This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/klr0KTSXAoZ5Zqon-VpZgYzoMss.roa File: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (raw, json) Hash identifier: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ= Subject key identifier: 92:5A:F4:29:34:97:02:86:79:66:AA:27:F9:5A:59:81:8C:E8:32:CB Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B7835390D7B2E9791DFDE08A080C1DCA3 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/klr0KTSXAoZ5Zqon-VpZgYzoMss.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61046 IP address blocks: 5.149.250.0/23 maxlen: 23 79.141.170.0/23 maxlen: 23 91.193.16.0/23 maxlen: 23 185.81.112.0/23 maxlen: 23 188.119.148.0/23 maxlen: 23 193.42.37.0/24 maxlen: 24 2a01:8640:1::/48 maxlen: 48 2a01:8640:7::/48 maxlen: 48 2a01:8640:16::/48 maxlen: 48 2a01:8640:20::/48 maxlen: 48 2a01:8640:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:39:0d:7b:2e:97:91:df:de:08:a0:80:c1:dc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=925af429349702867966aa27f95a59818ce832cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:13:52:e7:8b:bb:bd:2b:b4:63:84:c4:37: 51:91:d1:8e:16:ae:b1:46:55:b9:2e:0e:ac:de:b0: df:de:e9:5d:32:cb:de:20:02:a4:35:c9:44:a0:75: dc:19:76:c6:8a:91:ef:30:7e:31:f6:8f:cc:91:bd: b5:f9:b3:79:b7:9f:f5:1d:2c:48:4a:fd:69:74:4f: e4:53:e4:fb:67:92:f9:0c:1b:73:9a:d8:f8:7c:7f: 15:ad:09:9b:ef:70:fc:d3:64:da:9b:72:ac:1b:20: 96:b5:3a:b9:91:f6:ab:24:43:a4:d2:87:29:b5:d5: 78:c6:74:bb:9f:fb:0d:02:a3:c5:bc:0a:ab:e5:ff: 71:04:f5:c5:f7:98:c5:15:15:02:6d:a1:0e:a1:02: d8:14:94:ea:fa:1d:82:db:f1:05:3d:a4:fd:ee:94: 53:a5:27:d3:fb:44:29:08:11:07:72:79:e5:17:86: ca:b7:62:14:9a:d7:ad:f1:df:5a:3d:9c:88:20:1f: be:cd:c5:7a:f2:8d:88:4b:ee:6f:4d:c4:a1:35:fb: 81:d4:1a:e3:8b:60:68:d1:ec:e2:72:44:e0:23:e9: 0f:66:7a:23:fb:1c:7d:f2:4c:39:8b:46:8a:1a:36: 6e:f7:52:94:b8:59:2b:bf:58:1d:0d:9a:cd:3e:1b: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:F4:29:34:97:02:86:79:66:AA:27:F9:5A:59:81:8C:E8:32:CB X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/klr0KTSXAoZ5Zqon-VpZgYzoMss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.250.0/23 79.141.170.0/23 91.193.16.0/23 185.81.112.0/23 188.119.148.0/23 193.42.37.0/24 IPv6: 2a01:8640:1::/48 2a01:8640:7::/48 2a01:8640:16::/48 2a01:8640:20::/47 Signature Algorithm: sha256WithRSAEncryption 33:15:f2:f8:b6:42:99:19:e7:ca:81:85:7c:bc:d4:27:c2:90: 28:48:09:fe:56:83:81:a0:1f:b6:93:08:2a:be:81:be:98:3c: 73:c0:43:1b:ca:96:ea:08:3d:96:ed:1c:7c:6f:c1:6d:ae:b9: 62:5d:8f:b6:96:12:07:15:5d:7a:a8:3b:d3:96:cc:3e:96:19: 93:bc:06:1f:64:7f:a2:b6:46:1f:10:69:48:b3:bb:2d:a9:aa: 50:cf:77:bb:98:07:7f:48:6e:82:d2:28:14:fc:92:04:7f:a3: a7:b8:d0:27:09:f6:63:92:43:5d:ee:9e:04:da:b4:68:14:77: f0:0b:04:57:84:89:78:ba:30:80:7f:56:09:79:b5:2f:55:33: 22:9d:82:ca:c1:bc:70:90:a1:11:cf:bc:7c:d0:7c:89:f6:8a: ec:eb:8b:de:c0:1f:11:87:a0:81:2c:d9:db:72:c2:10:74:0c: 82:1b:ff:cb:5e:e3:cf:22:77:13:10:dc:9a:5d:ad:bc:da:fa: e7:e8:63:5f:0c:7c:23:13:e7:d5:45:23:09:a3:fc:08:74:1e: 31:15:b4:57:6a:07:43:83:62:90:0b:c5:d1:6a:0f:09:b1:2a: 64:2c:2b:4e:5c:6d:77:4e:92:05:5e:f1:c0:31:35:0f:14:b2: c9:87:89:b7 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt4NTkNey6Xkd/eCKCAwdyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjVhZjQyOTM0OTcwMjg2Nzk2NmFhMjdmOTVhNTk4MThjZTgzMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOATUueLu70rtGOExDdRkdGOFq6x RlW5Lg6s3rDf3uldMsveIAKkNclEoHXcGXbGipHvMH4x9o/Mkb21+bN5t5/1HSxI Sv1pdE/kU+T7Z5L5DBtzmtj4fH8VrQmb73D802Tam3KsGyCWtTq5kfarJEOk0ocp tdV4xnS7n/sNAqPFvAqr5f9xBPXF95jFFRUCbaEOoQLYFJTq+h2C2/EFPaT97pRT pSfT+0QpCBEHcnnlF4bKt2IUmtet8d9aPZyIIB++zcV68o2IS+5vTcShNfuB1Brj i2Bo0ezickTgI+kPZnoj+xx98kw5i0aKGjZu91KUuFkrv1gdDZrNPhvC9wIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFJJa9Ck0lwKGeWaqJ/laWYGM6DLLMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEva2xyMEtUU1hBb1o1WnFvbi1WcFpnWXpvTXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDAqBAIAATAkAwQBBZX6AwQB T42qAwQBW8EQAwQBuVFwAwQBvHeUAwQAwSolMCoEAgACMCQDBwAqAYZAAAEDBwAq AYZAAAcDBwAqAYZAABYDBwEqAYZAACAwDQYJKoZIhvcNAQELBQADggEBADMV8vi2 QpkZ58qBhXy81CfCkChICf5Wg4GgH7aTCCq+gb6YPHPAQxvKluoIPZbtHHxvwW2u uWJdj7aWEgcVXXqoO9OWzD6WGZO8Bh9kf6K2Rh8QaUizuy2pqlDPd7uYB39IboLS KBT8kgR/o6e40CcJ9mOSQ13ungTatGgUd/ALBFeEiXi6MIB/Vgl5tS9VMyKdgsrB vHCQoRHPvHzQfIn2iuzri97AHxGHoIEs2dtywhB0DIIb/8te488idxMQ3Jpdrbza +ufoY18MfCMT59VFIwmj/Ah0HjEVtFdqB0ODYpALxdFqDwmxKmQsK05cbXdOkgVe 8cAxNQ8UssmHibc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:20 2026 by rpki-client