This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/kzYheyB05Pvpsc4ix4Izryfmbz0.roa File: kzYheyB05Pvpsc4ix4Izryfmbz0.roa (raw, json) Hash identifier: A3y4lNt6nN7xPVe27KF9Y5oCZLSjeXLrJOtKSedFf+U= Subject key identifier: 93:36:21:7B:20:74:E4:FB:E9:B1:CE:22:C7:82:33:AF:27:E6:6F:3D Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e Certificate serial: 019B024D28DCF80476FC695D74B84B9BFC74 Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/kzYheyB05Pvpsc4ix4Izryfmbz0.roa Signing time: Tue 09 Dec 2025 08:49:29 +0000 ROA not before: Tue 09 Dec 2025 08:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55154 IP address blocks: 91.239.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:4d:28:dc:f8:04:76:fc:69:5d:74:b8:4b:9b:fc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e Validity Not Before: Dec 9 08:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9336217b2074e4fbe9b1ce22c78233af27e66f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:45:18:a2:31:de:fa:c8:e5:c7:68:11:f7: e9:21:e0:23:4e:3f:6b:32:a9:e0:ba:33:22:d8:6f: bf:55:8d:42:55:09:4b:15:cc:12:66:aa:d0:ff:d9: 97:da:c0:69:21:a2:a4:cf:05:1f:aa:67:42:72:0c: 35:58:49:6b:73:0b:f9:91:75:09:d2:e8:1f:e6:1e: ee:19:85:a9:3b:11:83:95:78:71:30:ef:16:a8:ca: 27:9c:ce:d6:4f:1d:44:ee:8a:1d:53:29:e9:dd:84: 73:f2:04:32:f7:7f:61:e8:b2:e0:cd:cc:88:df:31: f4:34:d4:9e:1f:30:9a:d7:c6:4c:32:cc:2e:c7:18: 66:dd:e6:1f:ec:a0:70:80:ed:e4:80:58:df:aa:a7: bd:0a:08:75:80:a7:76:86:93:94:64:b7:a0:27:7e: 2d:73:c3:82:8b:6e:e9:12:79:f8:71:ec:e1:6a:cd: fb:8b:44:3c:60:68:47:a9:91:6d:05:e6:c9:4f:bb: 27:71:65:64:7b:0c:fe:9e:fb:4c:91:58:cb:eb:08: 97:c2:b5:e4:aa:20:da:b7:94:b9:31:9d:c8:a7:68: ae:e5:b0:82:d1:b0:1e:6c:24:2a:4c:b4:6e:06:a9: cc:78:88:59:b4:03:fe:17:f4:40:35:b7:4e:8e:6d: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:36:21:7B:20:74:E4:FB:E9:B1:CE:22:C7:82:33:AF:27:E6:6F:3D X509v3 Authority Key Identifier: keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/kzYheyB05Pvpsc4ix4Izryfmbz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.192.0/24 Signature Algorithm: sha256WithRSAEncryption 92:44:1e:2c:46:7b:d4:70:0b:46:03:14:bc:1f:2f:78:35:b3: f6:8e:c5:a6:40:3c:5f:2f:ee:90:f4:07:3b:2e:fb:be:99:b5: a4:b1:84:92:9f:b1:bd:c0:b0:2b:90:f9:e5:6d:ad:ab:fb:cc: dc:81:fe:00:b2:89:57:37:63:4e:68:19:54:96:d6:e2:aa:6e: 51:d9:f3:f3:69:2f:17:21:9c:f6:85:e0:d9:5d:e9:fc:2e:df: b5:a0:e1:61:60:6f:79:f3:77:56:89:15:f7:95:cb:1a:83:04: b7:0f:33:0a:a7:2c:f0:9f:bf:55:2f:30:b5:62:a5:a2:52:10: 86:2d:b6:b8:9d:04:ca:ad:a0:3d:47:57:15:36:73:6f:9f:c1: 98:22:04:a8:30:f2:8e:a6:bb:0b:2e:b9:13:f9:95:45:b8:a0: 88:b1:fa:d9:31:f0:7e:2f:e2:8c:e0:d6:f3:84:50:af:83:15: 8c:d0:53:7d:df:89:65:da:99:87:66:6e:00:f8:6a:94:9a:6e: 5f:65:a6:8b:16:4e:96:85:a1:87:9b:75:5f:e5:b1:07:db:e5: de:20:6a:71:33:07:04:d0:d4:bb:a6:2d:03:4d:19:fa:ee:4c: 92:68:48:cb:bb:3f:7a:a7:d7:e1:fa:a7:a5:3d:8d:70:f1:df: c0:80:f8:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCTSjc+AR2/GlddLhLm/x0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk YTI1NmUwHhcNMjUxMjA5MDg0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzM2MjE3YjIwNzRlNGZiZTliMWNlMjJjNzgyMzNhZjI3ZTY2ZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxFGKIx3vrI5cdoEffpIeAjTj9r MqngujMi2G+/VY1CVQlLFcwSZqrQ/9mX2sBpIaKkzwUfqmdCcgw1WElrcwv5kXUJ 0ugf5h7uGYWpOxGDlXhxMO8WqMonnM7WTx1E7oodUynp3YRz8gQy939h6LLgzcyI 3zH0NNSeHzCa18ZMMswuxxhm3eYf7KBwgO3kgFjfqqe9Cgh1gKd2hpOUZLegJ34t c8OCi27pEnn4cezhas37i0Q8YGhHqZFtBebJT7sncWVkewz+nvtMkVjL6wiXwrXk qiDat5S5MZ3Ip2iu5bCC0bAebCQqTLRuBqnMeIhZtAP+F/RANbdOjm0ftQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJM2IXsgdOT76bHOIseCM68n5m89MB8GA1UdIwQY MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt ODUxZDljMDQ0ZTcwLzEva3pZaGV5QjA1UHZwc2M0aXg0SXpyeWZtYnowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/AMA0G CSqGSIb3DQEBCwUAA4IBAQCSRB4sRnvUcAtGAxS8Hy94NbP2jsWmQDxfL+6Q9Ac7 Lvu+mbWksYSSn7G9wLArkPnlba2r+8zcgf4AsolXN2NOaBlUltbiqm5R2fPzaS8X IZz2heDZXen8Lt+1oOFhYG9583dWiRX3lcsagwS3DzMKpyzwn79VLzC1YqWiUhCG Lba4nQTKraA9R1cVNnNvn8GYIgSoMPKOprsLLrkT+ZVFuKCIsfrZMfB+L+KM4Nbz hFCvgxWM0FN934ll2pmHZm4A+GqUmm5fZaaLFk6WhaGHm3Vf5bEH2+XeIGpxMwcE 0NS7pi0DTRn67kySaEjLuz96p9fh+qelPY1w8d/AgPiY -----END CERTIFICATE-----Generated at Sun Dec 14 18:52:17 2025 by rpki-client