This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/kVKSYpQ3xrd6fxWnZsHR432qGV0.roa File: kVKSYpQ3xrd6fxWnZsHR432qGV0.roa (raw, json) Hash identifier: JMJUqBpxSqPppgA3UfkLylhpDGYFTX/gFKPC5dbvXpc= Subject key identifier: 91:52:92:62:94:37:C6:B7:7A:7F:15:A7:66:C1:D1:E3:7D:AA:19:5D Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019AEE428B1B044603CFF778949DB624C436 Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/kVKSYpQ3xrd6fxWnZsHR432qGV0.roa Signing time: Fri 05 Dec 2025 11:25:29 +0000 ROA not before: Fri 05 Dec 2025 11:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 2.96.0.0/13 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.178.0.0/15 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:42:8b:1b:04:46:03:cf:f7:78:94:9d:b6:24:c4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Dec 5 11:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=915292629437c6b77a7f15a766c1d1e37daa195d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:c6:ae:0a:77:bc:06:7d:f3:19:97:17:32: 67:c1:4a:d3:a5:75:0a:8a:d0:a2:a7:61:c5:09:2e: b5:e7:41:17:81:35:cc:51:bc:ff:04:7f:05:87:2f: 08:2c:cb:24:a9:60:00:54:d3:cc:15:fe:e4:22:be: 4e:86:4c:c2:db:1c:57:5c:10:58:c2:38:25:69:a7: 46:a8:03:44:91:35:a3:06:d8:a5:d6:70:16:2c:93: 1c:57:8a:2f:31:01:30:ad:29:0c:df:b0:26:2e:a3: 5e:93:45:b2:8e:43:14:90:51:93:3f:5e:e4:da:14: 7d:d4:a4:c3:9f:b7:1b:c3:ce:73:54:8c:ab:82:a0: 30:a7:ec:2e:90:8f:7c:d4:d9:35:e6:ef:c0:95:b0: 29:0b:67:7b:c6:62:03:9d:3f:42:4d:64:db:ce:e9: 13:e1:f9:8e:eb:fe:78:f1:1c:f8:61:08:76:bb:17: 7b:bc:0d:42:76:e8:8a:fe:6f:80:41:63:3b:9d:8d: ac:84:3d:09:62:ee:68:70:27:f3:2c:3b:70:ad:ec: f8:59:b9:40:4d:8a:8d:86:0b:e4:0d:5e:6c:43:ab: 7d:8f:15:91:a9:5d:48:c6:b0:40:af:7c:c8:b3:dc: ab:62:c5:0f:f5:29:c1:06:21:79:b0:b0:3e:07:6a: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:92:62:94:37:C6:B7:7A:7F:15:A7:66:C1:D1:E3:7D:AA:19:5D X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/kVKSYpQ3xrd6fxWnZsHR432qGV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.86.0.0/16 81.178.0.0/15 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.173.120.0/22 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 Signature Algorithm: sha256WithRSAEncryption 90:76:1d:52:a8:1f:4c:a8:ec:39:c6:ff:dd:86:aa:b5:0f:f9: 2b:0f:3d:07:32:2f:a3:96:97:c2:85:6c:5b:c1:ee:9e:88:25: 96:b4:aa:51:38:79:37:b8:2c:a5:a7:bb:d7:71:9e:4d:e2:e9: 70:d4:d4:a2:02:b9:d0:3c:45:de:2b:99:33:bc:5e:72:c8:3d: ba:55:e1:ae:b1:a7:52:98:02:2c:79:c2:1f:43:4e:b5:b0:7b: 1d:7a:b8:c4:dc:90:fb:e8:94:d2:98:2b:92:eb:3b:fb:02:f5: a6:17:97:8e:87:60:c5:41:2b:50:1a:e4:19:cd:12:d4:75:b8: 00:eb:46:da:1b:b0:43:f6:70:3e:14:ad:ba:d1:f8:16:a6:07: b8:3e:b0:42:ba:8f:00:c6:39:e3:6b:f0:86:c3:a2:44:62:3e: 20:40:4d:e6:94:8d:6e:cb:06:ea:3d:22:65:f1:4e:82:e0:69: 9d:5e:8a:f2:05:f3:d1:99:42:33:a6:d6:8b:b5:eb:98:af:04: 99:79:37:42:f1:15:0d:28:ad:37:8c:03:fd:bf:c6:af:de:c5: fe:ce:5e:cf:7f:fb:99:b3:9d:aa:b0:2d:8c:dd:da:c7:0d:0c: 17:22:7d:67:84:d4:e3:e5:22:4c:55:04:68:08:e2:3e:8e:db: c1:5d:4e:4e -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZruQosbBEYDz/d4lJ22JMQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUxMjA1MTEyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTUyOTI2Mjk0MzdjNmI3N2E3ZjE1YTc2NmMxZDFlMzdkYWExOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJzGrgp3vAZ98xmXFzJnwUrTpXUK itCip2HFCS6150EXgTXMUbz/BH8Fhy8ILMskqWAAVNPMFf7kIr5OhkzC2xxXXBBY wjglaadGqANEkTWjBtil1nAWLJMcV4ovMQEwrSkM37AmLqNek0WyjkMUkFGTP17k 2hR91KTDn7cbw85zVIyrgqAwp+wukI981Nk15u/AlbApC2d7xmIDnT9CTWTbzukT 4fmO6/548Rz4YQh2uxd7vA1CduiK/m+AQWM7nY2shD0JYu5ocCfzLDtwrez4WblA TYqNhgvkDV5sQ6t9jxWRqV1IxrBAr3zIs9yrYsUP9SnBBiF5sLA+B2pyuwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFJFSkmKUN8a3en8Vp2bB0eN9qhldMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEva1ZLU1lwUTN4cmQ2ZnhXblpzSFI0MzJxR1YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDAwMC YAMEBz4YgAMEBT7xoAMDA06QMAoDAwBPTQMDBE9AAwMDUCgDBAZRAUADAwBRVgMD AVGyAwMAU0MDBAdUKwADBAdX8oADBAdZqIADAwJZ8AMDBFwQAwQDkf/wAwQCuRgM AwQCua14AwQCua8wAwQCua+QAwQAwdpjAwQFwmogAwQFwvfgAwQGw3AAAwQHw4kA AwQGw5UAAwQF1AGAAwQF1ENgAwQF1EpgAwMA1IsDBAbUn4ADAwDVTjANBgkqhkiG 9w0BAQsFAAOCAQEAkHYdUqgfTKjsOcb/3YaqtQ/5Kw89BzIvo5aXwoVsW8Hunogl lrSqUTh5N7gspae713GeTeLpcNTUogK50DxF3iuZM7xecsg9ulXhrrGnUpgCLHnC H0NOtbB7HXq4xNyQ++iU0pgrkus7+wL1pheXjodgxUErUBrkGc0S1HW4AOtG2huw Q/ZwPhStutH4FqYHuD6wQrqPAMY542vwhsOiRGI+IEBN5pSNbssG6j0iZfFOguBp nV6K8gXz0ZlCM6bWi7XrmK8EmXk3QvEVDSitN4wD/b/Gr97F/s5ez3/7mbOdqrAt jN3axw0MFyJ9Z4TU4+UiTFUEaAjiPo7bwV1OTg== -----END CERTIFICATE-----Generated at Fri Dec 5 22:10:43 2025 by rpki-client