This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KKm_BFqml9SaBk2Le_ont6e9vYs.roa File: KKm_BFqml9SaBk2Le_ont6e9vYs.roa (raw, json) Hash identifier: 3yRIydShTr1bY6Yi91o8S+LxVsSiH5cWgvz5HELVYZQ= Subject key identifier: 28:A9:BF:04:5A:A6:97:D4:9A:06:4D:8B:7B:FA:27:B7:A7:BD:BD:8B Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B022E112727D7A61BA13CD7112A13CB9A Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KKm_BFqml9SaBk2Le_ont6e9vYs.roa Signing time: Tue 09 Dec 2025 08:15:31 +0000 ROA not before: Tue 09 Dec 2025 08:15:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 144.56.7.0/24 maxlen: 24 144.56.13.0/24 maxlen: 24 144.56.17.0/24 maxlen: 24 144.56.20.0/24 maxlen: 24 144.56.24.0/24 maxlen: 24 144.56.27.0/24 maxlen: 24 144.56.29.0/24 maxlen: 24 144.56.33.0/24 maxlen: 24 144.56.34.0/24 maxlen: 24 144.56.35.0/24 maxlen: 24 144.56.40.0/24 maxlen: 24 144.56.41.0/24 maxlen: 24 144.56.71.0/24 maxlen: 24 144.56.76.0/24 maxlen: 24 144.56.80.0/24 maxlen: 24 144.56.85.0/24 maxlen: 24 144.56.94.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.102.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:2e:11:27:27:d7:a6:1b:a1:3c:d7:11:2a:13:cb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 9 08:15:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28a9bf045aa697d49a064d8b7bfa27b7a7bdbd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:26:24:4b:7c:03:31:be:c6:26:ce:47:18: 74:a6:88:87:28:f7:12:58:17:12:59:42:30:1d:62: eb:cf:02:85:7a:2f:12:73:e3:b6:20:95:74:ed:9f: a7:b8:25:b4:c8:b6:ce:dc:9d:9f:15:c4:23:b6:ab: 36:26:09:15:5f:78:5d:d2:f6:49:6f:5a:91:bf:a3: 2f:84:78:37:02:69:bb:54:e8:41:ec:2e:2b:f4:d1: 19:0c:4d:5f:aa:30:1a:03:65:b3:aa:9b:46:f7:3e: d9:27:56:6f:41:98:bc:de:76:a1:b4:c2:41:8d:3a: 39:ae:3d:fa:0e:0a:e2:7c:0c:4b:fa:f4:ce:d2:79: f6:80:b3:8e:c8:67:eb:ea:1a:40:c1:89:f5:d2:11: 34:d6:bd:94:f7:3c:74:a2:64:b5:1b:1a:98:39:1b: d7:85:0e:5f:05:5b:04:40:00:87:50:a4:b8:1e:34: f0:eb:a7:45:76:c6:0d:38:2b:b7:41:fb:01:3f:ea: 80:51:16:38:7f:19:c8:7f:d1:f3:10:ef:56:76:4e: c8:05:32:48:f1:5d:3e:83:d9:d8:8a:6b:85:55:3b: 02:99:e0:d1:f1:6c:8f:7b:a4:8f:de:86:03:67:13: 27:52:fc:04:65:45:7a:a8:f1:cf:87:d5:2d:8d:0e: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:BF:04:5A:A6:97:D4:9A:06:4D:8B:7B:FA:27:B7:A7:BD:BD:8B X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KKm_BFqml9SaBk2Le_ont6e9vYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.7.0/24 144.56.13.0/24 144.56.17.0/24 144.56.20.0/24 144.56.24.0/24 144.56.27.0/24 144.56.29.0/24 144.56.33.0-144.56.35.255 144.56.40.0/23 144.56.71.0/24 144.56.76.0/24 144.56.80.0/24 144.56.85.0/24 144.56.94.0/23 144.56.97.0/24 144.56.102.0/24 144.56.125.0/24 144.56.129.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b7:9a:f0:b4:4b:ca:48:34:77:12:c7:ea:7a:b9:ad:39:71: ed:c8:b2:8f:ab:a4:fe:e1:48:f1:02:f1:b1:14:9e:18:63:66: 2a:6e:b8:d1:47:c8:02:cd:76:98:42:4a:c6:ee:94:86:87:51: 87:03:1f:df:fc:4a:fd:27:bd:da:ce:9e:b5:34:0b:e2:8b:0a: 52:f6:e4:c4:77:d1:35:b9:ea:1c:4f:a2:0d:46:3d:6a:0f:e5: d6:80:fe:fe:bd:55:f5:86:18:9a:6b:db:70:c1:22:b3:7f:b7: 92:86:d3:fe:d8:94:97:bb:72:46:cf:e9:e4:5b:e7:68:18:4a: 22:c0:4c:d8:2c:24:4a:08:e3:2a:11:f9:0c:61:6e:19:53:2a: cf:ec:87:eb:c6:f5:95:8d:6e:5e:2a:5a:b1:dc:9e:33:13:a6: dc:48:51:31:60:41:d0:e0:c4:95:05:3f:11:d4:00:a7:d6:fa: e1:6e:36:99:9c:60:26:1f:fb:8d:a4:ab:04:13:60:f3:bb:35: 21:c3:04:e4:fb:42:99:be:08:0d:74:65:ef:a2:7a:1d:a8:b5: 11:1d:83:c8:9c:97:be:68:d8:94:43:eb:bf:92:92:6a:4b:85: ab:62:65:27:db:2c:8b:5a:ae:74:d1:fd:b1:0b:cf:b9:3d:a3: b3:d9:95:d9 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZsCLhEnJ9emG6E81xEqE8uaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjA5MDgxNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGE5YmYwNDVhYTY5N2Q0OWEwNjRkOGI3YmZhMjdiN2E3YmRiZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZMmJEt8AzG+xibORxh0poiHKPcS WBcSWUIwHWLrzwKFei8Sc+O2IJV07Z+nuCW0yLbO3J2fFcQjtqs2JgkVX3hd0vZJ b1qRv6MvhHg3Amm7VOhB7C4r9NEZDE1fqjAaA2WzqptG9z7ZJ1ZvQZi83nahtMJB jTo5rj36DgrifAxL+vTO0nn2gLOOyGfr6hpAwYn10hE01r2U9zx0omS1GxqYORvX hQ5fBVsEQACHUKS4HjTw66dFdsYNOCu3QfsBP+qAURY4fxnIf9HzEO9Wdk7IBTJI 8V0+g9nYimuFVTsCmeDR8WyPe6SP3oYDZxMnUvwEZUV6qPHPh9UtjQ5cuQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFCipvwRappfUmgZNi3v6J7envb2LMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvS0ttX0JGcW1sOVNhQmsyTGVfb250NmU5dllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAJA4BwME AJA4DQMEAJA4EQMEAJA4FAMEAJA4GAMEAJA4GwMEAJA4HTAMAwQAkDghAwQCkDgg AwQBkDgoAwQAkDhHAwQAkDhMAwQAkDhQAwQAkDhVAwQBkDheAwQAkDhhAwQAkDhm AwQAkDh9AwQAkDiBMA0GCSqGSIb3DQEBCwUAA4IBAQAwt5rwtEvKSDR3Esfqermt OXHtyLKPq6T+4UjxAvGxFJ4YY2YqbrjRR8gCzXaYQkrG7pSGh1GHAx/f/Er9J73a zp61NAviiwpS9uTEd9E1ueocT6INRj1qD+XWgP7+vVX1hhiaa9twwSKzf7eShtP+ 2JSXu3JGz+nkW+doGEoiwEzYLCRKCOMqEfkMYW4ZUyrP7IfrxvWVjW5eKlqx3J4z E6bcSFExYEHQ4MSVBT8R1ACn1vrhbjaZnGAmH/uNpKsEE2DzuzUhwwTk+0KZvggN dGXvonodqLURHYPInJe+aNiUQ+u/kpJqS4WrYmUn2yyLWq500f2xC8+5PaOz2ZXZ -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:03 2025 by rpki-client