This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/KNMlxyQeEdYRctkDIdejdg3zlpc.roa File: KNMlxyQeEdYRctkDIdejdg3zlpc.roa (raw, json) Hash identifier: caaA1CtisGeAWANFsuqIVTEldAW/K3YD22fTjAPbVs4= Subject key identifier: 28:D3:25:C7:24:1E:11:D6:11:72:D9:03:21:D7:A3:76:0D:F3:96:97 Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Certificate serial: 019AA4D94B765BFE94E7308C93C88EC6B730 Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/KNMlxyQeEdYRctkDIdejdg3zlpc.roa Signing time: Fri 21 Nov 2025 05:18:15 +0000 ROA not before: Fri 21 Nov 2025 05:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42277 IP address blocks: 5.249.192.0/19 maxlen: 19 37.188.0.0/18 maxlen: 19 46.62.0.0/17 maxlen: 17 77.241.16.0/21 maxlen: 21 77.241.20.0/22 maxlen: 22 94.247.248.0/22 maxlen: 24 94.247.248.0/24 maxlen: 24 94.247.252.0/22 maxlen: 22 176.241.192.0/19 maxlen: 19 178.249.240.0/21 maxlen: 21 2a02:51c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a4:d9:4b:76:5b:fe:94:e7:30:8c:93:c8:8e:c6:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Validity Not Before: Nov 21 05:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28d325c7241e11d61172d90321d7a3760df39697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:72:05:6a:07:bd:3d:2f:83:97:0b:f2:f9: 49:b4:76:64:f0:bd:8e:56:1f:d3:a8:e4:8a:79:10: fd:23:cb:f4:c4:a5:85:08:b1:18:51:65:f1:b7:a9: b5:ed:85:8b:dd:04:5e:da:a6:f2:d6:27:92:b0:cd: 8f:ca:49:71:09:fa:45:88:e1:22:e2:98:15:fb:4c: 5f:47:76:58:91:a7:df:b5:f8:22:7e:88:0e:4f:1d: 86:72:77:b8:e2:e6:2a:2f:bd:c2:06:04:13:27:4a: 7b:f4:b3:8b:60:27:b5:56:e7:49:8e:f6:79:4a:a9: bf:42:7f:ee:89:b2:48:01:d6:32:ef:a1:5f:f1:77: bc:ff:d7:28:b5:b8:65:95:f0:b2:1e:f4:55:d1:c4: 0f:52:5d:82:ae:6f:77:ae:09:e8:7b:ce:b4:46:8f: 8b:51:11:4f:18:a7:6e:fa:0e:24:91:8d:14:81:99: 5c:0b:0f:70:c0:7e:52:f7:cc:d0:68:94:08:12:c1: 93:55:f4:b6:ad:77:17:7c:20:18:4a:e6:6e:d6:5e: 43:69:e7:e4:63:98:d2:89:f2:33:f4:78:67:e5:24: ca:43:9b:3c:f8:6e:66:b5:0e:f2:57:21:17:0b:58: 4c:85:51:38:3f:c3:b3:6c:75:77:23:9b:29:3a:86: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:25:C7:24:1E:11:D6:11:72:D9:03:21:D7:A3:76:0D:F3:96:97 X509v3 Authority Key Identifier: keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/KNMlxyQeEdYRctkDIdejdg3zlpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.192.0/19 37.188.0.0/18 46.62.0.0/17 77.241.16.0/21 94.247.248.0/21 176.241.192.0/19 178.249.240.0/21 IPv6: 2a02:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 57:7b:e7:03:65:e4:31:39:38:06:bd:1c:78:7c:33:e8:05:67: 20:7e:2c:37:44:5e:57:6e:19:8a:87:62:88:b4:7a:0a:f4:d9: 59:90:8d:18:57:75:d5:d0:f8:6c:e5:4e:77:1e:b4:c7:f9:30: cd:bb:26:1a:a9:81:c4:ff:8e:a5:8b:e6:3c:b1:2b:66:b5:b9: 7d:03:c7:13:a3:8e:d6:11:26:cb:cb:29:16:6e:64:87:1f:c1: cc:0b:f7:4b:1e:6a:04:9d:aa:45:24:6b:a2:86:de:a1:0d:f6: ef:b6:d1:ac:9b:f0:56:38:b0:76:92:8c:fd:81:38:a5:a5:23: 1c:a8:91:d3:f7:cf:3d:f4:c1:d7:46:0e:69:4e:ca:88:8f:b7: 9e:3e:99:ce:ef:c8:3e:49:d9:e0:0c:e1:6b:ef:92:03:69:b6: 57:40:ac:37:61:ea:ee:c9:15:e6:6c:ec:3f:c9:84:24:f4:6e: 3b:20:57:cb:df:89:55:3b:97:eb:dd:40:d6:d0:c2:d9:6c:c4: 76:37:4e:8b:8a:99:e6:7a:f5:f3:51:1a:f0:ad:0e:36:62:5f: 43:97:63:f2:c4:37:7d:71:ae:af:25:54:35:7b:11:4b:c2:27: e3:fd:d7:2b:d8:fb:32:ec:b2:e8:50:ab:d7:c9:9b:65:bf:e5: 20:3e:75:03 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZqk2Ut2W/6U5zCMk8iOxrcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2FiNjhmYmIwYzk3OTQ3NjU5NGJkZmM1NmMxOTIwNDJi OGRlZGYwHhcNMjUxMTIxMDUxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGQzMjVjNzI0MWUxMWQ2MTE3MmQ5MDMyMWQ3YTM3NjBkZjM5Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcJyBWoHvT0vg5cL8vlJtHZk8L2O Vh/TqOSKeRD9I8v0xKWFCLEYUWXxt6m17YWL3QRe2qby1ieSsM2PyklxCfpFiOEi 4pgV+0xfR3ZYkafftfgifogOTx2Gcne44uYqL73CBgQTJ0p79LOLYCe1VudJjvZ5 Sqm/Qn/uibJIAdYy76Ff8Xe8/9cotbhllfCyHvRV0cQPUl2Crm93rgnoe860Ro+L URFPGKdu+g4kkY0UgZlcCw9wwH5S98zQaJQIEsGTVfS2rXcXfCAYSuZu1l5Daefk Y5jSifIz9Hhn5STKQ5s8+G5mtQ7yVyEXC1hMhVE4P8OzbHV3I5spOobB9wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFCjTJcckHhHWEXLZAyHXo3YN85aXMB8GA1UdIwQY MBaAFPPKto+7DJeUdllL38VsGSBCuN7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUt YWE0YTgxYTJlYjIzLzEvS05NbHh5UWVFZFlSY3RrRElkZWpkZzN6bHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUtYWE0YTgxYTJlYjIz LzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFBfnAAwQG JbwAAwQHLj4AAwQDTfEQAwQDXvf4AwQFsPHAAwQDsvnwMA0EAgACMAcDBQAqAlHA MA0GCSqGSIb3DQEBCwUAA4IBAQBXe+cDZeQxOTgGvRx4fDPoBWcgfiw3RF5XbhmK h2KItHoK9NlZkI0YV3XV0Phs5U53HrTH+TDNuyYaqYHE/46li+Y8sStmtbl9A8cT o47WESbLyykWbmSHH8HMC/dLHmoEnapFJGuiht6hDfbvttGsm/BWOLB2koz9gTil pSMcqJHT98899MHXRg5pTsqIj7eePpnO78g+SdngDOFr75IDabZXQKw3YeruyRXm bOw/yYQk9G47IFfL34lVO5fr3UDW0MLZbMR2N06LipnmevXzURrwrQ42Yl9Dl2Py xDd9ca6vJVQ1exFLwifj/dcr2Psy7LLoUKvXyZtlv+UgPnUD -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:49 2025 by rpki-client