This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa File: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (raw, json) Hash identifier: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo= Subject key identifier: 2A:5A:B0:35:E0:D2:34:8F:BA:81:C6:0B:04:D3:B9:0F:32:5C:28:81 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7A41191DE536249C0D9E910F8E42 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141776 IP address blocks: 2a13:b487:1500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7a:41:19:1d:e5:36:24:9c:0d:9e:91:0f:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a5ab035e0d2348fba81c60b04d3b90f325c2881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4f:2e:e4:e4:2a:6f:c0:f9:9b:8a:0c:dd:ef: 5b:6f:ff:b2:79:fd:de:6a:97:b5:bb:9f:85:88:59: bf:ff:7d:d5:7e:88:b3:38:d8:21:a1:93:a1:20:2c: 55:7f:c0:05:34:f4:1f:d6:5e:f1:a4:5f:78:c3:47: c5:75:e1:ff:b2:83:91:8c:96:c7:e8:3c:1e:ec:37: 21:33:02:71:f6:d1:cd:f8:e3:45:33:e6:3f:79:62: a6:ec:34:4e:af:77:48:87:d7:36:b8:18:e8:fb:bf: 50:84:0c:c5:1b:9b:a8:67:b5:7d:67:09:f7:42:fd: f8:41:be:8f:b6:00:94:25:c6:05:25:ef:35:98:96: f6:f7:25:3b:07:ce:9e:48:37:17:18:0e:f0:89:64: 77:48:46:ba:f0:21:fd:f0:d2:80:fa:57:ba:fe:5a: 71:e3:0f:fa:2a:65:5d:4a:ea:9a:1d:6a:88:83:42: b4:c8:04:93:f6:af:d0:ee:1f:b1:74:bb:ad:d3:8a: 5f:87:5f:b5:54:b1:be:04:eb:f7:42:12:b0:3a:17: c2:34:a4:43:ae:fe:e2:c4:e2:63:b6:cc:c5:7e:51: fb:88:ab:6b:7f:7e:15:60:6c:61:fb:44:b5:a6:d1: 5b:20:1e:7c:e7:82:16:a5:b8:b2:11:3f:72:6a:5d: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5A:B0:35:E0:D2:34:8F:BA:81:C6:0B:04:D3:B9:0F:32:5C:28:81 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:1500::/40 Signature Algorithm: sha256WithRSAEncryption 23:43:6a:03:b2:39:a5:09:7b:60:9a:87:8e:ea:82:18:b8:a9: 89:fd:6c:1d:b5:b5:cc:6d:44:d9:d9:6e:39:18:d4:7f:b5:92: 71:f7:f1:18:34:f0:16:0d:f1:05:d5:ef:be:7b:46:bf:7e:33: 4f:f1:6f:ff:bb:b5:84:fb:53:f8:46:e2:24:5f:4f:e6:a3:48: e6:7d:50:6f:d9:ec:e5:7e:80:06:d6:e8:47:75:ad:0a:69:6e: 83:47:c1:9c:b5:cd:1d:56:bf:58:10:45:99:3c:d0:79:93:57: fc:9c:ab:96:57:72:b8:5a:94:7f:c4:e1:16:e7:54:f3:9c:b0: 0d:67:16:56:5f:8d:52:84:8c:0e:00:60:01:61:f5:c9:23:d1: 2e:a1:92:75:6a:62:a0:d4:b2:8c:ed:6c:5e:07:d2:6d:7b:42: ac:a8:24:b8:93:a3:79:e1:72:f8:8d:7b:3c:9b:1c:ed:5f:a2: d0:bc:9a:aa:7c:24:9d:28:5f:ec:99:20:7c:8f:d8:6e:28:46: 6c:89:3e:0a:84:02:aa:b3:ac:3a:d6:31:6f:3e:b5:af:b7:bf: d9:f0:c3:38:48:a8:9d:6f:f7:2d:cb:1f:93:b8:fd:6a:28:a3: 7e:d7:28:66:7a:be:b3:53:2b:f3:f4:2c:df:cd:1b:43:9c:8c: c1:33:ca:8b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XHpBGR3lNiScDZ6RD45CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTVhYjAzNWUwZDIzNDhmYmE4MWM2MGIwNGQzYjkwZjMyNWMyODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U8u5OQqb8D5m4oM3e9bb/+yef3e ape1u5+FiFm//33VfoizONghoZOhICxVf8AFNPQf1l7xpF94w0fFdeH/soORjJbH 6Dwe7DchMwJx9tHN+ONFM+Y/eWKm7DROr3dIh9c2uBjo+79QhAzFG5uoZ7V9Zwn3 Qv34Qb6PtgCUJcYFJe81mJb29yU7B86eSDcXGA7wiWR3SEa68CH98NKA+le6/lpx 4w/6KmVdSuqaHWqIg0K0yAST9q/Q7h+xdLut04pfh1+1VLG+BOv3QhKwOhfCNKRD rv7ixOJjtszFflH7iKtrf34VYGxh+0S1ptFbIB5854IWpbiyET9yal3cEQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCpasDXg0jSPuoHGCwTTuQ8yXCiBMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvS2xxd05lRFNOSS02Z2NZTEJOTzVEekpjS0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxUw DQYJKoZIhvcNAQELBQADggEBACNDagOyOaUJe2Cah47qghi4qYn9bB21tcxtRNnZ bjkY1H+1knH38Rg08BYN8QXV7757Rr9+M0/xb/+7tYT7U/hG4iRfT+ajSOZ9UG/Z 7OV+gAbW6Ed1rQppboNHwZy1zR1Wv1gQRZk80HmTV/ycq5ZXcrhalH/E4RbnVPOc sA1nFlZfjVKEjA4AYAFh9ckj0S6hknVqYqDUsoztbF4H0m17QqyoJLiTo3nhcviN ezybHO1fotC8mqp8JJ0oX+yZIHyP2G4oRmyJPgqEAqqzrDrWMW8+ta+3v9nwwzhI qJ1v9y3LH5O4/Wooo37XKGZ6vrNTK/P0LN/NG0OcjMEzyos= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:39 2026 by rpki-client