This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/KjswyMK3Tpvkw3yo65ym9n0PtiM.roa File: KjswyMK3Tpvkw3yo65ym9n0PtiM.roa (raw, json) Hash identifier: 3zrcHqv6VZBM9zwgj0emokdt+PAnQrDHQ7tfY/qcbno= Subject key identifier: 2A:3B:30:C8:C2:B7:4E:9B:E4:C3:7C:A8:EB:9C:A6:F6:7D:0F:B6:23 Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019B695496B96CA4CFAF11450F3CEFD263EA Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/KjswyMK3Tpvkw3yo65ym9n0PtiM.roa Signing time: Mon 29 Dec 2025 08:58:29 +0000 ROA not before: Mon 29 Dec 2025 08:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 37.153.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:54:96:b9:6c:a4:cf:af:11:45:0f:3c:ef:d2:63:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Dec 29 08:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a3b30c8c2b74e9be4c37ca8eb9ca6f67d0fb623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:bb:4e:22:ac:c8:da:be:ed:85:e1:00:45: 00:cb:73:2b:8f:60:05:84:ec:e3:ad:19:35:44:ca: 3b:b1:08:91:f8:69:ad:ec:e4:0d:4f:49:6e:56:d9: 63:5c:40:ae:00:d2:a6:25:60:5e:c8:df:25:57:da: e7:46:df:cf:04:27:8f:02:03:69:12:83:e1:7f:c2: db:fc:19:fc:61:f3:fb:d6:39:e3:a0:fb:43:14:c0: 47:17:19:7d:6a:1a:9d:86:62:06:c7:4d:c1:03:b6: 9e:6c:dd:e5:75:5e:a7:8e:d1:26:f9:16:54:d9:13: b2:77:56:75:9f:4e:8d:42:5b:3d:7e:17:e8:02:36: 4a:07:9f:fd:3d:7d:46:77:cb:fc:b5:3f:0b:ae:5a: d6:7c:40:a3:cf:c1:ac:bf:f4:00:0f:57:ff:0c:31: dd:af:26:7f:fb:da:b9:dc:7f:48:8b:a0:52:a6:0c: 4c:c7:a4:d1:bb:17:69:37:5b:ee:a6:20:41:c4:e5: 89:f9:88:0c:08:e2:aa:50:da:1d:0c:d1:d0:41:4c: 92:12:a3:43:40:ff:db:6b:c8:f2:f8:38:69:e8:79: 8d:5f:ba:9f:a0:fb:f1:a8:6f:d7:28:5a:62:e6:07: 5d:46:79:71:75:d9:d1:e3:bf:85:71:46:4c:6c:fb: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:30:C8:C2:B7:4E:9B:E4:C3:7C:A8:EB:9C:A6:F6:7D:0F:B6:23 X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/KjswyMK3Tpvkw3yo65ym9n0PtiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.153.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:eb:a5:b9:29:14:8c:b2:70:79:5b:9e:80:1e:a9:3a:31:9b: 99:94:5b:b3:04:eb:2f:1b:7e:d4:eb:74:10:a2:b8:ff:4b:49: 2c:4f:bc:14:fe:65:d0:4b:00:85:7a:d5:b3:98:d3:87:72:34: 93:b4:a9:ac:d1:32:d8:b5:04:13:bb:12:4a:08:68:a3:2c:37: 80:7b:cf:91:b7:d0:fc:9c:7f:fd:66:d6:09:88:66:e8:6d:fd: dd:8b:73:e1:ee:8c:71:2d:4e:9a:9f:5b:a3:d8:37:29:ad:a9: 13:7d:73:06:1d:d6:f1:1a:ce:b3:f8:8b:16:2e:17:4f:22:53: 5d:5f:ed:98:a2:b2:65:89:9c:55:ed:be:0d:08:1f:fa:0b:68: 60:bb:24:3a:a7:ac:9b:d5:95:62:06:17:17:fe:73:dd:f2:89: 6b:3f:8d:4c:30:fc:c6:08:20:a3:1e:c8:6e:9a:48:e3:6e:d5: af:3f:bf:2d:5a:e8:52:cf:4c:74:f0:52:ec:cd:76:b1:86:6f: e5:fc:54:a2:8b:81:5a:72:b2:1b:6c:2f:08:0e:fd:a1:16:bb: cd:6c:f1:78:51:92:72:20:c8:97:07:13:b0:4e:c4:aa:fc:18: cd:93:88:15:34:79:ee:8a:0b:7e:5a:bd:84:f5:63:b5:13:9c: 29:3a:22:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtpVJa5bKTPrxFFDzzv0mPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjUxMjI5MDg1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTNiMzBjOGMyYjc0ZTliZTRjMzdjYThlYjljYTZmNjdkMGZiNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPC7TiKsyNq+7YXhAEUAy3Mrj2AF hOzjrRk1RMo7sQiR+Gmt7OQNT0luVtljXECuANKmJWBeyN8lV9rnRt/PBCePAgNp EoPhf8Lb/Bn8YfP71jnjoPtDFMBHFxl9ahqdhmIGx03BA7aebN3ldV6njtEm+RZU 2ROyd1Z1n06NQls9fhfoAjZKB5/9PX1Gd8v8tT8LrlrWfECjz8Gsv/QAD1f/DDHd ryZ/+9q53H9Ii6BSpgxMx6TRuxdpN1vupiBBxOWJ+YgMCOKqUNodDNHQQUySEqND QP/ba8jy+Dhp6HmNX7qfoPvxqG/XKFpi5gddRnlxddnR47+FcUZMbPuVtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCo7MMjCt06b5MN8qOucpvZ9D7YjMB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvS2pzd3lNSzNUcHZrdzN5bzY1eW05bjBQdGlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmZMA0G CSqGSIb3DQEBCwUAA4IBAQCM66W5KRSMsnB5W56AHqk6MZuZlFuzBOsvG37U63QQ orj/S0ksT7wU/mXQSwCFetWzmNOHcjSTtKms0TLYtQQTuxJKCGijLDeAe8+Rt9D8 nH/9ZtYJiGbobf3di3Ph7oxxLU6an1uj2DcprakTfXMGHdbxGs6z+IsWLhdPIlNd X+2YorJliZxV7b4NCB/6C2hguyQ6p6yb1ZViBhcX/nPd8olrP41MMPzGCCCjHshu mkjjbtWvP78tWuhSz0x08FLszXaxhm/l/FSii4FacrIbbC8IDv2hFrvNbPF4UZJy IMiXBxOwTsSq/BjNk4gVNHnuigt+Wr2E9WO1E5wpOiIE -----END CERTIFICATE-----Generated at Tue Dec 30 21:08:01 2025 by rpki-client