This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/KhLnM9UHZFCOQul_YnhOlrlNWQg.roa File: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (raw, json) Hash identifier: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk= Subject key identifier: 2A:12:E7:33:D5:07:64:50:8E:42:E9:7F:62:78:4E:96:B9:4D:59:08 Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069 Certificate serial: 019B7AC7A21C4F8D53D1B456B24F4F81958E Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/KhLnM9UHZFCOQul_YnhOlrlNWQg.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1128 IP address blocks: 130.161.0.0/16 maxlen: 24 131.180.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a2:1c:4f:8d:53:d1:b4:56:b2:4f:4f:81:95:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069 Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a12e733d50764508e42e97f62784e96b94d5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:0c:c8:7d:9b:73:0e:74:52:b0:04:d7:98: 34:9f:b6:55:4b:f3:bd:fd:4d:fe:31:09:1f:c1:7e: 70:c4:f0:8e:0b:33:94:55:7f:e1:d6:98:f6:19:36: 91:92:4f:16:78:be:99:0e:1c:f6:fe:65:4d:b1:7f: 6d:65:f6:9f:a3:ce:07:48:58:7b:ac:f8:69:75:43: af:54:ca:76:1c:36:1a:4d:93:26:ad:48:7c:54:81: 91:08:e2:aa:67:f8:c7:fc:13:fc:6a:04:a2:48:0c: e7:35:46:af:ef:98:38:b1:db:4e:24:49:85:d8:90: 52:cf:ab:0a:52:27:57:00:9e:9b:21:f4:67:94:8d: 41:51:b7:c7:93:22:6c:d8:40:c4:a9:3c:7c:88:21: f4:9f:ed:2d:37:cd:22:96:75:7b:50:55:d4:8a:f4: 14:b3:a3:28:ca:d5:f6:34:76:98:15:b1:28:c9:ba: 02:2d:e1:93:25:e7:59:98:65:be:6b:6c:1f:60:49: 7e:b1:5f:e3:ff:41:27:ae:2d:e5:de:21:8f:05:fa: d9:be:2a:f8:a8:47:04:80:87:09:04:e7:4d:bc:83: ab:c1:a0:e5:61:03:ce:39:ff:c2:e0:c7:38:c4:9b: 9c:a2:21:92:97:6d:9d:75:20:a7:be:a9:95:ef:69: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:12:E7:33:D5:07:64:50:8E:42:E9:7F:62:78:4E:96:B9:4D:59:08 X509v3 Authority Key Identifier: keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/KhLnM9UHZFCOQul_YnhOlrlNWQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.161.0.0/16 131.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:51:dc:8c:6c:f5:ce:06:b9:f7:d0:9c:0c:a2:52:55:53:fe: 96:b3:5f:3d:ab:3e:d9:61:39:19:fe:15:5a:8b:10:e3:b2:92: b7:05:6a:d4:ba:86:5f:fb:21:76:5c:69:f0:24:36:56:9e:48: bc:5f:12:6e:70:66:d9:ed:94:bd:3b:3c:e5:82:b6:e9:69:0b: 82:02:44:6c:2c:6c:b0:59:fa:47:c9:2b:c0:ed:fd:f8:02:ba: de:46:4a:f0:d9:b8:56:51:a7:b1:0c:1c:f1:21:dc:58:aa:75: 30:e8:4f:98:c0:22:19:0e:09:df:56:2a:31:58:99:29:a5:c8: ae:9b:48:30:86:d7:c1:20:3e:fd:2d:f1:72:aa:fd:f0:df:b1: 33:ef:ff:4b:07:25:66:ce:42:7d:cc:22:0f:1b:15:8f:42:c2: af:48:96:72:b6:ea:bf:01:1c:fc:ed:b2:fe:dd:78:c4:15:d9: de:d6:82:85:59:a4:27:f4:f8:93:e3:01:93:e8:7f:fb:2f:be: 7a:b2:6b:fd:07:fd:35:c0:7a:a0:5a:07:23:5d:82:0a:74:24: 1b:02:49:48:89:e6:10:bd:d0:23:1e:64:b4:33:ea:a0:0f:e1: 83:08:29:9b:30:ab:cd:ed:de:79:0b:19:00:ca:4d:b5:e6:c2: 97:2a:52:76 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6x6IcT41T0bRWsk9PgZWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2Y3YjNmZDg3Y2U5YmNlOTlmOTAwYjY0MTk5ZDYwNmJm MTYwNjkwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTEyZTczM2Q1MDc2NDUwOGU0MmU5N2Y2Mjc4NGU5NmI5NGQ1OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/wMyH2bcw50UrAE15g0n7ZVS/O9 /U3+MQkfwX5wxPCOCzOUVX/h1pj2GTaRkk8WeL6ZDhz2/mVNsX9tZfafo84HSFh7 rPhpdUOvVMp2HDYaTZMmrUh8VIGRCOKqZ/jH/BP8agSiSAznNUav75g4sdtOJEmF 2JBSz6sKUidXAJ6bIfRnlI1BUbfHkyJs2EDEqTx8iCH0n+0tN80ilnV7UFXUivQU s6MoytX2NHaYFbEoyboCLeGTJedZmGW+a2wfYEl+sV/j/0Enri3l3iGPBfrZvir4 qEcEgIcJBOdNvIOrwaDlYQPOOf/C4Mc4xJucoiGSl22ddSCnvqmV72n6OwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFCoS5zPVB2RQjkLpf2J4Tpa5TVkIMB8GA1UdIwQY MBaAFFzPez/YfOm86Z+QC2QZnWBr8WBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgt OGNmOWU2ZjhhYjQ1LzEvS2hMbk05VUhaRkNPUXVsX1luaE9scmxOV1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgtOGNmOWU2ZjhhYjQ1 LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgqEDAwCD tDANBgkqhkiG9w0BAQsFAAOCAQEAalHcjGz1zga599CcDKJSVVP+lrNfPas+2WE5 Gf4VWosQ47KStwVq1LqGX/shdlxp8CQ2Vp5IvF8SbnBm2e2UvTs85YK26WkLggJE bCxssFn6R8krwO39+AK63kZK8Nm4VlGnsQwc8SHcWKp1MOhPmMAiGQ4J31YqMViZ KaXIrptIMIbXwSA+/S3xcqr98N+xM+//SwclZs5CfcwiDxsVj0LCr0iWcrbqvwEc /O2y/t14xBXZ3taChVmkJ/T4k+MBk+h/+y++erJr/Qf9NcB6oFoHI12CCnQkGwJJ SInmEL3QIx5ktDPqoA/hgwgpmzCrze3eeQsZAMpNtebClypSdg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:19 2026 by rpki-client