This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/KZG9N6fHM4sI4IJYGPS031GIMCU.roa File: KZG9N6fHM4sI4IJYGPS031GIMCU.roa (raw, json) Hash identifier: tEyjCiPhn7zJ39mR5w03HcizEZWXp+RRquI3HmwwGD0= Subject key identifier: 29:91:BD:37:A7:C7:33:8B:08:E0:82:58:18:F4:B4:DF:51:88:30:25 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B791060B94DA9891E61C061901D8BDAB2 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/KZG9N6fHM4sI4IJYGPS031GIMCU.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.38.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:b9:4d:a9:89:1e:61:c0:61:90:1d:8b:da:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2991bd37a7c7338b08e0825818f4b4df51883025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:2d:27:ad:3b:2f:a9:41:1b:6e:fa:b9:f9: ce:d6:4c:a9:c0:f9:ee:56:e5:be:7e:c6:2a:40:21: cd:1e:77:6e:53:47:00:2d:2a:b5:be:7e:59:6c:bb: 51:2c:25:45:2d:1f:96:91:fd:ec:06:24:b9:46:f2: c6:34:50:fd:04:a3:e6:fe:ee:48:15:d0:d9:a1:8b: 71:fc:50:8d:32:15:ac:97:cf:f0:08:1e:46:36:6d: 70:fb:62:31:3b:ac:42:e3:9e:68:b0:fc:2b:6c:31: fe:c8:a9:dd:ee:99:cd:a8:25:2b:56:2f:90:fa:c2: 4c:da:31:86:4e:e3:e6:7f:fd:33:1a:56:45:5e:24: 7d:bb:de:f0:b9:30:b6:f7:82:15:14:7f:a9:29:be: 26:da:5a:02:06:c5:4f:2d:d5:a5:24:79:ce:f4:84: 75:34:c6:de:33:1d:f4:38:36:6f:24:5b:73:d5:4e: a0:b0:61:52:41:23:be:7d:cf:f3:55:23:38:8b:c1: 56:a3:99:f7:61:18:f5:32:6c:a0:26:6a:1c:c4:07: f8:27:b0:d9:0a:1f:e2:64:c9:d7:20:95:26:3a:59: 5e:f5:54:0d:ad:77:44:de:42:7a:c2:94:b3:cd:c7: 3d:fa:c7:2c:43:14:83:bf:00:c6:89:08:e6:c6:71: 6e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:BD:37:A7:C7:33:8B:08:E0:82:58:18:F4:B4:DF:51:88:30:25 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/KZG9N6fHM4sI4IJYGPS031GIMCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.25.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a5:04:60:2c:a0:19:e3:23:35:4d:85:0c:31:62:95:d2:ec: 62:23:db:43:71:df:bf:a5:22:11:92:61:d0:f6:52:29:4f:41: b5:28:c5:2a:2b:ab:3d:37:8c:62:28:ee:0b:35:6c:fc:e8:33: 9e:f2:3f:37:77:4a:34:55:c6:c4:e9:d1:39:00:b9:51:6e:17: 77:5a:53:07:93:d4:e1:d7:ee:16:bc:4c:41:ab:5c:4b:50:2f: 27:8e:57:72:81:96:16:9f:cd:d2:78:58:49:02:68:a4:e0:86: 81:87:d6:b0:e7:dd:d6:54:a6:dd:86:de:3d:ab:13:10:21:70: 06:66:16:db:67:04:38:de:18:16:9e:11:27:64:ad:d7:0e:35: f2:de:e7:4a:de:f7:7c:39:09:e9:7e:20:fd:06:af:9c:4c:c2: 17:a3:d2:42:9e:af:d0:f5:0f:93:43:7e:94:c4:12:f6:9d:b1: 43:aa:82:41:d5:0f:17:be:13:16:1c:7b:4d:24:c6:19:3f:0a: 6a:85:0c:08:3f:1a:1d:8f:7b:9a:5b:aa:f3:19:7c:77:d7:c1: ff:32:ad:c6:fb:43:74:df:4a:f4:a1:cc:b3:a0:a6:86:52:70: 22:bb:6b:e9:00:bd:e6:63:f5:a7:60:5a:47:ef:5c:53:cd:06: 96:aa:e5:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGC5TamJHmHAYZAdi9qyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTkxYmQzN2E3YzczMzhiMDhlMDgyNTgxOGY0YjRkZjUxODgzMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1REtJ607L6lBG276ufnO1kypwPnu VuW+fsYqQCHNHnduU0cALSq1vn5ZbLtRLCVFLR+Wkf3sBiS5RvLGNFD9BKPm/u5I FdDZoYtx/FCNMhWsl8/wCB5GNm1w+2IxO6xC455osPwrbDH+yKnd7pnNqCUrVi+Q +sJM2jGGTuPmf/0zGlZFXiR9u97wuTC294IVFH+pKb4m2loCBsVPLdWlJHnO9IR1 NMbeMx30ODZvJFtz1U6gsGFSQSO+fc/zVSM4i8FWo5n3YRj1MmygJmocxAf4J7DZ Ch/iZMnXIJUmOlle9VQNrXdE3kJ6wpSzzcc9+scsQxSDvwDGiQjmxnFu7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmRvTenxzOLCOCCWBj0tN9RiDAlMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvS1pHOU42ZkhNNHNJNElKWUdQUzAzMUdJTUNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSYZMA0G CSqGSIb3DQEBCwUAA4IBAQCGpQRgLKAZ4yM1TYUMMWKV0uxiI9tDcd+/pSIRkmHQ 9lIpT0G1KMUqK6s9N4xiKO4LNWz86DOe8j83d0o0VcbE6dE5ALlRbhd3WlMHk9Th 1+4WvExBq1xLUC8njldygZYWn83SeFhJAmik4IaBh9aw593WVKbdht49qxMQIXAG ZhbbZwQ43hgWnhEnZK3XDjXy3udK3vd8OQnpfiD9Bq+cTMIXo9JCnq/Q9Q+TQ36U xBL2nbFDqoJB1Q8XvhMWHHtNJMYZPwpqhQwIPxodj3uaW6rzGXx318H/Mq3G+0N0 30r0ocyzoKaGUnAiu2vpAL3mY/WnYFpH71xTzQaWquVZ -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:29 2026 by rpki-client