This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/KLsDN9QMzfxMvUSuh7NfomxLa3w.roa File: KLsDN9QMzfxMvUSuh7NfomxLa3w.roa (raw, json) Hash identifier: 4IvAbXAU0XecGx56bdqz6414molY8HrQxbFV1Syz69M= Subject key identifier: 28:BB:03:37:D4:0C:CD:FC:4C:BD:44:AE:87:B3:5F:A2:6C:4B:6B:7C Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1 Certificate serial: 019B7D5B10649CCFCBA587CF501A903CB135 Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/KLsDN9QMzfxMvUSuh7NfomxLa3w.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212236 IP address blocks: 193.162.139.0/24 maxlen: 24 193.238.45.0/24 maxlen: 24 193.238.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:10:64:9c:cf:cb:a5:87:cf:50:1a:90:3c:b1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1 Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28bb0337d40ccdfc4cbd44ae87b35fa26c4b6b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:9f:97:06:6e:e0:6e:a9:8d:d7:3d:5b:20: 19:30:c2:40:f4:0d:65:4a:d2:d1:eb:25:bd:1a:c1: 6e:ec:7a:ce:3c:e8:c2:f2:55:7f:3e:94:c2:a7:4b: 8d:22:71:dd:0d:db:0d:ea:19:1e:5c:9a:d2:7d:80: fe:27:06:96:0a:6e:ba:65:ad:fc:63:8e:35:46:74: 4e:c1:09:54:a9:bb:c4:05:26:72:d0:02:59:56:ac: 42:c1:83:b2:e6:26:64:f7:4f:cc:2c:a8:44:54:0d: b3:5f:5f:1d:e9:69:db:ed:0c:b8:28:a2:db:b5:df: 2c:93:9b:ab:91:17:a2:9d:17:5a:19:dc:1e:47:16: 89:6d:7d:86:61:6c:79:9e:9f:f2:1d:33:df:5b:c0: 86:a2:0e:9c:23:e9:cd:da:7b:9e:50:7c:03:94:bf: 8f:1c:5a:06:04:dc:99:ad:30:c5:a6:8f:a4:c7:56: 7f:17:a4:7a:d9:48:ac:32:7e:a2:c7:44:4e:18:ea: 68:b7:4f:30:22:a6:19:d1:5f:9d:69:8d:87:16:e3: 7a:63:1a:b4:89:42:84:a5:de:43:49:2e:a0:00:a3: 1d:62:5e:51:91:78:f8:66:74:09:a1:e5:fb:83:6f: 67:0b:31:d0:9b:c4:ca:e2:73:7f:e0:da:65:42:3c: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BB:03:37:D4:0C:CD:FC:4C:BD:44:AE:87:B3:5F:A2:6C:4B:6B:7C X509v3 Authority Key Identifier: keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/KLsDN9QMzfxMvUSuh7NfomxLa3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.139.0/24 193.238.45.0-193.238.47.255 Signature Algorithm: sha256WithRSAEncryption c0:cc:4b:53:6d:7f:a7:10:8b:04:15:2f:d3:35:98:60:ff:c6: 70:0c:24:9c:c4:a7:ba:3c:a2:48:33:0c:59:8e:64:13:11:a0: 1a:90:5e:aa:04:2c:b6:c4:82:12:7d:aa:7c:fa:62:f6:77:f3: 78:8f:a9:61:f7:65:59:b2:a3:4e:d5:e6:25:d5:9c:13:ab:4b: 64:ea:44:40:db:2c:52:1f:d6:d1:c9:6b:f4:33:33:57:09:22: b7:f0:bb:82:34:38:13:cc:e0:49:ca:1f:7d:9a:8b:c9:a8:3d: 96:cd:c9:8f:7e:a4:4f:80:d8:93:e6:6e:e9:98:e2:5f:ad:96: b2:7d:5c:9a:83:56:58:81:ec:ad:61:b1:0f:ca:99:c3:c6:4d: d5:2a:28:b3:29:80:1a:e0:ce:32:31:dc:45:2b:e7:e7:20:f3: da:d4:30:f0:87:16:2c:b5:01:6d:09:2c:73:63:5a:5e:b6:e3: a0:28:2f:78:fd:ef:4d:11:ea:53:66:64:fb:3e:90:29:73:c7: c1:0e:92:a7:b9:ce:d7:97:13:d4:5d:fb:4f:6b:34:4f:c8:b7: 1a:1f:85:4c:e5:fc:3b:4a:a9:e6:11:50:c8:78:ba:0c:a0:04: 83:6f:fd:68:97:83:56:16:22:38:ed:cf:38:99:0d:8a:5c:00: b4:6f:9f:70 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9WxBknM/LpYfPUBqQPLE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi ZDk4YzEwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGJiMDMzN2Q0MGNjZGZjNGNiZDQ0YWU4N2IzNWZhMjZjNGI2YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4amflwZu4G6pjdc9WyAZMMJA9A1l StLR6yW9GsFu7HrOPOjC8lV/PpTCp0uNInHdDdsN6hkeXJrSfYD+JwaWCm66Za38 Y441RnROwQlUqbvEBSZy0AJZVqxCwYOy5iZk90/MLKhEVA2zX18d6Wnb7Qy4KKLb td8sk5urkReinRdaGdweRxaJbX2GYWx5np/yHTPfW8CGog6cI+nN2nueUHwDlL+P HFoGBNyZrTDFpo+kx1Z/F6R62UisMn6ix0ROGOpot08wIqYZ0V+daY2HFuN6Yxq0 iUKEpd5DSS6gAKMdYl5RkXj4ZnQJoeX7g29nCzHQm8TK4nN/4NplQjzOcwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCi7AzfUDM38TL1EroezX6JsS2t8MB8GA1UdIwQY MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt MWZiMWU5Yzg2YjUzLzEvS0xzRE45UU16ZnhNdlVTdWg3TmZvbXhMYTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwaKLMAwD BADB7i0DBATB7iAwDQYJKoZIhvcNAQELBQADggEBAMDMS1Ntf6cQiwQVL9M1mGD/ xnAMJJzEp7o8okgzDFmOZBMRoBqQXqoELLbEghJ9qnz6YvZ383iPqWH3ZVmyo07V 5iXVnBOrS2TqREDbLFIf1tHJa/QzM1cJIrfwu4I0OBPM4EnKH32ai8moPZbNyY9+ pE+A2JPmbumY4l+tlrJ9XJqDVliB7K1hsQ/KmcPGTdUqKLMpgBrgzjIx3EUr5+cg 89rUMPCHFiy1AW0JLHNjWl6246AoL3j9700R6lNmZPs+kClzx8EOkqe5zteXE9Rd +09rNE/ItxofhUzl/DtKqeYRUMh4ugygBINv/WiXg1YWIjjtzziZDYpcALRvn3A= -----END CERTIFICATE-----Generated at Tue Jan 27 07:11:34 2026 by rpki-client