This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/KXhscJeiwqGZXfkJOvpNJfdqnng.roa File: KXhscJeiwqGZXfkJOvpNJfdqnng.roa (raw, json) Hash identifier: axh0EsBtQr4awIifM0ScAFDPiZ9eRCRe0IKrB3mfI3I= Subject key identifier: 29:78:6C:70:97:A2:C2:A1:99:5D:F9:09:3A:FA:4D:25:F7:6A:9E:78 Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B2206CCAB6FEC33C35D46E4D42D2930D8 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/KXhscJeiwqGZXfkJOvpNJfdqnng.roa Signing time: Mon 15 Dec 2025 12:40:29 +0000 ROA not before: Mon 15 Dec 2025 12:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 217.147.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:06:cc:ab:6f:ec:33:c3:5d:46:e4:d4:2d:29:30:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Dec 15 12:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=29786c7097a2c2a1995df9093afa4d25f76a9e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fd:e5:37:db:21:80:59:94:59:6b:81:c7:0b: 5b:33:b4:a9:69:71:45:c1:52:c8:30:00:bb:fb:1e: a5:e7:c8:58:85:95:97:c9:b0:63:8f:88:18:23:00: 1f:d2:9f:23:7c:92:84:3c:ca:50:14:61:3c:a6:b9: b0:3c:f0:d4:bb:ac:4a:1d:1e:24:e3:86:f2:f9:aa: cf:38:e2:20:f6:77:d4:5c:58:1c:88:99:3a:ff:fc: 19:8c:af:27:27:f8:ed:d0:fe:80:75:00:60:97:ef: 95:40:e0:e3:c8:11:0d:bd:40:d2:03:4b:7e:d3:1e: 60:84:af:39:9b:8e:38:e3:e5:d1:ae:65:14:b0:79: 7e:f9:96:6a:28:64:39:76:e5:10:d6:a5:23:82:ea: 04:dd:5b:30:5d:b4:d5:b2:b0:41:4a:b2:00:16:f7: 1e:c6:59:14:ef:ea:e9:14:c9:50:8c:3a:6f:98:5a: f7:b0:49:b4:55:ad:9c:23:96:18:e7:04:c4:bf:9d: 7a:6a:79:f6:2d:07:4c:66:38:60:c7:95:57:60:38: 92:0c:f6:ce:d1:f3:11:bc:24:98:0f:70:2b:e6:b0: cc:ab:e7:a0:e4:3f:d9:cf:20:f4:c7:c9:cf:3d:fa: 98:32:44:fc:3e:4d:77:51:e5:b3:13:d7:52:70:50: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:6C:70:97:A2:C2:A1:99:5D:F9:09:3A:FA:4D:25:F7:6A:9E:78 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/KXhscJeiwqGZXfkJOvpNJfdqnng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.168.0/24 Signature Algorithm: sha256WithRSAEncryption 31:a3:a3:68:4c:7f:07:c2:8f:d4:ad:07:8e:63:a7:98:c1:47: 9d:42:ba:84:9b:c1:bd:33:4f:bf:bc:d2:93:11:e0:33:be:28: 2f:58:6b:36:e8:60:e6:b3:72:25:51:7b:5f:e5:8b:e7:32:7f: 3d:f1:f5:9b:79:87:8d:55:8f:1d:2e:fc:b6:01:0e:e1:2d:99: 7f:a1:6e:35:9b:6e:1f:06:d9:13:0d:8e:93:fb:92:56:65:20: d2:2c:e9:73:95:f8:b9:5a:df:af:f8:67:87:9d:8b:95:44:91: 0a:0b:54:5b:f2:b6:28:d6:4f:d2:01:35:17:f9:14:ee:39:61: cb:a9:49:ea:bd:f2:39:91:29:85:6e:b1:1d:a0:d1:fd:75:47: 9a:9d:47:bf:ac:d2:4a:62:46:8a:74:f6:d7:7b:3d:d6:7d:5e: bd:58:2a:7a:79:69:b9:e1:19:bf:77:b3:b2:2a:22:42:c0:96: 7a:76:b3:01:72:df:1b:c1:0d:c6:86:a9:5d:33:95:2b:06:d5: 79:3b:3d:1d:be:0b:06:ef:b9:9d:62:a0:ee:fc:0b:15:e7:74: 88:96:b3:25:02:a7:8b:93:42:f7:eb:7e:3a:a4:93:5c:30:96: 28:d3:f5:96:96:07:7d:f3:6a:de:8d:83:69:9b:ac:95:a4:09: 8e:f3:01:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsiBsyrb+wzw11G5NQtKTDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMjE1MTI0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTc4NmM3MDk3YTJjMmExOTk1ZGY5MDkzYWZhNGQyNWY3NmE5ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P3lN9shgFmUWWuBxwtbM7SpaXFF wVLIMAC7+x6l58hYhZWXybBjj4gYIwAf0p8jfJKEPMpQFGE8prmwPPDUu6xKHR4k 44by+arPOOIg9nfUXFgciJk6//wZjK8nJ/jt0P6AdQBgl++VQODjyBENvUDSA0t+ 0x5ghK85m4444+XRrmUUsHl++ZZqKGQ5duUQ1qUjguoE3VswXbTVsrBBSrIAFvce xlkU7+rpFMlQjDpvmFr3sEm0Va2cI5YY5wTEv516ann2LQdMZjhgx5VXYDiSDPbO 0fMRvCSYD3Ar5rDMq+eg5D/ZzyD0x8nPPfqYMkT8Pk13UeWzE9dScFAwCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCl4bHCXosKhmV35CTr6TSX3ap54MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvS1hoc2NKZWl3cUdaWGZrSk92cE5KZmRxbm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOoMA0G CSqGSIb3DQEBCwUAA4IBAQAxo6NoTH8Hwo/UrQeOY6eYwUedQrqEm8G9M0+/vNKT EeAzvigvWGs26GDms3IlUXtf5YvnMn898fWbeYeNVY8dLvy2AQ7hLZl/oW41m24f BtkTDY6T+5JWZSDSLOlzlfi5Wt+v+GeHnYuVRJEKC1Rb8rYo1k/SATUX+RTuOWHL qUnqvfI5kSmFbrEdoNH9dUeanUe/rNJKYkaKdPbXez3WfV69WCp6eWm54Rm/d7Oy KiJCwJZ6drMBct8bwQ3GhqldM5UrBtV5Oz0dvgsG77mdYqDu/AsV53SIlrMlAqeL k0L36346pJNcMJYo0/WWlgd982rejYNpm6yVpAmO8wFO -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:38 2025 by rpki-client