This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KaiReiPryrnD1AAdUWKYnxzvhNc.roa File: KaiReiPryrnD1AAdUWKYnxzvhNc.roa (raw, json) Hash identifier: i94Dpv7DAvc7W9Xa5OElTQMpv1Nn/UVqZ8vvZC1hnlE= Subject key identifier: 29:A8:91:7A:23:EB:CA:B9:C3:D4:00:1D:51:62:98:9F:1C:EF:84:D7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AB7234F46C40FC27A9C68AA743D6F09E8 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KaiReiPryrnD1AAdUWKYnxzvhNc.roa Signing time: Mon 24 Nov 2025 18:32:15 +0000 ROA not before: Mon 24 Nov 2025 18:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210915 IP address blocks: 5.175.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:23:4f:46:c4:0f:c2:7a:9c:68:aa:74:3d:6f:09:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 24 18:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=29a8917a23ebcab9c3d4001d5162989f1cef84d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:6f:93:bc:f3:9c:bc:fd:d9:ec:0e:0d:53: e4:ea:8b:ae:4a:0f:01:19:5f:e9:ef:41:93:2e:44: 74:43:ae:af:76:21:07:0e:c7:a0:c7:9e:e5:78:e6: 0a:d3:45:60:d4:26:94:2a:31:10:45:9c:c0:b9:be: 14:12:86:2d:4e:98:2d:30:f3:6e:57:ad:b5:83:42: 23:32:2a:96:95:4c:63:f8:0a:81:4f:b4:09:23:e9: 9f:7f:e3:bc:a4:86:b9:9b:1a:58:95:70:a7:82:fa: 17:8a:f4:c6:5c:0b:61:ed:23:29:fc:11:62:89:8e: 98:e6:07:6d:f9:f2:a9:45:3d:47:c0:12:64:94:a2: cf:61:4c:4b:51:36:89:42:7e:5a:bb:89:95:84:a1: 5d:31:50:15:3b:91:eb:90:73:17:d7:3f:42:2b:20: b7:e8:e6:19:7f:f8:0d:66:19:75:67:3e:e7:20:e6: 19:b9:91:75:8f:41:ab:29:92:68:42:9c:38:5a:cb: 55:cc:aa:77:2c:f8:a4:b4:23:b8:39:e8:ca:d9:1f: 0b:72:75:b1:fe:ae:7f:c9:b8:9a:a6:2b:4e:c9:49: 27:40:87:cb:30:f7:03:f1:0d:a7:5a:0d:86:6b:48: 24:7a:8a:2b:b5:b1:cb:b9:63:9c:73:7c:68:0f:79: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A8:91:7A:23:EB:CA:B9:C3:D4:00:1D:51:62:98:9F:1C:EF:84:D7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KaiReiPryrnD1AAdUWKYnxzvhNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.191.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:e6:18:6a:3b:8d:ef:e0:2a:5a:af:63:8b:f7:27:5f:be:9e: e1:35:e1:91:ab:77:6b:4e:dd:6c:f5:59:3c:c2:38:bd:76:62: b9:a4:2b:67:7a:39:06:ee:03:bc:e2:b3:ce:6b:d2:66:7c:f2: 29:41:4a:72:fe:91:22:7f:2b:63:94:eb:dc:e0:dc:04:8b:34: 41:b0:32:43:75:b1:ac:67:d2:66:9d:0c:4e:79:2c:b8:b1:90: ba:33:25:bf:c2:7b:02:f5:49:7b:41:57:46:06:61:0f:ee:95: 2c:db:66:0c:90:2e:f5:34:9a:97:5d:58:a7:34:f1:7f:27:74: 57:35:37:9d:22:e9:55:2d:53:e3:0a:13:19:af:ff:63:13:aa: 6c:ab:ce:07:d1:01:04:a6:49:d4:c2:a6:f6:b3:8c:a1:65:e4: 58:22:39:c7:76:48:b1:4b:4b:d4:c1:d3:98:36:4f:72:c0:07: a4:45:11:99:eb:a4:14:5a:fa:07:e1:de:ef:0c:3e:ad:b2:d5: 4f:d5:a6:0f:b5:61:f9:6c:a6:8b:d3:40:be:27:76:ec:08:75: a8:aa:0d:e0:f8:ff:c3:af:69:34:4b:0c:14:2e:e6:77:bf:77: 52:0c:80:a8:e0:25:e3:aa:3a:f8:62:ea:93:39:fa:f4:18:5e: 52:26:b0:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq3I09GxA/CepxoqnQ9bwnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI0MTgzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWE4OTE3YTIzZWJjYWI5YzNkNDAwMWQ1MTYyOTg5ZjFjZWY4NGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnhvk7zznLz92ewODVPk6ouuSg8B GV/p70GTLkR0Q66vdiEHDsegx57leOYK00Vg1CaUKjEQRZzAub4UEoYtTpgtMPNu V621g0IjMiqWlUxj+AqBT7QJI+mff+O8pIa5mxpYlXCngvoXivTGXAth7SMp/BFi iY6Y5gdt+fKpRT1HwBJklKLPYUxLUTaJQn5au4mVhKFdMVAVO5HrkHMX1z9CKyC3 6OYZf/gNZhl1Zz7nIOYZuZF1j0GrKZJoQpw4WstVzKp3LPiktCO4OejK2R8LcnWx /q5/ybiapitOyUknQIfLMPcD8Q2nWg2Ga0gkeoortbHLuWOcc3xoD3k3bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmokXoj68q5w9QAHVFimJ8c74TXMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvS2FpUmVpUHJ5cm5EMUFBZFVXS1lueHp2aE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+/MA0G CSqGSIb3DQEBCwUAA4IBAQCP5hhqO43v4Cpar2OL9ydfvp7hNeGRq3drTt1s9Vk8 wji9dmK5pCtnejkG7gO84rPOa9JmfPIpQUpy/pEifytjlOvc4NwEizRBsDJDdbGs Z9JmnQxOeSy4sZC6MyW/wnsC9Ul7QVdGBmEP7pUs22YMkC71NJqXXVinNPF/J3RX NTedIulVLVPjChMZr/9jE6psq84H0QEEpknUwqb2s4yhZeRYIjnHdkixS0vUwdOY Nk9ywAekRRGZ66QUWvoH4d7vDD6tstVP1aYPtWH5bKaL00C+J3bsCHWoqg3g+P/D r2k0SwwULuZ3v3dSDICo4CXjqjr4YuqTOfr0GF5SJrDI -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:44 2025 by rpki-client