This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/kF0boG9BGkCnjMm_cybHk-9x98E.roa File: kF0boG9BGkCnjMm_cybHk-9x98E.roa (raw, json) Hash identifier: XEToiMqPvZmTkJyl/CXjzpcxYApIfjX1JJmfIA1g/vc= Subject key identifier: 90:5D:1B:A0:6F:41:1A:40:A7:8C:C9:BF:73:26:C7:93:EF:71:F7:C1 Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Certificate serial: 019B0C7E68DA74361E320DACC7599D4D5409 Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/kF0boG9BGkCnjMm_cybHk-9x98E.roa Signing time: Thu 11 Dec 2025 08:19:29 +0000 ROA not before: Thu 11 Dec 2025 08:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212418 IP address blocks: 185.209.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:7e:68:da:74:36:1e:32:0d:ac:c7:59:9d:4d:54:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Validity Not Before: Dec 11 08:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=905d1ba06f411a40a78cc9bf7326c793ef71f7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:8c:13:38:bf:5a:1a:73:40:47:08:3d:d4: f4:75:06:03:c4:6b:ac:1b:a8:f5:ea:a4:bb:0d:5c: 02:a3:ca:7d:48:40:6b:a1:7e:fd:47:73:44:b5:33: 76:ae:52:a8:90:64:67:82:95:26:da:e5:a2:14:e3: e7:ac:75:02:91:af:c0:47:2b:4f:7a:a9:c8:f9:d6: 7c:fc:e6:d2:b1:49:91:bb:bd:04:8e:98:03:55:87: 99:cf:8e:5b:44:ef:c6:fd:2d:40:f8:72:a2:41:7d: 6a:8c:7d:b4:1f:2f:3f:8b:b1:a4:4c:e4:19:3c:c5: 20:5a:6f:89:ee:24:53:b7:59:c3:b5:b5:90:f4:ca: 5f:f5:5c:ff:63:eb:8a:d3:29:57:47:49:ca:73:a4: e1:24:fa:5e:3b:10:9e:5b:11:b2:04:07:4f:e0:e6: 51:41:8f:7f:fa:39:83:9e:a0:7b:9f:4b:2a:4a:08: e4:32:30:af:f2:28:2f:f1:84:70:21:8a:31:3a:e6: 3a:9b:bb:a7:7e:0b:71:ac:74:38:6c:fd:95:6b:a5: 2c:a0:58:ec:7d:73:77:a1:0e:bd:87:9f:11:02:f4: 5a:60:57:82:cc:40:20:42:e1:34:3e:fd:db:66:0d: 3b:bf:76:26:f1:d0:66:1c:01:66:29:71:82:3c:d4: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:1B:A0:6F:41:1A:40:A7:8C:C9:BF:73:26:C7:93:EF:71:F7:C1 X509v3 Authority Key Identifier: keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/kF0boG9BGkCnjMm_cybHk-9x98E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.13.0/24 Signature Algorithm: sha256WithRSAEncryption 60:a2:37:01:f4:9a:8d:9d:43:19:13:8f:8b:91:60:b0:b3:bc: 73:4b:19:79:5b:c9:94:16:d0:3e:17:39:9d:21:af:1a:b8:88: 77:f3:31:35:50:6d:49:a6:94:95:7b:b8:7e:b5:ce:42:73:78: 39:72:9e:0a:7e:fd:1b:f9:bc:2c:ea:14:86:bc:4c:72:2a:7b: 5c:ee:a1:b6:c2:e8:81:90:28:92:fb:ef:86:95:e0:eb:9a:22: 5f:da:1b:6d:0b:bd:b7:5e:20:87:3f:ab:f8:55:e7:83:a1:af: d6:62:9e:fd:64:0e:eb:16:12:e6:94:f3:91:81:c6:40:d7:e0: 23:bc:56:d5:f9:86:de:4c:78:42:67:28:3d:50:fb:6b:c0:46: 03:3f:a1:64:fd:32:33:77:f7:3f:4e:d8:4b:83:26:be:d4:5f: 46:c5:5f:b8:4a:8f:6f:95:98:7d:a3:62:37:bf:c3:23:8e:92: 0a:c2:8d:11:55:64:6b:5d:20:65:b4:d3:ac:31:ef:0f:f2:e7: 9d:2d:fc:f7:72:81:2b:93:16:8e:b9:b6:d9:e3:f2:44:b9:c2: 47:c8:dd:86:3e:60:14:02:33:e8:b1:6f:37:c6:06:aa:75:fb: 18:4d:4b:16:d5:99:a6:ea:ac:bc:3e:97:5e:1f:71:53:81:dd: a0:72:5e:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMfmjadDYeMg2sx1mdTVQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0 MmM3ZDEwHhcNMjUxMjExMDgxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDVkMWJhMDZmNDExYTQwYTc4Y2M5YmY3MzI2Yzc5M2VmNzFmN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcWMEzi/WhpzQEcIPdT0dQYDxGus G6j16qS7DVwCo8p9SEBroX79R3NEtTN2rlKokGRngpUm2uWiFOPnrHUCka/ARytP eqnI+dZ8/ObSsUmRu70EjpgDVYeZz45bRO/G/S1A+HKiQX1qjH20Hy8/i7GkTOQZ PMUgWm+J7iRTt1nDtbWQ9Mpf9Vz/Y+uK0ylXR0nKc6ThJPpeOxCeWxGyBAdP4OZR QY9/+jmDnqB7n0sqSgjkMjCv8igv8YRwIYoxOuY6m7unfgtxrHQ4bP2Va6UsoFjs fXN3oQ69h58RAvRaYFeCzEAgQuE0Pv3bZg07v3Ym8dBmHAFmKXGCPNT+uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBdG6BvQRpAp4zJv3Mmx5PvcffBMB8GA1UdIwQY MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt ZTEzZDY5YTAwNDVlLzEva0YwYm9HOUJHa0Nuak1tX2N5YkhrLTl4OThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudENMA0G CSqGSIb3DQEBCwUAA4IBAQBgojcB9JqNnUMZE4+LkWCws7xzSxl5W8mUFtA+Fzmd Ia8auIh38zE1UG1JppSVe7h+tc5Cc3g5cp4Kfv0b+bws6hSGvExyKntc7qG2wuiB kCiS+++GleDrmiJf2httC723XiCHP6v4VeeDoa/WYp79ZA7rFhLmlPORgcZA1+Aj vFbV+YbeTHhCZyg9UPtrwEYDP6Fk/TIzd/c/TthLgya+1F9GxV+4So9vlZh9o2I3 v8MjjpIKwo0RVWRrXSBltNOsMe8P8uedLfz3coErkxaOubbZ4/JEucJHyN2GPmAU AjPosW83xgaqdfsYTUsW1Zmm6qy8PpdeH3FTgd2gcl4z -----END CERTIFICATE-----Generated at Sat Dec 27 07:01:35 2025 by rpki-client