This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/KfO_wUnBkZv7_2njcVwFBBB43bk.roa File: KfO_wUnBkZv7_2njcVwFBBB43bk.roa (raw, json) Hash identifier: jkyXcB14v3h50NkdLiUvCIo+SO4BFIe4PofoZYA3RMk= Subject key identifier: 29:F3:BF:C1:49:C1:91:9B:FB:FF:69:E3:71:5C:05:04:10:78:DD:B9 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B0770C71F68E4E5FF151BB87866C74814 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/KfO_wUnBkZv7_2njcVwFBBB43bk.roa Signing time: Wed 10 Dec 2025 08:46:30 +0000 ROA not before: Wed 10 Dec 2025 08:46:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 45.140.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:70:c7:1f:68:e4:e5:ff:15:1b:b8:78:66:c7:48:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Dec 10 08:46:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=29f3bfc149c1919bfbff69e3715c05041078ddb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:62:f9:20:45:b9:ec:16:b0:33:09:e8:1c: 69:35:85:05:dc:bb:cd:25:99:7c:74:17:5a:73:f7: 6e:b5:a3:3d:21:ac:68:5b:76:e8:bc:9e:35:e1:64: c9:9e:ff:d4:19:db:1c:c6:a7:23:46:99:2a:db:19: 24:f4:7e:f7:5a:b0:ab:f0:86:ed:99:d1:3c:d6:61: 69:06:90:11:d0:fd:f5:2f:e9:2a:46:43:0a:99:46: a9:a6:e0:9e:b3:f9:19:6b:cc:b0:b0:af:fa:3c:f7: 2e:e8:38:8d:04:77:20:31:e5:fd:a9:a1:41:53:42: b6:36:d4:c7:bf:e4:b8:7a:57:8a:7a:5b:77:ec:38: 6c:50:bd:cf:bc:34:2e:28:32:f3:de:e7:14:c9:b4: 6b:ab:8a:95:11:a4:0c:ef:b3:e6:fc:9b:2d:63:45: 99:1f:83:de:a9:f0:24:66:a8:96:d1:1a:65:ba:a8: e2:77:a6:dd:15:8f:be:6e:ce:c2:14:4c:34:55:25: 28:ec:02:02:ca:31:df:2b:cd:b7:fe:32:cd:9d:e9: 02:1c:7b:0f:bd:6c:e9:77:3a:ef:99:d6:2b:be:b1: 5f:77:a5:a7:f2:7e:c3:f0:26:5d:70:b1:24:59:ec: af:04:f5:49:54:b8:b0:75:a2:48:c6:7c:c3:22:5c: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:BF:C1:49:C1:91:9B:FB:FF:69:E3:71:5C:05:04:10:78:DD:B9 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/KfO_wUnBkZv7_2njcVwFBBB43bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.210.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:46:16:8d:4a:4e:d9:31:b5:7d:66:80:82:01:76:dc:c7:5f: e4:6f:67:e0:20:b7:a3:4d:b9:3e:19:bc:a5:8a:a5:d3:a8:ed: 1a:b0:c9:11:4b:42:e5:e1:cf:fc:48:c7:3d:fd:35:83:63:46: ab:d2:03:1e:b2:c9:86:28:9e:60:6c:5c:96:3a:2c:10:8e:a3: 84:a8:2a:5b:dc:5a:16:68:a0:e8:f7:bc:75:18:6d:fc:c1:35: a6:7b:e8:b4:40:6c:8c:f8:9b:89:3f:1f:4a:72:db:10:4a:07: f2:01:ef:fa:ff:86:e4:ab:92:8a:34:cd:e0:aa:0c:70:f7:e4: df:97:32:1d:c5:cc:36:7c:ce:89:f8:52:fb:a7:a0:cf:bc:a4: 10:7f:24:5b:04:33:57:f7:b1:4e:6e:aa:c0:7b:3f:0a:76:20: 99:c7:91:db:47:1c:7c:80:60:4a:b8:fb:ed:a9:c1:9e:c5:5c: 2b:b3:9a:4d:c2:7c:1f:2c:21:4f:7e:8b:1d:2b:a6:28:f5:b5: 4f:9a:02:b6:22:05:da:36:b1:27:01:a1:3b:12:a4:10:b2:22: 72:7e:b1:00:a4:a4:16:c7:4f:18:7d:51:86:0c:7a:f9:3c:8f: 2e:ce:9c:bd:80:bb:2b:c8:ff:07:6d:ab:a6:a7:9e:fc:33:53: 45:c0:f3:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHcMcfaOTl/xUbuHhmx0gUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMjEwMDg0NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWYzYmZjMTQ5YzE5MTliZmJmZjY5ZTM3MTVjMDUwNDEwNzhkZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Ji+SBFuewWsDMJ6BxpNYUF3LvN JZl8dBdac/dutaM9IaxoW3bovJ414WTJnv/UGdscxqcjRpkq2xkk9H73WrCr8Ibt mdE81mFpBpAR0P31L+kqRkMKmUappuCes/kZa8ywsK/6PPcu6DiNBHcgMeX9qaFB U0K2NtTHv+S4eleKelt37DhsUL3PvDQuKDLz3ucUybRrq4qVEaQM77Pm/JstY0WZ H4PeqfAkZqiW0Rpluqjid6bdFY++bs7CFEw0VSUo7AICyjHfK823/jLNnekCHHsP vWzpdzrvmdYrvrFfd6Wn8n7D8CZdcLEkWeyvBPVJVLiwdaJIxnzDIlyh0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnzv8FJwZGb+/9p43FcBQQQeN25MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvS2ZPX3dVbkJrWnY3XzJuamNWd0ZCQkI0M2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G CSqGSIb3DQEBCwUAA4IBAQBNRhaNSk7ZMbV9ZoCCAXbcx1/kb2fgILejTbk+Gbyl iqXTqO0asMkRS0Ll4c/8SMc9/TWDY0ar0gMessmGKJ5gbFyWOiwQjqOEqCpb3FoW aKDo97x1GG38wTWme+i0QGyM+JuJPx9KctsQSgfyAe/6/4bkq5KKNM3gqgxw9+Tf lzIdxcw2fM6J+FL7p6DPvKQQfyRbBDNX97FObqrAez8KdiCZx5HbRxx8gGBKuPvt qcGexVwrs5pNwnwfLCFPfosdK6Yo9bVPmgK2IgXaNrEnAaE7EqQQsiJyfrEApKQW x08YfVGGDHr5PI8uzpy9gLsryP8Hbaump578M1NFwPMn -----END CERTIFICATE-----Generated at Fri Dec 19 16:48:59 2025 by rpki-client