This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/klXO-sH0E69ctlYICKM2oEhYAk0.roa File: klXO-sH0E69ctlYICKM2oEhYAk0.roa (raw, json) Hash identifier: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA= Subject key identifier: 92:55:CE:FA:C1:F4:13:AF:5C:B6:56:08:08:A3:36:A0:48:58:02:4D Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008 Certificate serial: 019B79ECD78D45ED10095942A24158102269 Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/klXO-sH0E69ctlYICKM2oEhYAk0.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 176.116.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d7:8d:45:ed:10:09:59:42:a2:41:58:10:22:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9255cefac1f413af5cb6560808a336a04858024d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:86:79:5c:3d:28:9e:f6:5d:8c:5d:8d:b8: da:02:7e:b5:17:d6:f4:b1:53:44:9b:a0:73:4e:15: 95:64:3e:4b:86:fb:f7:9b:33:d8:d6:0c:54:3b:c3: 8f:41:b3:7e:fb:e7:c8:34:1a:74:cf:63:44:8c:26: 45:80:26:2f:09:a5:8c:a2:1c:d6:ce:73:a4:1d:6c: 8f:81:4e:f1:99:04:43:2e:09:e3:10:73:6a:93:0b: d1:b0:9f:46:20:03:3a:d2:0a:cc:0e:e6:63:68:58: f6:3d:dd:e8:c6:3b:39:f2:f4:51:76:c4:a2:85:f5: f3:4d:76:10:a6:47:7f:ac:1a:54:5b:11:32:a1:3c: 2b:13:77:0e:c0:d2:8b:be:f7:9c:29:33:12:b6:e4: d4:42:b6:45:ab:ca:25:06:c1:3b:97:89:d3:7f:07: 1b:88:8c:0e:84:97:97:9e:39:66:39:e3:64:d1:e5: 0b:b9:7e:73:cc:90:e2:0a:8a:ec:3f:c3:c0:8d:14: 2d:38:fc:5f:cd:7d:66:2d:c3:09:c5:2d:a3:96:33: 96:65:ad:b5:97:f9:b2:29:87:58:31:7d:93:be:d2: 1a:4a:28:1f:17:02:11:85:13:8c:f4:c9:48:79:d9: e1:d5:26:c1:48:b3:bd:3b:86:8d:3c:00:08:65:65: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:55:CE:FA:C1:F4:13:AF:5C:B6:56:08:08:A3:36:A0:48:58:02:4D X509v3 Authority Key Identifier: keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/klXO-sH0E69ctlYICKM2oEhYAk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.14.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2a:d5:1e:40:d8:df:20:23:19:89:26:17:a1:16:05:25:c5: 6d:c4:05:d7:19:8f:41:8c:82:0b:4b:f2:ef:52:10:81:60:7d: e7:3c:50:ff:e9:9a:b2:c4:b2:6b:40:fc:c2:94:3a:ac:e8:55: a9:a3:97:f1:8c:1d:c2:be:fe:5d:88:7b:54:ea:98:a9:93:e1: 30:e8:3a:e9:1b:bc:09:a8:c3:85:98:ea:0c:c8:b6:ce:f6:3e: ee:79:17:cc:4e:41:0b:69:2e:9f:96:3c:79:50:b0:e8:c8:fb: c7:f1:96:98:ed:a1:59:78:09:5f:bc:ff:52:1d:5c:08:3a:c9: 06:cb:0c:68:ff:d5:61:c7:a1:62:b1:0a:db:31:1a:c5:93:32: ff:83:4a:c2:87:0d:39:a8:f4:eb:a5:29:ed:7c:fe:2d:83:60: ed:5a:5d:a8:e8:e9:29:3c:1a:78:41:f1:cb:26:59:d3:7a:87: ed:b7:63:83:ea:41:ae:5a:98:39:f4:d6:2d:25:5b:1d:eb:7f: b0:ba:63:0d:ec:7b:01:4b:35:d9:6d:27:9b:78:d1:46:87:b3: c9:48:70:3e:be:dc:d8:64:0e:cf:be:67:9f:36:6e:2c:bc:4d: 5b:40:f5:a6:d0:6b:4a:5b:90:22:b8:84:38:33:df:c8:53:a9: 0f:4c:d0:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NeNRe0QCVlCokFYECJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz ZTYwMDgwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjU1Y2VmYWMxZjQxM2FmNWNiNjU2MDgwOGEzMzZhMDQ4NTgwMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqOGeVw9KJ72XYxdjbjaAn61F9b0 sVNEm6BzThWVZD5Lhvv3mzPY1gxUO8OPQbN+++fINBp0z2NEjCZFgCYvCaWMohzW znOkHWyPgU7xmQRDLgnjEHNqkwvRsJ9GIAM60grMDuZjaFj2Pd3oxjs58vRRdsSi hfXzTXYQpkd/rBpUWxEyoTwrE3cOwNKLvvecKTMStuTUQrZFq8olBsE7l4nTfwcb iIwOhJeXnjlmOeNk0eULuX5zzJDiCorsP8PAjRQtOPxfzX1mLcMJxS2jljOWZa21 l/myKYdYMX2TvtIaSigfFwIRhROM9MlIednh1SbBSLO9O4aNPAAIZWV/PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJVzvrB9BOvXLZWCAijNqBIWAJNMB8GA1UdIwQY MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt MjgwZjVhNGI1ZTAzLzEva2xYTy1zSDBFNjljdGxZSUNLTTJvRWhZQWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQOMA0G CSqGSIb3DQEBCwUAA4IBAQAmKtUeQNjfICMZiSYXoRYFJcVtxAXXGY9BjIILS/Lv UhCBYH3nPFD/6ZqyxLJrQPzClDqs6FWpo5fxjB3Cvv5diHtU6pipk+Ew6DrpG7wJ qMOFmOoMyLbO9j7ueRfMTkELaS6fljx5ULDoyPvH8ZaY7aFZeAlfvP9SHVwIOskG ywxo/9Vhx6FisQrbMRrFkzL/g0rChw05qPTrpSntfP4tg2DtWl2o6OkpPBp4QfHL JlnTeoftt2OD6kGuWpg59NYtJVsd63+wumMN7HsBSzXZbSebeNFGh7PJSHA+vtzY ZA7PvmefNm4svE1bQPWm0GtKW5AiuIQ4M9/IU6kPTNCR -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:02 2026 by rpki-client