This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa File: kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa (raw, json) Hash identifier: 6/BkbF3Xl0wXeX45+UDxiyzqx4P3HQHvsaM0t24sFCU= Subject key identifier: 90:B3:02:01:D5:AD:F8:2D:43:18:71:CE:5D:E2:E9:6D:60:46:9F:EF Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019BDB1F5885B03922621B6E5C4C14557BAA Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa Signing time: Tue 20 Jan 2026 11:17:03 +0000 ROA not before: Tue 20 Jan 2026 11:17:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.243.154.0/23 maxlen: 24 185.243.155.0/24 maxlen: 24 195.96.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:1f:58:85:b0:39:22:62:1b:6e:5c:4c:14:55:7b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 20 11:17:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90b30201d5adf82d431871ce5de2e96d60469fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:d2:89:3a:01:8d:94:a4:c9:5b:31:86:c2: 7c:c6:38:3d:84:03:50:06:06:f3:f7:67:bd:4d:f7: 95:c1:c9:71:84:22:b2:2c:ad:e0:26:11:eb:93:24: 13:00:5a:c3:55:0f:d1:0d:f7:70:9a:b9:27:ef:33: d0:01:a9:34:55:95:6d:84:49:cb:f6:6a:64:6b:ab: 4b:cd:b8:c6:25:79:c6:36:60:d8:82:9f:b7:a6:f0: 81:7e:51:35:3b:18:bd:1f:c9:c7:ab:6f:52:bc:82: e5:db:2e:86:05:56:e0:90:4b:53:0e:f8:47:80:e6: e9:af:8e:de:de:5b:7b:59:bb:0f:ed:32:af:d5:90: e0:31:1e:4b:fd:0a:1e:52:31:67:e6:a2:76:50:81: d4:36:7e:b1:f7:69:a3:a1:07:a6:e6:37:79:34:42: a2:b2:56:5d:2d:17:36:9c:07:a5:f4:5e:a6:f1:68: db:44:c2:80:fa:30:57:0c:c7:89:25:73:28:cf:a9: 20:c5:2d:d2:6d:d4:14:86:bb:82:ac:00:b7:1b:8d: 33:9b:b0:9d:d6:7b:4f:fa:a4:a6:f5:f5:1a:39:58: 6c:56:0b:42:67:2c:c4:ca:55:a4:56:c1:5f:95:8e: 2c:50:b7:52:e9:76:0b:e8:54:7c:83:67:16:d4:90: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B3:02:01:D5:AD:F8:2D:43:18:71:CE:5D:E2:E9:6D:60:46:9F:EF X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.154.0/23 195.96.132.0/24 Signature Algorithm: sha256WithRSAEncryption 32:3a:02:87:64:40:c6:6b:ab:7b:3a:11:2e:45:83:50:37:bf: eb:55:c3:78:80:69:63:0a:6a:de:fa:af:ae:38:8d:6d:1a:44: 32:bc:5f:55:fa:1f:24:bc:43:6d:74:22:34:df:5a:6d:b8:ea: 2b:98:ff:c2:dd:a1:45:49:2a:28:e8:db:d2:81:73:b5:8c:9a: 1d:45:7e:78:d3:b6:38:e6:fd:0c:23:5e:0f:b6:2c:a4:24:03: cb:f5:3d:bf:47:3e:94:2e:8d:e4:30:26:92:95:da:46:8b:50: b1:8a:00:61:b2:bb:24:b6:a8:97:93:37:a4:70:2d:5e:97:d1: 66:10:28:a2:26:1e:2a:db:14:b5:79:86:f6:5e:d8:3a:b7:50: 1b:32:76:84:de:80:f7:58:d9:1e:a5:bd:19:99:e5:95:67:5d: e0:70:7d:c3:4b:30:2b:93:53:d3:70:66:8b:d7:97:04:14:bf: bc:ab:76:7e:e3:23:f3:e4:26:35:02:c5:55:10:33:24:4c:cb: ec:13:41:1d:47:52:3f:c8:0c:f0:21:22:39:8f:4a:94:65:0d: f8:4e:7a:80:08:7b:c3:db:b3:f0:8f:8b:a7:f9:64:4d:09:f0: 0b:96:b6:78:85:68:87:07:d8:47:f1:69:0b:0e:af:a3:b0:82: 5f:a5:6c:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvbH1iFsDkiYhtuXEwUVXuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTIwMTExNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGIzMDIwMWQ1YWRmODJkNDMxODcxY2U1ZGUyZTk2ZDYwNDY5ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPPSiToBjZSkyVsxhsJ8xjg9hANQ Bgbz92e9TfeVwclxhCKyLK3gJhHrkyQTAFrDVQ/RDfdwmrkn7zPQAak0VZVthEnL 9mpka6tLzbjGJXnGNmDYgp+3pvCBflE1Oxi9H8nHq29SvILl2y6GBVbgkEtTDvhH gObpr47e3lt7WbsP7TKv1ZDgMR5L/QoeUjFn5qJ2UIHUNn6x92mjoQem5jd5NEKi slZdLRc2nAel9F6m8WjbRMKA+jBXDMeJJXMoz6kgxS3SbdQUhruCrAC3G40zm7Cd 1ntP+qSm9fUaOVhsVgtCZyzEylWkVsFflY4sULdS6XYL6FR8g2cW1JCKaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJCzAgHVrfgtQxhxzl3i6W1gRp/vMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEva0xNQ0FkV3QtQzFER0hIT1hlTHBiV0JHbi04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBufOaAwQA w2CEMA0GCSqGSIb3DQEBCwUAA4IBAQAyOgKHZEDGa6t7OhEuRYNQN7/rVcN4gGlj Cmre+q+uOI1tGkQyvF9V+h8kvENtdCI031ptuOormP/C3aFFSSoo6NvSgXO1jJod RX5407Y45v0MI14PtiykJAPL9T2/Rz6ULo3kMCaSldpGi1CxigBhsrsktqiXkzek cC1el9FmECiiJh4q2xS1eYb2Xtg6t1AbMnaE3oD3WNkepb0ZmeWVZ13gcH3DSzAr k1PTcGaL15cEFL+8q3Z+4yPz5CY1AsVVEDMkTMvsE0EdR1I/yAzwISI5j0qUZQ34 TnqACHvD27Pwj4un+WRNCfALlrZ4hWiHB9hH8WkLDq+jsIJfpWzT -----END CERTIFICATE-----Generated at Sun Jan 25 21:02:56 2026 by rpki-client