This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/kmwaQJXKu5oNK1QMYZjPLEaW6vA.roa File: kmwaQJXKu5oNK1QMYZjPLEaW6vA.roa (raw, json) Hash identifier: ILayvTcq7E5XOovRiUZyWfxx6ASX6WCDrzrSp9Qk9AE= Subject key identifier: 92:6C:1A:40:95:CA:BB:9A:0D:2B:54:0C:61:98:CF:2C:46:96:EA:F0 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D263387EE394E70424B7180B2E94 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/kmwaQJXKu5oNK1QMYZjPLEaW6vA.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42831 IP address blocks: 45.128.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d2:63:38:7e:e3:94:e7:04:24:b7:18:0b:2e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=926c1a4095cabb9a0d2b540c6198cf2c4696eaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:e6:f9:96:f6:a8:61:a3:f1:07:04:f4:f9: da:c0:68:26:26:0f:b8:28:05:89:e2:43:8e:6d:34: cb:e5:58:54:dc:41:28:6c:89:f6:3a:4f:00:47:c8: 34:8f:5e:2d:3c:ef:95:fb:b9:40:47:1c:d7:ff:be: 46:9f:55:d4:2e:0e:d4:84:32:cb:17:22:6f:07:57: 92:46:01:1b:9e:53:df:a1:c3:27:1b:e9:46:d0:7f: b1:d3:43:7b:2d:54:6c:30:d0:c8:7e:c3:39:ff:97: 0e:27:e7:0d:f3:fb:a0:76:cb:d7:08:50:4a:79:ca: 2d:53:f5:e4:fc:cc:d3:51:a9:27:bc:4d:49:98:49: b5:bb:42:df:8b:15:0c:ee:fc:ec:e9:21:5a:9e:df: 15:fd:54:fa:d3:cb:43:75:e7:bb:39:0a:9d:7f:be: 53:54:3a:d9:54:fe:5b:1b:e4:30:66:7e:cd:ef:84: 0e:55:f1:5b:b1:ae:e0:84:90:0e:74:c9:03:c7:48: d2:7e:78:21:27:ba:22:0d:da:54:81:e5:0f:d4:82: c5:f9:39:73:88:9d:f0:94:58:83:63:d4:fd:7f:bd: 7b:11:cc:79:98:55:2d:a2:83:bf:d3:ba:98:a7:ff: 8a:7a:00:a4:9b:cd:eb:36:87:9c:b6:26:9e:5e:c5: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6C:1A:40:95:CA:BB:9A:0D:2B:54:0C:61:98:CF:2C:46:96:EA:F0 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/kmwaQJXKu5oNK1QMYZjPLEaW6vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.223.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:c5:e0:2b:b6:d5:9a:19:db:95:48:35:da:f4:89:9c:bc:90: 69:28:e9:2d:37:f9:92:d0:c0:26:54:9e:b0:95:c9:c2:36:26: 12:0e:44:e4:74:87:34:fe:5c:e2:53:3d:75:25:23:83:d8:d5: 54:90:a0:cd:b4:cc:d6:c9:ce:4b:7a:ca:6c:65:cd:5a:88:6f: 1b:71:b3:c4:63:a0:4a:c3:ab:f1:82:f8:99:d8:c0:29:f8:ad: 9f:09:da:a3:f3:d3:f2:c0:67:d5:91:f9:a4:25:e4:78:97:3b: 9a:6a:9c:d7:bb:19:f4:2f:b3:f9:0a:c3:4b:ce:f1:82:85:7d: c2:49:43:5a:b4:a5:c4:77:fa:b7:d1:d4:1d:f6:db:5a:5c:d7: bf:d0:ba:20:f8:1f:b0:50:b8:f3:5a:be:a0:91:d1:c0:52:3b: 8a:1c:8e:ba:2a:3d:72:19:5c:8d:ec:fa:72:e7:ef:5b:08:2e: 01:d6:05:d0:65:9d:bb:ff:5b:a5:d7:cf:b4:7c:68:de:6d:9b: a6:88:ec:a7:a8:83:c9:a5:b2:97:01:20:68:9f:dc:3d:9a:d8: a3:75:62:bb:7e:b6:7f:6a:cb:9e:f8:12:3a:9c:c0:86:b9:26: fe:77:7b:c4:bb:45:d1:91:e0:00:f3:d8:b9:78:f0:5f:8f:55: 8f:32:b9:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttJjOH7jlOcEJLcYCy6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZjMWE0MDk1Y2FiYjlhMGQyYjU0MGM2MTk4Y2YyYzQ2OTZlYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPzm+Zb2qGGj8QcE9PnawGgmJg+4 KAWJ4kOObTTL5VhU3EEobIn2Ok8AR8g0j14tPO+V+7lARxzX/75Gn1XULg7UhDLL FyJvB1eSRgEbnlPfocMnG+lG0H+x00N7LVRsMNDIfsM5/5cOJ+cN8/ugdsvXCFBK ecotU/Xk/MzTUaknvE1JmEm1u0LfixUM7vzs6SFant8V/VT608tDdee7OQqdf75T VDrZVP5bG+QwZn7N74QOVfFbsa7ghJAOdMkDx0jSfnghJ7oiDdpUgeUP1ILF+Tlz iJ3wlFiDY9T9f717Ecx5mFUtooO/07qYp/+KegCkm83rNoectiaeXsWjTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJsGkCVyruaDStUDGGYzyxGlurwMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEva213YVFKWEt1NW9OSzFRTVlaalBMRWFXNnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDfMA0G CSqGSIb3DQEBCwUAA4IBAQAdxeArttWaGduVSDXa9ImcvJBpKOktN/mS0MAmVJ6w lcnCNiYSDkTkdIc0/lziUz11JSOD2NVUkKDNtMzWyc5LespsZc1aiG8bcbPEY6BK w6vxgviZ2MAp+K2fCdqj89PywGfVkfmkJeR4lzuaapzXuxn0L7P5CsNLzvGChX3C SUNatKXEd/q30dQd9ttaXNe/0Log+B+wULjzWr6gkdHAUjuKHI66Kj1yGVyN7Ppy 5+9bCC4B1gXQZZ27/1ul18+0fGjebZumiOynqIPJpbKXASBon9w9mtijdWK7frZ/ asue+BI6nMCGuSb+d3vEu0XRkeAA89i5ePBfj1WPMrkx -----END CERTIFICATE-----Generated at Wed Dec 3 13:10:03 2025 by rpki-client