This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/KtrJMDlq7VubL93ufKqd09wVGkQ.roa File: KtrJMDlq7VubL93ufKqd09wVGkQ.roa (raw, json) Hash identifier: MkTcIjtIvVmqMWZfhwxwiaFnu7dRIMRUnknyHLDaAKU= Subject key identifier: 2A:DA:C9:30:39:6A:ED:5B:9B:2F:DD:EE:7C:AA:9D:D3:DC:15:1A:44 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019B0EF8DEFF018B05A33E1632EA6EDD6BA9 Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/KtrJMDlq7VubL93ufKqd09wVGkQ.roa Signing time: Thu 11 Dec 2025 19:52:29 +0000 ROA not before: Thu 11 Dec 2025 19:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8254 IP address blocks: 5.34.178.0/23 maxlen: 23 46.28.71.0/24 maxlen: 24 82.117.252.0/23 maxlen: 23 82.117.254.0/24 maxlen: 24 85.90.197.0/24 maxlen: 24 85.90.198.0/24 maxlen: 24 217.12.204.0/24 maxlen: 24 2a05:9405::/32 maxlen: 32 2a12:6fc3::/32 maxlen: 32 2a12:6fc4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:f8:de:ff:01:8b:05:a3:3e:16:32:ea:6e:dd:6b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Dec 11 19:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2adac930396aed5b9b2fddee7caa9dd3dc151a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:95:fc:91:4c:6c:f0:ec:8e:d8:ff:31:de:a1: 25:7d:f9:a5:1c:56:95:48:3a:38:24:a2:f8:45:20: d9:9a:3e:48:1b:ac:9c:15:b2:1d:07:d9:95:69:74: 0f:e0:78:aa:3d:d1:0b:df:fd:bd:1c:7d:84:75:1e: 5c:8d:09:9b:cd:97:65:b8:c9:3c:3f:9c:8e:af:8f: fa:91:a5:62:ea:a4:4e:cb:35:d3:b0:34:d5:10:13: ea:04:a9:18:96:47:a1:5a:4d:cc:5d:c4:2a:89:00: 67:02:7c:ca:e1:21:ed:4d:ea:8a:60:bb:98:51:f4: d1:57:14:48:87:62:fe:73:7f:f8:2b:78:39:37:87: 3c:d5:fd:c4:14:3f:75:7f:71:b9:f3:cc:9d:af:c6: 7c:15:f5:91:65:5e:56:9c:2d:30:12:8d:05:d0:34: b4:00:8f:3a:c1:80:97:f2:06:1d:1e:32:3f:e7:79: a7:96:40:75:1d:3f:36:a1:fe:a0:21:25:6f:82:b9: 2e:f0:3d:92:b9:4c:22:33:06:57:75:03:c9:8a:9f: ea:45:fc:67:c3:00:45:bf:c4:01:13:ac:3c:c4:af: a0:d6:53:72:5a:c1:f6:b5:c8:f3:03:8b:20:62:01: 4d:19:28:ed:5a:87:bd:cc:05:df:5a:44:ce:2c:45: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:C9:30:39:6A:ED:5B:9B:2F:DD:EE:7C:AA:9D:D3:DC:15:1A:44 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/KtrJMDlq7VubL93ufKqd09wVGkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.178.0/23 46.28.71.0/24 82.117.252.0-82.117.254.255 85.90.197.0-85.90.198.255 217.12.204.0/24 IPv6: 2a05:9405::/32 2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:60:59:89:97:b8:90:4c:d9:e6:e3:0d:e3:a0:dc:93:58:ea: 44:35:89:2d:26:30:08:d8:10:07:b5:92:dd:1a:a0:bd:54:98: 45:c6:4d:0c:0d:07:a6:d4:15:29:2b:00:19:d5:52:b8:e6:90: 57:53:01:2e:48:de:7b:fd:24:bc:35:34:1d:38:a1:89:2e:5d: f4:a5:59:c7:9a:13:bc:35:cc:3f:14:87:e0:6f:0d:35:4f:f5: 50:8a:23:6b:f1:13:95:14:a0:1b:00:48:75:ac:d7:e7:eb:ad: 16:ba:ae:13:31:ee:d0:33:68:ca:97:32:13:94:02:ff:b1:4a: 88:af:66:72:6f:26:6b:c2:2e:e2:d0:71:90:e5:7b:56:49:5b: 64:bf:83:6a:e3:20:bf:da:27:43:13:1d:1f:a4:f5:02:a4:ab: 87:43:2a:29:6d:bb:70:72:a0:ff:b1:24:2d:f8:48:8c:ef:3d: 69:38:e2:9e:3a:40:21:9d:e5:dc:7f:5e:af:01:bc:8d:35:19: e7:07:34:b3:28:d4:28:fa:11:3e:b9:05:8c:33:81:3f:18:09: 8f:93:a1:d6:94:bb:b8:d5:0c:fc:0b:54:bc:08:4b:21:c5:f7: 16:32:1a:69:9d:05:21:31:6b:2c:c8:aa:ec:c9:82:dd:56:77: 04:86:5d:c2 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZsO+N7/AYsFoz4WMupu3WupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjUxMjExMTk1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRhYzkzMDM5NmFlZDViOWIyZmRkZWU3Y2FhOWRkM2RjMTUxYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pX8kUxs8OyO2P8x3qElffmlHFaV SDo4JKL4RSDZmj5IG6ycFbIdB9mVaXQP4HiqPdEL3/29HH2EdR5cjQmbzZdluMk8 P5yOr4/6kaVi6qROyzXTsDTVEBPqBKkYlkehWk3MXcQqiQBnAnzK4SHtTeqKYLuY UfTRVxRIh2L+c3/4K3g5N4c81f3EFD91f3G588ydr8Z8FfWRZV5WnC0wEo0F0DS0 AI86wYCX8gYdHjI/53mnlkB1HT82of6gISVvgrku8D2SuUwiMwZXdQPJip/qRfxn wwBFv8QBE6w8xK+g1lNyWsH2tcjzA4sgYgFNGSjtWoe9zAXfWkTOLEWnxwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFCrayTA5au1bmy/d7nyqndPcFRpEMB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvS3RySk1EbHE3VnViTDkzdWZLcWQwOXdWR2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTA0BAIAATAuAwQBBSKyAwQA LhxHMAwDBAJSdfwDBABSdf4wDAMEAFVaxQMEAFVaxgMEANkMzDAdBAIAAjAXAwUA KgWUBTAOAwUAKhJvwwMFACoSb8QwDQYJKoZIhvcNAQELBQADggEBAD5gWYmXuJBM 2ebjDeOg3JNY6kQ1iS0mMAjYEAe1kt0aoL1UmEXGTQwNB6bUFSkrABnVUrjmkFdT AS5I3nv9JLw1NB04oYkuXfSlWceaE7w1zD8Uh+BvDTVP9VCKI2vxE5UUoBsASHWs 1+frrRa6rhMx7tAzaMqXMhOUAv+xSoivZnJvJmvCLuLQcZDle1ZJW2S/g2rjIL/a J0MTHR+k9QKkq4dDKiltu3ByoP+xJC34SIzvPWk44p46QCGd5dx/Xq8BvI01GecH NLMo1Cj6ET65BYwzgT8YCY+TodaUu7jVDPwLVLwISyHF9xYyGmmdBSExayzIquzJ gt1WdwSGXcI= -----END CERTIFICATE-----Generated at Sat Dec 13 19:14:54 2025 by rpki-client