This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K_DQcAPvefX7HaA1Q3G-QuiMoKY.roa File: K_DQcAPvefX7HaA1Q3G-QuiMoKY.roa (raw, json) Hash identifier: +nKXiSEAtxWh14ni4OVI1yeW7akfn4BzJkaSQ61qTAs= Subject key identifier: 2B:F0:D0:70:03:EF:79:F5:FB:1D:A0:35:43:71:BE:42:E8:8C:A0:A6 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B1BD36FB6B7F41656D9724AE6A23F6081 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K_DQcAPvefX7HaA1Q3G-QuiMoKY.roa Signing time: Sun 14 Dec 2025 07:46:40 +0000 ROA not before: Sun 14 Dec 2025 07:46:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213449 IP address blocks: 5.175.170.0/24 maxlen: 24 89.106.95.0/24 maxlen: 24 89.144.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:d3:6f:b6:b7:f4:16:56:d9:72:4a:e6:a2:3f:60:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 14 07:46:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2bf0d07003ef79f5fb1da0354371be42e88ca0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:41:e4:9c:6d:fe:c7:71:b5:bf:09:4d:5c: a0:5b:8d:13:a0:e2:fb:1b:76:65:56:92:1f:48:a1: 60:a0:1f:32:70:67:09:28:c2:9a:60:b1:91:94:08: 02:4c:41:f1:77:11:2f:00:10:aa:d0:3c:3d:2b:d7: 31:6b:f3:ae:e7:5f:fa:3a:b0:6f:16:30:0b:ca:27: 78:98:2a:0a:95:0f:9f:6a:b5:c0:23:41:aa:e2:6d: 53:37:c3:3c:18:95:6a:1f:9d:aa:4c:06:2b:98:f7: e3:d7:db:7f:a2:2c:06:3c:79:97:71:e9:47:6a:ce: 28:23:33:ac:43:45:76:c4:f7:35:3d:09:38:a1:b3: ca:c5:73:28:15:50:73:36:3f:ed:70:2d:a1:d0:8e: 1b:dc:ff:7c:43:a0:48:ee:96:51:c5:4a:a0:e3:f9: 0e:93:35:68:51:c9:f6:48:74:b0:74:07:2d:ef:61: c3:8d:4e:d4:fe:5b:84:a1:ca:f1:47:c9:9d:f0:45: a6:c6:80:0d:55:11:34:ce:eb:06:0c:3c:ab:3b:3f: 83:52:f3:fe:cb:61:49:71:ce:d6:e3:8f:4f:93:d2: 8c:63:83:f8:0d:ba:73:28:0c:ea:82:bb:ee:c3:23: f8:7d:19:a5:fe:53:d4:29:68:c0:22:4c:22:c2:15: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:D0:70:03:EF:79:F5:FB:1D:A0:35:43:71:BE:42:E8:8C:A0:A6 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K_DQcAPvefX7HaA1Q3G-QuiMoKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.170.0/24 89.106.95.0/24 89.144.63.0/24 Signature Algorithm: sha256WithRSAEncryption 64:a7:c3:f9:86:4f:83:60:bd:7d:8b:b4:f8:fa:fa:bc:08:6b: 6c:6a:6e:c8:40:7f:8d:dc:3a:c3:70:6c:f3:5e:03:58:0d:18: da:9f:f7:80:11:1a:d6:f3:0b:28:27:ab:34:b3:96:3f:ad:b4: ad:ca:75:96:51:60:6a:c0:40:27:f3:b5:0f:21:e8:56:d2:fb: 05:d5:8f:78:8c:dc:0a:15:9d:63:a9:b9:61:5a:d0:d2:82:70: 27:3f:d3:3c:3d:ac:29:f5:b6:ef:e4:c4:a5:fa:43:ce:4e:8c: 3a:c2:46:83:19:8c:b4:dd:72:65:2f:da:dd:dd:3a:2d:65:d4: 19:7d:89:91:55:3d:64:f6:4b:ce:7b:c6:6f:f9:69:ee:48:53: 6a:1d:3d:ae:fc:be:cd:b2:56:e5:1a:4f:8c:df:9a:43:b1:8b: 17:d5:06:e8:01:33:b3:bb:b1:b7:2a:c0:27:53:69:5b:fb:00: 32:5c:ac:f2:a7:37:8f:74:7d:df:b3:cc:a0:e1:8a:61:87:c3: 56:46:95:ab:6c:4d:80:cb:7c:a1:d5:89:d2:8a:e3:dc:b8:93: 40:8f:1b:da:cf:d7:e5:69:50:f3:ee:9a:67:7b:40:78:a4:a6: 17:47:c2:57:cd:b9:4a:e0:76:ca:57:f9:13:81:2f:53:aa:52: 8d:29:95:b8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsb02+2t/QWVtlySuaiP2CBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE0MDc0NjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmYwZDA3MDAzZWY3OWY1ZmIxZGEwMzU0MzcxYmU0MmU4OGNhMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/NB5Jxt/sdxtb8JTVygW40ToOL7 G3ZlVpIfSKFgoB8ycGcJKMKaYLGRlAgCTEHxdxEvABCq0Dw9K9cxa/Ou51/6OrBv FjALyid4mCoKlQ+farXAI0Gq4m1TN8M8GJVqH52qTAYrmPfj19t/oiwGPHmXcelH as4oIzOsQ0V2xPc1PQk4obPKxXMoFVBzNj/tcC2h0I4b3P98Q6BI7pZRxUqg4/kO kzVoUcn2SHSwdAct72HDjU7U/luEocrxR8md8EWmxoANVRE0zusGDDyrOz+DUvP+ y2FJcc7W449Pk9KMY4P4DbpzKAzqgrvuwyP4fRml/lPUKWjAIkwiwhX+RwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCvw0HAD73n1+x2gNUNxvkLojKCmMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvS19EUWNBUHZlZlg3SGFBMVEzRy1RdWlNb0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa+qAwQA WWpfAwQAWZA/MA0GCSqGSIb3DQEBCwUAA4IBAQBkp8P5hk+DYL19i7T4+vq8CGts am7IQH+N3DrDcGzzXgNYDRjan/eAERrW8wsoJ6s0s5Y/rbStynWWUWBqwEAn87UP IehW0vsF1Y94jNwKFZ1jqblhWtDSgnAnP9M8Pawp9bbv5MSl+kPOTow6wkaDGYy0 3XJlL9rd3TotZdQZfYmRVT1k9kvOe8Zv+WnuSFNqHT2u/L7NslblGk+M35pDsYsX 1QboATOzu7G3KsAnU2lb+wAyXKzypzePdH3fs8yg4Yphh8NWRpWrbE2Ay3yh1YnS iuPcuJNAjxvaz9flaVDz7ppne0B4pKYXR8JXzblK4HbKV/kTgS9TqlKNKZW4 -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:21 2025 by rpki-client