This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/kVPNw4rYQNAdnL1xg0ts-DRyibI.roa File: kVPNw4rYQNAdnL1xg0ts-DRyibI.roa (raw, json) Hash identifier: StBQ5GJHHHN1Bp6rK5tcNIGtUliXMLLIKsgqRA3+2yE= Subject key identifier: 91:53:CD:C3:8A:D8:40:D0:1D:9C:BD:71:83:4B:6C:F8:34:72:89:B2 Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019B07B65AAA8E15FFD7CF00B25AC4A060EC Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/kVPNw4rYQNAdnL1xg0ts-DRyibI.roa Signing time: Wed 10 Dec 2025 10:02:29 +0000 ROA not before: Wed 10 Dec 2025 10:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198849 IP address blocks: 91.109.249.0/24 maxlen: 24 91.109.250.0/24 maxlen: 24 91.109.251.0/24 maxlen: 24 91.109.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b6:5a:aa:8e:15:ff:d7:cf:00:b2:5a:c4:a0:60:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Dec 10 10:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9153cdc38ad840d01d9cbd71834b6cf8347289b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:3d:f4:11:24:bc:21:18:2d:58:63:eb:27: 43:a1:9e:b7:1c:54:23:34:95:0c:a6:62:d1:07:d2: 1d:47:e7:eb:0c:21:54:aa:6c:35:1c:3c:13:ce:26: a2:d7:fa:c0:c9:2b:fd:16:ee:56:47:48:e2:20:e9: 1f:4a:6a:11:cf:9d:21:4a:7f:3c:aa:54:5f:11:b2: d4:5c:f2:f9:97:12:28:52:ef:cc:c7:9a:61:85:5e: 25:ae:fc:83:e7:cf:46:29:f3:86:4c:78:b3:e3:5e: 83:0d:19:55:63:af:b6:be:d9:8d:fc:a4:eb:b3:8b: bb:e2:39:a2:b4:86:20:9d:4d:68:af:f6:e0:ca:2c: 13:ad:48:47:05:54:71:91:2b:5c:06:f3:41:10:44: 9b:0a:27:92:92:28:f9:40:b5:8b:6a:f0:47:2b:b2: e3:d4:13:d7:ff:4c:35:33:91:72:42:e9:c8:e0:e9: 87:ab:3c:d6:5d:b5:7e:e2:71:97:a7:83:fb:24:9d: a3:1d:cb:17:4c:b7:1e:f9:8b:77:05:f4:38:bd:84: ff:3e:12:22:9a:f1:7d:4c:43:38:69:01:e7:9f:fc: 81:d2:bd:1e:73:11:09:ec:e0:60:3a:cb:42:a5:ee: 1d:a1:50:f2:2c:52:43:a0:f0:24:aa:a3:7e:fd:97: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:53:CD:C3:8A:D8:40:D0:1D:9C:BD:71:83:4B:6C:F8:34:72:89:B2 X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/kVPNw4rYQNAdnL1xg0ts-DRyibI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.249.0-91.109.252.255 Signature Algorithm: sha256WithRSAEncryption 5e:46:cf:62:52:8e:10:46:88:cb:be:07:82:32:2b:c0:56:0b: d8:82:55:57:60:d8:06:be:a0:cf:bb:ca:d5:a3:d7:00:2b:0c: 7f:30:f3:b7:0e:41:40:b7:4d:09:7f:4a:6f:6d:35:a3:f3:b2: 44:ab:b3:8a:f9:22:29:2d:a6:1e:dd:24:4c:80:bc:ac:70:77: c6:26:19:59:85:5d:34:9f:64:01:82:2d:80:82:10:7c:a3:ca: cd:b5:d9:c2:67:1c:fe:21:f7:4f:d7:22:25:3e:b9:8b:2c:b7: e1:e5:38:d6:9a:bb:21:64:54:f6:10:64:10:37:e2:9e:3d:a2: 73:1d:45:ce:a0:54:3e:16:37:97:47:2d:b9:da:bd:68:6e:b1: 58:fc:b5:fa:28:41:0c:9b:d3:c1:01:72:e4:e5:5e:b0:e7:21: cb:81:e4:5f:93:68:93:a7:f5:54:cf:02:42:65:22:20:04:d4: c9:84:cc:7c:2e:0d:1d:d7:96:1d:71:a2:66:24:dd:cc:ea:b7: ea:08:40:52:95:9a:10:2b:f7:9d:91:14:5f:62:1b:e5:ce:0f: 02:8f:86:c9:0c:16:b4:73:e5:43:e9:2c:1e:14:c9:14:53:40: 9f:86:25:91:af:2f:14:d3:64:a1:54:8e:ea:86:64:c1:c7:49: 0c:2d:3c:77 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsHtlqqjhX/188AslrEoGDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjUxMjEwMTAwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTUzY2RjMzhhZDg0MGQwMWQ5Y2JkNzE4MzRiNmNmODM0NzI4OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKs99BEkvCEYLVhj6ydDoZ63HFQj NJUMpmLRB9IdR+frDCFUqmw1HDwTziai1/rAySv9Fu5WR0jiIOkfSmoRz50hSn88 qlRfEbLUXPL5lxIoUu/Mx5phhV4lrvyD589GKfOGTHiz416DDRlVY6+2vtmN/KTr s4u74jmitIYgnU1or/bgyiwTrUhHBVRxkStcBvNBEESbCieSkij5QLWLavBHK7Lj 1BPX/0w1M5FyQunI4OmHqzzWXbV+4nGXp4P7JJ2jHcsXTLce+Yt3BfQ4vYT/PhIi mvF9TEM4aQHnn/yB0r0ecxEJ7OBgOstCpe4doVDyLFJDoPAkqqN+/ZdquQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJFTzcOK2EDQHZy9cYNLbPg0comyMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEva1ZQTnc0cllRTkFkbkwxeGcwdHMtRFJ5aWJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbbfkD BABbbfwwDQYJKoZIhvcNAQELBQADggEBAF5Gz2JSjhBGiMu+B4IyK8BWC9iCVVdg 2Aa+oM+7ytWj1wArDH8w87cOQUC3TQl/Sm9tNaPzskSrs4r5Iiktph7dJEyAvKxw d8YmGVmFXTSfZAGCLYCCEHyjys212cJnHP4h90/XIiU+uYsst+HlONaauyFkVPYQ ZBA34p49onMdRc6gVD4WN5dHLbnavWhusVj8tfooQQyb08EBcuTlXrDnIcuB5F+T aJOn9VTPAkJlIiAE1MmEzHwuDR3Xlh1xomYk3czqt+oIQFKVmhAr952RFF9iG+XO DwKPhskMFrRz5UPpLB4UyRRTQJ+GJZGvLxTTZKFUjuqGZMHHSQwtPHc= -----END CERTIFICATE-----Generated at Sun Dec 14 14:46:38 2025 by rpki-client