This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/KLak6E7XOaljYL7i0cSZlIlCEqg.roa File: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (raw, json) Hash identifier: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg= Subject key identifier: 28:B6:A4:E8:4E:D7:39:A9:63:60:BE:E2:D1:C4:99:94:89:42:12:A8 Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf Certificate serial: 019B78A35F7F848C4798AD5E89B225297CC5 Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/KLak6E7XOaljYL7i0cSZlIlCEqg.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48096 IP address blocks: 195.42.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5f:7f:84:8c:47:98:ad:5e:89:b2:25:29:7c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28b6a4e84ed739a96360bee2d1c49994894212a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:c7:93:7d:cd:55:30:12:05:fb:a4:10:38: c4:3e:67:bb:9a:7c:5a:f3:e8:24:fa:8e:12:f6:6b: 68:98:c4:0a:02:89:ec:c7:4c:6e:59:d2:3d:09:c9: fe:4b:af:6e:ba:81:19:67:22:c1:1e:1d:20:5e:c6: 14:6e:13:84:61:d3:04:76:2d:0b:c8:7a:13:b5:97: 1f:81:10:2a:2b:6f:01:eb:23:27:17:81:6a:92:d8: a4:c9:8d:ab:77:1f:5e:12:88:04:92:27:a1:12:c1: 95:02:8e:1b:de:86:2d:6b:23:4d:f9:79:53:ef:07: be:ca:71:3f:6d:64:b3:f8:18:32:34:28:86:ba:3e: 53:12:33:89:25:0b:84:f5:76:13:4c:b9:99:b8:87: 62:ed:0d:1a:03:ec:f4:9d:05:8d:93:06:26:13:03: e2:77:d8:5d:2d:f1:ee:b4:35:d5:ff:0f:b6:77:8b: 26:d1:9b:71:bd:af:46:0e:f6:6e:5f:85:31:ed:69: 7e:50:a9:11:c5:c8:47:7d:c1:00:a5:2d:cc:fa:a6: 44:81:a0:f0:93:ef:3b:d7:58:34:08:df:0a:5d:4e: 43:18:fd:a3:7a:93:48:ec:a4:45:5d:3b:32:48:96: be:0b:62:59:5b:73:4e:9c:9a:8d:3b:2d:3e:20:c1: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B6:A4:E8:4E:D7:39:A9:63:60:BE:E2:D1:C4:99:94:89:42:12:A8 X509v3 Authority Key Identifier: keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/KLak6E7XOaljYL7i0cSZlIlCEqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.243.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:4a:2c:48:18:ab:0b:b8:37:f9:1c:42:bb:ca:20:41:36:4f: 55:1b:60:c1:50:dc:3a:2a:24:37:ad:68:29:07:f3:85:e4:ba: 60:15:cc:c1:92:f6:d2:89:7d:2b:cf:b5:49:f5:a0:1e:3a:0b: be:43:35:c5:9b:93:7d:6d:a4:cb:62:4e:51:fb:b4:87:72:04: 79:5a:9a:11:bc:09:88:e0:70:23:76:6f:79:b9:6a:a1:1d:15: df:a0:b7:6b:7b:d1:50:41:56:32:c3:1a:49:ff:d6:4c:16:8b: bf:2d:43:86:9f:a8:37:c3:06:7e:6c:67:1d:08:21:3a:89:ae: c5:26:dd:24:c1:21:6e:95:ca:56:d9:26:d7:2f:c9:1e:19:8a: 59:a0:0f:ff:2b:c4:ca:a7:d4:d2:71:68:2a:d1:1e:f5:0f:19: cd:f4:f4:29:f5:32:f3:8a:0e:1e:c3:44:3b:fa:d5:64:6a:d1: a8:28:37:9b:97:e4:e3:65:9c:2c:7e:ec:0c:29:ca:04:82:65: 56:93:8b:20:8d:22:9a:1d:ee:ff:8a:a3:6b:3d:6e:d6:43:68: fe:f1:23:7e:d4:b3:d3:ff:7b:2c:81:f8:29:cf:35:75:e0:96: 93:39:7f:19:04:ea:64:c0:74:e9:16:56:e8:d1:4f:15:92:03: 26:d1:74:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o19/hIxHmK1eibIlKXzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0 MTJlZGYwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGI2YTRlODRlZDczOWE5NjM2MGJlZTJkMWM0OTk5NDg5NDIxMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjzHk33NVTASBfukEDjEPme7mnxa 8+gk+o4S9mtomMQKAonsx0xuWdI9Ccn+S69uuoEZZyLBHh0gXsYUbhOEYdMEdi0L yHoTtZcfgRAqK28B6yMnF4FqktikyY2rdx9eEogEkiehEsGVAo4b3oYtayNN+XlT 7we+ynE/bWSz+BgyNCiGuj5TEjOJJQuE9XYTTLmZuIdi7Q0aA+z0nQWNkwYmEwPi d9hdLfHutDXV/w+2d4sm0Ztxva9GDvZuX4Ux7Wl+UKkRxchHfcEApS3M+qZEgaDw k+8711g0CN8KXU5DGP2jepNI7KRFXTsySJa+C2JZW3NOnJqNOy0+IMGkrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCi2pOhO1zmpY2C+4tHEmZSJQhKoMB8GA1UdIwQY MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt OTBjMGJkZTA5ODY5LzEvS0xhazZFN1hPYWxqWUw3aTBjU1psSWxDRXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5 LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyrzMA0G CSqGSIb3DQEBCwUAA4IBAQCLSixIGKsLuDf5HEK7yiBBNk9VG2DBUNw6KiQ3rWgp B/OF5LpgFczBkvbSiX0rz7VJ9aAeOgu+QzXFm5N9baTLYk5R+7SHcgR5WpoRvAmI 4HAjdm95uWqhHRXfoLdre9FQQVYywxpJ/9ZMFou/LUOGn6g3wwZ+bGcdCCE6ia7F Jt0kwSFulcpW2SbXL8keGYpZoA//K8TKp9TScWgq0R71DxnN9PQp9TLzig4ew0Q7 +tVkatGoKDebl+TjZZwsfuwMKcoEgmVWk4sgjSKaHe7/iqNrPW7WQ2j+8SN+1LPT /3ssgfgpzzV14JaTOX8ZBOpkwHTpFlbo0U8VkgMm0XS1 -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:13 2026 by rpki-client