This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/klVz-smQMQqxcV3KxltjaYG18uI.roa File: klVz-smQMQqxcV3KxltjaYG18uI.roa (raw, json) Hash identifier: yw2wx6lhnRBOadOrzXXwsTQpWwh4J32lCLSLsgV+xfY= Subject key identifier: 92:55:73:FA:C9:90:31:0A:B1:71:5D:CA:C6:5B:63:69:81:B5:F2:E2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848E40CBFE14511638A867EA71A53C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/klVz-smQMQqxcV3KxltjaYG18uI.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198361 IP address blocks: 31.58.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8e:40:cb:fe:14:51:16:38:a8:67:ea:71:a5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=925573fac990310ab1715dcac65b636981b5f2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:6c:10:f1:fc:f3:1d:97:0a:43:02:e1:b9: a6:a8:dd:5d:86:11:ab:1b:1a:f6:fa:70:af:50:58: 9a:83:63:cc:78:42:dc:51:0b:be:4f:d2:79:65:e3: 89:38:5d:79:5f:2e:7d:84:e0:bd:3d:f0:fc:f2:59: 72:ad:16:d5:48:59:f3:a1:08:70:85:8c:11:ee:fa: 34:c1:cc:97:23:1a:c9:ef:97:67:fe:82:e1:33:3f: a7:a1:24:30:f0:47:59:fb:8b:25:fb:56:15:25:c9: 00:9e:47:7d:08:67:44:d8:1c:8c:64:d7:72:64:16: f5:c8:7a:df:21:66:57:46:7c:26:1c:c9:4d:01:18: bc:88:8c:cd:4b:b0:a6:07:ba:e8:ee:24:1b:bb:51: 39:36:a6:39:ee:3b:81:76:69:a6:9a:4c:3f:9d:7d: 3f:77:43:c2:17:47:c7:48:ea:d4:99:fb:f9:ee:1a: c2:33:e3:55:d3:6e:47:8d:41:fd:1b:be:fc:74:ee: 0e:2b:27:55:17:c0:4a:55:39:af:c7:4e:0a:1c:d5: 3e:13:52:e7:dd:07:2f:ed:2f:dc:5a:31:2f:ad:8f: 70:27:b0:da:ee:0b:63:96:01:11:38:e3:87:37:fc: 97:dc:1c:bd:76:bf:8d:ca:18:fb:24:9b:e3:4f:6d: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:55:73:FA:C9:90:31:0A:B1:71:5D:CA:C6:5B:63:69:81:B5:F2:E2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/klVz-smQMQqxcV3KxltjaYG18uI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.210.0/24 Signature Algorithm: sha256WithRSAEncryption 04:a5:35:f7:00:9f:2f:92:2b:95:d4:7c:0d:a5:ce:20:55:07: 9d:05:74:35:f1:ae:40:28:4b:6e:02:ec:d3:0d:a4:74:5c:ef: a1:92:8d:f4:39:6e:4f:7a:91:11:60:69:d6:c5:29:cc:65:f3: 9c:d5:a2:ce:58:00:0c:00:79:45:a0:e7:f4:09:04:52:34:12: 66:cf:47:bc:88:9e:23:d2:d2:5d:1a:2f:f8:23:5c:99:6a:ca: cd:23:dc:08:b9:cc:e9:e6:12:77:fe:1a:e2:44:2f:2f:b4:83: 5e:2b:5b:ae:b1:29:c9:b4:34:22:f1:09:1b:58:4c:d1:e3:51: ed:59:e2:83:10:3d:36:80:a1:19:31:b8:76:1f:28:68:e1:45: 71:d2:59:d7:cd:24:49:cd:b0:23:66:4c:16:e0:3f:38:ff:20: 25:82:0e:d4:c7:37:f5:6c:ba:ef:cb:55:0f:f3:27:25:87:6c: 27:97:28:68:e8:70:0b:25:60:32:df:72:0f:0c:c9:9b:e9:2d: 7a:3a:d7:05:c6:6d:8c:1c:92:e1:27:7b:6a:10:88:80:f6:33: da:34:c8:32:78:e7:83:38:da:fe:76:0e:04:40:c5:34:62:3a: e8:a1:a9:25:f6:eb:e1:b3:9d:51:5e:e8:a7:a0:20:a7:58:50: 90:1b:3f:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hI5Ay/4UURY4qGfqcaU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjU1NzNmYWM5OTAzMTBhYjE3MTVkY2FjNjViNjM2OTgxYjVmMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+NsEPH88x2XCkMC4bmmqN1dhhGr Gxr2+nCvUFiag2PMeELcUQu+T9J5ZeOJOF15Xy59hOC9PfD88llyrRbVSFnzoQhw hYwR7vo0wcyXIxrJ75dn/oLhMz+noSQw8EdZ+4sl+1YVJckAnkd9CGdE2ByMZNdy ZBb1yHrfIWZXRnwmHMlNARi8iIzNS7CmB7ro7iQbu1E5NqY57juBdmmmmkw/nX0/ d0PCF0fHSOrUmfv57hrCM+NV025HjUH9G778dO4OKydVF8BKVTmvx04KHNU+E1Ln 3Qcv7S/cWjEvrY9wJ7Da7gtjlgEROOOHN/yX3By9dr+Nyhj7JJvjT21fgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJVc/rJkDEKsXFdysZbY2mBtfLiMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEva2xWei1zbVFNUXF4Y1YzS3hsdGphWUcxOHVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrSMA0G CSqGSIb3DQEBCwUAA4IBAQAEpTX3AJ8vkiuV1HwNpc4gVQedBXQ18a5AKEtuAuzT DaR0XO+hko30OW5PepERYGnWxSnMZfOc1aLOWAAMAHlFoOf0CQRSNBJmz0e8iJ4j 0tJdGi/4I1yZasrNI9wIuczp5hJ3/hriRC8vtINeK1uusSnJtDQi8QkbWEzR41Ht WeKDED02gKEZMbh2Hyho4UVx0lnXzSRJzbAjZkwW4D84/yAlgg7Uxzf1bLrvy1UP 8yclh2wnlyho6HALJWAy33IPDMmb6S16OtcFxm2MHJLhJ3tqEIiA9jPaNMgyeOeD ONr+dg4EQMU0Yjrooakl9uvhs51RXuinoCCnWFCQGz8B -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client