This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/KomOW-f7nkXyA6zp9usghp6DZAI.roa File: KomOW-f7nkXyA6zp9usghp6DZAI.roa (raw, json) Hash identifier: Rlm5FL44HCYTCzeeRWFpNgyaz/17csui71bsmAvCmko= Subject key identifier: 2A:89:8E:5B:E7:FB:9E:45:F2:03:AC:E9:F6:EB:20:86:9E:83:64:02 Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B17C5116DDB3C8EB17EC5470541FB46B5 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/KomOW-f7nkXyA6zp9usghp6DZAI.roa Signing time: Sat 13 Dec 2025 12:52:29 +0000 ROA not before: Sat 13 Dec 2025 12:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197706 IP address blocks: 31.171.152.0/24 maxlen: 24 31.171.153.0/24 maxlen: 24 31.171.154.0/24 maxlen: 24 31.171.155.0/24 maxlen: 24 45.142.25.0/24 maxlen: 24 45.142.26.0/24 maxlen: 24 45.142.27.0/24 maxlen: 24 103.93.42.0/24 maxlen: 24 103.124.165.0/24 maxlen: 24 103.124.167.0/24 maxlen: 24 109.104.138.0/24 maxlen: 24 109.104.139.0/24 maxlen: 24 109.104.140.0/22 maxlen: 22 109.104.140.0/24 maxlen: 24 109.104.141.0/24 maxlen: 24 109.104.142.0/24 maxlen: 24 109.104.143.0/24 maxlen: 24 109.104.156.0/24 maxlen: 24 109.104.157.0/24 maxlen: 24 109.104.158.0/24 maxlen: 24 109.104.159.0/24 maxlen: 24 144.48.52.0/24 maxlen: 24 144.48.53.0/24 maxlen: 24 144.48.54.0/24 maxlen: 24 144.48.55.0/24 maxlen: 24 185.53.100.0/24 maxlen: 24 185.53.101.0/24 maxlen: 24 185.153.125.0/24 maxlen: 24 185.153.126.0/24 maxlen: 24 185.153.127.0/24 maxlen: 24 199.168.120.0/24 maxlen: 24 199.168.121.0/24 maxlen: 24 199.168.122.0/24 maxlen: 24 199.168.123.0/24 maxlen: 24 209.23.44.0/24 maxlen: 24 209.23.45.0/24 maxlen: 24 209.23.46.0/24 maxlen: 24 209.23.47.0/24 maxlen: 24 2a04:27c0::/29 maxlen: 48 2a04:27c0:fffd::/48 maxlen: 48 2a04:27c0:fffe::/48 maxlen: 48 2a09:6e40::/29 maxlen: 48 2a09:6e47::/48 maxlen: 48 2a09:6ec0::/29 maxlen: 48 2a0d:27c0::/29 maxlen: 48 2a0d:27c4::/32 maxlen: 32 2a0d:42c0::/29 maxlen: 48 2a0d:4a40::/29 maxlen: 48 2a0d:4a46::/32 maxlen: 32 2a0e:3f00::/29 maxlen: 48 2a0e:3f01::/48 maxlen: 48 2a0e:4f00::/29 maxlen: 48 2a0e:4f05::/32 maxlen: 32 2a0e:d4c0::/29 maxlen: 48 2a0f:42c0::/29 maxlen: 48 2a0f:a880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:c5:11:6d:db:3c:8e:b1:7e:c5:47:05:41:fb:46:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Dec 13 12:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a898e5be7fb9e45f203ace9f6eb20869e836402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:47:49:83:fe:f4:cd:c2:0f:fc:f0:64:08: b6:63:2f:70:da:98:32:60:2d:14:96:63:f7:de:31: 43:4a:0b:ee:75:1f:7c:32:6e:a0:59:16:1a:33:d2: 71:62:3e:05:5e:d9:c4:4c:2f:0e:4a:ef:ed:da:98: cd:3d:d2:dc:c7:d2:11:8c:11:53:59:5a:41:c3:39: ce:45:cf:dd:de:73:6b:7f:8c:42:a8:1a:43:cd:97: d9:12:5b:fc:09:60:68:f9:91:03:f0:c3:94:c1:5e: 21:33:7a:82:a4:19:db:c5:89:a5:39:12:ae:ed:e6: 69:ba:a8:d3:34:64:2f:05:85:78:8e:c7:1f:f2:98: 4e:38:38:0e:99:0e:b3:46:e2:6a:b8:64:33:23:64: 52:03:c8:60:c9:be:06:61:ab:ae:47:7d:b1:dd:5f: b6:83:0d:db:4f:a9:a9:28:ce:7a:93:af:a6:eb:e3: b4:ee:5d:f6:9e:93:c3:fd:70:17:6c:29:47:e7:21: b8:0c:3d:23:66:61:15:a4:7a:60:3e:05:75:c4:ab: 38:a3:fa:6e:13:28:34:37:d5:3c:e0:41:36:77:62: 6a:a6:51:fe:c7:5b:dd:b8:06:a1:73:a4:c8:b2:2a: 93:f4:1b:6b:02:d4:f0:4d:5c:29:a2:a1:bf:87:9c: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:89:8E:5B:E7:FB:9E:45:F2:03:AC:E9:F6:EB:20:86:9E:83:64:02 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/KomOW-f7nkXyA6zp9usghp6DZAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.152.0/22 45.142.25.0-45.142.27.255 103.93.42.0/24 103.124.165.0/24 103.124.167.0/24 109.104.138.0-109.104.143.255 109.104.156.0/22 144.48.52.0/22 185.53.100.0/23 185.153.125.0-185.153.127.255 199.168.120.0/22 209.23.44.0/22 IPv6: 2a04:27c0::/29 2a09:6e40::/29 2a09:6ec0::/29 2a0d:27c0::/29 2a0d:42c0::/29 2a0d:4a40::/29 2a0e:3f00::/29 2a0e:4f00::/29 2a0e:d4c0::/29 2a0f:42c0::/29 2a0f:a880::/29 Signature Algorithm: sha256WithRSAEncryption 33:c5:ab:4e:fd:5f:9d:6b:c3:c2:f1:64:38:f6:b6:1e:39:aa: 50:23:a7:69:cc:01:4d:24:82:7f:eb:97:eb:bf:ff:3c:45:a7: d8:ea:c0:25:ca:bd:66:04:8e:e8:d2:79:9c:79:c1:c7:69:4c: 5b:06:f5:a1:fa:3e:2c:bd:ab:70:65:92:c8:24:94:28:74:13: 3f:4a:3e:16:79:de:61:0b:dc:05:38:8a:c3:1d:91:f7:4a:11: b8:0b:34:c2:98:31:d1:4b:f0:8a:2c:df:67:55:89:bc:55:5c: 0e:71:b5:ca:a6:e5:2f:86:ec:19:49:11:9d:21:ec:65:66:17: 1b:94:33:69:1f:bd:6b:c5:13:77:3d:b2:d4:8b:1b:48:8f:26: 5f:40:26:6b:c7:78:f5:1a:b4:c9:81:69:7d:e7:fe:2e:17:d3: 60:76:47:8b:05:ec:c8:4d:7b:3e:87:89:2c:28:d9:6c:17:38: 36:60:92:99:f8:9d:fb:1c:66:dc:2e:60:17:0e:21:a1:1f:1c: f3:42:32:9a:ef:77:f5:04:75:aa:b4:28:85:b9:5b:e4:1e:f5: 85:8e:81:59:f7:e6:69:6c:82:ec:d5:b7:16:63:4b:18:8b:b9: 3d:1e:f6:af:1a:f5:73:98:7c:e7:be:0e:c1:e4:e2:ae:92:cc: 73:ac:1c:68 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZsXxRFt2zyOsX7FRwVB+0a1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMjEzMTI1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTg5OGU1YmU3ZmI5ZTQ1ZjIwM2FjZTlmNmViMjA4NjllODM2NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrxHSYP+9M3CD/zwZAi2Yy9w2pgy YC0UlmP33jFDSgvudR98Mm6gWRYaM9JxYj4FXtnETC8OSu/t2pjNPdLcx9IRjBFT WVpBwznORc/d3nNrf4xCqBpDzZfZElv8CWBo+ZED8MOUwV4hM3qCpBnbxYmlORKu 7eZpuqjTNGQvBYV4jscf8phOODgOmQ6zRuJquGQzI2RSA8hgyb4GYauuR32x3V+2 gw3bT6mpKM56k6+m6+O07l32npPD/XAXbClH5yG4DD0jZmEVpHpgPgV1xKs4o/pu Eyg0N9U84EE2d2JqplH+x1vduAahc6TIsiqT9BtrAtTwTVwpoqG/h5wYSwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFCqJjlvn+55F8gOs6fbrIIaeg2QCMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvS29tT1ctZjdua1h5QTZ6cDl1c2docDZEWkFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTBmBAIAATBgAwQCH6uY MAwDBAAtjhkDBAItjhgDBABnXSoDBABnfKUDBABnfKcwDAMEAW1oigMEBG1ogAME Am1onAMEApAwNAMEAbk1ZDAMAwQAuZl9AwQHuZkAAwQCx6h4AwQC0RcsMFMEAgAC ME0DBQMqBCfAAwUDKgluQAMFAyoJbsADBQMqDSfAAwUDKg1CwAMFAyoNSkADBQMq Dj8AAwUDKg5PAAMFAyoO1MADBQMqD0LAAwUDKg+ogDANBgkqhkiG9w0BAQsFAAOC AQEAM8WrTv1fnWvDwvFkOPa2HjmqUCOnacwBTSSCf+uX67//PEWn2OrAJcq9ZgSO 6NJ5nHnBx2lMWwb1ofo+LL2rcGWSyCSUKHQTP0o+FnneYQvcBTiKwx2R90oRuAs0 wpgx0UvwiizfZ1WJvFVcDnG1yqblL4bsGUkRnSHsZWYXG5QzaR+9a8UTdz2y1Isb SI8mX0Ama8d49Rq0yYFpfef+LhfTYHZHiwXsyE17PoeJLCjZbBc4NmCSmfid+xxm 3C5gFw4hoR8c80Iymu939QR1qrQohblb5B71hY6BWffmaWyC7NW3FmNLGIu5PR72 rxr1c5h8574OweTirpLMc6wcaA== -----END CERTIFICATE-----Generated at Tue Dec 16 18:40:45 2025 by rpki-client