This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/KLKORJcf0nBlaG442v6MDYPpypQ.roa File: KLKORJcf0nBlaG442v6MDYPpypQ.roa (raw, json) Hash identifier: MEcr5qgwhoDueAlfT91o7khXfra7BXM4JSAGiiZA/f4= Subject key identifier: 28:B2:8E:44:97:1F:D2:70:65:68:6E:38:DA:FE:8C:0D:83:E9:CA:94 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F81734DE29BD04E238FF698E280A9BF Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/KLKORJcf0nBlaG442v6MDYPpypQ.roa Signing time: Fri 02 Jan 2026 16:19:08 +0000 ROA not before: Fri 02 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 147.136.64.0/22 maxlen: 22 147.136.70.0/24 maxlen: 24 168.199.141.0/24 maxlen: 24 168.199.159.0/24 maxlen: 24 168.199.209.0/24 maxlen: 24 168.199.225.0/24 maxlen: 24 185.101.253.0/24 maxlen: 24 185.101.254.0/24 maxlen: 24 192.95.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:73:4d:e2:9b:d0:4e:23:8f:f6:98:e2:80:a9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28b28e44971fd27065686e38dafe8c0d83e9ca94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8a:56:ea:6c:bb:0f:c6:b1:96:bf:ac:6c:3a: 78:b5:c2:79:3d:90:e7:93:a5:f2:06:62:fd:70:7c: bc:4f:70:2f:38:63:d1:3c:e6:42:78:ff:d7:58:33: 6c:d3:54:08:0f:90:38:d8:d4:9b:e5:13:83:3f:58: 33:da:81:85:5b:a2:c6:6b:34:a4:b8:fb:5f:0c:7a: d8:dd:4b:60:41:6c:0c:ec:39:31:9e:ec:ec:1e:93: c7:d8:88:8b:00:ac:0a:6b:0f:1c:69:86:d6:38:f5: 2d:e2:a2:c4:cd:d6:da:67:9f:f6:5c:c5:a2:75:e3: 33:02:08:8c:1b:eb:be:8a:61:eb:4b:b1:52:0e:7e: d7:40:05:39:9c:c5:f6:d4:74:7e:c2:62:b2:e7:5b: 6a:74:4d:df:b7:5d:db:6e:45:28:38:92:2b:da:bd: 2f:67:8b:91:a2:56:63:91:01:32:58:8d:18:67:4f: f8:8f:ec:90:49:8d:99:09:42:9c:b7:7b:fe:08:c8: c6:ed:7d:bf:4a:e9:a3:04:ae:85:63:4a:61:55:95: 06:3e:ba:7c:86:c6:1b:95:d0:af:92:00:df:da:9d: f3:d4:31:93:e4:20:bc:8f:6e:1b:f9:ba:75:81:cb: b2:5f:fa:3b:60:39:7c:d6:ac:e2:20:19:83:21:c5: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B2:8E:44:97:1F:D2:70:65:68:6E:38:DA:FE:8C:0D:83:E9:CA:94 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/KLKORJcf0nBlaG442v6MDYPpypQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.136.64.0/22 147.136.70.0/24 168.199.141.0/24 168.199.159.0/24 168.199.209.0/24 168.199.225.0/24 185.101.253.0-185.101.254.255 192.95.85.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:ab:c6:a8:dd:d0:80:72:0a:6e:02:f7:48:ad:e5:1a:d3:92: a2:b6:18:85:53:b5:a8:b1:c6:93:78:48:30:56:fe:52:6e:54: 75:ec:36:96:48:a9:9e:4e:52:51:77:2a:82:19:0f:b3:9e:99: b5:18:e7:00:61:bf:52:83:1c:96:dc:83:06:bf:4e:90:0d:33: 6f:6e:bd:ad:6e:82:76:88:39:43:bf:f1:7f:40:80:82:21:60: 31:69:45:a1:71:ba:1e:70:c4:36:3d:3c:b1:36:44:b8:e2:03: f5:b4:cf:34:66:d5:7d:e4:ad:a0:21:ee:96:d2:42:82:4b:e3: 69:4c:8d:25:bd:42:78:4c:6f:8a:a5:fe:d6:31:9f:8b:fd:ce: 2b:99:fd:28:25:ee:db:33:f3:90:51:a3:e1:74:3a:fc:d9:a0: 22:ab:df:0f:d7:a2:7f:c1:6c:aa:62:72:0a:28:3f:eb:ca:88: c1:5e:cd:f9:0e:38:02:c2:95:42:8c:d4:62:90:0e:f9:f9:71: a2:d0:52:c6:f6:30:92:58:dd:01:8e:58:ad:98:4d:be:01:d1: 0f:25:b6:8b:cd:6b:44:7e:10:a2:1d:00:46:8e:47:4b:e6:50: f1:35:51:39:f1:38:50:21:b4:e0:59:70:3d:40:cc:b7:d1:f4: 4b:9e:d4:be -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt/gXNN4pvQTiOP9pjigKm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGIyOGU0NDk3MWZkMjcwNjU2ODZlMzhkYWZlOGMwZDgzZTljYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54pW6my7D8axlr+sbDp4tcJ5PZDn k6XyBmL9cHy8T3AvOGPRPOZCeP/XWDNs01QID5A42NSb5RODP1gz2oGFW6LGazSk uPtfDHrY3UtgQWwM7DkxnuzsHpPH2IiLAKwKaw8caYbWOPUt4qLEzdbaZ5/2XMWi deMzAgiMG+u+imHrS7FSDn7XQAU5nMX21HR+wmKy51tqdE3ft13bbkUoOJIr2r0v Z4uRolZjkQEyWI0YZ0/4j+yQSY2ZCUKct3v+CMjG7X2/SumjBK6FY0phVZUGPrp8 hsYbldCvkgDf2p3z1DGT5CC8j24b+bp1gcuyX/o7YDl81qziIBmDIcXRZQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFCiyjkSXH9JwZWhuONr+jA2D6cqUMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvS0xLT1JKY2YwbkJsYUc0NDJ2Nk1EWVBweXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCk4hAAwQA k4hGAwQAqMeNAwQAqMefAwQAqMfRAwQAqMfhMAwDBAC5Zf0DBAC5Zf4DBADAX1Uw DQYJKoZIhvcNAQELBQADggEBAE6rxqjd0IByCm4C90it5RrTkqK2GIVTtaixxpN4 SDBW/lJuVHXsNpZIqZ5OUlF3KoIZD7OembUY5wBhv1KDHJbcgwa/TpANM29uva1u gnaIOUO/8X9AgIIhYDFpRaFxuh5wxDY9PLE2RLjiA/W0zzRm1X3kraAh7pbSQoJL 42lMjSW9QnhMb4ql/tYxn4v9ziuZ/Sgl7tsz85BRo+F0OvzZoCKr3w/Xon/BbKpi cgooP+vKiMFezfkOOALClUKM1GKQDvn5caLQUsb2MJJY3QGOWK2YTb4B0Q8ltovN a0R+EKIdAEaOR0vmUPE1UTnxOFAhtOBZcD1AzLfR9Eue1L4= -----END CERTIFICATE-----Generated at Fri Jan 9 16:50:38 2026 by rpki-client