This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KnFjKtv6FLY2YKyPc9xSeZHgZjQ.roa File: KnFjKtv6FLY2YKyPc9xSeZHgZjQ.roa (raw, json) Hash identifier: MVl9/D54L5JPwu0sxKLF0trgS0nOcSIrr0Sc7SnVc3s= Subject key identifier: 2A:71:63:2A:DB:FA:14:B6:36:60:AC:8F:73:DC:52:79:91:E0:66:34 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AE41BF76E7742D64C6736102920A1196E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KnFjKtv6FLY2YKyPc9xSeZHgZjQ.roa Signing time: Wed 03 Dec 2025 12:07:09 +0000 ROA not before: Wed 03 Dec 2025 12:07:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201749 IP address blocks: 5.175.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:1b:f7:6e:77:42:d6:4c:67:36:10:29:20:a1:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 3 12:07:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a71632adbfa14b63660ac8f73dc527991e06634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:d5:4a:6c:7e:f6:17:3a:5a:db:8a:92:8b: fb:5c:70:f7:52:91:d7:d3:79:c0:3a:dd:03:08:2e: 01:6b:e0:36:8b:29:3e:b9:aa:7b:d2:a1:84:4b:30: a7:1b:b9:42:4e:0c:a6:a4:b8:d6:9b:a0:6b:ec:45: 94:cd:e2:2d:41:ae:53:7d:5e:75:52:2e:a3:75:e9: 6e:e5:bd:fd:91:b1:d8:db:8f:5e:70:68:75:45:f8: 24:af:3e:81:b7:4b:c5:7a:e7:d6:26:b7:03:d6:85: 0d:d5:d4:d7:f0:89:85:d8:51:cc:44:58:85:2f:dd: 5c:ed:fc:d5:75:a2:14:ac:de:80:bc:1a:8b:a2:a3: 0f:41:38:0a:7a:9d:3e:d3:40:4f:0f:bf:93:c9:f9: 73:2d:dc:1f:a2:b6:c9:d1:6d:68:ad:d3:7b:8c:be: 3c:7b:13:29:2b:9e:da:fd:2a:46:c5:d0:cd:98:c9: 59:a9:9b:98:f4:a1:57:5a:46:78:b1:9b:5b:04:87: 61:ab:b6:e5:3b:23:2d:e8:21:9e:f6:c0:b7:0f:6d: b5:c6:4f:9f:2e:cf:9c:e6:59:5d:1c:cf:75:17:0e: 4e:ba:87:5a:b6:98:97:d8:64:eb:2b:6c:e4:e9:32: 5b:cb:4c:80:a6:1f:11:50:24:d2:85:b6:bf:17:ac: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:71:63:2A:DB:FA:14:B6:36:60:AC:8F:73:DC:52:79:91:E0:66:34 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KnFjKtv6FLY2YKyPc9xSeZHgZjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.159.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:3e:46:45:a8:b1:1a:a6:dd:f7:bb:e9:4d:0d:20:d1:bc:93: 98:d2:8a:0f:77:b0:61:e7:3e:98:89:63:c4:17:8c:af:ad:71: eb:8b:1b:30:e5:d2:58:81:24:bd:f1:2b:b1:1a:3e:b0:a9:7e: d1:0a:7c:6a:9e:0d:be:5e:0e:03:9c:2a:de:f6:e4:15:82:5d: d7:48:5e:b8:1f:b4:09:4d:92:b1:a0:d1:df:13:d4:62:91:26: a0:ae:e8:e4:dc:0b:78:61:38:a5:ba:f0:26:e9:cc:35:74:4a: c9:b9:6a:c0:88:ca:84:5b:19:85:16:dc:ea:15:2e:cf:ff:70: 97:74:fa:40:67:7e:0f:06:80:59:b5:16:84:66:2e:81:60:21: 20:85:02:31:dd:6f:0d:f3:d7:a7:f1:0a:e6:3b:3f:b6:1f:45: 4c:4b:e3:dc:59:54:c1:6f:05:18:53:78:26:02:f5:db:23:14: c8:c6:5c:ec:57:3a:7d:be:5f:ce:d5:0d:91:b8:36:bf:49:15: da:f4:7b:d8:17:1b:0f:49:22:ac:74:8a:4b:54:ac:1f:74:d5: 08:90:e6:67:07:53:31:c3:00:4f:99:b7:6c:cf:64:a4:cd:31: 19:19:dc:cf:7c:bf:8e:d3:c1:7a:39:0c:fb:32:77:9e:5b:9b: 10:59:27:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkG/dud0LWTGc2ECkgoRluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAzMTIwNzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTcxNjMyYWRiZmExNGI2MzY2MGFjOGY3M2RjNTI3OTkxZTA2NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHVSmx+9hc6WtuKkov7XHD3UpHX 03nAOt0DCC4Ba+A2iyk+uap70qGESzCnG7lCTgympLjWm6Br7EWUzeItQa5TfV51 Ui6jdelu5b39kbHY249ecGh1Rfgkrz6Bt0vFeufWJrcD1oUN1dTX8ImF2FHMRFiF L91c7fzVdaIUrN6AvBqLoqMPQTgKep0+00BPD7+TyflzLdwforbJ0W1ordN7jL48 exMpK57a/SpGxdDNmMlZqZuY9KFXWkZ4sZtbBIdhq7blOyMt6CGe9sC3D221xk+f Ls+c5lldHM91Fw5OuodatpiX2GTrK2zk6TJby0yAph8RUCTShba/F6ylkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpxYyrb+hS2NmCsj3PcUnmR4GY0MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvS25Gakt0djZGTFkyWUt5UGM5eFNlWkhnWmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+fMA0G CSqGSIb3DQEBCwUAA4IBAQBKPkZFqLEapt33u+lNDSDRvJOY0ooPd7Bh5z6YiWPE F4yvrXHrixsw5dJYgSS98SuxGj6wqX7RCnxqng2+Xg4DnCre9uQVgl3XSF64H7QJ TZKxoNHfE9RikSagrujk3At4YTiluvAm6cw1dErJuWrAiMqEWxmFFtzqFS7P/3CX dPpAZ34PBoBZtRaEZi6BYCEghQIx3W8N89en8QrmOz+2H0VMS+PcWVTBbwUYU3gm AvXbIxTIxlzsVzp9vl/O1Q2RuDa/SRXa9HvYFxsPSSKsdIpLVKwfdNUIkOZnB1Mx wwBPmbdsz2SkzTEZGdzPfL+O08F6OQz7MneeW5sQWSdu -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:43 2025 by rpki-client