This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kYmCwj1uT6GyE-JfkcekvY68NbY.roa File: kYmCwj1uT6GyE-JfkcekvY68NbY.roa (raw, json) Hash identifier: 7YQNDJdXXaVlvacpoUbYnKrL2vOJ8BgDtiL35Z592A0= Subject key identifier: 91:89:82:C2:3D:6E:4F:A1:B2:13:E2:5F:91:C7:A4:BD:8E:BC:35:B6 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AE81E444C8A492E4E548D78D10BC6A428 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kYmCwj1uT6GyE-JfkcekvY68NbY.roa Signing time: Thu 04 Dec 2025 06:48:08 +0000 ROA not before: Thu 04 Dec 2025 06:48:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211813 IP address blocks: 212.134.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:1e:44:4c:8a:49:2e:4e:54:8d:78:d1:0b:c6:a4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 4 06:48:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=918982c23d6e4fa1b213e25f91c7a4bd8ebc35b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:29:eb:cc:6e:19:bf:49:8d:9b:8f:7b:47: 82:00:4f:fd:5d:dd:0c:79:c6:d2:de:d6:57:09:63: b2:46:84:9f:5a:40:68:5d:3d:c1:68:7a:b2:0e:e3: 5d:00:c9:06:a6:d6:b7:be:1a:78:1f:1c:07:84:cf: 3e:c2:3c:3f:3d:9f:49:53:6f:af:d7:10:10:28:de: b8:d0:0d:ac:22:dc:05:a2:64:08:14:7e:cf:39:70: 85:fb:53:af:d8:62:44:d8:48:31:b1:63:63:0c:58: 7c:63:fa:d1:f3:84:e2:56:98:1a:be:3a:5c:53:82: 00:03:7a:95:c3:62:6e:22:8b:79:a4:f8:1a:9a:2e: cf:ac:32:95:cf:39:8d:85:5f:ff:61:c4:3a:d9:98: 4e:75:c4:0d:27:60:3a:4f:bf:e3:8d:13:ad:cd:14: 71:02:33:0d:e2:a0:c6:80:5a:0a:5f:53:cd:c4:b5: 05:80:f5:ed:52:67:d7:07:14:c9:04:47:8b:be:67: 47:ce:7b:e0:39:2c:56:bb:fb:44:0e:5c:4e:26:b1: bb:66:16:27:8d:55:ae:0b:f8:ed:44:0d:35:1b:0e: 57:db:be:a6:f2:f3:ff:e3:9f:5a:3d:e8:a8:b2:8d: 4f:8c:75:5d:d9:26:c5:81:99:37:74:5c:5c:41:9c: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:89:82:C2:3D:6E:4F:A1:B2:13:E2:5F:91:C7:A4:BD:8E:BC:35:B6 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kYmCwj1uT6GyE-JfkcekvY68NbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.96.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e3:97:4d:fe:c1:77:fa:e0:06:ec:67:25:c0:f2:d0:6e:b9: 6a:0a:2e:fc:24:3b:34:11:9b:e7:93:f2:33:eb:96:05:04:c8: df:96:e8:d0:09:58:2f:92:e8:7f:0d:92:4e:2e:c4:95:9a:0e: 23:5f:2d:fb:9f:63:1b:f7:b6:e3:71:9f:fa:1c:8c:39:1a:a1: 52:b0:a3:1a:c2:d2:a0:4f:13:9c:6a:70:37:34:0a:5b:d3:6d: ed:18:a7:6c:28:14:33:7e:8f:24:eb:87:e1:cd:db:50:53:10: a4:e9:5a:4f:77:2a:66:cb:80:c1:48:f9:e2:9e:cf:a5:6f:f2: 00:09:b7:b3:e7:ea:b6:39:fd:7d:c1:4a:19:0e:50:09:96:8b: 0d:08:c0:11:fe:f5:91:57:c1:97:cc:21:6f:7c:2d:84:8c:e7: 94:45:e3:9a:80:51:fd:9f:5a:6c:9b:f7:61:27:97:71:5d:2d: c9:92:f7:7a:98:a7:e3:0e:01:9e:b4:1c:81:b9:d8:64:c6:ef: fa:5a:1c:1a:e1:cd:29:47:91:a8:b9:b3:56:68:18:a3:36:94: 81:d8:a9:ba:d7:f9:fb:ed:a9:45:3b:c2:7f:b5:3c:cd:4d:5b: 9a:ba:6b:53:c2:e0:da:3b:ea:20:1d:d5:10:22:3c:d3:4e:b6: b1:0d:c2:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZroHkRMikkuTlSNeNELxqQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA0MDY0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTg5ODJjMjNkNmU0ZmExYjIxM2UyNWY5MWM3YTRiZDhlYmMzNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplop68xuGb9JjZuPe0eCAE/9Xd0M ecbS3tZXCWOyRoSfWkBoXT3BaHqyDuNdAMkGpta3vhp4HxwHhM8+wjw/PZ9JU2+v 1xAQKN640A2sItwFomQIFH7POXCF+1Ov2GJE2EgxsWNjDFh8Y/rR84TiVpgavjpc U4IAA3qVw2JuIot5pPgami7PrDKVzzmNhV//YcQ62ZhOdcQNJ2A6T7/jjROtzRRx AjMN4qDGgFoKX1PNxLUFgPXtUmfXBxTJBEeLvmdHznvgOSxWu/tEDlxOJrG7ZhYn jVWuC/jtRA01Gw5X276m8vP/459aPeioso1PjHVd2SbFgZk3dFxcQZz1EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGJgsI9bk+hshPiX5HHpL2OvDW2MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEva1ltQ3dqMXVUNkd5RS1KZmtjZWt2WTY4TmJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IZgMA0G CSqGSIb3DQEBCwUAA4IBAQCV45dN/sF3+uAG7GclwPLQbrlqCi78JDs0EZvnk/Iz 65YFBMjflujQCVgvkuh/DZJOLsSVmg4jXy37n2Mb97bjcZ/6HIw5GqFSsKMawtKg TxOcanA3NApb023tGKdsKBQzfo8k64fhzdtQUxCk6VpPdypmy4DBSPnins+lb/IA Cbez5+q2Of19wUoZDlAJlosNCMAR/vWRV8GXzCFvfC2EjOeUReOagFH9n1psm/dh J5dxXS3Jkvd6mKfjDgGetByBudhkxu/6Whwa4c0pR5GoubNWaBijNpSB2Km61/n7 7alFO8J/tTzNTVuaumtTwuDaO+ogHdUQIjzTTraxDcLT -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:08 2025 by rpki-client