This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kIh0qMka7-QRh16eNZ-tOoimhQk.roa File: kIh0qMka7-QRh16eNZ-tOoimhQk.roa (raw, json) Hash identifier: RcSVAVFqgW30k1Ktmgh92DKjXni1tuVCDiYh4baiYq4= Subject key identifier: 90:88:74:A8:C9:1A:EF:E4:11:87:5E:9E:35:9F:AD:3A:88:A6:85:09 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019A7E68A166F545827A240C53DAF38E71D7 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kIh0qMka7-QRh16eNZ-tOoimhQk.roa Signing time: Thu 13 Nov 2025 18:09:37 +0000 ROA not before: Thu 13 Nov 2025 18:09:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 84.232.28.0/24 maxlen: 24 88.148.24.0/23 maxlen: 24 88.148.84.0/24 maxlen: 24 94.24.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:68:a1:66:f5:45:82:7a:24:0c:53:da:f3:8e:71:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 13 18:09:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=908874a8c91aefe411875e9e359fad3a88a68509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:f3:1f:97:1d:c6:46:3e:8b:ba:bb:30:d3: a5:31:db:2d:45:1f:8b:7a:31:52:b1:b8:9e:f1:b8: 15:52:95:4f:ef:13:93:fa:5a:a3:4c:e4:6d:08:87: a0:66:e0:cf:ad:eb:c9:43:87:79:8e:75:81:0b:a0: 78:db:43:88:85:cd:ef:b2:e4:36:7c:33:16:21:b1: ac:22:f2:8f:0f:da:f6:d2:09:96:68:2b:db:25:89: 6e:38:56:12:ab:1d:68:fd:d2:43:4b:fa:eb:02:37: 3f:9e:2e:3c:c2:95:ba:62:16:f4:dc:89:af:dd:7e: dc:1d:ea:16:e8:62:70:3a:34:73:af:64:1c:df:b5: 37:79:ca:24:9b:fa:8f:a1:82:ab:d0:f9:8e:3b:ef: 1b:b9:cd:ae:38:b3:22:ad:ab:4e:0b:9c:c4:15:65: 41:bd:1a:fb:a2:f7:08:f3:d9:63:86:c5:05:15:3f: 03:6a:da:8e:c0:9b:ef:4c:ef:6b:f5:65:b3:16:02: 3f:9f:ac:b1:ed:9e:df:0c:7f:72:79:0e:8c:25:0e: 03:d6:7f:c8:61:55:b9:aa:2c:bf:a8:52:c7:9c:c0: cb:66:14:18:20:9f:36:a0:8f:a1:74:c7:9d:36:16: c0:28:92:27:6f:f7:31:82:54:1d:79:75:fd:81:99: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:88:74:A8:C9:1A:EF:E4:11:87:5E:9E:35:9F:AD:3A:88:A6:85:09 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kIh0qMka7-QRh16eNZ-tOoimhQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.28.0/24 88.148.24.0/23 88.148.84.0/24 94.24.35.0/24 Signature Algorithm: sha256WithRSAEncryption c8:72:95:86:46:49:17:24:a5:7c:26:57:72:e4:1d:a2:eb:39: 1c:2b:9f:b1:d1:b2:9a:a4:34:c3:f6:3d:7b:67:6f:74:e5:80: b7:27:e6:53:5d:58:cb:b6:94:76:bd:df:31:6b:bb:77:5a:7f: b3:63:1f:e1:2a:93:6d:17:a0:e1:49:80:55:28:9c:0d:a6:8d: b2:78:97:08:ad:0f:23:6c:3d:5b:85:ce:7b:e6:70:f3:27:43: 98:d0:15:a2:95:53:e6:31:35:62:dd:c4:66:4a:ec:e6:17:8b: a2:8f:2f:84:16:87:53:ca:df:88:e7:26:0b:26:b5:79:ef:fe: 57:ce:4d:84:6e:16:89:82:69:e9:42:64:f3:87:a3:28:08:f6: 19:04:86:c6:67:81:74:9c:83:38:7d:63:0b:a1:c3:f3:bb:b1: d9:60:da:b6:dc:b9:a0:ae:2b:af:ec:2c:8a:3e:c4:b9:cf:c5: c0:70:7e:27:a0:8a:ba:28:9f:46:49:c7:1e:cf:a5:8b:31:59: 80:b7:72:d2:88:24:89:dc:2f:00:44:b5:e3:7c:be:e0:c9:6d: d0:7e:aa:33:03:fb:82:b3:b1:56:8c:7c:35:6b:83:fe:87:69: 0e:da:26:9e:5a:bd:65:55:8d:ac:c6:f8:ea:aa:9b:17:50:02: db:c2:27:e1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZp+aKFm9UWCeiQMU9rzjnHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTEzMTgwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDg4NzRhOGM5MWFlZmU0MTE4NzVlOWUzNTlmYWQzYTg4YTY4NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9HzH5cdxkY+i7q7MNOlMdstRR+L ejFSsbie8bgVUpVP7xOT+lqjTORtCIegZuDPrevJQ4d5jnWBC6B420OIhc3vsuQ2 fDMWIbGsIvKPD9r20gmWaCvbJYluOFYSqx1o/dJDS/rrAjc/ni48wpW6Yhb03Imv 3X7cHeoW6GJwOjRzr2Qc37U3ecokm/qPoYKr0PmOO+8buc2uOLMiratOC5zEFWVB vRr7ovcI89ljhsUFFT8DatqOwJvvTO9r9WWzFgI/n6yx7Z7fDH9yeQ6MJQ4D1n/I YVW5qiy/qFLHnMDLZhQYIJ82oI+hdMedNhbAKJInb/cxglQdeXX9gZmnxQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJCIdKjJGu/kEYdenjWfrTqIpoUJMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEva0loMHFNa2E3LVFSaDE2ZU5aLXRPb2ltaFFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVOgcAwQB WJQYAwQAWJRUAwQAXhgjMA0GCSqGSIb3DQEBCwUAA4IBAQDIcpWGRkkXJKV8Jldy 5B2i6zkcK5+x0bKapDTD9j17Z2905YC3J+ZTXVjLtpR2vd8xa7t3Wn+zYx/hKpNt F6DhSYBVKJwNpo2yeJcIrQ8jbD1bhc575nDzJ0OY0BWilVPmMTVi3cRmSuzmF4ui jy+EFodTyt+I5yYLJrV57/5Xzk2EbhaJgmnpQmTzh6MoCPYZBIbGZ4F0nIM4fWML ocPzu7HZYNq23Lmgriuv7CyKPsS5z8XAcH4noIq6KJ9GSccez6WLMVmAt3LSiCSJ 3C8ARLXjfL7gyW3QfqozA/uCs7FWjHw1a4P+h2kO2iaeWr1lVY2sxvjqqpsXUALb wifh -----END CERTIFICATE-----Generated at Sat Nov 22 20:47:24 2025 by rpki-client