This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ksLcGKV5sMLU2KPB50R-fjzhUGk.roa File: ksLcGKV5sMLU2KPB50R-fjzhUGk.roa (raw, json) Hash identifier: +vfDcxfz6f0BGTFfQ/MI9W/FDb0sJ/mH5+hlrqvwdck= Subject key identifier: 92:C2:DC:18:A5:79:B0:C2:D4:D8:A3:C1:E7:44:7E:7E:3C:E1:50:69 Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019ABF45358BE764AB8ADD91512E5012DEB0 Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ksLcGKV5sMLU2KPB50R-fjzhUGk.roa Signing time: Wed 26 Nov 2025 08:26:15 +0000 ROA not before: Wed 26 Nov 2025 08:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211261 IP address blocks: 5.252.92.0/24 maxlen: 24 5.253.156.0/24 maxlen: 24 5.253.157.0/24 maxlen: 24 5.253.158.0/24 maxlen: 24 5.253.159.0/24 maxlen: 24 62.122.230.0/24 maxlen: 24 91.210.126.0/24 maxlen: 24 185.146.67.0/24 maxlen: 24 185.210.192.0/24 maxlen: 24 185.210.193.0/24 maxlen: 24 185.210.195.0/24 maxlen: 24 185.218.160.0/24 maxlen: 24 185.218.161.0/24 maxlen: 24 185.218.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:45:35:8b:e7:64:ab:8a:dd:91:51:2e:50:12:de:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Nov 26 08:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92c2dc18a579b0c2d4d8a3c1e7447e7e3ce15069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:e5:e7:11:b9:e3:8c:32:fa:2f:8d:96:7c: 58:04:67:df:e5:10:a0:82:22:a4:e0:88:3c:f5:4b: 55:5a:c1:63:55:7b:54:f5:9a:29:cf:72:d6:ca:cf: 46:75:83:a8:13:0f:38:17:32:f5:93:ff:17:4a:c2: 8a:8b:91:45:a4:9e:a8:a2:75:70:f4:79:b4:02:af: 14:70:8e:ec:d1:37:f8:42:00:34:d5:ae:ca:e7:c6: b3:0d:c0:fb:3e:46:66:38:d0:18:b4:81:0f:52:d8: 46:b6:6d:e2:fb:1c:01:39:61:88:79:bf:d1:22:7a: 6c:9b:de:26:e3:59:03:3e:ca:b3:14:94:83:70:8d: df:70:59:6c:c5:4e:5d:cb:19:98:30:0f:c5:15:87: 99:41:a8:6c:9f:a4:4c:11:3a:de:75:89:43:95:8a: 5e:34:54:23:01:c5:96:b3:40:56:2e:93:fd:bc:6b: 33:35:a6:ee:4d:eb:0b:81:de:af:ab:56:e1:f9:35: d0:45:79:ce:3f:b9:be:21:19:87:12:8f:4c:89:17: ca:68:fe:57:f8:76:52:c1:de:8f:ff:0c:a3:4b:a6: 84:a3:ac:9a:ce:d5:17:b4:8e:cf:b2:84:6c:ab:a4: 8b:e8:33:dd:e4:f2:8c:6b:e5:71:b8:8d:c0:f9:c8: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C2:DC:18:A5:79:B0:C2:D4:D8:A3:C1:E7:44:7E:7E:3C:E1:50:69 X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ksLcGKV5sMLU2KPB50R-fjzhUGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.92.0/24 5.253.156.0/22 62.122.230.0/24 91.210.126.0/24 185.146.67.0/24 185.210.192.0/23 185.210.195.0/24 185.218.160.0-185.218.162.255 Signature Algorithm: sha256WithRSAEncryption 95:36:00:c6:1c:fc:1e:05:c4:de:7a:be:04:1b:67:93:3e:a9: f9:3f:dd:42:fb:a3:60:5c:a5:35:ce:7c:92:d5:eb:4b:70:57: 17:04:a7:75:e7:a7:ac:82:23:88:d7:30:2b:f5:2c:10:b5:6e: e5:57:28:6d:ff:6a:e1:0b:bc:90:42:34:51:11:d2:3d:42:b0: d6:a0:bb:60:5d:a2:ac:88:b3:ad:7f:9d:82:c7:02:3e:51:e4: 3b:56:78:91:42:1e:2b:4d:1a:54:ab:2d:06:b1:4d:f0:00:6d: 7e:ef:43:c5:b9:c1:0f:d5:53:f0:31:75:ba:8d:3c:b5:d3:3d: ab:8a:82:1e:e6:17:3f:83:ab:d4:d2:8d:7d:08:03:ab:05:3e: ba:93:8d:e9:8b:58:e9:cb:70:ca:6a:b0:74:ba:a5:e4:29:6a: 5b:ea:02:b2:17:84:23:72:c8:89:9d:60:e0:c9:2e:45:fd:03: 26:70:7a:c9:25:da:52:e4:54:66:ef:33:90:12:10:95:9a:24: 4b:97:63:22:49:19:4e:d3:e8:b1:7a:f4:d8:37:d0:ce:3b:6c: 6c:b7:a3:79:51:99:be:76:d0:68:9c:a9:c7:46:0c:cb:68:8b: 1a:14:d4:e5:a8:8b:41:be:12:2f:fb:0e:d7:86:a1:2e:e0:37: 32:0c:7c:b9 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZq/RTWL52Srit2RUS5QEt6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjUxMTI2MDgyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmMyZGMxOGE1NzliMGMyZDRkOGEzYzFlNzQ0N2U3ZTNjZTE1MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DTl5xG544wy+i+NlnxYBGff5RCg giKk4Ig89UtVWsFjVXtU9Zopz3LWys9GdYOoEw84FzL1k/8XSsKKi5FFpJ6oonVw 9Hm0Aq8UcI7s0Tf4QgA01a7K58azDcD7PkZmONAYtIEPUthGtm3i+xwBOWGIeb/R Inpsm94m41kDPsqzFJSDcI3fcFlsxU5dyxmYMA/FFYeZQahsn6RMETredYlDlYpe NFQjAcWWs0BWLpP9vGszNabuTesLgd6vq1bh+TXQRXnOP7m+IRmHEo9MiRfKaP5X +HZSwd6P/wyjS6aEo6yaztUXtI7PsoRsq6SL6DPd5PKMa+VxuI3A+cgS4QIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFJLC3BilebDC1NijwedEfn484VBpMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEva3NMY0dLVjVzTUxVMktQQjUwUi1manpoVUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQABfxcAwQC Bf2cAwQAPnrmAwQAW9J+AwQAuZJDAwQBudLAAwQAudLDMAwDBAW52qADBAC52qIw DQYJKoZIhvcNAQELBQADggEBAJU2AMYc/B4FxN56vgQbZ5M+qfk/3UL7o2BcpTXO fJLV60twVxcEp3Xnp6yCI4jXMCv1LBC1buVXKG3/auELvJBCNFER0j1CsNagu2Bd oqyIs61/nYLHAj5R5DtWeJFCHitNGlSrLQaxTfAAbX7vQ8W5wQ/VU/AxdbqNPLXT PauKgh7mFz+Dq9TSjX0IA6sFPrqTjemLWOnLcMpqsHS6peQpalvqArIXhCNyyImd YODJLkX9AyZweskl2lLkVGbvM5ASEJWaJEuXYyJJGU7T6LF69Ng30M47bGy3o3lR mb520GicqcdGDMtoixoU1OWoi0G+Ei/7DteGoS7gNzIMfLk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:01 2025 by rpki-client