This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/KlFtX5aNaedcuN1hTohiFaoERnE.roa File: KlFtX5aNaedcuN1hTohiFaoERnE.roa (raw, json) Hash identifier: 5ZprcXqSlc6+nuceeTdTSXarSoT4j6QXIXVJ5nk6dlU= Subject key identifier: 2A:51:6D:5F:96:8D:69:E7:5C:B8:DD:61:4E:88:62:15:AA:04:46:71 Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a Certificate serial: 019B7CECD63AAE0DF5A7103694525C80D745 Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/KlFtX5aNaedcuN1hTohiFaoERnE.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50616 IP address blocks: 31.22.48.0/22 maxlen: 23 31.22.48.0/23 maxlen: 23 31.22.50.0/23 maxlen: 23 31.22.52.0/22 maxlen: 23 31.22.52.0/23 maxlen: 23 31.22.54.0/23 maxlen: 23 31.22.56.0/22 maxlen: 23 31.22.56.0/23 maxlen: 23 31.22.58.0/23 maxlen: 23 31.22.60.0/22 maxlen: 23 31.22.60.0/23 maxlen: 23 31.22.62.0/23 maxlen: 23 109.234.232.0/22 maxlen: 23 109.234.232.0/23 maxlen: 23 109.234.234.0/23 maxlen: 23 109.234.236.0/22 maxlen: 23 109.234.236.0/23 maxlen: 23 109.234.238.0/23 maxlen: 23 185.156.12.0/22 maxlen: 23 185.156.12.0/23 maxlen: 23 185.156.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d6:3a:ae:0d:f5:a7:10:36:94:52:5c:80:d7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a516d5f968d69e75cb8dd614e886215aa044671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:b1:62:cc:08:aa:06:f9:16:14:2b:5b:23: ab:7a:a4:e1:ac:95:fa:d6:7b:65:39:bf:c4:9c:58: 7f:db:1b:8f:c3:04:f6:b6:9e:33:e6:ea:90:38:ea: b7:13:50:5b:27:9b:7a:16:e6:f3:2d:7f:00:f5:72: f1:bc:7b:12:21:23:47:8e:4d:67:d4:a5:40:a9:d1: 6e:b4:d4:50:4c:31:06:35:a1:c2:00:8b:0d:c5:4e: 1d:d7:a7:38:a4:18:3f:6e:a5:3b:c0:79:bf:8d:48: af:7b:9b:7f:f7:97:0f:4e:78:f6:69:14:30:b7:f3: 02:48:c8:5a:51:1d:05:20:54:b2:2e:78:1e:3f:2f: 60:97:46:31:24:97:b9:9d:33:c0:5f:8f:4a:15:f6: 5d:96:5c:3e:77:7a:da:0b:67:41:e6:98:81:5e:70: c0:ce:58:91:36:f3:cd:2c:5d:33:21:70:64:8e:36: 8f:de:b7:28:7b:ab:e7:0e:8d:cb:b5:e7:be:d8:2c: 3e:79:3f:ac:b3:a7:1e:ce:50:e6:6b:f2:4a:fc:9c: 50:54:41:c5:29:32:99:c6:0b:58:64:5b:9c:6c:1a: 01:78:a4:aa:73:d1:0d:43:70:6f:f4:30:fd:ee:d1: ce:e9:e4:64:26:69:b9:b4:f7:59:cf:54:d4:36:b3: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:6D:5F:96:8D:69:E7:5C:B8:DD:61:4E:88:62:15:AA:04:46:71 X509v3 Authority Key Identifier: keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/KlFtX5aNaedcuN1hTohiFaoERnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.48.0/20 109.234.232.0/21 185.156.12.0/22 Signature Algorithm: sha256WithRSAEncryption 17:4e:56:a1:df:4d:4d:f2:17:85:12:e1:53:97:e6:bc:3f:53: d0:d9:50:e3:de:b4:e7:78:1b:c1:cc:92:fd:48:66:82:67:f7: 72:fa:0c:57:64:41:db:48:c8:4c:d2:e9:f8:e8:d9:6f:0d:13: d6:81:43:b5:61:48:05:a9:ce:c2:24:b0:17:c6:0f:97:9c:16: e9:4b:d5:37:0a:af:b5:ea:b0:c1:2a:c6:2b:7b:29:75:16:8b: ac:ce:66:5b:19:01:11:b9:ba:b7:e5:bc:80:bb:c2:03:6a:fe: 95:a8:10:31:b7:ef:9f:1e:cf:47:31:a3:97:35:09:3b:01:7d: 00:3c:6f:ea:56:64:00:94:f7:23:44:c2:bd:eb:da:54:27:5d: f6:cc:4a:74:1b:67:03:dc:f5:ae:7b:58:46:d6:c0:d9:64:24: eb:00:02:45:84:1c:5b:69:b8:51:5d:0b:21:d1:d4:1e:96:61: da:55:a5:09:df:5a:f2:a1:50:4b:c0:17:57:ff:fb:5c:37:3e: 52:77:25:22:69:f5:90:93:d6:7e:bb:2d:1d:1d:f6:af:2d:b3: 0e:fa:29:26:e7:ef:85:4c:6d:32:e6:a5:64:79:0b:de:dc:cb: 1e:47:22:49:0d:22:9a:97:7e:e4:18:a5:ad:85:2f:65:e8:9a: 70:43:49:b4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87NY6rg31pxA2lFJcgNdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1 MzZiNGEwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTUxNmQ1Zjk2OGQ2OWU3NWNiOGRkNjE0ZTg4NjIxNWFhMDQ0NjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8KxYswIqgb5FhQrWyOreqThrJX6 1ntlOb/EnFh/2xuPwwT2tp4z5uqQOOq3E1BbJ5t6FubzLX8A9XLxvHsSISNHjk1n 1KVAqdFutNRQTDEGNaHCAIsNxU4d16c4pBg/bqU7wHm/jUive5t/95cPTnj2aRQw t/MCSMhaUR0FIFSyLngePy9gl0YxJJe5nTPAX49KFfZdllw+d3raC2dB5piBXnDA zliRNvPNLF0zIXBkjjaP3rcoe6vnDo3Ltee+2Cw+eT+ss6cezlDma/JK/JxQVEHF KTKZxgtYZFucbBoBeKSqc9ENQ3Bv9DD97tHO6eRkJmm5tPdZz1TUNrMBjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCpRbV+WjWnnXLjdYU6IYhWqBEZxMB8GA1UdIwQY MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt Y2NhNTJiNjI2ZmNhLzEvS2xGdFg1YU5hZWRjdU4xaFRvaGlGYW9FUm5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEHxYwAwQD beroAwQCuZwMMA0GCSqGSIb3DQEBCwUAA4IBAQAXTlah301N8heFEuFTl+a8P1PQ 2VDj3rTneBvBzJL9SGaCZ/dy+gxXZEHbSMhM0un46NlvDRPWgUO1YUgFqc7CJLAX xg+XnBbpS9U3Cq+16rDBKsYreyl1FouszmZbGQERubq35byAu8IDav6VqBAxt++f Hs9HMaOXNQk7AX0APG/qVmQAlPcjRMK969pUJ132zEp0G2cD3PWue1hG1sDZZCTr AAJFhBxbabhRXQsh0dQelmHaVaUJ31ryoVBLwBdX//tcNz5SdyUiafWQk9Z+uy0d HfavLbMO+ikm5++FTG0y5qVkeQve3MseRyJJDSKal37kGKWthS9l6JpwQ0m0 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:14 2026 by rpki-client