This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/KlLhZE4r7jQs2tah9cefbTTBHYU.roa File: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (raw, json) Hash identifier: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI= Subject key identifier: 2A:52:E1:64:4E:2B:EE:34:2C:DA:D6:A1:F5:C7:9F:6D:34:C1:1D:85 Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3 Certificate serial: 019B79102E4CAE6CBAF7B118FB091CBA2AD8 Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/KlLhZE4r7jQs2tah9cefbTTBHYU.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43361 IP address blocks: 37.17.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2e:4c:ae:6c:ba:f7:b1:18:fb:09:1c:ba:2a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a52e1644e2bee342cdad6a1f5c79f6d34c11d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:55:31:96:03:ec:53:13:31:63:7f:85:ae: e0:8c:4d:de:21:aa:25:8b:ac:ad:4f:41:52:01:72: 18:66:92:2f:14:1f:f0:6d:44:3d:ee:29:d9:80:9c: 4f:25:bd:f4:43:ac:73:7a:92:e6:5b:4f:2f:66:76: 57:ce:2b:4e:68:8c:02:37:d2:14:4a:7c:3b:28:f9: 72:75:9d:ea:f1:06:6d:5a:d8:55:62:5f:4f:31:48: 5f:5d:7c:7e:b5:32:e7:ed:42:09:eb:5d:8c:63:6a: 09:9f:c6:03:9e:c5:11:06:40:a1:39:41:5f:52:cc: 4b:ec:f3:d5:ad:59:df:92:ad:ac:b7:e3:28:63:4b: 60:f8:72:36:31:00:29:8c:57:14:f8:b3:4e:1b:96: ef:f5:40:51:0f:59:de:fe:78:79:21:20:89:ea:30: a3:48:00:5b:f1:5a:35:64:06:eb:c4:36:67:bf:11: ff:7a:25:ce:69:ec:c5:fd:52:f1:78:38:4d:99:05: b7:b1:08:dc:b3:71:da:0d:8a:36:17:b2:aa:53:a7: 6e:ec:2e:9e:cf:a7:36:f3:36:ab:74:3d:ac:7d:65: bb:f9:9c:a5:09:96:9e:05:29:35:1e:53:cc:8c:18: 0b:df:47:de:63:10:b4:53:3c:95:bf:ac:97:fa:58: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:E1:64:4E:2B:EE:34:2C:DA:D6:A1:F5:C7:9F:6D:34:C1:1D:85 X509v3 Authority Key Identifier: keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/KlLhZE4r7jQs2tah9cefbTTBHYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:67:77:a3:e8:76:1e:4a:2f:be:3f:70:32:b7:bb:0e:0f:8b: 77:80:89:ca:07:b9:4b:3f:a4:5c:a7:78:26:03:3b:fe:26:06: 4d:28:eb:8e:22:b8:40:78:06:a6:06:e1:84:a4:68:a7:59:6f: 00:66:ec:00:73:39:5f:1a:ab:91:96:a0:c7:92:e0:39:2f:35: d6:b9:d4:3a:c3:42:3c:22:31:78:57:c1:9b:0d:dc:83:7a:e4: a7:16:97:98:ba:34:0c:59:32:53:89:2b:fe:1a:03:33:f3:2f: 00:45:dc:b0:2f:23:68:0f:78:cc:89:04:9a:4d:1a:af:70:cd: 9a:09:4b:45:41:70:ce:5f:cc:67:72:4f:46:51:7d:08:ef:1c: 28:65:b6:eb:3c:1f:32:74:c5:91:46:9b:f9:72:65:f6:0a:00: 55:4d:8f:74:91:5f:44:47:e0:13:d4:6f:4b:04:ed:f0:6a:81: 9b:52:f1:37:e9:ad:af:21:98:78:3d:9b:9e:5f:a1:81:df:70: a4:18:ad:68:6a:4f:64:df:5f:45:e5:ee:6f:07:40:4d:79:03: b2:56:44:a8:91:46:3f:70:9c:49:1e:77:6f:a0:ae:6f:f7:d0: 41:79:25:61:ca:c8:c4:44:24:8f:11:88:1b:b5:65:b9:5f:4a: 4f:3f:4d:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EC5Mrmy697EY+wkcuirYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl NjQ4YzMwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTUyZTE2NDRlMmJlZTM0MmNkYWQ2YTFmNWM3OWY2ZDM0YzExZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHBVMZYD7FMTMWN/ha7gjE3eIaol i6ytT0FSAXIYZpIvFB/wbUQ97inZgJxPJb30Q6xzepLmW08vZnZXzitOaIwCN9IU Snw7KPlydZ3q8QZtWthVYl9PMUhfXXx+tTLn7UIJ612MY2oJn8YDnsURBkChOUFf UsxL7PPVrVnfkq2st+MoY0tg+HI2MQApjFcU+LNOG5bv9UBRD1ne/nh5ISCJ6jCj SABb8Vo1ZAbrxDZnvxH/eiXOaezF/VLxeDhNmQW3sQjcs3HaDYo2F7KqU6du7C6e z6c28zardD2sfWW7+ZylCZaeBSk1HlPMjBgL30feYxC0UzyVv6yX+lgkSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpS4WROK+40LNrWofXHn200wR2FMB8GA1UdIwQY MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt N2NjMjk0NWYyY2E2LzEvS2xMaFpFNHI3alFzMnRhaDljZWZiVFRCSFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2 LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJRH0MA0G CSqGSIb3DQEBCwUAA4IBAQBcZ3ej6HYeSi++P3Ayt7sOD4t3gInKB7lLP6Rcp3gm Azv+JgZNKOuOIrhAeAamBuGEpGinWW8AZuwAczlfGquRlqDHkuA5LzXWudQ6w0I8 IjF4V8GbDdyDeuSnFpeYujQMWTJTiSv+GgMz8y8ARdywLyNoD3jMiQSaTRqvcM2a CUtFQXDOX8xnck9GUX0I7xwoZbbrPB8ydMWRRpv5cmX2CgBVTY90kV9ER+AT1G9L BO3waoGbUvE36a2vIZh4PZueX6GB33CkGK1oak9k319F5e5vB0BNeQOyVkSokUY/ cJxJHndvoK5v99BBeSVhysjERCSPEYgbtWW5X0pPP01d -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:22 2026 by rpki-client