This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/KBQnr_D6NsBFhkpQ2vS2j8sPWCg.roa File: KBQnr_D6NsBFhkpQ2vS2j8sPWCg.roa (raw, json) Hash identifier: LreY9fRvGsjfDr7PDIUiqXvVU4nrT6HsCO3N3osuNEQ= Subject key identifier: 28:14:27:AF:F0:FA:36:C0:45:86:4A:50:DA:F4:B6:8F:CB:0F:58:28 Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Certificate serial: 019B020C273CE7B7E70484DAFB3DA1676B19 Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/KBQnr_D6NsBFhkpQ2vS2j8sPWCg.roa Signing time: Tue 09 Dec 2025 07:38:29 +0000 ROA not before: Tue 09 Dec 2025 07:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205185 IP address blocks: 93.187.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:0c:27:3c:e7:b7:e7:04:84:da:fb:3d:a1:67:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Validity Not Before: Dec 9 07:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=281427aff0fa36c045864a50daf4b68fcb0f5828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:85:00:8f:4b:c6:8a:de:8a:d2:29:68:a6: 09:d5:5a:ea:f0:d4:83:d0:43:c9:56:35:92:38:78: e0:0c:51:ee:36:7e:52:09:24:85:ac:1e:91:9c:16: c3:9d:f6:a7:f6:62:34:80:c2:29:fc:2d:e1:6d:86: 7f:00:32:64:54:79:8c:a3:39:2d:53:87:64:0d:99: 8c:5d:3f:0c:b4:25:66:57:14:f3:17:ee:8f:92:29: ea:3d:ba:85:ab:58:e4:67:4b:72:33:21:49:cd:15: 99:32:39:7f:86:70:ea:82:7b:96:9b:10:44:7d:7a: 32:17:42:c0:7d:3b:ed:60:a6:e5:30:15:51:3a:c8: b5:6f:96:7a:fe:f7:d2:fb:6a:1b:0a:01:4e:17:2a: fc:86:12:09:c3:1d:e0:03:10:3d:da:3c:2d:91:9b: 50:04:fe:e4:79:f5:8e:d9:5a:91:01:cb:85:f6:f8: ac:a0:46:7d:ae:ae:fe:ce:93:60:7b:1e:40:82:b4: 83:35:41:2c:c5:8b:5c:9d:65:59:de:cc:8b:fc:1e: e7:79:bd:a4:67:0a:1f:90:7b:39:55:6d:b9:c4:e1: 86:27:e9:23:51:26:33:89:d3:ce:1a:b3:73:60:81: 34:c3:5f:63:c3:d7:09:3a:93:2f:b0:ce:68:95:e8: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:27:AF:F0:FA:36:C0:45:86:4A:50:DA:F4:B6:8F:CB:0F:58:28 X509v3 Authority Key Identifier: keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/KBQnr_D6NsBFhkpQ2vS2j8sPWCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.48.0/24 Signature Algorithm: sha256WithRSAEncryption 53:c9:5a:bb:e8:ef:5a:1a:13:76:81:86:e9:73:e0:d3:ca:2c: e3:2e:a0:7a:46:11:6e:e6:bb:85:c5:7a:44:77:cd:16:6c:8c: 99:71:31:8a:2c:02:64:4c:72:03:26:68:dc:7f:33:57:0d:5e: b3:67:e9:c5:51:77:c2:b5:68:a3:30:b3:5d:38:ea:19:46:ef: 27:fa:ee:99:83:58:65:39:b9:49:c8:c6:b0:85:54:d6:80:a6: 9b:04:82:ea:cb:79:8d:8f:7d:fe:79:0e:d2:af:8b:25:ae:a6: c1:ad:0b:94:b1:d6:51:cc:55:53:da:3f:60:d4:7e:96:a7:36: f9:32:5d:a7:a7:05:32:43:a2:84:f1:9f:bc:fd:18:d3:95:5e: 2c:e5:81:09:68:6c:e4:06:79:55:a6:85:33:bb:99:d4:97:52: 36:77:9c:e2:67:fc:4e:78:ed:f5:e2:c6:d7:0d:b7:d0:2a:54: cc:b5:ec:80:b5:c3:f3:cd:32:94:35:a2:0a:cb:73:15:35:35: 1c:98:ca:3e:fc:9d:b1:9e:4c:f7:d8:db:28:f9:83:c3:79:0b: e1:72:97:ea:bd:c4:a3:35:b3:39:3e:ba:04:96:2d:3e:f5:b5: 66:3e:f3:27:f8:19:13:1a:c0:13:e7:09:c7:f1:d6:f9:57:b9: 45:6c:97:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCDCc857fnBITa+z2hZ2sZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0 MmFhYjAwHhcNMjUxMjA5MDczODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODE0MjdhZmYwZmEzNmMwNDU4NjRhNTBkYWY0YjY4ZmNiMGY1ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k6FAI9LxoreitIpaKYJ1Vrq8NSD 0EPJVjWSOHjgDFHuNn5SCSSFrB6RnBbDnfan9mI0gMIp/C3hbYZ/ADJkVHmMozkt U4dkDZmMXT8MtCVmVxTzF+6PkinqPbqFq1jkZ0tyMyFJzRWZMjl/hnDqgnuWmxBE fXoyF0LAfTvtYKblMBVROsi1b5Z6/vfS+2obCgFOFyr8hhIJwx3gAxA92jwtkZtQ BP7kefWO2VqRAcuF9visoEZ9rq7+zpNgex5AgrSDNUEsxYtcnWVZ3syL/B7neb2k ZwofkHs5VW25xOGGJ+kjUSYzidPOGrNzYIE0w19jw9cJOpMvsM5oleirfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgUJ6/w+jbARYZKUNr0to/LD1goMB8GA1UdIwQY MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt ODZmODhjZTQ0NzkzLzEvS0JRbnJfRDZOc0JGaGtwUTJ2UzJqOHNQV0NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbswMA0G CSqGSIb3DQEBCwUAA4IBAQBTyVq76O9aGhN2gYbpc+DTyizjLqB6RhFu5ruFxXpE d80WbIyZcTGKLAJkTHIDJmjcfzNXDV6zZ+nFUXfCtWijMLNdOOoZRu8n+u6Zg1hl OblJyMawhVTWgKabBILqy3mNj33+eQ7Sr4slrqbBrQuUsdZRzFVT2j9g1H6Wpzb5 Ml2npwUyQ6KE8Z+8/RjTlV4s5YEJaGzkBnlVpoUzu5nUl1I2d5ziZ/xOeO314sbX DbfQKlTMteyAtcPzzTKUNaIKy3MVNTUcmMo+/J2xnkz32Nso+YPDeQvhcpfqvcSj NbM5ProEli0+9bVmPvMn+BkTGsAT5wnH8db5V7lFbJeR -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:32 2025 by rpki-client