This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/KZPwVDbwOkmi-sEEC_TqcUeMzYI.roa File: KZPwVDbwOkmi-sEEC_TqcUeMzYI.roa (raw, json) Hash identifier: D0dFEOhVqQzL9ff/+LILn5JrUvKqeR7kLX0LV2DDfDw= Subject key identifier: 29:93:F0:54:36:F0:3A:49:A2:FA:C1:04:0B:F4:EA:71:47:8C:CD:82 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B2EA11F9596A50D8D621B0931858653ED Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/KZPwVDbwOkmi-sEEC_TqcUeMzYI.roa Signing time: Wed 17 Dec 2025 23:24:29 +0000 ROA not before: Wed 17 Dec 2025 23:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35758 IP address blocks: 45.14.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:a1:1f:95:96:a5:0d:8d:62:1b:09:31:85:86:53:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Dec 17 23:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2993f05436f03a49a2fac1040bf4ea71478ccd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:26:9e:60:20:63:45:cc:c6:a5:2a:b1:82: 4c:bd:bb:29:f5:3e:a8:93:c9:b4:65:9c:8d:26:d6: 35:09:d8:8b:29:75:d6:e9:44:61:cc:ff:81:74:98: bb:32:fb:1d:fb:c1:6d:f4:86:4c:97:4a:1a:4b:92: 7f:6b:79:85:9f:d7:f4:bc:be:08:fb:c6:11:f4:9f: ac:50:1b:18:16:6c:e2:d6:65:d2:9d:80:5c:43:25: 71:6d:54:91:67:e9:97:69:29:7c:02:96:7f:0f:b5: 8a:3f:b1:46:af:e8:63:48:bc:4e:e0:f3:7b:c1:2c: ee:b5:9a:f0:de:5c:41:eb:91:ad:15:3a:2a:dd:61: 7f:4b:e1:7f:f9:4d:1a:60:5d:1e:f1:8b:99:9e:54: f1:10:89:44:75:c3:bd:c9:45:31:f6:c9:ab:51:ac: 8c:64:63:03:ca:8f:a1:f1:03:80:64:11:1e:8c:89: 89:99:8d:a4:a5:ec:6a:a3:77:d9:02:96:a3:45:d8: ee:2d:14:6e:3a:59:b3:0d:2b:49:9a:ef:6a:e0:c4: 69:bc:4c:f1:43:86:58:3d:88:94:31:83:cc:d4:62: 95:27:44:b6:64:6b:cb:e3:a9:98:0f:6b:3d:ad:0e: 18:44:50:8f:ab:fb:2b:c2:26:c0:9e:e8:c7:5f:d7: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:F0:54:36:F0:3A:49:A2:FA:C1:04:0B:F4:EA:71:47:8C:CD:82 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/KZPwVDbwOkmi-sEEC_TqcUeMzYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.73.0/24 Signature Algorithm: sha256WithRSAEncryption 42:18:c2:f6:e0:65:e6:76:fe:fd:9f:4a:83:be:c0:86:b8:cf: a5:62:7e:9a:90:d1:44:e8:08:d6:62:c3:fa:c7:b4:25:5b:a5: e0:8e:31:88:db:a1:0b:d6:fd:e8:16:00:a7:07:dd:20:c1:c7: 16:a4:98:29:c2:f8:0a:15:ee:ca:76:80:4f:10:1d:70:48:47: 09:55:37:ac:f0:3d:a2:97:2b:da:1a:d7:54:d0:bd:d4:6b:db: cc:35:59:2f:2f:10:8a:45:d3:85:ef:f5:b9:f4:cc:f0:cd:3b: c7:3f:c2:bf:01:59:42:11:53:99:d0:95:b6:c6:f5:47:18:08: 57:66:ea:a4:7d:3d:48:09:1d:4e:db:0d:d2:51:18:15:5f:a1: f3:83:61:73:b3:94:f9:ee:ea:f2:46:45:b3:a8:d1:15:b9:58: b8:84:ba:94:f5:1b:a0:1f:36:2f:f1:13:69:d6:c3:32:6d:da: 3c:e3:c6:35:24:74:00:da:83:8b:a7:e6:95:10:55:0d:5f:ac: 87:02:ed:8d:9d:dd:36:aa:d1:32:6e:b6:2c:ca:56:6b:7d:13: 24:cf:05:2b:5d:97:bb:97:2c:e5:f8:92:d4:32:2f:34:70:c6: 58:f8:35:ea:03:81:06:2b:46:b0:c7:a8:92:13:d5:e9:96:2a: c9:50:95:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsuoR+VlqUNjWIbCTGFhlPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjUxMjE3MjMyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTkzZjA1NDM2ZjAzYTQ5YTJmYWMxMDQwYmY0ZWE3MTQ3OGNjZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42gmnmAgY0XMxqUqsYJMvbsp9T6o k8m0ZZyNJtY1CdiLKXXW6URhzP+BdJi7Mvsd+8Ft9IZMl0oaS5J/a3mFn9f0vL4I +8YR9J+sUBsYFmzi1mXSnYBcQyVxbVSRZ+mXaSl8ApZ/D7WKP7FGr+hjSLxO4PN7 wSzutZrw3lxB65GtFToq3WF/S+F/+U0aYF0e8YuZnlTxEIlEdcO9yUUx9smrUayM ZGMDyo+h8QOAZBEejImJmY2kpexqo3fZApajRdjuLRRuOlmzDStJmu9q4MRpvEzx Q4ZYPYiUMYPM1GKVJ0S2ZGvL46mYD2s9rQ4YRFCPq/srwibAnujHX9csYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmT8FQ28DpJovrBBAv06nFHjM2CMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvS1pQd1ZEYndPa21pLXNFRUNfVHFjVWVNellJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ5JMA0G CSqGSIb3DQEBCwUAA4IBAQBCGML24GXmdv79n0qDvsCGuM+lYn6akNFE6AjWYsP6 x7QlW6XgjjGI26EL1v3oFgCnB90gwccWpJgpwvgKFe7KdoBPEB1wSEcJVTes8D2i lyvaGtdU0L3Ua9vMNVkvLxCKRdOF7/W59MzwzTvHP8K/AVlCEVOZ0JW2xvVHGAhX ZuqkfT1ICR1O2w3SURgVX6Hzg2Fzs5T57uryRkWzqNEVuVi4hLqU9RugHzYv8RNp 1sMybdo848Y1JHQA2oOLp+aVEFUNX6yHAu2Nnd02qtEybrYsylZrfRMkzwUrXZe7 lyzl+JLUMi80cMZY+DXqA4EGK0awx6iSE9XplirJUJXZ -----END CERTIFICATE-----Generated at Sat Dec 20 10:59:26 2025 by rpki-client