This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/khYVfmMZroC_LO7BmtkmPU_zBKQ.roa File: khYVfmMZroC_LO7BmtkmPU_zBKQ.roa (raw, json) Hash identifier: Ab5J8rgvl4igOeG8ZtON1hGtWRNN3ptFaFJqhSWF5d0= Subject key identifier: 92:16:15:7E:63:19:AE:80:BF:2C:EE:C1:9A:D9:26:3D:4F:F3:04:A4 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B5AFD520CDE091020C146FC422F0D9E4F Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/khYVfmMZroC_LO7BmtkmPU_zBKQ.roa Signing time: Fri 26 Dec 2025 14:08:29 +0000 ROA not before: Fri 26 Dec 2025 14:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 91.108.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:fd:52:0c:de:09:10:20:c1:46:fc:42:2f:0d:9e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Dec 26 14:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9216157e6319ae80bf2ceec19ad9263d4ff304a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:48:e1:e2:01:d5:9b:8a:85:76:13:7a:08: 06:1f:49:6c:90:bf:45:14:75:bd:ca:13:30:25:aa: fb:5c:a1:de:43:f3:7e:33:6c:8f:8d:fd:60:d8:34: cc:69:5a:f2:e6:8b:7e:22:02:76:f5:99:5e:e1:02: 3a:22:fa:d0:60:af:9b:8c:dc:9b:eb:bd:34:e9:b8: 15:13:d2:be:ec:d0:a7:7f:02:a7:e9:e5:4b:98:3b: da:78:88:80:f0:ab:c5:2e:ca:86:cc:2a:2d:59:0b: d5:d7:f1:bb:c1:b6:f0:a1:0d:46:b8:a8:bf:fa:b5: cc:65:3e:b2:18:39:97:27:63:12:4a:9d:fb:ad:96: db:a9:86:20:c7:26:4f:ec:f8:ab:95:49:86:08:f7: ca:66:4e:9d:34:5d:82:60:08:45:95:e5:fe:9c:de: 99:5f:f8:e2:41:8c:5c:5d:6f:e1:de:26:5d:f0:d4: 18:32:c9:86:18:f0:8e:58:62:fd:d1:0e:56:0e:30: b7:bd:3b:2b:50:c6:6e:e8:31:61:65:76:00:f9:2a: 4a:f5:05:c2:66:39:ed:d0:4a:3c:4f:5f:73:55:e3: 86:75:1a:d0:23:9c:93:3b:be:8b:02:10:5d:ce:44: 4b:30:b0:09:48:5c:7e:2a:f6:3a:a4:3f:d9:09:01: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:16:15:7E:63:19:AE:80:BF:2C:EE:C1:9A:D9:26:3D:4F:F3:04:A4 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/khYVfmMZroC_LO7BmtkmPU_zBKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.254.0/24 Signature Algorithm: sha256WithRSAEncryption 98:f3:be:f3:15:c2:dc:92:19:b2:50:e7:fd:49:ef:14:44:76: 9f:64:9d:1a:3b:9a:da:cf:d8:60:6d:78:77:f6:0b:97:9b:fe: 2f:0b:40:ab:e6:ea:2d:84:14:5d:31:af:86:6e:64:01:b6:38: 4d:72:c3:c2:ee:15:ff:6e:4f:b7:ec:ce:38:23:65:78:c1:05: 5a:49:2b:e6:c8:be:e9:52:a3:48:f8:16:6f:29:c8:68:50:66: 45:70:54:09:e7:e3:bc:e2:57:46:b9:59:f7:c0:c7:dd:2c:fb: 0f:c5:32:bd:d6:d9:7b:9b:25:f9:ea:2b:fd:4e:54:ee:c2:c5: 4e:8d:1f:0b:42:d2:ab:6d:0f:ca:8e:45:ae:b7:5f:3b:b3:f3: 7d:b0:32:fc:b5:ce:be:ce:9b:db:68:c7:70:c4:e1:8e:92:0c: b2:c5:0c:29:22:98:77:9f:7f:20:ac:1d:a9:ba:1d:bb:b6:54: 4e:74:67:5a:34:91:b0:09:17:3a:61:27:b3:b9:af:a8:52:ac: 00:50:f7:91:dc:eb:2b:5c:bc:8a:cb:7e:72:7b:be:dc:4e:2f: 51:98:a9:f4:9a:a4:cc:3a:89:cb:35:03:1e:15:0c:59:4b:8e: 92:7b:a0:72:50:d6:1f:ba:c3:98:8c:b8:0a:68:1d:4e:f3:5c: ca:96:7e:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZta/VIM3gkQIMFG/EIvDZ5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjUxMjI2MTQwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjE2MTU3ZTYzMTlhZTgwYmYyY2VlYzE5YWQ5MjYzZDRmZjMwNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotJI4eIB1ZuKhXYTeggGH0lskL9F FHW9yhMwJar7XKHeQ/N+M2yPjf1g2DTMaVry5ot+IgJ29Zle4QI6IvrQYK+bjNyb 67006bgVE9K+7NCnfwKn6eVLmDvaeIiA8KvFLsqGzCotWQvV1/G7wbbwoQ1GuKi/ +rXMZT6yGDmXJ2MSSp37rZbbqYYgxyZP7PirlUmGCPfKZk6dNF2CYAhFleX+nN6Z X/jiQYxcXW/h3iZd8NQYMsmGGPCOWGL90Q5WDjC3vTsrUMZu6DFhZXYA+SpK9QXC Zjnt0Eo8T19zVeOGdRrQI5yTO76LAhBdzkRLMLAJSFx+KvY6pD/ZCQEZgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIWFX5jGa6AvyzuwZrZJj1P8wSkMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEva2hZVmZtTVpyb0NfTE83Qm10a21QVV96QktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2z+MA0G CSqGSIb3DQEBCwUAA4IBAQCY877zFcLckhmyUOf9Se8URHafZJ0aO5raz9hgbXh3 9guXm/4vC0Cr5uothBRdMa+GbmQBtjhNcsPC7hX/bk+37M44I2V4wQVaSSvmyL7p UqNI+BZvKchoUGZFcFQJ5+O84ldGuVn3wMfdLPsPxTK91tl7myX56iv9TlTuwsVO jR8LQtKrbQ/KjkWut187s/N9sDL8tc6+zpvbaMdwxOGOkgyyxQwpIph3n38grB2p uh27tlROdGdaNJGwCRc6YSezua+oUqwAUPeR3OsrXLyKy35ye77cTi9RmKn0mqTM OonLNQMeFQxZS46Se6ByUNYfusOYjLgKaB1O81zKln4K -----END CERTIFICATE-----Generated at Wed Dec 31 08:28:51 2025 by rpki-client