This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/K-S86ts0JsymD-vEYsZHG--_Sds.roa
File: K-S86ts0JsymD-vEYsZHG--_Sds.roa (raw, json)
Hash identifier: Fijrm8WeE/yxvOigytaAwchUATOKJtRAXK3JOvX8YT4=
Subject key identifier: 2B:E4:BC:EA:DB:34:26:CC:A6:0F:EB:C4:62:C6:47:1B:EF:BF:49:DB
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019B3BAFB6FBB79854A2463AA45A86744313
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/K-S86ts0JsymD-vEYsZHG--_Sds.roa
Signing time: Sat 20 Dec 2025 12:15:30 +0000
ROA not before: Sat 20 Dec 2025 12:15:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 95.173.48.0/24 maxlen: 24
95.173.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:af:b6:fb:b7:98:54:a2:46:3a:a4:5a:86:74:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Dec 20 12:15:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be4bceadb3426cca60febc462c6471befbf49db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:a2:95:ee:2e:aa:57:e1:01:a3:ea:9d:21:
b1:29:b1:08:65:fe:2b:94:35:10:33:03:be:a4:34:
41:df:9d:1d:13:ac:ff:91:0f:b1:5c:7d:f0:5b:cb:
5f:48:09:67:74:c3:9b:4c:1d:af:63:56:6c:62:16:
81:b2:af:a6:a6:24:45:2d:51:69:20:1f:a5:04:91:
75:a6:6d:4b:4f:5c:5b:d1:5f:4d:c6:c8:90:c4:18:
34:06:0e:31:63:56:e8:a7:cb:1e:57:8e:07:6b:50:
a7:9c:d8:33:4e:a8:ab:75:47:10:4c:e5:66:8f:f5:
76:f0:c9:33:53:d6:31:69:34:04:2c:46:5e:5f:4a:
e6:19:0f:66:96:e3:a1:2f:13:56:8f:de:30:17:7c:
e3:36:58:95:4b:af:a4:f9:01:da:41:8b:ce:05:60:
5b:48:35:bf:4f:2a:6e:79:51:64:15:07:92:ea:fe:
ec:16:b2:b6:3a:18:db:d4:49:a4:25:73:da:03:a4:
2e:e0:e1:70:d2:67:16:90:4d:0c:50:56:74:df:0d:
64:6b:a3:66:dd:d4:78:e5:0e:4a:d8:ed:fa:98:7b:
70:bb:8d:59:c3:07:aa:e2:f3:68:6a:dc:ef:d5:d5:
fb:a5:92:22:6e:ce:88:da:77:bc:c5:4e:d9:ed:37:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:BC:EA:DB:34:26:CC:A6:0F:EB:C4:62:C6:47:1B:EF:BF:49:DB
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/K-S86ts0JsymD-vEYsZHG--_Sds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.48.0/24
95.173.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cf:e0:5b:2f:74:9b:a0:3a:ef:e3:fa:db:16:83:50:4f:31:
ea:b7:7a:fe:99:19:ed:64:17:57:c1:96:c9:f9:dc:5c:b7:c8:
cd:90:65:38:22:12:ea:bc:f6:bb:54:23:13:d3:c3:0e:f0:4b:
d0:45:db:c2:7e:a7:4d:27:ca:7b:b1:0a:e5:ac:68:11:87:3d:
ca:88:d1:79:74:ac:e8:ba:b2:41:1b:d5:b3:3e:a5:93:5b:7a:
b9:ac:1d:54:5d:2d:e4:2d:21:9b:ea:53:50:f8:62:ed:01:db:
90:55:6e:26:21:aa:0d:09:97:fe:03:6b:99:63:a5:8b:e2:0c:
57:be:e6:4e:e8:d1:19:2d:df:d9:4f:b2:ab:b0:a7:5f:6b:6b:
4a:f6:19:cc:59:e6:fc:ee:6c:be:30:db:9f:b3:59:21:ba:fe:
a8:92:de:60:1f:9c:95:b3:3f:ba:d8:9d:b8:4b:e3:3e:67:ca:
13:c6:02:c1:02:71:bb:d4:06:7c:ea:79:60:72:e9:31:af:e5:
9f:2e:6a:dc:9a:53:94:cc:86:e1:ea:c8:86:3c:ea:26:41:c9:
d1:82:b5:8d:a0:4d:65:44:86:01:6d:82:07:b1:2b:ff:25:48:
07:f8:61:6f:91:cb:c0:51:93:dc:dd:da:92:7f:e7:7b:98:8b:
db:a1:fa:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZs7r7b7t5hUokY6pFqGdEMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUxMjIwMTIxNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmU0YmNlYWRiMzQyNmNjYTYwZmViYzQ2MmM2NDcxYmVmYmY0OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0reile4uqlfhAaPqnSGxKbEIZf4r
lDUQMwO+pDRB350dE6z/kQ+xXH3wW8tfSAlndMObTB2vY1ZsYhaBsq+mpiRFLVFp
IB+lBJF1pm1LT1xb0V9NxsiQxBg0Bg4xY1bop8seV44Ha1CnnNgzTqirdUcQTOVm
j/V28MkzU9YxaTQELEZeX0rmGQ9mluOhLxNWj94wF3zjNliVS6+k+QHaQYvOBWBb
SDW/TypueVFkFQeS6v7sFrK2Ohjb1EmkJXPaA6Qu4OFw0mcWkE0MUFZ03w1ka6Nm
3dR45Q5K2O36mHtwu41Zwweq4vNoatzv1dX7pZIibs6I2ne8xU7Z7TeXNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCvkvOrbNCbMpg/rxGLGRxvvv0nbMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvSy1TODZ0czBKc3ltRC12RVlzWkhHLS1fU2RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX60wAwQA
X60yMA0GCSqGSIb3DQEBCwUAA4IBAQAtz+BbL3SboDrv4/rbFoNQTzHqt3r+mRnt
ZBdXwZbJ+dxct8jNkGU4IhLqvPa7VCMT08MO8EvQRdvCfqdNJ8p7sQrlrGgRhz3K
iNF5dKzourJBG9WzPqWTW3q5rB1UXS3kLSGb6lNQ+GLtAduQVW4mIaoNCZf+A2uZ
Y6WL4gxXvuZO6NEZLd/ZT7KrsKdfa2tK9hnMWeb87my+MNufs1khuv6okt5gH5yV
sz+62J24S+M+Z8oTxgLBAnG71AZ86nlgcukxr+WfLmrcmlOUzIbh6siGPOomQcnR
grWNoE1lRIYBbYIHsSv/JUgH+GFvkcvAUZPc3dqSf+d7mIvbofqH
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:10:24 2025 by rpki-client