This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/KJwvgElTVvzSDkiiLVbk2sY499A.roa File: KJwvgElTVvzSDkiiLVbk2sY499A.roa (raw, json) Hash identifier: kKy6TJRdTCOke9YuiLb9jXp15SOk9kOvN+LVFTH7qS0= Subject key identifier: 28:9C:2F:80:49:53:56:FC:D2:0E:48:A2:2D:56:E4:DA:C6:38:F7:D0 Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff Certificate serial: 019A9A1D38BD2CC6D846A2464DCE675F39CF Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/KJwvgElTVvzSDkiiLVbk2sY499A.roa Signing time: Wed 19 Nov 2025 03:16:37 +0000 ROA not before: Wed 19 Nov 2025 03:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7488 IP address blocks: 46.33.14.0/24 maxlen: 24 77.73.8.0/24 maxlen: 24 77.73.13.0/24 maxlen: 24 77.73.14.0/24 maxlen: 24 78.109.24.0/24 maxlen: 24 78.109.25.0/24 maxlen: 24 78.109.26.0/24 maxlen: 24 78.109.27.0/24 maxlen: 24 158.94.172.0/23 maxlen: 23 185.13.108.0/22 maxlen: 22 185.34.144.0/22 maxlen: 22 185.61.208.0/24 maxlen: 24 185.61.209.0/24 maxlen: 24 185.61.210.0/24 maxlen: 24 185.61.211.0/24 maxlen: 24 185.92.188.0/22 maxlen: 22 185.93.148.0/22 maxlen: 22 185.170.76.0/22 maxlen: 22 195.34.70.0/24 maxlen: 24 195.34.71.0/24 maxlen: 24 195.242.177.0/24 maxlen: 24 195.242.178.0/24 maxlen: 24 2a14:7a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:1d:38:bd:2c:c6:d8:46:a2:46:4d:ce:67:5f:39:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff Validity Not Before: Nov 19 03:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=289c2f80495356fcd20e48a22d56e4dac638f7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:6a:57:85:88:54:bd:48:e3:13:64:95:41: 4b:7b:b8:46:39:d3:74:4b:d3:01:13:c0:72:9b:63: 29:96:10:25:59:26:0f:ec:da:50:ec:8b:91:53:bb: 45:40:10:d6:10:76:ce:3e:d4:02:75:d5:7b:2b:6c: 5c:8d:d3:d4:79:f3:a4:a5:03:81:bc:9c:29:65:2f: 13:a6:a3:d8:1b:54:f9:5c:bc:90:de:e6:d6:85:2e: 5a:09:f1:e0:07:b7:95:dd:95:1c:b7:5a:ed:95:fa: 53:1e:6f:69:91:13:7d:d8:49:7a:98:4c:ad:fa:65: dd:39:99:0e:b3:8e:4d:9a:87:86:df:82:6d:f5:b3: 65:ff:b2:ab:b7:62:0c:28:c1:da:29:b4:d7:1f:35: 06:7e:cc:12:e3:6e:fb:da:d0:d4:b4:6e:f7:62:3e: ff:e1:40:dd:05:03:81:96:97:e2:f1:cf:fd:2e:92: 6f:bf:3d:40:66:93:66:7b:c6:bb:ed:08:dd:78:b0: 62:7a:f1:4a:68:bc:0a:6d:6b:72:dc:54:bc:bf:44: 21:12:3b:cf:1b:da:c6:4e:6d:a1:94:c9:83:97:db: f6:fd:0e:ed:8e:79:cc:db:1d:f1:b2:a9:68:cf:59: 46:a2:04:a3:a2:d8:28:f3:5d:86:aa:d5:ef:e1:56: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9C:2F:80:49:53:56:FC:D2:0E:48:A2:2D:56:E4:DA:C6:38:F7:D0 X509v3 Authority Key Identifier: keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/KJwvgElTVvzSDkiiLVbk2sY499A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.14.0/24 77.73.8.0/24 77.73.13.0-77.73.14.255 78.109.24.0/22 158.94.172.0/23 185.13.108.0/22 185.34.144.0/22 185.61.208.0/22 185.92.188.0/22 185.93.148.0/22 185.170.76.0/22 195.34.70.0/23 195.242.177.0-195.242.178.255 IPv6: 2a14:7a40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:b7:27:fb:d2:0b:b4:49:0d:35:5e:bd:40:90:11:fc:67:d1: 97:a0:e5:ab:29:cc:6e:f7:24:4e:a8:e4:ec:e7:b8:e4:7e:4f: 60:be:f0:20:02:36:c6:72:2e:72:c1:67:4c:9e:eb:9a:3f:de: 9e:ed:d1:48:02:bc:1c:38:96:4d:ff:6f:57:72:39:eb:89:7e: b1:6d:07:7e:e9:ec:6c:35:21:8e:5d:6c:db:7b:73:c1:aa:55: 67:ba:b0:9e:bc:17:28:5b:ab:03:69:74:3c:ed:94:cc:63:42: 57:2b:c8:73:f0:80:4f:40:3d:be:41:2b:90:25:ed:16:6f:da: 71:2a:d9:ec:01:f4:9f:d6:cb:07:70:05:3b:c7:3b:fb:42:c5: 6a:b8:83:ec:eb:0d:9b:2a:96:51:c9:a0:20:d0:fb:5b:a6:b8: 6d:22:17:60:7b:8d:13:de:38:f7:81:11:5c:e8:0b:9c:1e:71: 2d:56:e1:fd:bc:8b:7a:4f:94:80:b8:0c:5e:6c:8a:c0:2e:79: 04:a7:f2:4d:74:aa:93:7b:d6:70:37:89:50:7f:18:ab:b7:3d: e9:da:25:01:07:bf:8d:01:6d:9d:99:b4:18:78:08:24:8c:0c: 94:60:0c:6a:80:36:d9:c7:8a:88:8e:af:d5:b7:e8:0e:70:6b: fb:4d:6d:ac -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZqaHTi9LMbYRqJGTc5nXznPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh NGE4ZmYwHhcNMjUxMTE5MDMxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODljMmY4MDQ5NTM1NmZjZDIwZTQ4YTIyZDU2ZTRkYWM2MzhmN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRdqV4WIVL1I4xNklUFLe7hGOdN0 S9MBE8Bym2MplhAlWSYP7NpQ7IuRU7tFQBDWEHbOPtQCddV7K2xcjdPUefOkpQOB vJwpZS8TpqPYG1T5XLyQ3ubWhS5aCfHgB7eV3ZUct1rtlfpTHm9pkRN92El6mEyt +mXdOZkOs45NmoeG34Jt9bNl/7Krt2IMKMHaKbTXHzUGfswS42772tDUtG73Yj7/ 4UDdBQOBlpfi8c/9LpJvvz1AZpNme8a77QjdeLBievFKaLwKbWty3FS8v0QhEjvP G9rGTm2hlMmDl9v2/Q7tjnnM2x3xsqloz1lGogSjotgo812GqtXv4VZu/QIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFCicL4BJU1b80g5Ioi1W5NrGOPfQMB8GA1UdIwQY MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt NDdhYzM4OWQzMjYxLzEvS0p3dmdFbFRWdnpTRGtpaUxWYmsyc1k0OTlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwZAQCAAEwXgMEAC4hDgME AE1JCDAMAwQATUkNAwQATUkOAwQCTm0YAwQBnl6sAwQCuQ1sAwQCuSKQAwQCuT3Q AwQCuVy8AwQCuV2UAwQCuapMAwQBwyJGMAwDBADD8rEDBADD8rIwDQQCAAIwBwMF AyoUekAwDQYJKoZIhvcNAQELBQADggEBAE23J/vSC7RJDTVevUCQEfxn0Zeg5asp zG73JE6o5OznuOR+T2C+8CACNsZyLnLBZ0ye65o/3p7t0UgCvBw4lk3/b1dyOeuJ frFtB37p7Gw1IY5dbNt7c8GqVWe6sJ68FyhbqwNpdDztlMxjQlcryHPwgE9APb5B K5Al7RZv2nEq2ewB9J/WywdwBTvHO/tCxWq4g+zrDZsqllHJoCDQ+1umuG0iF2B7 jRPeOPeBEVzoC5wecS1W4f28i3pPlIC4DF5sisAueQSn8k10qpN71nA3iVB/GKu3 PenaJQEHv40BbZ2ZtBh4CCSMDJRgDGqANtnHioiOr9W36A5wa/tNbaw= -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:24 2025 by rpki-client