This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RKLLIhmkCFL7pp35XuzIWRxfB3A.roa File: RKLLIhmkCFL7pp35XuzIWRxfB3A.roa (raw, json) Hash identifier: hC4/bWz1U1ygnkNJBU/csnBhltgokUQ+pwinu57+l6E= Subject key identifier: 44:A2:CB:22:19:A4:08:52:FB:A6:9D:F9:5E:EC:C8:59:1C:5F:07:70 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C13329AA9986D2F751BFDD173840A51 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RKLLIhmkCFL7pp35XuzIWRxfB3A.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208888 IP address blocks: 141.136.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:9a:a9:98:6d:2f:75:1b:fd:d1:73:84:0a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44a2cb2219a40852fba69df95eecc8591c5f0770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:36:16:b1:2c:83:a7:db:7d:b8:75:cc:d3: 60:6f:bb:13:47:3e:05:5d:99:ec:92:c3:42:7d:bf: 0d:f8:3f:3b:ed:80:35:66:16:b1:a2:74:c1:e8:50: 16:cd:9d:50:76:44:32:b0:56:ed:eb:b6:65:68:da: fb:b8:c9:73:e9:1e:c8:9b:d1:b7:61:e8:96:b1:81: 2d:04:02:18:f4:3c:49:07:77:37:1b:34:e9:4b:5d: ca:c6:1b:7d:24:8c:fa:2f:8e:06:71:be:72:4b:2f: 32:7b:12:76:09:0b:8c:ec:94:13:1e:08:3c:5d:fe: 3a:24:b4:14:8a:a9:27:3e:b1:16:ca:a4:54:4d:2a: dd:e6:24:d6:82:be:96:2e:e1:9a:ad:c0:59:b5:cb: 98:9e:97:3a:db:91:bd:6c:78:b9:94:b2:01:c0:01: aa:73:f0:2c:a1:b3:4b:0a:24:8a:ac:87:24:79:76: fb:2b:47:a4:41:69:02:d5:fa:94:10:ee:4e:c6:82: 30:42:9e:41:f7:c3:30:69:d1:28:66:3f:e4:a5:c0: ff:af:03:22:33:2c:26:94:35:d8:0d:8e:25:23:9d: a5:2a:9e:43:22:15:ab:6c:d1:fc:1e:4d:6d:74:4f: 40:ab:71:82:ca:0a:62:8b:0e:a4:cc:0f:77:80:86: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A2:CB:22:19:A4:08:52:FB:A6:9D:F9:5E:EC:C8:59:1C:5F:07:70 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RKLLIhmkCFL7pp35XuzIWRxfB3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.136.63.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:d5:cb:51:a4:b7:c1:e9:76:0f:ef:50:eb:23:df:93:af:78: 82:11:48:37:f3:4b:85:14:d2:ce:88:17:d3:e1:76:fa:02:52: 45:f6:47:12:35:17:81:6f:b7:09:d4:5d:96:e7:f1:ab:31:c2: d4:cf:9e:27:8c:38:67:05:6a:f7:57:1b:3b:54:a9:94:eb:62: d6:a4:ea:84:be:56:09:4f:42:aa:40:4e:4f:ec:44:08:ea:96: e1:e2:0d:4e:18:d6:a6:2b:6c:72:46:9d:df:ed:8b:e9:b5:38: b9:64:4d:47:fe:b8:f3:e4:34:75:ed:be:85:95:a3:9e:17:22: 5f:2d:18:db:49:d2:4a:10:2b:82:5e:e8:8d:bf:e5:c2:cb:e1: 32:99:79:9e:e1:f5:f0:cc:78:c2:1e:b7:91:c1:2d:00:f1:49: cf:59:2a:46:e1:56:76:1d:9e:66:be:92:d3:9f:1c:81:5d:0a: ec:2b:7d:b9:bb:0c:45:fb:eb:7f:b4:1c:1a:36:b2:62:e6:0e: 61:e5:7b:2e:30:b0:42:d6:f4:33:c0:11:0f:3e:a3:0b:ba:cc: 4e:fa:0b:19:ef:f2:72:1d:4f:14:4a:2b:13:30:e9:72:81:d0: af:cd:23:69:70:13:d9:8c:61:e7:22:a9:4c:38:5d:27:2b:9a: 61:e5:e8:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzKaqZhtL3Ub/dFzhApRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGEyY2IyMjE5YTQwODUyZmJhNjlkZjk1ZWVjYzg1OTFjNWYwNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6c2FrEsg6fbfbh1zNNgb7sTRz4F XZnsksNCfb8N+D877YA1ZhaxonTB6FAWzZ1QdkQysFbt67ZlaNr7uMlz6R7Im9G3 YeiWsYEtBAIY9DxJB3c3GzTpS13Kxht9JIz6L44Gcb5ySy8yexJ2CQuM7JQTHgg8 Xf46JLQUiqknPrEWyqRUTSrd5iTWgr6WLuGarcBZtcuYnpc625G9bHi5lLIBwAGq c/AsobNLCiSKrIckeXb7K0ekQWkC1fqUEO5OxoIwQp5B98MwadEoZj/kpcD/rwMi MywmlDXYDY4lI52lKp5DIhWrbNH8Hk1tdE9Aq3GCygpiiw6kzA93gIbE5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFESiyyIZpAhS+6ad+V7syFkcXwdwMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvUktMTElobWtDRkw3cHAzNVh1eklXUnhmQjNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYg/MA0G CSqGSIb3DQEBCwUAA4IBAQBc1ctRpLfB6XYP71DrI9+Tr3iCEUg380uFFNLOiBfT 4Xb6AlJF9kcSNReBb7cJ1F2W5/GrMcLUz54njDhnBWr3Vxs7VKmU62LWpOqEvlYJ T0KqQE5P7EQI6pbh4g1OGNamK2xyRp3f7YvptTi5ZE1H/rjz5DR17b6FlaOeFyJf LRjbSdJKECuCXuiNv+XCy+EymXme4fXwzHjCHreRwS0A8UnPWSpG4VZ2HZ5mvpLT nxyBXQrsK325uwxF++t/tBwaNrJi5g5h5XsuMLBC1vQzwBEPPqMLusxO+gsZ7/Jy HU8USisTMOlygdCvzSNpcBPZjGHnIqlMOF0nK5ph5ehV -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:20 2026 by rpki-client