This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/abdCxKWTGLICQZVb1TiCOfOhYbU.roa File: abdCxKWTGLICQZVb1TiCOfOhYbU.roa (raw, json) Hash identifier: +JX7TxQG9TlZeJDCG1CbFOZRgOCebYQROeANRYNr1kE= Subject key identifier: 69:B7:42:C4:A5:93:18:B2:02:41:95:5B:D5:38:82:39:F3:A1:61:B5 Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Certificate serial: 019B32978638EDCCC88C26176B5E44026B4C Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/abdCxKWTGLICQZVb1TiCOfOhYbU.roa Signing time: Thu 18 Dec 2025 17:52:29 +0000 ROA not before: Thu 18 Dec 2025 17:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58307 IP address blocks: 91.227.61.0/24 maxlen: 32 91.229.210.0/24 maxlen: 32 2001:7f8:6b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:97:86:38:ed:cc:c8:8c:26:17:6b:5e:44:02:6b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Validity Not Before: Dec 18 17:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69b742c4a59318b20241955bd5388239f3a161b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:2a:de:db:21:2f:66:28:b9:9e:ef:61:36: ec:ff:7f:e3:c7:0c:c0:5e:d6:3f:51:36:69:e5:d1: 1b:51:35:81:ff:b1:3e:95:24:92:0b:58:2a:ff:e7: c0:c0:1d:bd:3a:6f:a1:c3:4c:8f:3e:98:d2:45:a4: f3:d3:88:7d:9a:6f:56:c2:30:18:ef:d0:d6:9f:2c: 03:9b:57:61:7d:ea:32:98:cc:a7:ce:98:c8:c8:f4: c7:4f:ac:e4:f4:19:34:c9:b9:90:07:9e:68:d8:de: d5:8f:28:b8:ef:97:52:c2:38:fb:38:76:f0:70:21: 38:98:42:09:92:de:bb:03:84:e3:ec:80:95:bb:66: f2:5f:33:5c:ce:ef:55:59:b2:a0:7f:9a:21:e2:38: a5:49:e5:95:ba:a9:22:e8:f0:a5:9e:9e:1f:99:35: 00:52:0b:c2:a1:b4:e8:18:9d:8d:89:c0:f5:bf:b2: aa:3e:b2:2f:11:ae:be:ca:46:7b:d2:d1:39:5f:fa: 18:d0:ba:15:66:2b:43:7d:51:a8:30:c2:41:27:dc: eb:b2:38:4b:c2:b1:97:bd:64:63:ce:72:c1:f6:91: 05:84:6f:9d:58:f0:59:30:21:b9:a0:9c:49:86:42: 46:a6:c8:ed:62:ea:3a:88:e7:b5:32:f3:fa:fb:52: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:42:C4:A5:93:18:B2:02:41:95:5B:D5:38:82:39:F3:A1:61:B5 X509v3 Authority Key Identifier: keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/abdCxKWTGLICQZVb1TiCOfOhYbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.61.0/24 91.229.210.0/24 IPv6: 2001:7f8:6b::/48 Signature Algorithm: sha256WithRSAEncryption 8a:6a:01:d8:ba:7c:bb:b8:48:3a:08:c4:90:bc:8b:d2:b2:25: 22:1c:f4:4c:c5:5c:1c:90:e7:61:5b:c1:42:b4:63:9c:c1:87: ce:95:ae:5a:3c:82:b3:9b:ae:50:1e:80:ad:cb:f7:93:07:2a: f0:fa:d2:e9:4d:6d:b6:3e:a7:4a:28:26:42:05:5c:a2:6c:e6: 58:44:34:86:e9:64:90:b1:26:f9:c2:f2:4b:d7:07:2b:2b:e2: b5:8e:a9:a2:45:62:a6:11:cd:1d:94:2e:29:00:ed:57:1d:d1: 39:45:07:0c:77:d7:dc:95:64:e7:75:91:f2:88:21:04:d5:fb: 74:8f:12:f9:1b:5e:e6:01:6e:9a:05:bc:e2:c4:f9:f3:58:39: 32:51:8b:04:4a:33:4c:ee:d3:d1:d2:0a:1c:e5:49:5e:c0:e7: 59:ab:fb:a6:d7:6f:16:2b:b0:03:65:f5:ca:a2:29:62:1d:66: 96:de:49:81:2e:86:86:b1:17:f3:27:b8:7c:9e:45:30:27:5c: b7:53:4a:c2:34:27:b1:ad:67:eb:5d:45:91:c5:9a:e2:81:c1: a3:73:5a:9f:98:31:18:dd:40:10:50:27:f7:cb:36:de:14:c5: 7e:2e:02:c9:be:b8:4a:78:76:e0:c9:f3:2c:cc:58:e8:bd:e0: f9:2f:d3:62 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsyl4Y47czIjCYXa15EAmtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw Y2ZkYzUwHhcNMjUxMjE4MTc1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWI3NDJjNGE1OTMxOGIyMDI0MTk1NWJkNTM4ODIzOWYzYTE2MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2kq3tshL2YouZ7vYTbs/3/jxwzA XtY/UTZp5dEbUTWB/7E+lSSSC1gq/+fAwB29Om+hw0yPPpjSRaTz04h9mm9WwjAY 79DWnywDm1dhfeoymMynzpjIyPTHT6zk9Bk0ybmQB55o2N7Vjyi475dSwjj7OHbw cCE4mEIJkt67A4Tj7ICVu2byXzNczu9VWbKgf5oh4jilSeWVuqki6PClnp4fmTUA UgvCobToGJ2NicD1v7KqPrIvEa6+ykZ70tE5X/oY0LoVZitDfVGoMMJBJ9zrsjhL wrGXvWRjznLB9pEFhG+dWPBZMCG5oJxJhkJGpsjtYuo6iOe1MvP6+1K2WQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGm3QsSlkxiyAkGVW9U4gjnzoWG1MB8GA1UdIwQY MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt OGQ0YmZkMGFhY2U4LzEvYWJkQ3hLV1RHTElDUVpWYjFUaUNPZk9oWWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4 LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW+M9AwQA W+XSMA8EAgACMAkDBwAgAQf4AGswDQYJKoZIhvcNAQELBQADggEBAIpqAdi6fLu4 SDoIxJC8i9KyJSIc9EzFXByQ52FbwUK0Y5zBh86Vrlo8grObrlAegK3L95MHKvD6 0ulNbbY+p0ooJkIFXKJs5lhENIbpZJCxJvnC8kvXBysr4rWOqaJFYqYRzR2ULikA 7Vcd0TlFBwx319yVZOd1kfKIIQTV+3SPEvkbXuYBbpoFvOLE+fNYOTJRiwRKM0zu 09HSChzlSV7A51mr+6bXbxYrsANl9cqiKWIdZpbeSYEuhoaxF/MnuHyeRTAnXLdT SsI0J7GtZ+tdRZHFmuKBwaNzWp+YMRjdQBBQJ/fLNt4UxX4uAsm+uEp4duDJ8yzM WOi94Pkv02I= -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:32 2025 by rpki-client