This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Kj2NqGC5bBv1gEhFpzdHWkRY4ZI.roa File: Kj2NqGC5bBv1gEhFpzdHWkRY4ZI.roa (raw, json) Hash identifier: 51Tc+Qzr9atasRV0RiCoKJQOUvFVgpnHk2il25DGklM= Subject key identifier: 2A:3D:8D:A8:60:B9:6C:1B:F5:80:48:45:A7:37:47:5A:44:58:E1:92 Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019A91F97AA5DA2C6F8960DB13A3D88328F8 Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Kj2NqGC5bBv1gEhFpzdHWkRY4ZI.roa Signing time: Mon 17 Nov 2025 13:20:37 +0000 ROA not before: Mon 17 Nov 2025 13:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34397 IP address blocks: 79.172.128.0/18 maxlen: 18 85.129.128.0/17 maxlen: 17 85.129.164.0/22 maxlen: 22 88.213.0.0/18 maxlen: 18 88.213.6.0/24 maxlen: 24 88.213.64.0/18 maxlen: 18 88.213.64.0/21 maxlen: 21 88.213.64.0/22 maxlen: 22 88.213.72.0/21 maxlen: 21 88.213.78.0/24 maxlen: 24 88.213.80.0/20 maxlen: 20 88.213.80.0/22 maxlen: 22 88.213.92.0/22 maxlen: 22 88.213.92.0/23 maxlen: 23 88.213.96.0/22 maxlen: 22 88.213.126.0/23 maxlen: 23 89.4.0.0/15 maxlen: 15 89.5.220.0/23 maxlen: 23 89.5.220.0/24 maxlen: 24 93.98.0.0/16 maxlen: 16 93.98.127.0/24 maxlen: 24 212.71.32.0/19 maxlen: 19 212.71.32.0/24 maxlen: 24 212.71.33.0/24 maxlen: 24 212.71.35.0/24 maxlen: 24 212.71.37.0/24 maxlen: 24 212.71.41.0/24 maxlen: 24 212.71.42.0/24 maxlen: 24 212.71.51.0/24 maxlen: 24 212.71.53.0/24 maxlen: 24 212.107.96.0/19 maxlen: 19 212.107.97.0/24 maxlen: 24 212.107.99.0/24 maxlen: 24 212.107.103.0/24 maxlen: 24 212.107.105.0/24 maxlen: 24 212.107.106.0/24 maxlen: 24 212.118.96.0/19 maxlen: 19 212.118.100.0/24 maxlen: 24 212.118.102.0/24 maxlen: 24 212.118.106.0/24 maxlen: 24 212.118.107.0/24 maxlen: 24 212.118.108.0/22 maxlen: 22 212.118.115.0/24 maxlen: 24 212.118.117.0/24 maxlen: 24 212.118.119.0/24 maxlen: 24 212.118.122.0/24 maxlen: 24 212.118.124.0/24 maxlen: 24 212.119.64.0/20 maxlen: 20 212.119.64.0/24 maxlen: 24 212.119.69.0/24 maxlen: 24 212.119.74.0/24 maxlen: 24 212.119.80.0/21 maxlen: 21 212.119.81.0/24 maxlen: 24 212.119.82.0/24 maxlen: 24 212.119.88.0/22 maxlen: 22 212.119.92.0/23 maxlen: 23 212.119.92.0/24 maxlen: 24 212.119.93.0/24 maxlen: 24 213.181.160.0/19 maxlen: 19 213.181.160.0/23 maxlen: 23 213.181.160.0/24 maxlen: 24 213.181.161.0/24 maxlen: 24 213.181.163.0/24 maxlen: 24 213.181.166.0/24 maxlen: 24 213.181.190.0/24 maxlen: 24 213.210.192.0/18 maxlen: 18 213.210.195.0/24 maxlen: 24 213.210.196.0/24 maxlen: 24 213.210.216.0/24 maxlen: 24 213.210.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:f9:7a:a5:da:2c:6f:89:60:db:13:a3:d8:83:28:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Nov 17 13:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a3d8da860b96c1bf5804845a737475a4458e192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:31:27:65:1e:86:3c:fc:0c:85:5d:3a:a4: 99:d5:70:85:00:d3:3e:98:3f:cc:ca:52:b9:59:c5: 4c:d0:83:41:de:3c:ff:9a:4d:4a:ea:10:6f:ab:73: e4:eb:0a:06:67:c6:85:9b:1d:91:a6:fe:21:d4:66: a4:0e:96:ce:40:b4:e1:6f:a0:dd:ea:eb:bd:38:bb: 6e:d7:6c:3b:7e:f1:7f:2b:78:c9:d3:b7:0d:63:ca: 22:24:07:70:b0:81:f4:af:7f:ba:ca:ac:86:f6:2d: 8e:94:df:d8:57:0f:57:21:72:0e:4e:8e:45:55:fe: 30:db:5f:90:9a:8d:f0:76:d9:28:01:82:98:11:c9: 17:c1:2c:f6:fc:57:3c:cd:35:4d:da:c9:9f:26:0b: 36:e7:67:43:2a:c8:d2:0b:ec:a5:0a:60:ac:7b:39: 2c:56:59:2c:96:a7:96:a4:3d:63:e8:e2:31:f3:d0: 93:eb:3b:34:a7:9f:31:42:51:f8:e2:0e:a3:4a:9b: 6d:ae:b9:0d:86:95:ee:08:3c:3e:be:c8:45:1d:e3: c0:2c:eb:62:52:34:3c:85:e9:07:f2:23:46:ee:81: 42:df:84:fd:b6:f8:01:cd:cc:ad:85:ec:69:9a:4b: d6:71:6d:20:72:ef:4a:2e:07:4a:75:b9:72:15:0f: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:8D:A8:60:B9:6C:1B:F5:80:48:45:A7:37:47:5A:44:58:E1:92 X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Kj2NqGC5bBv1gEhFpzdHWkRY4ZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.128.0/18 85.129.128.0/17 88.213.0.0/17 89.4.0.0/15 93.98.0.0/16 212.71.32.0/19 212.107.96.0/19 212.118.96.0/19 212.119.64.0-212.119.93.255 213.181.160.0/19 213.210.192.0/18 Signature Algorithm: sha256WithRSAEncryption 76:e4:08:cf:c5:5d:89:fc:d0:0d:2c:e7:e4:e2:93:0a:d9:e6: c8:1b:12:11:26:da:cd:80:59:fa:c8:47:fc:d7:73:86:8e:17: 76:b3:0e:96:41:06:47:6f:50:84:8a:d6:cf:45:95:94:cd:bc: b6:44:2f:f4:d8:2b:b8:1b:0d:89:8c:b1:8f:b2:f8:0d:6b:3e: 05:14:c4:d9:c8:96:5b:2e:7a:61:11:25:51:a7:f5:b0:4a:c5: 25:52:53:d9:50:b4:1d:ba:91:9a:6d:a7:df:5b:7b:0b:42:a0: f1:79:92:c9:c9:69:64:f8:ef:08:c2:be:23:cd:04:e8:39:ab: bc:f3:f7:cb:25:15:10:24:df:0a:c3:ce:56:c1:75:5f:af:58: 64:9a:37:4c:47:79:2f:a4:35:09:6a:b4:f5:f8:a6:2f:2c:3d: 74:c0:0e:3a:fe:fa:db:fc:2e:98:36:dd:3c:a3:c3:ed:5b:7f: 0a:07:45:80:66:36:07:2e:8e:22:8c:76:5d:a6:3e:17:7b:58: 90:8e:05:38:c2:79:aa:ee:0d:80:c4:88:c0:98:f0:e1:8a:a3: 45:10:c5:4c:91:d1:4f:7a:13:76:b9:69:09:cd:f3:d4:e2:12: 57:a9:7d:fd:4e:92:dd:4a:4b:dc:e0:66:1b:5b:39:81:88:d5: 5d:81:89:74 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZqR+Xql2ixviWDbE6PYgyj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjUxMTE3MTMyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTNkOGRhODYwYjk2YzFiZjU4MDQ4NDVhNzM3NDc1YTQ0NThlMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CIxJ2Uehjz8DIVdOqSZ1XCFANM+ mD/MylK5WcVM0INB3jz/mk1K6hBvq3Pk6woGZ8aFmx2Rpv4h1GakDpbOQLThb6Dd 6uu9OLtu12w7fvF/K3jJ07cNY8oiJAdwsIH0r3+6yqyG9i2OlN/YVw9XIXIOTo5F Vf4w21+Qmo3wdtkoAYKYEckXwSz2/Fc8zTVN2smfJgs252dDKsjSC+ylCmCsezks VlkslqeWpD1j6OIx89CT6zs0p58xQlH44g6jSpttrrkNhpXuCDw+vshFHePALOti UjQ8hekH8iNG7oFC34T9tvgBzcythexpmkvWcW0gcu9KLgdKdblyFQ+KgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCo9jahguWwb9YBIRac3R1pEWOGSMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvS2oyTnFHQzViQnYxZ0VoRnB6ZEhXa1JZNFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGT6yAAwQH VYGAAwQHWNUAAwMBWQQDAwBdYgMEBdRHIAMEBdRrYAMEBdR2YDAMAwQG1HdAAwQB 1HdcAwQF1bWgAwQG1dLAMA0GCSqGSIb3DQEBCwUAA4IBAQB25AjPxV2J/NANLOfk 4pMK2ebIGxIRJtrNgFn6yEf813OGjhd2sw6WQQZHb1CEitbPRZWUzby2RC/02Cu4 Gw2JjLGPsvgNaz4FFMTZyJZbLnphESVRp/WwSsUlUlPZULQdupGabaffW3sLQqDx eZLJyWlk+O8Iwr4jzQToOau88/fLJRUQJN8Kw85WwXVfr1hkmjdMR3kvpDUJarT1 +KYvLD10wA46/vrb/C6YNt08o8PtW38KB0WAZjYHLo4ijHZdpj4Xe1iQjgU4wnmq 7g2AxIjAmPDhiqNFEMVMkdFPehN2uWkJzfPU4hJXqX39TpLdSkvc4GYbWzmBiNVd gYl0 -----END CERTIFICATE-----Generated at Sat Dec 6 00:06:43 2025 by rpki-client