This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/kaPJSPz8kMdn64DJ85XjvYk6hG4.roa File: kaPJSPz8kMdn64DJ85XjvYk6hG4.roa (raw, json) Hash identifier: JcBd3CNzPoTNNcCK9MPuQYxJFvjr9KzqyQeduEzMMcY= Subject key identifier: 91:A3:C9:48:FC:FC:90:C7:67:EB:80:C9:F3:95:E3:BD:89:3A:84:6E Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Certificate serial: 019A7F8906A8B95C9010FD5DFE2D49A13759 Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/kaPJSPz8kMdn64DJ85XjvYk6hG4.roa Signing time: Thu 13 Nov 2025 23:24:37 +0000 ROA not before: Thu 13 Nov 2025 23:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 194.32.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:89:06:a8:b9:5c:90:10:fd:5d:fe:2d:49:a1:37:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Validity Not Before: Nov 13 23:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91a3c948fcfc90c767eb80c9f395e3bd893a846e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0f:a0:a3:cd:a8:a3:a9:75:92:0e:4b:24:27: 6e:4a:cd:d5:82:c2:02:e9:3f:7f:13:29:48:5b:b1: be:83:1a:66:38:47:cf:8b:aa:b4:8c:38:a0:d5:43: 6b:29:4f:29:cc:57:c3:71:d5:6b:9b:0c:a8:50:e3: 4f:0c:6e:8b:cd:7e:a2:6b:5b:35:ec:6c:90:82:a0: cd:e3:05:ea:9b:45:cc:57:f6:20:ff:eb:2b:fa:dc: e6:24:18:82:ad:84:0f:ca:8d:e3:3c:24:40:76:d8: e9:76:0d:c6:a2:67:65:77:89:c1:a1:ef:7e:3f:3a: 16:fe:7f:da:35:c4:ba:ae:46:4b:f2:4a:81:6b:48: 86:03:07:06:f1:64:1b:a9:d8:52:45:7c:3c:e6:ce: 32:d1:64:53:01:b1:87:48:69:9c:04:a4:51:63:29: 4b:fc:53:75:90:cd:c4:04:a4:99:cf:6e:83:b5:dd: 9d:0d:60:83:62:1b:6e:b2:85:69:c5:e7:66:48:1d: 9c:ff:39:5d:46:0a:30:1e:3b:e1:b1:84:87:6c:bd: d3:7e:38:16:f4:e5:75:f6:83:8a:1d:ab:8e:34:2e: 39:83:78:6f:fe:6f:01:ce:6c:13:c5:23:07:be:26: c3:5f:4c:34:ed:3c:ca:3d:e2:66:bc:c9:0b:e8:47: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A3:C9:48:FC:FC:90:C7:67:EB:80:C9:F3:95:E3:BD:89:3A:84:6E X509v3 Authority Key Identifier: keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/kaPJSPz8kMdn64DJ85XjvYk6hG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.146.0/23 Signature Algorithm: sha256WithRSAEncryption 20:31:92:28:45:b5:9c:39:b3:30:93:03:b2:08:1f:f3:8a:07: 0a:53:86:1d:74:d8:e3:df:51:57:a3:fd:6c:b1:80:5a:34:c2: 8f:f3:1d:f2:6c:85:cc:fc:d1:70:7f:2d:16:96:08:91:3f:4f: 82:cd:44:e8:2e:69:a3:88:40:ca:ea:62:41:ee:85:24:c0:62: db:9e:ed:3d:60:27:5f:3f:20:dc:3d:c8:ac:32:69:b1:20:bc: a6:cf:0f:c2:cc:ca:b0:9b:56:1b:9d:64:8c:f9:af:4c:48:e8: 62:c0:57:70:4d:64:a2:b7:42:75:21:b9:d6:53:d6:cc:79:a4: fc:23:29:50:f6:50:69:ce:c8:7b:40:c2:ea:2b:0d:28:2e:e6: 0c:7f:3c:e1:0e:d7:1c:06:c9:c0:9d:ac:45:22:a8:f5:0f:54: 5d:15:f1:ab:a3:a6:90:d5:ba:71:a0:e6:66:dd:b0:4f:61:54: c6:78:b4:e4:e8:00:1e:95:99:7b:a6:62:1d:fe:82:6c:98:7e: 64:e1:41:4c:55:47:39:7e:8e:b0:ea:7f:a4:16:b5:e3:28:ac: 2e:d6:5c:0e:fe:4a:7e:08:26:d8:a8:5e:3e:f3:2d:a3:41:6f: c4:5e:2a:d6:f9:ab:f6:47:fb:4d:bd:f0:0e:e8:21:a7:d4:15: e2:e3:90:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp/iQaouVyQEP1d/i1JoTdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0 NDg4NzgwHhcNMjUxMTEzMjMyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWEzYzk0OGZjZmM5MGM3NjdlYjgwYzlmMzk1ZTNiZDg5M2E4NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g+go82oo6l1kg5LJCduSs3VgsIC 6T9/EylIW7G+gxpmOEfPi6q0jDig1UNrKU8pzFfDcdVrmwyoUONPDG6LzX6ia1s1 7GyQgqDN4wXqm0XMV/Yg/+sr+tzmJBiCrYQPyo3jPCRAdtjpdg3Gomdld4nBoe9+ PzoW/n/aNcS6rkZL8kqBa0iGAwcG8WQbqdhSRXw85s4y0WRTAbGHSGmcBKRRYylL /FN1kM3EBKSZz26Dtd2dDWCDYhtusoVpxedmSB2c/zldRgowHjvhsYSHbL3TfjgW 9OV19oOKHauONC45g3hv/m8BzmwTxSMHvibDX0w07TzKPeJmvMkL6Ef2zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGjyUj8/JDHZ+uAyfOV472JOoRuMB8GA1UdIwQY MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt YzBiMWFkNDM1Yjk1LzEva2FQSlNQejhrTWRuNjRESjg1WGp2WWs2aEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1 LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiCSMA0G CSqGSIb3DQEBCwUAA4IBAQAgMZIoRbWcObMwkwOyCB/zigcKU4YddNjj31FXo/1s sYBaNMKP8x3ybIXM/NFwfy0WlgiRP0+CzUToLmmjiEDK6mJB7oUkwGLbnu09YCdf PyDcPcisMmmxILymzw/CzMqwm1YbnWSM+a9MSOhiwFdwTWSit0J1IbnWU9bMeaT8 IylQ9lBpzsh7QMLqKw0oLuYMfzzhDtccBsnAnaxFIqj1D1RdFfGro6aQ1bpxoOZm 3bBPYVTGeLTk6AAelZl7pmId/oJsmH5k4UFMVUc5fo6w6n+kFrXjKKwu1lwO/kp+ CCbYqF4+8y2jQW/EXirW+av2R/tNvfAO6CGn1BXi45BE -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:11 2025 by rpki-client