This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KkOpFtbVHblz9ygPqIERIlK6VbQ.roa File: KkOpFtbVHblz9ygPqIERIlK6VbQ.roa (raw, json) Hash identifier: nWv/CMVKgzrRJYFxo3QN5xr3T06exwhMZMZCc7nR5wo= Subject key identifier: 2A:43:A9:16:D6:D5:1D:B9:73:F7:28:0F:A8:81:11:22:52:BA:55:B4 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B32F5D40DFB04036E420954343BD75D49 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KkOpFtbVHblz9ygPqIERIlK6VbQ.roa Signing time: Thu 18 Dec 2025 19:35:29 +0000 ROA not before: Thu 18 Dec 2025 19:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216127 IP address blocks: 77.239.96.0/22 maxlen: 24 144.31.200.0/23 maxlen: 24 144.31.204.0/23 maxlen: 24 144.31.250.0/23 maxlen: 24 150.241.90.0/23 maxlen: 24 185.184.120.0/24 maxlen: 24 185.184.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:f5:d4:0d:fb:04:03:6e:42:09:54:34:3b:d7:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 18 19:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a43a916d6d51db973f7280fa881112252ba55b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:36:f4:21:7d:ce:46:dc:bf:b3:24:29:fb: 2d:d7:59:35:a8:31:d9:fb:c9:7e:f2:58:51:ce:51: 77:aa:b2:89:8a:41:1f:d5:eb:7a:54:ea:b9:42:b4: 8d:59:d8:37:cb:37:88:8a:1a:b4:5b:d3:f4:6c:1a: 64:63:11:94:41:ab:99:b2:12:83:3e:7d:63:e7:99: c1:77:60:05:72:f1:37:17:36:78:78:68:b5:4d:c8: 32:2f:61:96:a6:ed:ab:7e:f2:b9:ae:af:2c:11:66: 9e:4d:4f:b6:2d:59:96:64:14:2d:46:28:00:c5:03: 23:59:aa:c1:1d:95:e0:78:76:a8:99:cd:f3:a0:9e: bb:64:c4:76:b9:a3:ac:2b:15:3d:f7:53:6f:e8:29: 9d:fa:62:0e:b8:ba:08:df:35:bf:98:c4:e2:c7:2f: 7d:cf:35:5d:db:35:8e:f9:d1:8d:75:1d:fd:41:0d: 90:8b:be:f4:8a:62:4c:8e:f6:e8:4f:93:6a:0c:7b: 97:43:3c:9c:4f:e0:37:ef:fa:cb:ec:c8:1d:81:00: da:17:be:3b:9d:d6:ef:bb:63:c7:39:38:3e:4e:05: ae:79:2e:41:00:f2:5f:6f:9b:44:1f:f6:fc:06:4c: be:20:01:1e:04:07:4a:f4:2d:3b:62:69:4c:7e:9d: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:A9:16:D6:D5:1D:B9:73:F7:28:0F:A8:81:11:22:52:BA:55:B4 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KkOpFtbVHblz9ygPqIERIlK6VbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.96.0/22 144.31.200.0/23 144.31.204.0/23 144.31.250.0/23 150.241.90.0/23 185.184.120.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:cd:32:8a:ac:cd:88:dd:64:20:76:f0:61:ad:49:71:78:f2: 45:1e:a8:a2:cb:4c:2c:5a:c7:14:01:6b:ac:c1:d8:57:41:c0: 84:b3:f2:2f:2a:ab:8d:81:62:96:1b:df:af:a4:c5:b2:11:dc: 36:43:89:1d:8c:f6:3a:6a:78:f0:51:dc:09:d7:28:21:53:28: 36:5f:4f:4b:26:f4:74:97:a0:e1:59:44:e9:98:a3:f6:34:19: c5:fe:4d:a2:4b:2f:b5:b3:4d:a3:30:11:ca:e6:74:06:92:2e: e7:41:f2:9c:50:f6:69:2f:f2:e5:a0:4a:3f:14:68:9a:bb:6b: 0f:0d:e1:2d:57:5f:ba:15:91:1c:fe:f3:bd:18:6f:34:b3:b0: 1b:f6:82:f1:21:ed:a5:ba:8b:7b:65:9f:bb:13:5a:7c:fb:cd: 77:28:ea:51:92:01:80:af:25:37:14:32:d7:63:5e:be:33:3e: ca:7d:eb:28:19:18:5e:82:44:6d:3a:a3:75:cd:ba:bb:4f:56: 9f:c8:d3:74:2e:4d:a0:51:1b:e5:c3:4c:de:4a:1e:71:1c:d7: 8f:4b:04:e5:02:e3:a3:ed:28:ad:f0:37:8d:c6:ef:f4:4a:2b: cf:f1:04:57:b7:67:65:a5:7b:99:4d:5d:81:94:1e:ea:7c:e3: 87:4a:7a:70 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsy9dQN+wQDbkIJVDQ7111JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE4MTkzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTQzYTkxNmQ2ZDUxZGI5NzNmNzI4MGZhODgxMTEyMjUyYmE1NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEs29CF9zkbcv7MkKfst11k1qDHZ +8l+8lhRzlF3qrKJikEf1et6VOq5QrSNWdg3yzeIihq0W9P0bBpkYxGUQauZshKD Pn1j55nBd2AFcvE3FzZ4eGi1TcgyL2GWpu2rfvK5rq8sEWaeTU+2LVmWZBQtRigA xQMjWarBHZXgeHaomc3zoJ67ZMR2uaOsKxU991Nv6Cmd+mIOuLoI3zW/mMTixy99 zzVd2zWO+dGNdR39QQ2Qi770imJMjvboT5NqDHuXQzycT+A37/rL7MgdgQDaF747 ndbvu2PHOTg+TgWueS5BAPJfb5tEH/b8Bky+IAEeBAdK9C07YmlMfp1EEwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCpDqRbW1R25c/coD6iBESJSulW0MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvS2tPcEZ0YlZIYmx6OXlnUHFJRVJJbEs2VmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCTe9gAwQB kB/IAwQBkB/MAwQBkB/6AwQBlvFaAwQBubh4MA0GCSqGSIb3DQEBCwUAA4IBAQCe zTKKrM2I3WQgdvBhrUlxePJFHqiiy0wsWscUAWuswdhXQcCEs/IvKquNgWKWG9+v pMWyEdw2Q4kdjPY6anjwUdwJ1yghUyg2X09LJvR0l6DhWUTpmKP2NBnF/k2iSy+1 s02jMBHK5nQGki7nQfKcUPZpL/LloEo/FGiau2sPDeEtV1+6FZEc/vO9GG80s7Ab 9oLxIe2luot7ZZ+7E1p8+813KOpRkgGAryU3FDLXY16+Mz7KfesoGRhegkRtOqN1 zbq7T1afyNN0Lk2gURvlw0zeSh5xHNePSwTlAuOj7Sit8DeNxu/0SivP8QRXt2dl pXuZTV2BlB7qfOOHSnpw -----END CERTIFICATE-----Generated at Sat Dec 20 08:15:38 2025 by rpki-client