This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa File: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (raw, json) Hash identifier: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0= Subject key identifier: 28:B4:EE:DE:A6:D9:8F:39:72:33:D9:29:AA:21:E8:C8:B7:0F:BF:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B7B365329C48DFA7C25270D2754687B8A Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212396 IP address blocks: 2a03:ee40:753::/48 maxlen: 48 2a03:ee40:7531::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:53:29:c4:8d:fa:7c:25:27:0d:27:54:68:7b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28b4eedea6d98f397233d929aa21e8c8b70fbfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:54:74:97:55:97:cb:c2:f6:28:2c:f2:a5: 0d:74:c5:f8:41:db:fe:e7:79:d6:3a:4c:d5:47:5a: ca:f6:4a:08:22:25:05:91:6d:8c:05:c4:a5:73:3f: 91:d6:df:8b:d3:50:21:83:a6:91:b8:19:a9:06:c8: b7:63:88:1a:c6:54:bb:99:6b:3d:84:ea:8b:81:a5: d2:63:51:de:e6:ba:08:c0:3d:ae:54:de:d0:60:9b: 31:0b:01:0f:0c:b0:d0:75:df:71:f4:f9:b4:c3:57: 7c:4e:52:eb:f0:7c:5f:c5:ac:ec:8f:58:e7:67:6a: aa:ea:48:fd:61:1d:b6:1e:e2:f0:e8:86:bd:e5:f4: de:1b:a3:35:f8:d0:e5:72:9c:1f:c0:3f:4c:59:6c: a6:e9:fa:e3:40:ec:6e:7c:ae:ca:73:8d:d9:4a:e5: 4e:91:af:52:73:ae:a3:5d:99:5d:24:83:14:f6:dc: ef:7c:49:f9:3f:bf:13:9f:37:01:77:71:73:01:e5: b8:2a:ff:d0:91:59:f0:bc:20:17:8c:6f:1a:40:d1: b3:31:7c:ab:d6:a1:33:94:e6:79:10:5a:aa:6c:71: 7a:30:52:f2:0c:dd:00:c0:47:e4:77:bc:04:d5:e6: 22:de:2a:cc:1b:11:bc:75:11:ea:0c:30:cc:81:ba: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:EE:DE:A6:D9:8F:39:72:33:D9:29:AA:21:E8:C8:B7:0F:BF:C3 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:ee40:753::/48 2a03:ee40:7531::/48 Signature Algorithm: sha256WithRSAEncryption 76:bd:b1:ea:67:0f:fa:38:34:42:77:fe:ec:db:ed:f3:43:68: cd:57:89:e7:af:ae:b9:91:17:fd:7d:91:cb:9e:f4:89:09:7a: 40:89:65:0a:9b:83:f7:e6:92:6d:cb:49:70:d5:22:cc:16:06: 25:9f:be:66:f1:68:6e:c7:cf:d0:6a:32:9d:ff:3a:19:01:66: f4:d8:02:6e:8d:87:12:ff:e9:04:d9:a2:47:1f:c4:27:6f:6b: 52:7b:a5:4e:f0:9d:e7:e7:a2:2b:6d:82:23:bc:7d:a5:75:2f: 87:74:6d:fe:0d:26:0e:a9:75:ff:d7:66:02:22:a5:20:4c:78: 2b:97:7e:be:b4:ba:05:d8:ac:da:04:f3:74:d0:23:79:ea:c4: 81:69:32:eb:f3:51:9a:e1:97:c0:4f:4a:e3:b2:55:ca:d6:83: 88:85:ea:1d:66:c5:8a:a5:2f:cb:c1:43:ac:04:08:ff:7b:43: ce:25:10:eb:09:d9:04:a7:0e:6e:78:d6:16:14:36:df:b7:01: 5a:7e:f2:4c:10:15:d3:c0:73:76:be:4d:97:26:ad:6f:db:11: b5:fa:72:16:4c:f1:ef:32:06:9c:e4:98:f1:d8:95:e5:ca:37: 51:62:54:0c:f2:7a:9d:d0:6f:2a:50:c7:f7:6e:c6:e7:b9:49: 1d:9c:31:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NlMpxI36fCUnDSdUaHuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGI0ZWVkZWE2ZDk4ZjM5NzIzM2Q5MjlhYTIxZThjOGI3MGZiZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wpUdJdVl8vC9igs8qUNdMX4Qdv+ 53nWOkzVR1rK9koIIiUFkW2MBcSlcz+R1t+L01Ahg6aRuBmpBsi3Y4gaxlS7mWs9 hOqLgaXSY1He5roIwD2uVN7QYJsxCwEPDLDQdd9x9Pm0w1d8TlLr8Hxfxazsj1jn Z2qq6kj9YR22HuLw6Ia95fTeG6M1+NDlcpwfwD9MWWym6frjQOxufK7Kc43ZSuVO ka9Sc66jXZldJIMU9tzvfEn5P78TnzcBd3FzAeW4Kv/QkVnwvCAXjG8aQNGzMXyr 1qEzlOZ5EFqqbHF6MFLyDN0AwEfkd7wE1eYi3irMGxG8dRHqDDDMgbqWEQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCi07t6m2Y85cjPZKaoh6Mi3D7/DMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvS0xUdTNxYlpqemx5TTlrcHFpSG95TGNQdjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgPuQAdT AwcAKgPuQHUxMA0GCSqGSIb3DQEBCwUAA4IBAQB2vbHqZw/6ODRCd/7s2+3zQ2jN V4nnr665kRf9fZHLnvSJCXpAiWUKm4P35pJty0lw1SLMFgYln75m8Whux8/QajKd /zoZAWb02AJujYcS/+kE2aJHH8Qnb2tSe6VO8J3n56IrbYIjvH2ldS+HdG3+DSYO qXX/12YCIqUgTHgrl36+tLoF2KzaBPN00CN56sSBaTLr81Ga4ZfAT0rjslXK1oOI heodZsWKpS/LwUOsBAj/e0POJRDrCdkEpw5ueNYWFDbftwFafvJMEBXTwHN2vk2X Jq1v2xG1+nIWTPHvMgac5Jjx2JXlyjdRYlQM8nqd0G8qUMf3bsbnuUkdnDHk -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:04 2026 by rpki-client