f:0e:e2:da:d0:ab:76:40:fc:2a:32:c8:62: 57:05:8c:20 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrQY3M/2pyRkJ60573Rc8foMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI5MTYxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTcxMDNmNmJhZDQ5YzA0ZTZkODc0ZjlhZmNlZGYyNzNlMGM0NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIRm8337yFDUBEea3lUJ0+GUJRTJ cX0P03/Q02jDmbAfgGboYVRj7jy9egup5ThX3sTo3fJG8HfEghAcP9SJSeFyCuKq GPB73M1COh04aMvsm176De2kg68sglCNMcCvZQaNuAXAGzn3FwjCi2lQJ7qy7TTV hWx/voP+Aho4tOSyv542zJWRUfTpC1+pRPzAuC1PThmtCfB0ni5uFvNrEKeAPVZp /kqlwLmTXLXMHkK+Is4Y7qnqdAp4PPVjE4bJozcFo3uRebEyH6RdHHT4SlXmNjql gI0eLboCnlKWMgM7iEXiU+qDj2K93A/6rqTpdVmiAuQSw7MGWEtiDauW3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFClxA/a61JwE5th0+a/O3yc+DEUxMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS1hFRDlyclVuQVRtMkhUNXI4N2ZKejRNUlRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHzpkAwQA HzsdAwQAHzsiMA0GCSqGSIb3DQEBCwUAA4IBAQBl7M1ow/AiQX5dRp3DTRU2hJOJ VVggEeyYJU0jJ7nulBC0LSWUMem+KaF+O1RTtqR34QuVEz1zXabQ65P/qXP6eYou LWEvkc9fRL+uIdsCz3j5xKJCV+wrmrQaHZbwzvYTZC47rjt7UgUv+LvS1rxbNtEV +tHW+1vZrDGNvhpxqO7Omt59pGA+I09llWSBeb9wz920U4eY5QfG8E6TaudxXZhX +g4lt3j8lfgKDhArShxZWg7qNQH0NoYy81fiPP3l4ACnvXN/RKQSod6T9Y1ljJtK +VncXDDHXTW/Nduevavza6Ph8/uWIEWYvzBzGm8O4trQq3ZA/CoyyGJXBYwg -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:04 2025 by rpki-client