This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/kF5hTgdo2CuhP3LVaLK3GCmZiAs.roa File: kF5hTgdo2CuhP3LVaLK3GCmZiAs.roa (raw, json) Hash identifier: kkwwfJVxfr3h5gNDQoMVJ4cT8Q/GTSSyQ9JkB11j5S0= Subject key identifier: 90:5E:61:4E:07:68:D8:2B:A1:3F:72:D5:68:B2:B7:18:29:99:88:0B Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Certificate serial: 019B0156E184DCFD62C9633C57AE9E7D0A4E Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/kF5hTgdo2CuhP3LVaLK3GCmZiAs.roa Signing time: Tue 09 Dec 2025 04:20:29 +0000 ROA not before: Tue 09 Dec 2025 04:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215960 IP address blocks: 195.72.60.0/24 maxlen: 24 195.72.61.0/24 maxlen: 24 195.72.62.0/24 maxlen: 24 2a07:e043::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:56:e1:84:dc:fd:62:c9:63:3c:57:ae:9e:7d:0a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Validity Not Before: Dec 9 04:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=905e614e0768d82ba13f72d568b2b7182999880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:78:9b:91:e8:2d:b1:7e:aa:59:9c:cc:17: 8e:4a:25:37:5b:e9:f1:f4:0c:91:38:31:3a:10:42: c1:74:d2:0b:39:48:66:a7:10:ad:30:aa:81:d1:33: e3:82:7d:66:b8:b8:ff:7c:7b:03:b0:b3:d0:d0:45: 1a:c2:cc:83:e7:97:d5:1d:bf:b6:8b:a7:71:39:7f: 8b:62:a7:b1:40:77:8c:4e:3e:1a:51:e6:e6:a4:10: 27:3c:50:96:e8:5b:4a:a6:ff:85:53:1a:16:65:85: f9:8d:51:fd:0a:32:23:7f:04:7d:92:65:79:c3:49: 06:a7:2b:0c:0a:7c:44:28:01:13:75:89:71:80:2d: 7c:d6:cc:1f:15:e1:56:a6:66:2e:52:bb:48:2a:71: 46:1b:7c:02:dd:a2:2f:2e:99:67:5b:57:e7:68:2e: 7f:98:58:f2:01:6f:d9:cf:39:a2:8a:6e:eb:81:86: 2d:68:3f:32:3e:54:de:d7:9a:86:d1:a8:2b:6b:6e: 7e:9d:2e:28:06:70:59:3e:85:5f:bf:08:15:1e:ac: 0a:79:89:f0:ec:c6:01:8d:95:42:bf:97:68:94:f4: 93:80:55:9e:20:61:83:a4:79:6a:78:82:a7:ac:34: 23:29:80:e2:f2:37:13:cd:c1:5a:6d:3f:7f:62:3e: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5E:61:4E:07:68:D8:2B:A1:3F:72:D5:68:B2:B7:18:29:99:88:0B X509v3 Authority Key Identifier: keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/kF5hTgdo2CuhP3LVaLK3GCmZiAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.60.0-195.72.62.255 IPv6: 2a07:e043::/32 Signature Algorithm: sha256WithRSAEncryption ce:0f:4f:ff:5e:16:85:86:e6:54:ff:bb:44:fa:1c:27:9d:f4: b5:70:f7:a8:a7:db:8d:ac:c1:3c:65:0f:84:58:eb:c5:ee:2d: a4:b4:ac:f8:97:73:bf:b5:16:a5:8e:3f:1a:c8:96:52:e8:13: 8a:46:93:d3:fe:4d:31:de:99:d8:b9:da:05:fd:39:06:48:66: 17:c8:1c:22:a8:7e:bb:d3:0a:77:3c:b8:e8:36:8b:28:6a:86: ee:c8:e0:0f:98:1d:7a:4b:a4:e2:98:a8:f8:e5:c2:9e:76:ba: 95:01:d5:a0:8c:77:61:90:2e:89:df:83:29:c9:5e:e3:67:e7: 5b:f8:49:47:4d:c0:3b:0f:94:9d:16:16:fc:70:09:b9:e3:70: 95:97:f7:e2:88:40:9f:84:53:e3:33:9a:7c:cb:4f:45:e2:c3: 89:e1:3a:68:e9:a3:e3:2b:07:e4:d6:6f:1c:6c:87:f8:40:80: be:1f:c0:a5:ba:3f:2e:e4:04:5d:fb:07:6f:d6:74:ff:9d:73: c7:72:24:e1:fb:a6:84:c6:17:4f:2a:78:a9:38:ea:37:f6:f6: e6:cf:e4:66:fc:f2:c2:a5:e4:32:6d:79:26:c8:b7:45:74:6e: 55:2c:91:4f:97:2a:10:ad:b4:5f:8f:50:17:b5:d0:37:33:84: e3:66:05:d7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsBVuGE3P1iyWM8V66efQpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjNkNGFjZTczNTYxM2VjYmM1OTFkZmZjMjk4NWYzNDE3 NjY3ZDMwHhcNMjUxMjA5MDQyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDVlNjE0ZTA3NjhkODJiYTEzZjcyZDU2OGIyYjcxODI5OTk4ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJx4m5HoLbF+qlmczBeOSiU3W+nx 9AyRODE6EELBdNILOUhmpxCtMKqB0TPjgn1muLj/fHsDsLPQ0EUawsyD55fVHb+2 i6dxOX+LYqexQHeMTj4aUebmpBAnPFCW6FtKpv+FUxoWZYX5jVH9CjIjfwR9kmV5 w0kGpysMCnxEKAETdYlxgC181swfFeFWpmYuUrtIKnFGG3wC3aIvLplnW1fnaC5/ mFjyAW/Zzzmiim7rgYYtaD8yPlTe15qG0agra25+nS4oBnBZPoVfvwgVHqwKeYnw 7MYBjZVCv5dolPSTgFWeIGGDpHlqeIKnrDQjKYDi8jcTzcFabT9/Yj5BjwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJBeYU4HaNgroT9y1WiytxgpmYgLMB8GA1UdIwQY MBaAFLiz1KznNWE+y8WR3/wphfNBdmfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2Et NDQyY2MzNjQ5YmFjLzEva0Y1aFRnZG8yQ3VoUDNMVmFMSzNHQ21aaUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2EtNDQyY2MzNjQ5YmFj LzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBALDSDwD BADDSD4wDQQCAAIwBwMFACoH4EMwDQYJKoZIhvcNAQELBQADggEBAM4PT/9eFoWG 5lT/u0T6HCed9LVw96in242swTxlD4RY68XuLaS0rPiXc7+1FqWOPxrIllLoE4pG k9P+TTHemdi52gX9OQZIZhfIHCKofrvTCnc8uOg2iyhqhu7I4A+YHXpLpOKYqPjl wp52upUB1aCMd2GQLonfgynJXuNn51v4SUdNwDsPlJ0WFvxwCbnjcJWX9+KIQJ+E U+MzmnzLT0Xiw4nhOmjpo+MrB+TWbxxsh/hAgL4fwKW6Py7kBF37B2/WdP+dc8dy JOH7poTGF08qeKk46jf29ubP5Gb88sKl5DJteSbIt0V0blUskU+XKhCttF+PUBe1 0DczhONmBdc= -----END CERTIFICATE-----Generated at Sun Dec 21 22:14:25 2025 by rpki-client