This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/klFSaLAwwOsgXOBECdEPGSrFYl0.roa File: klFSaLAwwOsgXOBECdEPGSrFYl0.roa (raw, json) Hash identifier: UYImWUS59EGyl6c9TPYk2AzKgoXoeqX8/O5qUiAsGu0= Subject key identifier: 92:51:52:68:B0:30:C0:EB:20:5C:E0:44:09:D1:0F:19:2A:C5:62:5D Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802BB0851071304EE864836E43B60A Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/klFSaLAwwOsgXOBECdEPGSrFYl0.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213764 IP address blocks: 92.118.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:b0:85:10:71:30:4e:e8:64:83:6e:43:b6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92515268b030c0eb205ce04409d10f192ac5625d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:26:c8:0f:0d:17:f3:9e:da:34:69:d1:86: 1a:91:de:65:71:39:7a:a6:82:ac:bc:a3:7f:68:66: cc:b4:16:b2:a9:8a:53:bf:fb:a8:ad:78:d1:a4:96: f4:f9:49:08:ba:70:94:51:d0:ff:58:07:eb:c9:d2: 7f:2e:b1:ad:7f:ee:ad:f5:74:d9:17:19:82:b9:75: 9c:e8:1d:73:c4:4f:cf:d1:b4:29:64:1b:4c:55:db: 6a:8c:26:5c:15:d2:6c:6b:c8:d4:cf:99:a7:39:bb: 25:13:9d:3c:ab:0f:45:45:e9:5a:de:18:ec:d1:e2: cf:b4:5d:b3:40:75:ff:a4:03:b5:50:2e:8e:ef:9c: 31:1f:9e:00:7f:96:08:1d:96:a8:ba:bb:a8:92:bc: 10:f3:5e:67:71:0c:07:de:52:27:3b:94:0d:25:75: 41:a3:98:65:9c:f8:7a:3a:33:50:0b:06:1e:c9:18: f3:cc:5c:9a:d4:54:6c:f3:5a:5a:06:c1:c9:a2:33: 81:a2:b7:92:e3:22:49:27:5b:0d:c4:e2:f9:91:ee: ab:e8:4c:7f:b8:35:05:9a:d0:e1:d8:89:db:a0:f2: 39:10:97:5d:3c:1a:5c:bf:73:8d:b6:d7:5c:1f:a7: 11:14:9f:fe:95:58:e3:42:81:c8:30:4e:38:9a:26: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:51:52:68:B0:30:C0:EB:20:5C:E0:44:09:D1:0F:19:2A:C5:62:5D X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/klFSaLAwwOsgXOBECdEPGSrFYl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.207.0/24 Signature Algorithm: sha256WithRSAEncryption 28:bf:eb:16:c6:55:98:b6:0e:e0:4a:8c:ac:6f:b8:d7:12:ed: 73:da:2d:5e:e5:59:91:c1:5a:b5:39:d9:28:3d:1d:08:07:20: 65:d8:ee:fd:67:80:47:a9:32:b0:76:ce:b1:e9:f7:91:5c:3c: 1e:26:26:42:c6:68:4f:b7:3c:db:f5:c6:76:d0:d9:11:79:ad: 66:21:e5:c3:b4:80:7f:c7:b5:ca:ae:be:99:59:fd:3e:d2:9e: 84:fd:70:d5:91:02:19:5b:e8:64:3b:e1:da:46:9e:11:ed:98: 7d:c7:27:9f:1f:3b:98:b2:d0:ff:e8:a4:f3:c9:82:25:69:d6: 4d:e9:d1:fe:91:bd:9e:59:9d:d9:aa:3d:3e:9a:6a:77:6a:82: ed:a6:a0:ed:40:c5:0e:21:37:73:14:a8:e0:48:00:70:92:01: d7:18:15:34:b0:4b:1a:5d:66:b9:3b:e0:6e:9c:98:7a:6d:6c: 3f:72:30:90:07:9d:c3:92:8c:0a:d1:d6:cb:ef:42:d2:ab:2f: ab:4e:bf:04:54:65:16:31:cd:23:59:fa:58:ec:36:df:db:58: 4f:94:e0:cc:dc:d4:57:de:be:2f:b1:eb:96:d1:f6:01:e7:c7: a1:3a:3d:51:28:c5:88:8b:de:1c:ea:94:bd:3c:90:c1:7d:40: 70:70:0f:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCuwhRBxME7oZINuQ7YKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjUxNTI2OGIwMzBjMGViMjA1Y2UwNDQwOWQxMGYxOTJhYzU2MjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXgmyA8NF/Oe2jRp0YYakd5lcTl6 poKsvKN/aGbMtBayqYpTv/uorXjRpJb0+UkIunCUUdD/WAfrydJ/LrGtf+6t9XTZ FxmCuXWc6B1zxE/P0bQpZBtMVdtqjCZcFdJsa8jUz5mnObslE508qw9FRela3hjs 0eLPtF2zQHX/pAO1UC6O75wxH54Af5YIHZaouruokrwQ815ncQwH3lInO5QNJXVB o5hlnPh6OjNQCwYeyRjzzFya1FRs81paBsHJojOBoreS4yJJJ1sNxOL5ke6r6Ex/ uDUFmtDh2InboPI5EJddPBpcv3ONttdcH6cRFJ/+lVjjQoHIME44mib34QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJRUmiwMMDrIFzgRAnRDxkqxWJdMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEva2xGU2FMQXd3T3NnWE9CRUNkRVBHU3JGWWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHbPMA0G CSqGSIb3DQEBCwUAA4IBAQAov+sWxlWYtg7gSoysb7jXEu1z2i1e5VmRwVq1Odko PR0IByBl2O79Z4BHqTKwds6x6feRXDweJiZCxmhPtzzb9cZ20NkRea1mIeXDtIB/ x7XKrr6ZWf0+0p6E/XDVkQIZW+hkO+HaRp4R7Zh9xyefHzuYstD/6KTzyYIladZN 6dH+kb2eWZ3Zqj0+mmp3aoLtpqDtQMUOITdzFKjgSABwkgHXGBU0sEsaXWa5O+Bu nJh6bWw/cjCQB53DkowK0dbL70LSqy+rTr8EVGUWMc0jWfpY7Dbf21hPlODM3NRX 3r4vseuW0fYB58ehOj1RKMWIi94c6pS9PJDBfUBwcA8v -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:16 2026 by rpki-client