This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KLAtLEEObICbZlebqmFA5O83IXk.roa File: KLAtLEEObICbZlebqmFA5O83IXk.roa (raw, json) Hash identifier: pyVh93J91j10K4DsC/b5w4HkdvRpQnfEAIbNzTZI1dw= Subject key identifier: 28:B0:2D:2C:41:0E:6C:80:9B:66:57:9B:AA:61:40:E4:EF:37:21:79 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BB1EB24742CAC6918A85718C538AF0B11 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KLAtLEEObICbZlebqmFA5O83IXk.roa Signing time: Mon 12 Jan 2026 11:15:35 +0000 ROA not before: Mon 12 Jan 2026 11:15:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 2a0f:e1c3::/32 maxlen: 32 2a0f:e7c2::/32 maxlen: 32 2a0f:e840::/32 maxlen: 32 2a10:3240::/29 maxlen: 29 2a11:3f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:eb:24:74:2c:ac:69:18:a8:57:18:c5:38:af:0b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 12 11:15:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28b02d2c410e6c809b66579baa6140e4ef372179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:69:30:1b:07:b9:72:c7:78:02:19:c2:30: de:eb:8e:6c:0c:2b:63:59:18:64:dd:99:9c:d1:d5: 2f:44:ac:29:89:3b:96:28:f8:be:03:3a:04:42:74: 3a:35:6d:fc:e5:b4:fb:9d:26:eb:b0:77:98:47:d0: d6:6c:d9:d3:a0:de:d3:80:0b:6c:94:8f:62:7c:b1: c3:5a:70:98:39:8f:81:92:c2:2f:26:85:b6:47:74: 00:67:0a:a1:56:31:f2:be:e1:a9:16:d2:7f:dd:b2: 2a:79:c1:7f:81:58:f6:2f:e2:f3:0b:09:7f:60:b1: 4f:c4:d4:9a:af:d7:6b:c1:6d:24:bc:b9:ef:05:a6: 97:b4:c9:2f:69:94:af:3e:04:ae:2f:a4:5a:5b:de: aa:03:61:31:8e:4b:3a:c5:55:6d:2c:99:49:35:b3: ef:ee:af:54:92:3f:4b:30:ba:40:6b:52:09:41:2b: a7:87:fd:ca:6f:15:1c:3c:3e:d2:20:a5:82:0d:f6: 44:a2:c8:0f:dc:9f:47:17:df:f8:ba:92:45:1b:25: 80:b2:f9:5b:fa:66:22:d0:38:54:97:40:bd:14:39: ea:bd:0f:7e:e9:a8:cf:ab:43:46:6d:b6:48:bc:04: 79:6c:2a:e8:16:aa:00:3d:c9:85:bb:fb:ae:02:ad: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:2D:2C:41:0E:6C:80:9B:66:57:9B:AA:61:40:E4:EF:37:21:79 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KLAtLEEObICbZlebqmFA5O83IXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:e1c3::/32 2a0f:e7c2::/32 2a0f:e840::/32 2a10:3240::/29 2a11:3f80::/29 Signature Algorithm: sha256WithRSAEncryption 68:12:2c:27:e5:76:c4:09:2b:0d:1e:e5:bb:06:26:48:be:c0: 53:fa:67:a4:c1:cd:40:45:6d:38:df:29:34:c8:49:b0:15:72: ea:59:f3:9a:37:0c:d6:70:3d:71:d2:50:d0:85:03:39:d9:84: 59:23:5e:44:f1:63:5a:fe:42:2d:83:1a:27:7e:6f:8b:76:d9: 93:97:41:0a:8c:a3:dd:78:7f:27:a3:f1:99:4a:53:40:d4:9c: d7:ce:eb:40:8d:1c:82:34:47:13:2e:2b:2d:7f:36:ba:ad:a3: ee:91:53:12:7e:d3:c6:30:97:b9:c1:24:fc:d8:35:ad:a1:b1: 57:1c:fa:f0:b0:d8:c4:76:5b:e6:f2:0c:a5:ee:83:31:ff:e7: 27:28:45:73:cb:b2:77:11:a5:38:e0:cf:e7:7d:0c:12:3c:37: 31:cd:94:5c:35:b1:72:1e:96:cc:ce:29:a4:75:0c:c8:2c:bf: af:2f:21:3c:69:48:1e:bd:af:c7:b2:ac:11:91:ad:86:07:21: 13:7c:3f:1f:2c:a6:a7:fd:ea:77:5c:34:9f:a0:ec:8b:84:66: 11:68:fc:e0:10:b5:e4:72:91:5f:81:a7:2d:06:83:97:2f:bf: 07:ae:86:97:4b:90:1f:47:03:ef:8b:04:6f:37:48:db:74:68: f2:be:37:cf -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZux6yR0LKxpGKhXGMU4rwsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTEyMTExNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGIwMmQyYzQxMGU2YzgwOWI2NjU3OWJhYTYxNDBlNGVmMzcyMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1JpMBsHuXLHeAIZwjDe645sDCtj WRhk3Zmc0dUvRKwpiTuWKPi+AzoEQnQ6NW385bT7nSbrsHeYR9DWbNnToN7TgAts lI9ifLHDWnCYOY+BksIvJoW2R3QAZwqhVjHyvuGpFtJ/3bIqecF/gVj2L+LzCwl/ YLFPxNSar9drwW0kvLnvBaaXtMkvaZSvPgSuL6RaW96qA2Exjks6xVVtLJlJNbPv 7q9Ukj9LMLpAa1IJQSunh/3KbxUcPD7SIKWCDfZEosgP3J9HF9/4upJFGyWAsvlb +mYi0DhUl0C9FDnqvQ9+6ajPq0NGbbZIvAR5bCroFqoAPcmFu/uuAq0U4wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCiwLSxBDmyAm2ZXm6phQOTvNyF5MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvS0xBdExFRU9iSUNiWmxlYnFtRkE1TzgzSVhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKg/hwwMF ACoP58IDBQAqD+hAAwUDKhAyQAMFAyoRP4AwDQYJKoZIhvcNAQELBQADggEBAGgS LCfldsQJKw0e5bsGJki+wFP6Z6TBzUBFbTjfKTTISbAVcupZ85o3DNZwPXHSUNCF AznZhFkjXkTxY1r+Qi2DGid+b4t22ZOXQQqMo914fyej8ZlKU0DUnNfO60CNHII0 RxMuKy1/Nrqto+6RUxJ+08Ywl7nBJPzYNa2hsVcc+vCw2MR2W+byDKXugzH/5yco RXPLsncRpTjgz+d9DBI8NzHNlFw1sXIelszOKaR1DMgsv68vITxpSB69r8eyrBGR rYYHIRN8Px8spqf96ndcNJ+g7IuEZhFo/OAQteRykV+Bpy0Gg5cvvweuhpdLkB9H A++LBG83SNt0aPK+N88= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:20 2026 by rpki-client