This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa File: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (raw, json) Hash identifier: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY= Subject key identifier: 28:B1:B5:40:62:EC:03:45:A8:DB:5F:D8:FB:6F:A3:06:91:B6:BD:D1 Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Certificate serial: 019B7F136A9ABC4A8CCA99B7750A13753765 Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa Signing time: Fri 02 Jan 2026 14:18:57 +0000 ROA not before: Fri 02 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214329 IP address blocks: 209.131.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6a:9a:bc:4a:8c:ca:99:b7:75:0a:13:75:37:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Validity Not Before: Jan 2 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28b1b54062ec0345a8db5fd8fb6fa30691b6bdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:e7:00:b3:3c:c3:48:73:5f:b6:58:cc:6d: 3d:38:1f:a1:10:26:29:8d:f3:d1:4a:18:f5:ac:b1: aa:2c:fa:01:52:a9:8e:72:24:3a:bd:15:a4:55:60: 1e:19:36:c1:39:aa:b0:1d:f7:18:3c:97:95:c7:f8: 7f:99:62:7c:5c:2b:fe:9b:ac:d7:f4:1c:3d:95:45: e7:9b:9e:83:98:6a:6c:31:e4:57:58:24:30:61:3a: b4:3c:28:ab:90:5f:f3:96:c7:45:89:13:6a:29:87: f9:61:ff:2e:73:21:4f:c1:b7:77:f3:34:68:b9:45: a1:21:30:00:29:c2:e1:9d:47:74:75:16:7c:11:79: f2:dd:aa:a9:3d:08:b6:a9:a2:00:97:79:e9:52:13: 64:b4:2b:84:82:d7:c0:ab:d1:77:17:d1:53:da:f6: 60:1c:c5:0b:cc:84:a2:0c:ab:3c:a6:3b:24:d0:d3: 08:36:1c:21:d0:4f:25:cd:77:ac:72:c2:1f:0d:96: 49:84:df:3f:3a:4f:53:a2:76:dd:bd:4a:67:eb:75: 52:41:9a:00:57:5b:35:2a:15:36:ec:d4:00:e7:4e: 5b:69:63:61:f6:ca:86:17:e4:b5:02:44:3c:5c:91: d5:0b:ac:48:44:87:e0:2b:93:3a:ce:28:1a:a3:60: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:B5:40:62:EC:03:45:A8:DB:5F:D8:FB:6F:A3:06:91:B6:BD:D1 X509v3 Authority Key Identifier: keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.131.126.0/24 Signature Algorithm: sha256WithRSAEncryption 99:a8:ba:44:f6:19:eb:15:71:fd:75:61:4d:c9:7d:51:0b:17: 6b:a1:55:94:eb:05:30:59:e2:cd:45:81:27:52:58:89:bf:dd: bb:18:49:29:0a:e4:3e:44:88:37:cd:10:b3:93:a2:cd:ac:f7: db:d8:a6:e5:e0:90:39:46:80:92:92:ba:ed:19:2a:40:d1:f0: 8a:bb:28:2e:bb:fe:5b:8f:0e:bc:94:c4:3e:a0:5b:ad:27:42: d7:aa:4c:d3:bd:f7:7a:c5:30:59:02:98:87:5d:df:a6:20:3d: 36:5e:f1:f1:00:3f:ad:e5:e8:ca:6c:e1:0a:41:8d:03:b3:d5: 2b:7f:04:07:07:9e:5b:06:e8:5b:52:84:34:df:c1:8b:35:a7: a4:06:dd:4e:82:87:b9:9b:24:e5:fd:cd:8e:6a:f2:42:fb:73: 2f:e2:97:04:dc:1a:4b:88:f3:f5:c3:5b:68:1e:5a:55:88:08: 23:cd:9f:df:b2:9c:d6:e6:ba:9c:f7:90:83:71:0f:40:f9:ed: 97:39:d2:ed:f2:b5:26:b1:fd:c5:d7:7a:43:d2:8f:2d:88:00: bb:2d:66:c4:93:fd:ce:6e:84:14:ee:2b:b5:94:12:87:84:0f: c9:1e:79:2a:b5:e4:7d:55:7d:ee:21:77:0c:81:7c:9b:94:34: c6:08:bc:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2qavEqMypm3dQoTdTdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy MmI1YzQwHhcNMjYwMTAyMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGIxYjU0MDYyZWMwMzQ1YThkYjVmZDhmYjZmYTMwNjkxYjZiZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDvnALM8w0hzX7ZYzG09OB+hECYp jfPRShj1rLGqLPoBUqmOciQ6vRWkVWAeGTbBOaqwHfcYPJeVx/h/mWJ8XCv+m6zX 9Bw9lUXnm56DmGpsMeRXWCQwYTq0PCirkF/zlsdFiRNqKYf5Yf8ucyFPwbd38zRo uUWhITAAKcLhnUd0dRZ8EXny3aqpPQi2qaIAl3npUhNktCuEgtfAq9F3F9FT2vZg HMULzISiDKs8pjsk0NMINhwh0E8lzXescsIfDZZJhN8/Ok9TonbdvUpn63VSQZoA V1s1KhU27NQA505baWNh9sqGF+S1AkQ8XJHVC6xIRIfgK5M6zigao2BSOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCixtUBi7ANFqNtf2PtvowaRtr3RMB8GA1UdIwQY MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It MzRhOTQ5YzkyMDc0LzEvS0xHMVFHTHNBMFdvMjFfWS0yLWpCcEcydmRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0 LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YN+MA0G CSqGSIb3DQEBCwUAA4IBAQCZqLpE9hnrFXH9dWFNyX1RCxdroVWU6wUwWeLNRYEn UliJv927GEkpCuQ+RIg3zRCzk6LNrPfb2Kbl4JA5RoCSkrrtGSpA0fCKuyguu/5b jw68lMQ+oFutJ0LXqkzTvfd6xTBZApiHXd+mID02XvHxAD+t5ejKbOEKQY0Ds9Ur fwQHB55bBuhbUoQ038GLNaekBt1Ogoe5myTl/c2OavJC+3Mv4pcE3BpLiPP1w1to HlpViAgjzZ/fspzW5rqc95CDcQ9A+e2XOdLt8rUmsf3F13pD0o8tiAC7LWbEk/3O boQU7iu1lBKHhA/JHnkqteR9VX3uIXcMgXyblDTGCLzT -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:29 2026 by rpki-client