This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/kel_cSCD5F6prDYKQ4N65mkG0v0.roa File: kel_cSCD5F6prDYKQ4N65mkG0v0.roa (raw, json) Hash identifier: dY4q55iHKDl+k9/GoDHjzCa5w+itL9ax27Q4Jo2T7n0= Subject key identifier: 91:E9:7F:71:20:83:E4:5E:A9:AC:36:0A:43:83:7A:E6:69:06:D2:FD Certificate issuer: /CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba Certificate serial: 019B783503E316AD5E3C30C8904347896773 Authority key identifier: 79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/kel_cSCD5F6prDYKQ4N65mkG0v0.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 185.13.87.0/24 maxlen: 24 2a10:1d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:03:e3:16:ad:5e:3c:30:c8:90:43:47:89:67:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91e97f712083e45ea9ac360a43837ae66906d2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:f7:cc:a4:1c:19:23:5f:af:4f:2c:c8:95: 7e:0e:3d:56:fa:4d:2c:ae:38:dc:bd:b9:8a:d5:24: 07:a0:b5:de:2e:88:d6:23:cc:3c:6d:d9:ef:3c:9d: 65:5c:ee:02:d1:74:aa:ec:34:7d:61:a5:8c:45:b7: d5:22:64:a8:17:6b:bd:6a:32:16:87:f4:08:cc:bb: 11:c4:f4:49:09:e7:4f:86:b0:99:65:b8:6a:87:31: c5:9f:d7:02:e0:fd:63:10:b3:38:59:e2:ff:32:df: 63:91:f1:77:2f:7d:01:17:5a:03:1b:e9:70:7b:5d: 8f:05:4f:cc:cb:e1:32:0d:ea:72:87:7d:f3:10:f1: ee:c5:c1:73:69:cf:04:44:3f:aa:d5:b6:ce:15:69: 6e:60:45:93:71:dd:26:88:1e:53:df:4b:66:38:de: 76:95:11:e9:81:28:c1:4a:74:95:3e:35:33:ea:96: 99:0b:24:8b:88:99:ef:70:33:e2:d6:46:f9:0b:c1: 27:d3:41:a9:94:65:43:7a:cf:09:e6:29:91:f6:5a: da:b1:7b:3f:95:05:7c:67:71:39:b7:f4:7d:30:f0: 68:9a:5e:bf:88:95:82:d6:c8:5f:ed:88:fb:a8:b5: 2b:7f:6b:3a:af:75:93:3f:83:2d:82:e7:7a:91:2d: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:7F:71:20:83:E4:5E:A9:AC:36:0A:43:83:7A:E6:69:06:D2:FD X509v3 Authority Key Identifier: keyid:79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/kel_cSCD5F6prDYKQ4N65mkG0v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.87.0/24 IPv6: 2a10:1d00::/32 Signature Algorithm: sha256WithRSAEncryption 1b:46:13:22:2e:e5:50:2e:52:e6:3a:2f:bd:b3:9b:ba:9d:96: 66:47:a9:67:e1:81:53:3d:cf:25:cb:91:94:cd:f5:d0:18:8b: 4b:40:c0:a1:53:30:38:7e:d3:5f:4e:6c:e0:8b:dd:02:a3:77: 36:56:12:f3:75:9f:55:f1:f0:dd:24:69:9c:df:fa:49:b0:61: d3:5a:94:5c:01:25:a5:de:e8:05:44:38:5d:04:42:ee:42:73: cd:b9:df:f6:5f:78:94:0d:7d:a8:2d:de:e8:64:0b:48:ba:fa: ef:e8:c7:5e:f7:d4:cb:9e:9f:2e:d6:9c:e7:44:fc:a9:b1:9b: 2a:d9:90:64:f8:2f:e0:2d:dd:31:78:99:72:4d:81:17:3b:1b: 96:ca:f0:0f:b7:d5:94:3a:75:a8:bf:d3:7f:63:29:12:28:c3: 45:cc:0e:94:74:28:6c:bf:31:20:b1:7b:06:d9:4c:ab:cb:91: f5:e3:b1:10:b2:bd:16:c2:a7:9f:ba:30:1c:ba:da:5b:85:b2: f2:d9:17:67:77:d9:69:51:e2:f7:24:9e:68:ee:62:0f:12:02: d8:ca:a3:da:3b:22:37:6d:54:b8:87:31:09:09:20:05:07:2c: 08:22:1c:47:3e:2d:76:5e:f7:71:b8:df:ac:f1:ee:7a:6c:4f: ef:ee:d7:47 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NQPjFq1ePDDIkENHiWdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2JjZTk4YzhlM2E1ZDJmNzU2MjNlNmYyMzJmM2NmY2Ri YjUyYmEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWU5N2Y3MTIwODNlNDVlYTlhYzM2MGE0MzgzN2FlNjY5MDZkMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYj3zKQcGSNfr08syJV+Dj1W+k0s rjjcvbmK1SQHoLXeLojWI8w8bdnvPJ1lXO4C0XSq7DR9YaWMRbfVImSoF2u9ajIW h/QIzLsRxPRJCedPhrCZZbhqhzHFn9cC4P1jELM4WeL/Mt9jkfF3L30BF1oDG+lw e12PBU/My+EyDepyh33zEPHuxcFzac8ERD+q1bbOFWluYEWTcd0miB5T30tmON52 lRHpgSjBSnSVPjUz6paZCySLiJnvcDPi1kb5C8En00GplGVDes8J5imR9lrasXs/ lQV8Z3E5t/R9MPBoml6/iJWC1shf7Yj7qLUrf2s6r3WTP4Mtgud6kS3CewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJHpf3Egg+Reqaw2CkODeuZpBtL9MB8GA1UdIwQY MBaAFHl7zpjI46XS91Yj5vIy88/Nu1K6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVh2T21NampwZEwzVmlQbThqTHp6ODI3VXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NTc1NDgtZDM5ZS00NGUwLWI3YWUt M2ZiMDVhMDk4NmU3LzEva2VsX2NTQ0Q1RjZwckRZS1E0TjY1bWtHMHYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NTc1NDgtZDM5ZS00NGUwLWI3YWUtM2ZiMDVhMDk4NmU3 LzEvZVh2T21NampwZEwzVmlQbThqTHp6ODI3VXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuQ1XMA0E AgACMAcDBQAqEB0AMA0GCSqGSIb3DQEBCwUAA4IBAQAbRhMiLuVQLlLmOi+9s5u6 nZZmR6ln4YFTPc8ly5GUzfXQGItLQMChUzA4ftNfTmzgi90Co3c2VhLzdZ9V8fDd JGmc3/pJsGHTWpRcASWl3ugFRDhdBELuQnPNud/2X3iUDX2oLd7oZAtIuvrv6Mde 99TLnp8u1pznRPypsZsq2ZBk+C/gLd0xeJlyTYEXOxuWyvAPt9WUOnWov9N/YykS KMNFzA6UdChsvzEgsXsG2Uyry5H147EQsr0WwqefujAcutpbhbLy2Rdnd9lpUeL3 JJ5o7mIPEgLYyqPaOyI3bVS4hzEJCSAFBywIIhxHPi12XvdxuN+s8e56bE/v7tdH -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:32 2026 by rpki-client