This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/kLGlFczsrbvI1LLNYABL3V31uw4.roa File: kLGlFczsrbvI1LLNYABL3V31uw4.roa (raw, json) Hash identifier: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4= Subject key identifier: 90:B1:A5:15:CC:EC:AD:BB:C8:D4:B2:CD:60:00:4B:DD:5D:F5:BB:0E Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B7B3696C79729FD245DC616B7A1F82597 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/kLGlFczsrbvI1LLNYABL3V31uw4.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50247 IP address blocks: 185.129.124.0/23 maxlen: 23 185.129.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:96:c7:97:29:fd:24:5d:c6:16:b7:a1:f8:25:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90b1a515ccecadbbc8d4b2cd60004bdd5df5bb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:9c:b1:a7:e7:90:ea:7c:d4:e7:15:e5:08: b4:c7:fc:86:4e:84:f8:21:40:60:32:ae:6f:7b:41: 06:62:48:de:f2:af:46:40:1a:4e:7d:33:6e:15:5b: 17:5a:41:48:86:44:6f:59:a0:07:3c:6f:11:56:fa: 7c:97:2f:3c:b2:2a:a2:cb:ea:b9:55:b6:6c:47:a3: 65:7e:66:c5:c6:dd:76:e7:17:25:58:34:52:a3:08: 67:f8:3d:1a:0a:a4:42:a3:a0:dd:2f:b7:2e:d2:8a: 72:83:ef:dd:b1:88:8d:bd:7b:94:9f:a8:90:4d:40: e8:fe:cb:3f:50:fd:38:a7:17:d9:54:45:90:a7:5b: 89:30:30:40:f1:1e:71:b5:37:c3:a4:56:2d:38:62: 1e:cf:cf:38:44:da:30:aa:5a:59:89:b0:9a:9d:4e: 1c:67:2b:dc:e1:32:41:a6:c0:a0:01:a2:a9:9f:65: 80:b1:56:4f:7f:1a:df:2d:33:22:c2:6c:1a:ee:74: e1:b7:2d:2c:b7:b3:ae:e8:e4:9c:98:c6:97:1b:ac: 29:2e:99:99:2d:94:d1:0a:9b:6a:5f:36:5e:57:6b: ed:9c:a7:b4:35:b6:a2:eb:36:a2:76:ed:30:d0:16: 9e:62:18:3f:fe:e7:6d:17:be:46:f6:3b:65:22:1a: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:A5:15:CC:EC:AD:BB:C8:D4:B2:CD:60:00:4B:DD:5D:F5:BB:0E X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/kLGlFczsrbvI1LLNYABL3V31uw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.124.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:14:e9:2a:26:3b:f9:c2:e3:06:fc:7c:7d:74:5a:53:36:27: d1:c6:48:38:a9:66:23:f8:78:e8:0e:ee:03:9f:53:51:b5:02: 69:a2:0b:35:e5:0f:eb:4b:11:61:bc:53:0e:9b:68:80:be:a9: 0a:cf:29:13:4d:00:c3:1c:d7:e2:72:8d:a3:10:32:fa:5a:82: 9c:1a:f3:0d:97:54:7c:33:78:af:02:d1:bd:7c:22:8b:ba:e6: 7b:f9:90:30:b3:84:58:da:b9:f6:32:26:c8:62:d5:b3:c6:e5: 45:47:d4:18:73:34:d2:04:1d:ad:18:83:04:18:7b:f7:be:35: 49:4c:27:56:7c:5e:25:0b:09:9b:de:55:6a:7f:94:50:0d:18: 68:c4:d4:54:0e:90:a6:10:d3:3a:80:3a:4f:a5:6d:0c:5c:55: 93:d3:1b:1f:32:25:f1:79:d8:76:41:57:17:85:f2:45:d3:05: 12:58:a5:85:0c:99:76:9c:8b:92:36:45:14:22:25:1c:20:47: 72:ba:4c:5f:62:0f:29:65:4f:cf:23:59:e6:8c:d2:99:5a:40: ad:cd:b6:8b:8b:7a:6d:b4:ee:85:52:04:7f:a3:66:e8:d8:06: 02:b2:c2:87:99:1b:64:c8:6f:44:b8:99:5a:af:28:7b:96:4b: a5:96:55:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpbHlyn9JF3GFreh+CWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGIxYTUxNWNjZWNhZGJiYzhkNGIyY2Q2MDAwNGJkZDVkZjViYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CWcsafnkOp81OcV5Qi0x/yGToT4 IUBgMq5ve0EGYkje8q9GQBpOfTNuFVsXWkFIhkRvWaAHPG8RVvp8ly88siqiy+q5 VbZsR6NlfmbFxt125xclWDRSowhn+D0aCqRCo6DdL7cu0opyg+/dsYiNvXuUn6iQ TUDo/ss/UP04pxfZVEWQp1uJMDBA8R5xtTfDpFYtOGIez884RNowqlpZibCanU4c Zyvc4TJBpsCgAaKpn2WAsVZPfxrfLTMiwmwa7nThty0st7Ou6OScmMaXG6wpLpmZ LZTRCptqXzZeV2vtnKe0Nbai6zaidu0w0BaeYhg//udtF75G9jtlIhp7SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCxpRXM7K27yNSyzWAAS91d9bsOMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEva0xHbEZjenNyYnZJMUxMTllBQkwzVjMxdXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYF8MA0G CSqGSIb3DQEBCwUAA4IBAQCOFOkqJjv5wuMG/Hx9dFpTNifRxkg4qWYj+HjoDu4D n1NRtQJpogs15Q/rSxFhvFMOm2iAvqkKzykTTQDDHNfico2jEDL6WoKcGvMNl1R8 M3ivAtG9fCKLuuZ7+ZAws4RY2rn2MibIYtWzxuVFR9QYczTSBB2tGIMEGHv3vjVJ TCdWfF4lCwmb3lVqf5RQDRhoxNRUDpCmENM6gDpPpW0MXFWT0xsfMiXxedh2QVcX hfJF0wUSWKWFDJl2nIuSNkUUIiUcIEdyukxfYg8pZU/PI1nmjNKZWkCtzbaLi3pt tO6FUgR/o2bo2AYCssKHmRtkyG9EuJlaryh7lkulllXW -----END CERTIFICATE-----Generated at Fri Feb 6 20:12:19 2026 by rpki-client