This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/kdLnMZaZpikR9zfkaRwi8RuA7Hc.roa File: kdLnMZaZpikR9zfkaRwi8RuA7Hc.roa (raw, json) Hash identifier: uvw04nFtp6dcycBY/rIeeoKvjUGu8MKp5gghFM3tfSw= Subject key identifier: 91:D2:E7:31:96:99:A6:29:11:F7:37:E4:69:1C:22:F1:1B:80:EC:77 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B28504F5D019D68D3EB61FBFBBC5E61A1 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/kdLnMZaZpikR9zfkaRwi8RuA7Hc.roa Signing time: Tue 16 Dec 2025 17:58:30 +0000 ROA not before: Tue 16 Dec 2025 17:58:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198178 IP address blocks: 212.102.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:50:4f:5d:01:9d:68:d3:eb:61:fb:fb:bc:5e:61:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Dec 16 17:58:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91d2e7319699a62911f737e4691c22f11b80ec77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:85:1e:90:cc:bb:6b:43:98:07:e5:32:23: 07:5e:60:9f:37:ba:5d:70:3d:0f:cd:12:ae:c2:af: 9e:ac:18:f6:e9:7e:61:eb:59:9c:06:20:55:64:43: 42:5a:cc:f7:8f:0a:43:c3:f2:c7:01:d6:d5:ba:76: bd:be:77:4f:76:7f:1d:17:ff:fc:9f:42:b1:fd:70: 1e:1b:99:af:1e:c9:25:2c:b3:19:0d:20:83:5e:ea: 80:cf:b6:ae:ee:57:5f:7a:d7:6d:67:bf:1d:a4:e8: 6e:28:b4:9f:9e:3f:3e:66:74:b8:b6:d7:eb:1d:22: 7d:d9:52:a7:4e:70:8c:d3:91:91:9e:a5:5c:52:1c: 89:d4:24:a6:59:a0:30:5d:40:52:08:51:ef:12:77: 0a:2a:26:2e:d5:2f:65:cf:f5:40:1c:d4:24:fc:84: ff:98:fa:57:5b:76:de:9c:7a:1a:55:86:20:86:81: 96:94:3c:69:13:90:17:d2:e5:43:b0:a1:ae:64:9f: 4e:a2:1c:36:15:7c:72:c7:99:45:37:7f:d4:82:95: 03:6b:ba:bf:d1:fb:3a:64:a5:66:51:26:a5:0c:2d: 15:13:05:2e:27:8f:61:36:27:26:59:65:9b:53:bf: 1e:c7:3e:94:aa:0d:c5:a1:68:48:a7:f0:fe:d9:1a: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D2:E7:31:96:99:A6:29:11:F7:37:E4:69:1C:22:F1:1B:80:EC:77 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/kdLnMZaZpikR9zfkaRwi8RuA7Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.107.0/24 Signature Algorithm: sha256WithRSAEncryption 00:5d:a2:38:a2:f5:f9:f0:17:81:6a:17:76:53:53:6e:37:a8: 21:e1:fe:69:2f:4f:a9:1d:42:e1:ed:1e:34:6b:5a:6f:23:2e: 17:df:f1:8c:dd:cf:a7:0f:f4:65:38:0b:2a:7b:ec:19:f7:47: c6:c8:04:87:6d:40:0a:bf:bc:1f:f5:c8:74:8b:26:b4:91:15: e8:70:6b:34:24:b6:c3:4b:5b:23:b2:9b:54:6e:ff:28:a8:18: 79:a2:7c:fc:45:48:f8:6a:ad:b1:f6:d8:b1:20:2b:71:6a:b7: d6:91:59:e4:0e:89:94:bd:c4:cc:46:68:a6:98:aa:17:22:ff: 16:2c:32:90:ab:55:ec:c8:65:65:c4:cb:32:01:9d:2b:19:1c: 9f:41:28:7f:43:e9:7a:50:33:3d:cf:bc:56:08:25:91:7d:74: 9d:61:01:d0:12:27:46:29:61:07:cf:38:af:25:e3:54:bb:ce: 4e:4a:89:18:6b:91:77:b2:3e:bb:9c:ef:85:a2:c0:39:26:19: 29:91:14:0f:eb:85:79:21:35:31:99:32:bc:4a:eb:9c:6d:ae: 32:e7:1c:3d:83:c0:9a:ec:37:04:82:96:73:de:71:2b:c7:f5: 65:9a:66:a9:6c:f5:38:1a:02:d9:e3:2e:84:92:c0:62:6a:64: 0a:a3:e2:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsoUE9dAZ1o0+th+/u8XmGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMjE2MTc1ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQyZTczMTk2OTlhNjI5MTFmNzM3ZTQ2OTFjMjJmMTFiODBlYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu6FHpDMu2tDmAflMiMHXmCfN7pd cD0PzRKuwq+erBj26X5h61mcBiBVZENCWsz3jwpDw/LHAdbVuna9vndPdn8dF//8 n0Kx/XAeG5mvHsklLLMZDSCDXuqAz7au7ldfetdtZ78dpOhuKLSfnj8+ZnS4ttfr HSJ92VKnTnCM05GRnqVcUhyJ1CSmWaAwXUBSCFHvEncKKiYu1S9lz/VAHNQk/IT/ mPpXW3benHoaVYYghoGWlDxpE5AX0uVDsKGuZJ9Oohw2FXxyx5lFN3/UgpUDa7q/ 0fs6ZKVmUSalDC0VEwUuJ49hNicmWWWbU78exz6Uqg3FoWhIp/D+2RqKKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHS5zGWmaYpEfc35GkcIvEbgOx3MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEva2RMbk1aYVpwaWtSOXpma2FSd2k4UnVBN0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZrMA0G CSqGSIb3DQEBCwUAA4IBAQAAXaI4ovX58BeBahd2U1NuN6gh4f5pL0+pHULh7R40 a1pvIy4X3/GM3c+nD/RlOAsqe+wZ90fGyASHbUAKv7wf9ch0iya0kRXocGs0JLbD S1sjsptUbv8oqBh5onz8RUj4aq2x9tixICtxarfWkVnkDomUvcTMRmimmKoXIv8W LDKQq1XsyGVlxMsyAZ0rGRyfQSh/Q+l6UDM9z7xWCCWRfXSdYQHQEidGKWEHzziv JeNUu85OSokYa5F3sj67nO+FosA5JhkpkRQP64V5ITUxmTK8Suucba4y5xw9g8Ca 7DcEgpZz3nErx/VlmmapbPU4GgLZ4y6EksBiamQKo+Lz -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:38 2025 by rpki-client