This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/kFVKcwXQRgJRjkvVE_6RJAsf_ck.roa File: kFVKcwXQRgJRjkvVE_6RJAsf_ck.roa (raw, json) Hash identifier: 7MBrulcccTfvDlDzgpyHz3EsPyq5/GE8x+EUDDqQIRQ= Subject key identifier: 90:55:4A:73:05:D0:46:02:51:8E:4B:D5:13:FE:91:24:0B:1F:FD:C9 Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Certificate serial: 019B36401B1862F0E574196323A26B461B3B Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/kFVKcwXQRgJRjkvVE_6RJAsf_ck.roa Signing time: Fri 19 Dec 2025 10:55:29 +0000 ROA not before: Fri 19 Dec 2025 10:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51002 IP address blocks: 178.217.8.0/21 maxlen: 21 178.217.8.0/24 maxlen: 24 178.217.9.0/24 maxlen: 24 178.217.10.0/24 maxlen: 24 178.217.11.0/24 maxlen: 24 178.217.12.0/24 maxlen: 24 178.217.13.0/24 maxlen: 24 178.217.14.0/24 maxlen: 24 178.217.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:40:1b:18:62:f0:e5:74:19:63:23:a2:6b:46:1b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Validity Not Before: Dec 19 10:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=90554a7305d04602518e4bd513fe91240b1ffdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:af:1c:3f:c2:7c:b0:57:0b:8a:a4:89:5d: 8f:4b:69:13:a1:04:e7:6b:c3:ad:17:43:fc:39:f6: 1a:e9:1f:8f:b7:a3:c0:58:53:c5:fa:ca:1c:c4:6a: 0f:d9:c6:dd:84:6b:3d:1b:ae:80:54:51:55:5d:81: 56:92:93:c8:80:b2:2e:88:51:7a:f0:0a:d9:1e:2f: 44:6e:9c:25:7f:b3:7c:46:25:45:a2:ee:19:99:f6: 65:1b:99:19:d3:20:33:6a:a7:4a:9e:37:f1:84:80: 95:26:f3:4e:47:d6:f4:06:97:f5:88:b1:a5:a6:60: e9:b4:6f:a5:48:8d:ac:54:df:7b:82:60:05:81:fd: 8a:f1:ec:dc:e1:85:64:7a:e0:fa:c8:0f:1a:86:27: 80:a4:45:6c:09:6d:59:db:ca:14:8a:19:83:88:39: 81:56:89:25:9c:3d:55:a9:f3:5d:fb:9c:7d:8b:b9: 39:d6:af:5c:9e:9a:b4:4b:c2:a3:1a:04:fa:ee:1f: 60:eb:e3:6b:23:84:9b:78:a4:bd:3f:83:55:0b:51: a3:22:4e:a9:51:98:dc:b1:05:cd:aa:05:5d:4b:f3: 26:11:3c:4f:36:fc:6b:46:d8:ed:04:00:77:bf:9b: 19:db:33:36:91:ea:d1:f8:61:01:81:c7:61:9e:35: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:4A:73:05:D0:46:02:51:8E:4B:D5:13:FE:91:24:0B:1F:FD:C9 X509v3 Authority Key Identifier: keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/kFVKcwXQRgJRjkvVE_6RJAsf_ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.8.0/21 Signature Algorithm: sha256WithRSAEncryption 78:4d:40:3d:27:5a:1f:d2:85:71:36:7a:c4:e4:e2:8b:bb:2a: 1a:cd:00:bd:64:b6:07:b3:72:2a:e3:d6:06:f4:78:0f:7f:22: 4e:8c:ff:ea:6a:c9:a7:69:6f:fc:d2:3b:2a:3d:87:f6:81:07: fc:27:3c:1e:f7:8a:fd:93:13:22:8e:2d:8d:16:c2:9e:6e:5a: e1:87:54:d4:59:fb:65:a6:44:a1:ae:90:7f:77:d8:7e:b2:d6: 3c:8d:97:38:ab:c3:ed:a0:9b:e0:97:ad:d4:8d:64:c8:f1:fb: ac:b5:f6:07:8e:40:e8:9d:f2:1e:e0:c7:43:fd:8a:ac:25:3c: 4d:a9:b3:6e:66:0e:f2:c5:53:82:90:af:f7:72:fa:ed:88:df: d1:04:a6:c6:fd:e8:5e:aa:ad:37:b5:b5:3d:36:e9:f7:44:23: 5f:99:a9:39:a0:eb:da:6e:fa:48:ea:e2:60:d0:bd:f4:fe:3b: 58:8c:15:18:47:c1:45:84:71:2a:9e:41:46:da:3a:2c:16:6f: 7d:89:e2:76:4f:2d:21:5d:93:40:2b:2e:c7:8a:cd:9c:ce:fa: dc:17:c6:b0:3d:f5:3e:c5:12:60:96:6d:3f:86:86:f1:21:89: 30:2b:7a:64:c6:a1:b1:78:ba:cb:37:ce:29:d3:65:22:35:3d: 1c:49:da:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2QBsYYvDldBljI6JrRhs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDkyMDc5OTRiYTljN2Q5MWVhN2U0NzlmZWZkMWI4MDk5 ZjYyY2UwHhcNMjUxMjE5MTA1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDU1NGE3MzA1ZDA0NjAyNTE4ZTRiZDUxM2ZlOTEyNDBiMWZmZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqmvHD/CfLBXC4qkiV2PS2kToQTn a8OtF0P8OfYa6R+Pt6PAWFPF+socxGoP2cbdhGs9G66AVFFVXYFWkpPIgLIuiFF6 8ArZHi9Ebpwlf7N8RiVFou4ZmfZlG5kZ0yAzaqdKnjfxhICVJvNOR9b0Bpf1iLGl pmDptG+lSI2sVN97gmAFgf2K8ezc4YVkeuD6yA8ahieApEVsCW1Z28oUihmDiDmB VoklnD1VqfNd+5x9i7k51q9cnpq0S8KjGgT67h9g6+NrI4SbeKS9P4NVC1GjIk6p UZjcsQXNqgVdS/MmETxPNvxrRtjtBAB3v5sZ2zM2kerR+GEBgcdhnjUeXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBVSnMF0EYCUY5L1RP+kSQLH/3JMB8GA1UdIwQY MBaAFK3ZIHmUupx9kep+R5/v0bgJn2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAt ZTUyMTI1NzRmOWVjLzEva0ZWS2N3WFFSZ0pSamt2VkVfNlJKQXNmX2NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAtZTUyMTI1NzRmOWVj LzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstkIMA0G CSqGSIb3DQEBCwUAA4IBAQB4TUA9J1of0oVxNnrE5OKLuyoazQC9ZLYHs3Iq49YG 9HgPfyJOjP/qasmnaW/80jsqPYf2gQf8Jzwe94r9kxMiji2NFsKeblrhh1TUWftl pkShrpB/d9h+stY8jZc4q8PtoJvgl63UjWTI8fustfYHjkDonfIe4MdD/YqsJTxN qbNuZg7yxVOCkK/3cvrtiN/RBKbG/eheqq03tbU9Nun3RCNfmak5oOvabvpI6uJg 0L30/jtYjBUYR8FFhHEqnkFG2josFm99ieJ2Ty0hXZNAKy7His2czvrcF8awPfU+ xRJglm0/hobxIYkwK3pkxqGxeLrLN84p02UiNT0cSdqU -----END CERTIFICATE-----Generated at Fri Dec 26 17:36:55 2025 by rpki-client