This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/KlpO9LxtzZbWqUDvnyYurl2LH4Y.roa File: KlpO9LxtzZbWqUDvnyYurl2LH4Y.roa (raw, json) Hash identifier: P+UtQV7DNZ1Fi9ZPP39YI8TQkU9+Yf+JN8MdY2Vof84= Subject key identifier: 2A:5A:4E:F4:BC:6D:CD:96:D6:A9:40:EF:9F:26:2E:AE:5D:8B:1F:86 Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed Certificate serial: 019B79104478FF2E9F80ECC8193E4B44209D Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/KlpO9LxtzZbWqUDvnyYurl2LH4Y.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42061 IP address blocks: 185.248.180.0/22 maxlen: 22 193.186.5.0/24 maxlen: 24 193.186.6.0/24 maxlen: 24 2a0d:ee80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:44:78:ff:2e:9f:80:ec:c8:19:3e:4b:44:20:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a5a4ef4bc6dcd96d6a940ef9f262eae5d8b1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:da:02:a8:0a:93:ce:51:a0:a0:d2:9a:a7: b4:65:a9:64:f0:cd:7e:a3:8b:db:79:7c:1a:aa:38: 9b:b9:67:9b:26:9f:d8:b7:b5:2b:87:a6:22:10:d5: 1c:ef:fa:be:59:b4:50:61:a4:1a:a3:c9:ae:20:c7: 3c:ec:f7:2e:ad:a5:58:20:07:5d:be:c7:a8:8d:4a: 91:40:8a:2d:94:33:49:b9:cd:25:e1:1e:b8:a1:f6: ab:cb:a7:df:8e:f1:35:fa:60:cd:cf:9c:36:c4:cc: dc:4a:81:ca:b4:7c:b2:d5:ef:88:9c:9d:57:ec:2d: 14:c2:34:ee:f2:41:ba:c3:c8:b7:9f:29:e7:02:b9: 74:93:d2:64:c3:eb:ff:08:05:2e:db:35:77:5b:86: ab:5b:5a:b7:29:e0:ca:b6:83:e2:fa:0a:00:33:ce: cc:c2:e0:69:13:f7:67:6d:06:a0:5b:ca:cf:2a:70: 03:02:f4:9c:38:8f:be:65:f6:86:1a:67:ab:45:bc: af:40:be:03:20:b6:4b:d2:a5:1b:86:86:08:b8:46: 72:ed:66:53:10:ea:6f:a7:f8:0c:2e:0f:e0:5d:53: 5c:3b:a0:65:ad:ae:d5:b1:da:ae:8c:37:4f:18:8b: 5f:5e:95:f3:b9:d8:e2:4b:df:0c:fd:91:8b:0e:b2: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5A:4E:F4:BC:6D:CD:96:D6:A9:40:EF:9F:26:2E:AE:5D:8B:1F:86 X509v3 Authority Key Identifier: keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/KlpO9LxtzZbWqUDvnyYurl2LH4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.180.0/22 193.186.5.0-193.186.6.255 IPv6: 2a0d:ee80::/32 Signature Algorithm: sha256WithRSAEncryption 5d:ac:ca:87:e5:70:95:62:34:b0:34:67:78:cc:88:70:23:62: 85:da:59:cf:d5:5b:03:c2:ab:cf:2b:a3:cb:5c:56:db:55:40: 4e:c1:41:a4:b3:06:7d:e0:25:93:83:62:d1:c0:bf:c1:a7:8c: 8f:62:36:20:a4:34:de:14:9e:3f:11:1e:1b:5d:8a:02:76:fa: 8a:7e:4e:e2:40:f6:cb:0a:52:f7:fd:66:dd:05:f2:10:9a:97: 60:26:71:7c:ac:3f:e3:b2:8a:83:3e:8a:f4:38:58:5c:d1:04: 69:af:99:23:47:50:1c:9d:ac:95:eb:30:07:81:4b:1b:4c:1f: 04:e9:2b:e2:c0:43:08:f9:49:16:15:ee:1e:a7:39:ab:74:f4: 03:0d:fe:2f:5c:56:ac:fc:df:27:49:f1:1f:cf:ba:05:13:91: b5:33:a0:9c:0d:7e:63:af:0a:f1:b0:e8:2c:32:85:ee:55:1c: 65:e8:e8:8c:b1:75:1f:5b:83:e1:46:db:80:3d:75:4c:41:0e: ea:50:d5:8d:03:33:2f:ee:dc:55:78:2e:c6:15:09:3a:72:46: 1d:32:59:2c:3f:09:88:e8:39:cb:74:e3:2b:12:87:3a:f9:42: dc:5c:23:08:cd:6a:92:7c:45:03:33:07:8c:60:75:4f:0c:a4: 4b:cd:4f:99 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5EER4/y6fgOzIGT5LRCCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDkyMDYzYTJhN2RjNjA5ZTJiNmY5Y2MwZGFmMDRmMWU5 OGI5ZWQwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTVhNGVmNGJjNmRjZDk2ZDZhOTQwZWY5ZjI2MmVhZTVkOGIxZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLLaAqgKk85RoKDSmqe0Zalk8M1+ o4vbeXwaqjibuWebJp/Yt7Urh6YiENUc7/q+WbRQYaQao8muIMc87PcuraVYIAdd vseojUqRQIotlDNJuc0l4R64ofary6ffjvE1+mDNz5w2xMzcSoHKtHyy1e+InJ1X 7C0UwjTu8kG6w8i3nynnArl0k9Jkw+v/CAUu2zV3W4arW1q3KeDKtoPi+goAM87M wuBpE/dnbQagW8rPKnADAvScOI++ZfaGGmerRbyvQL4DILZL0qUbhoYIuEZy7WZT EOpvp/gMLg/gXVNcO6Blra7VsdqujDdPGItfXpXzudjiS98M/ZGLDrKF+wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCpaTvS8bc2W1qlA758mLq5dix+GMB8GA1UdIwQY MBaAFBYJIGOip9xgnitvnMDa8E8emLntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjct NjBkM2ZlMTljM2JjLzEvS2xwTzlMeHR6WmJXcVVEdm55WXVybDJMSDRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjctNjBkM2ZlMTljM2Jj LzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCufi0MAwD BADBugUDBADBugYwDQQCAAIwBwMFACoN7oAwDQYJKoZIhvcNAQELBQADggEBAF2s yoflcJViNLA0Z3jMiHAjYoXaWc/VWwPCq88ro8tcVttVQE7BQaSzBn3gJZODYtHA v8GnjI9iNiCkNN4Unj8RHhtdigJ2+op+TuJA9ssKUvf9Zt0F8hCal2AmcXysP+Oy ioM+ivQ4WFzRBGmvmSNHUBydrJXrMAeBSxtMHwTpK+LAQwj5SRYV7h6nOat09AMN /i9cVqz83ydJ8R/PugUTkbUzoJwNfmOvCvGw6Cwyhe5VHGXo6IyxdR9bg+FG24A9 dUxBDupQ1Y0DMy/u3FV4LsYVCTpyRh0yWSw/CYjoOct04ysShzr5QtxcIwjNapJ8 RQMzB4xgdU8MpEvNT5k= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:35 2026 by rpki-client