This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/KlscNP8pdpNUUXeVOHSan2DMCrk.roa File: KlscNP8pdpNUUXeVOHSan2DMCrk.roa (raw, json) Hash identifier: Njed8ZbfR2XN1Bmx1NnONPfGhLKu/eeCRIm33Pu9P8s= Subject key identifier: 2A:5B:1C:34:FF:29:76:93:54:51:77:95:38:74:9A:9F:60:CC:0A:B9 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019ADB98B10B2867A14FE5CB771305EBA239 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/KlscNP8pdpNUUXeVOHSan2DMCrk.roa Signing time: Mon 01 Dec 2025 20:26:48 +0000 ROA not before: Mon 01 Dec 2025 20:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204921 IP address blocks: 2a0f:7800:900::/40 maxlen: 48 2a0f:7803:f4b0::/44 maxlen: 48 2a0f:7806:fff0::/48 maxlen: 48 2a0f:7807::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:98:b1:0b:28:67:a1:4f:e5:cb:77:13:05:eb:a2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 1 20:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a5b1c34ff2976935451779538749a9f60cc0ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:fb:61:f9:79:91:4f:f4:4a:f7:87:a4:ab: 1c:04:d5:92:b2:c6:3d:4b:16:8c:62:7f:8d:2e:46: dc:60:e5:38:74:f4:11:79:c0:46:56:ce:d0:ba:50: 33:c5:a1:3f:23:b1:bb:00:91:42:0b:ae:e4:28:1b: 05:f7:80:3a:6d:06:cd:33:83:0b:a0:c9:76:8d:cb: 68:be:e4:8b:8d:b7:ed:4d:28:86:97:24:e0:59:34: 54:00:a7:c4:5a:8e:08:83:af:92:50:76:d2:ec:bd: cd:3c:4e:46:ec:48:4b:59:23:cf:1e:66:92:65:f9: 71:59:a0:89:b8:8b:bd:74:d3:7a:cc:23:91:13:67: 55:7a:04:58:e4:ba:37:51:e8:82:fd:c1:00:a3:f2: fd:64:e0:7a:79:31:3a:d8:7b:91:ed:38:d6:5d:8a: 05:4a:6f:f7:cb:9e:bc:18:42:87:1f:86:42:85:2d: 7f:66:3e:69:88:5f:94:32:41:1f:37:49:c2:96:96: fe:cf:b4:22:ff:dc:bf:1e:e9:10:20:b6:03:71:62: 80:bd:fc:6e:c2:79:f9:01:4f:0b:8c:bf:0d:97:90: 3d:4c:2f:57:4f:e6:10:fe:50:e4:9d:99:ac:73:62: 40:55:9e:35:70:0f:62:dc:1d:61:7c:fd:b5:64:1f: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5B:1C:34:FF:29:76:93:54:51:77:95:38:74:9A:9F:60:CC:0A:B9 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/KlscNP8pdpNUUXeVOHSan2DMCrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7800:900::/40 2a0f:7803:f4b0::/44 2a0f:7806:fff0::/48 2a0f:7807::/32 Signature Algorithm: sha256WithRSAEncryption a1:d7:71:3f:6e:9a:b5:cb:89:ca:b4:22:13:9d:fc:87:61:ae: 88:1b:f5:ec:c1:66:f4:10:b7:e4:18:91:b1:65:7d:16:2b:6f: 9d:7c:9e:4e:5c:f2:10:7e:33:dc:f8:62:6f:d2:28:96:15:59: 97:4f:34:62:86:28:16:d7:54:0b:b7:97:0c:4e:7a:3a:5f:8b: 06:9f:f4:dd:51:cb:87:ec:e1:e5:0a:16:62:f8:1d:42:8b:af: f5:f7:69:63:dc:da:b1:c5:91:ce:ec:7f:05:d0:a7:45:09:1f: 6b:72:38:88:8c:9f:70:e0:b2:ef:d1:a0:6e:59:6e:ec:77:b0: b2:87:3a:87:bf:b1:54:7b:fb:ec:70:22:f3:95:37:39:10:5d: b8:53:bf:d3:af:fb:86:02:d4:6d:7d:ab:76:a8:67:f5:03:65: c9:e8:7c:68:4e:fc:80:5d:39:53:2b:ad:bd:ff:e1:6d:ee:bd: 62:95:cf:4c:07:b9:62:cd:9f:95:72:04:fa:3b:49:57:4c:f7: 53:d6:ac:84:3f:10:56:84:eb:41:9a:47:88:21:44:2c:3a:4d: a9:2f:af:e4:d6:93:3f:34:d6:5f:18:1f:b8:2c:65:ae:2e:93: 07:f9:67:89:aa:18:88:0d:34:f9:1e:74:72:59:91:13:33:a5: 8f:52:df:fb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZrbmLELKGehT+XLdxMF66I5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjAxMjAyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTViMWMzNGZmMjk3NjkzNTQ1MTc3OTUzODc0OWE5ZjYwY2MwYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFf7Yfl5kU/0SveHpKscBNWSssY9 SxaMYn+NLkbcYOU4dPQRecBGVs7QulAzxaE/I7G7AJFCC67kKBsF94A6bQbNM4ML oMl2jctovuSLjbftTSiGlyTgWTRUAKfEWo4Ig6+SUHbS7L3NPE5G7EhLWSPPHmaS ZflxWaCJuIu9dNN6zCORE2dVegRY5Lo3UeiC/cEAo/L9ZOB6eTE62HuR7TjWXYoF Sm/3y568GEKHH4ZChS1/Zj5piF+UMkEfN0nClpb+z7Qi/9y/HukQILYDcWKAvfxu wnn5AU8LjL8Nl5A9TC9XT+YQ/lDknZmsc2JAVZ41cA9i3B1hfP21ZB/y5QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCpbHDT/KXaTVFF3lTh0mp9gzAq5MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvS2xzY05QOHBkcE5VVVhlVk9IU2FuMkRNQ3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAAjAhAwYAKg94AAkD BwQqD3gD9LADBwAqD3gG//ADBQAqD3gHMA0GCSqGSIb3DQEBCwUAA4IBAQCh13E/ bpq1y4nKtCITnfyHYa6IG/XswWb0ELfkGJGxZX0WK2+dfJ5OXPIQfjPc+GJv0iiW FVmXTzRihigW11QLt5cMTno6X4sGn/TdUcuH7OHlChZi+B1Ci6/192lj3NqxxZHO 7H8F0KdFCR9rcjiIjJ9w4LLv0aBuWW7sd7CyhzqHv7FUe/vscCLzlTc5EF24U7/T r/uGAtRtfat2qGf1A2XJ6HxoTvyAXTlTK629/+Ft7r1ilc9MB7lizZ+VcgT6O0lX TPdT1qyEPxBWhOtBmkeIIUQsOk2pL6/k1pM/NNZfGB+4LGWuLpMH+WeJqhiIDTT5 HnRyWZETM6WPUt/7 -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:15 2025 by rpki-client