This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/RosKSFL_tFtQ89bX-qHP5zLu6m0.roa File: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (raw, json) Hash identifier: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM= Subject key identifier: 46:8B:0A:48:52:FF:B4:5B:50:F3:D6:D7:FA:A1:CF:E7:32:EE:EA:6D Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75 Certificate serial: 019B7DCA67909690C1AEF484B8E3A10A58DD Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/RosKSFL_tFtQ89bX-qHP5zLu6m0.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56410 IP address blocks: 217.115.121.0/24 maxlen: 24 217.115.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:67:90:96:90:c1:ae:f4:84:b8:e3:a1:0a:58:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468b0a4852ffb45b50f3d6d7faa1cfe732eeea6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:81:49:5b:a8:91:4f:bf:c3:4e:d1:b0:02:e4: e3:c0:24:64:f2:92:0b:b8:71:69:dd:c6:fd:2a:85: be:7e:7e:1c:19:83:a6:4f:db:43:4c:e9:82:f8:76: 42:57:89:6e:ce:f9:2f:8b:5a:a8:23:09:a9:f2:5a: 89:1a:b4:dd:03:1b:31:ce:b3:c2:cb:a3:49:10:5a: 45:1a:73:2f:94:fd:9e:63:85:67:ea:96:eb:dd:29: 0b:ea:31:f2:e1:f7:cb:90:95:41:7b:66:b0:69:2e: 3b:27:05:ed:29:49:8f:50:5f:6d:f0:a2:ba:71:bb: 70:b2:7a:17:77:83:10:f5:cd:3d:ff:dd:59:ad:12: 9a:38:27:d9:3b:ab:ff:a1:1d:3c:35:1f:06:73:51: a3:c7:0d:57:e8:dd:5d:25:ad:ce:87:d9:04:e7:53: 65:3d:63:31:c9:b3:38:64:c1:2d:b4:b2:77:e3:fa: bf:e3:81:48:84:b9:78:29:4b:2e:97:55:8c:f3:b6: ed:c6:a1:89:22:cd:9c:84:5c:3d:9e:96:d0:0a:64: 5e:1f:75:f5:91:db:f2:35:b9:d7:56:e2:ad:9d:13: 0c:70:e2:35:a3:12:5b:bd:97:93:b1:1f:da:06:2b: 70:8d:13:ce:b9:e8:b0:fb:72:39:0a:1c:7e:ab:a7: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8B:0A:48:52:FF:B4:5B:50:F3:D6:D7:FA:A1:CF:E7:32:EE:EA:6D X509v3 Authority Key Identifier: keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/RosKSFL_tFtQ89bX-qHP5zLu6m0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.115.121.0/24 217.115.124.0/24 Signature Algorithm: sha256WithRSAEncryption bd:d2:cd:a1:96:b0:f5:92:18:b1:35:a8:5c:df:9c:3b:b5:81: 46:b2:7a:c2:2a:ef:c4:88:5f:9f:8e:58:4a:38:76:fa:0a:31: cd:64:56:8e:ac:14:44:64:7b:84:53:83:9e:62:ee:e9:fd:02: 56:ad:38:b7:9a:7f:ad:56:c7:3f:17:e2:7d:72:7a:d0:7e:af: 4c:1c:52:80:35:0c:d7:5a:86:9b:e7:ef:a2:8d:7d:d3:fc:19: 3d:99:81:81:7e:66:6f:b0:21:2a:43:27:bd:bc:3c:ca:7a:91: 20:3e:5b:56:28:19:a4:48:4c:f1:32:f4:c8:45:11:1c:9c:b1: ba:ee:ac:4d:2c:af:2b:77:11:e2:40:aa:ff:94:19:ab:ed:29: 51:76:87:07:95:94:3a:18:5a:52:a7:e3:3c:8d:91:2e:83:0e: dc:79:80:56:ed:f4:a9:2d:e9:c6:e9:4e:b4:df:a3:fc:42:c4: 28:fc:5c:d7:ea:64:e6:ad:3f:43:43:b0:d1:1f:70:45:d9:83: a3:1a:0e:eb:c3:10:ca:76:9e:16:b6:54:e1:8b:9c:1f:72:c2: 3f:86:c8:7e:2e:d4:12:be:40:c0:8b:33:29:3f:76:06:35:61: dd:8d:ad:98:c2:0e:f8:fb:9e:65:4a:7e:db:ce:7a:40:bf:7e: e8:ba:74:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ymeQlpDBrvSEuOOhCljdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx YzdmNzUwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhiMGE0ODUyZmZiNDViNTBmM2Q2ZDdmYWExY2ZlNzMyZWVlYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oFJW6iRT7/DTtGwAuTjwCRk8pIL uHFp3cb9KoW+fn4cGYOmT9tDTOmC+HZCV4luzvkvi1qoIwmp8lqJGrTdAxsxzrPC y6NJEFpFGnMvlP2eY4Vn6pbr3SkL6jHy4ffLkJVBe2awaS47JwXtKUmPUF9t8KK6 cbtwsnoXd4MQ9c09/91ZrRKaOCfZO6v/oR08NR8Gc1Gjxw1X6N1dJa3Oh9kE51Nl PWMxybM4ZMEttLJ34/q/44FIhLl4KUsul1WM87btxqGJIs2chFw9npbQCmReH3X1 kdvyNbnXVuKtnRMMcOI1oxJbvZeTsR/aBitwjRPOueiw+3I5Chx+q6cOhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEaLCkhS/7RbUPPW1/qhz+cy7uptMB8GA1UdIwQY MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt YTM4ZTFlY2E0ZmQ0LzEvUm9zS1NGTF90RnRRODliWC1xSFA1ekx1Nm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0 LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2XN5AwQA 2XN8MA0GCSqGSIb3DQEBCwUAA4IBAQC90s2hlrD1khixNahc35w7tYFGsnrCKu/E iF+fjlhKOHb6CjHNZFaOrBREZHuEU4OeYu7p/QJWrTi3mn+tVsc/F+J9cnrQfq9M HFKANQzXWoab5++ijX3T/Bk9mYGBfmZvsCEqQye9vDzKepEgPltWKBmkSEzxMvTI RREcnLG67qxNLK8rdxHiQKr/lBmr7SlRdocHlZQ6GFpSp+M8jZEugw7ceYBW7fSp LenG6U6036P8QsQo/FzX6mTmrT9DQ7DRH3BF2YOjGg7rwxDKdp4WtlThi5wfcsI/ hsh+LtQSvkDAizMpP3YGNWHdja2Ywg74+55lSn7bznpAv37ounTX -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:18 2026 by rpki-client