This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa File: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (raw, json) Hash identifier: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA= Subject key identifier: 90:22:C7:ED:25:C2:20:F2:14:1A:CD:EA:75:B7:83:76:72:FC:5A:9A Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb Certificate serial: 019B7CEE323A0A3B3D4DC74D487E34C30564 Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12779 IP address blocks: 195.177.254.0/24 maxlen: 24 2a02:c480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:32:3a:0a:3b:3d:4d:c7:4d:48:7e:34:c3:05:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9022c7ed25c220f2141acdea75b7837672fc5a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:a5:2f:7d:48:cf:f5:e1:31:6c:d5:ab:58: 3e:7e:f6:83:1d:e8:06:39:10:25:43:9e:7c:0c:a9: d4:ff:72:a4:61:27:31:04:4e:a6:1c:e4:4a:17:a6: 60:7e:7f:b1:d0:7c:8c:79:9d:b0:c5:16:2c:b2:5e: bb:66:89:84:52:c2:35:40:6c:05:1d:b0:57:fe:8b: 7a:02:71:50:32:22:dd:8e:29:6a:50:6a:e2:83:d3: 1e:3a:b8:f2:88:0d:ee:d4:ea:35:23:23:92:2a:c9: d0:f8:96:f2:ca:13:4d:7f:83:53:d8:71:d7:5a:0f: 99:8f:05:2b:30:73:76:f0:cc:3c:39:31:b0:3a:8a: a4:66:f3:80:e2:00:57:6b:4a:69:be:86:33:61:95: 31:08:ad:d3:6c:5a:ed:a0:b7:65:b5:8a:90:38:7b: f9:30:55:4d:6b:ec:d6:da:fd:31:09:fc:1f:61:c0: 5c:68:b8:05:76:08:44:56:9b:8e:1c:22:3e:47:09: 52:5e:c9:4d:41:e3:d8:a6:4d:bd:67:2e:41:8a:22: 58:d4:02:36:26:ce:51:6e:81:3a:04:36:5d:45:e3: 1a:c6:62:54:ba:98:eb:19:66:99:19:26:cc:d9:3a: 60:b1:12:67:03:e3:d7:87:a5:35:d6:27:44:47:96: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:22:C7:ED:25:C2:20:F2:14:1A:CD:EA:75:B7:83:76:72:FC:5A:9A X509v3 Authority Key Identifier: keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.254.0/24 IPv6: 2a02:c480::/32 Signature Algorithm: sha256WithRSAEncryption 6c:06:42:5d:e9:e3:cc:03:98:62:2c:92:c5:b4:e3:31:55:a1: bc:b8:2e:e0:eb:5d:3d:2f:f3:3a:4b:be:95:d4:ef:d6:ea:14: 1e:76:c3:9a:6d:13:33:4e:52:a5:75:fd:5a:54:fa:7f:40:9f: fe:24:52:8e:01:c4:46:53:f6:bf:da:6e:a6:66:ca:22:0c:34: a5:44:85:d0:e3:be:1c:96:a3:65:c1:b8:2b:09:b9:5f:62:38: f7:d1:25:65:ab:55:b1:ef:4e:3e:47:17:9b:97:8b:05:a1:bd: 98:0f:1b:bb:d6:d4:c3:1d:1c:87:63:12:17:7a:d9:fa:9e:78: bc:be:64:cb:a0:82:5e:02:98:a3:19:32:ce:14:9b:be:9d:d1: 18:79:10:b3:d1:49:0d:64:b2:3e:30:0b:05:7a:be:2b:ac:e3: 6c:06:49:d0:c9:c3:fb:bb:48:e1:a3:da:26:4d:94:ad:42:b6: 8b:39:9d:ad:0c:1b:f8:d9:2a:af:08:c3:fd:1d:04:93:7c:e0: 72:cc:17:58:44:6a:40:ba:bc:84:d9:34:60:85:fe:f9:dd:67: a7:6c:0c:1c:2f:dd:5b:b8:6a:af:34:00:a9:93:69:73:5e:9f: 1e:8e:4b:9f:97:54:ef:a4:c6:11:90:0d:17:86:d6:dd:21:62: 18:4d:27:db -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87jI6Cjs9TcdNSH40wwVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMmYxYTExZGUxOTBjODFjMGI3NzUyY2Y1MmI1Njk0MjVk YzU0Y2IwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDIyYzdlZDI1YzIyMGYyMTQxYWNkZWE3NWI3ODM3NjcyZmM1YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SylL31Iz/XhMWzVq1g+fvaDHegG ORAlQ558DKnU/3KkYScxBE6mHORKF6Zgfn+x0HyMeZ2wxRYssl67ZomEUsI1QGwF HbBX/ot6AnFQMiLdjilqUGrig9MeOrjyiA3u1Oo1IyOSKsnQ+JbyyhNNf4NT2HHX Wg+ZjwUrMHN28Mw8OTGwOoqkZvOA4gBXa0ppvoYzYZUxCK3TbFrtoLdltYqQOHv5 MFVNa+zW2v0xCfwfYcBcaLgFdghEVpuOHCI+RwlSXslNQePYpk29Zy5BiiJY1AI2 Js5RboE6BDZdReMaxmJUupjrGWaZGSbM2TpgsRJnA+PXh6U11idER5ZQwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJAix+0lwiDyFBrN6nW3g3Zy/FqaMB8GA1UdIwQY MBaAFLovGhHeGQyBwLd1LPUrVpQl3FTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2Qt MmQzOGU3Nzc5MzQ4LzEva0NMSDdTWENJUElVR3MzcWRiZURkbkw4V3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2QtMmQzOGU3Nzc5MzQ4 LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw7H+MA0E AgACMAcDBQAqAsSAMA0GCSqGSIb3DQEBCwUAA4IBAQBsBkJd6ePMA5hiLJLFtOMx VaG8uC7g6109L/M6S76V1O/W6hQedsOabRMzTlKldf1aVPp/QJ/+JFKOAcRGU/a/ 2m6mZsoiDDSlRIXQ474clqNlwbgrCblfYjj30SVlq1Wx704+Rxebl4sFob2YDxu7 1tTDHRyHYxIXetn6nni8vmTLoIJeApijGTLOFJu+ndEYeRCz0UkNZLI+MAsFer4r rONsBknQycP7u0jho9omTZStQraLOZ2tDBv42SqvCMP9HQSTfOByzBdYRGpAuryE 2TRghf753WenbAwcL91buGqvNACpk2lzXp8ejkufl1TvpMYRkA0XhtbdIWIYTSfb -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:44 2026 by rpki-client