This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa File: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (raw, json) Hash identifier: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs= Subject key identifier: 2A:53:F1:43:2A:3D:58:CE:14:36:41:57:93:E2:4A:35:08:71:58:24 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135ECCCE78EB51EF09E109D22A0BCB Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50991 IP address blocks: 188.213.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:cc:ce:78:eb:51:ef:09:e1:09:d2:2a:0b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a53f1432a3d58ce1436415793e24a3508715824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:25:af:ea:40:ce:ed:4e:cf:9c:10:d2:76: bc:f5:c9:2e:bc:95:35:62:21:d9:36:a0:b1:4d:2d: 98:35:f1:fb:78:52:e2:54:2f:47:28:af:a1:d9:eb: 31:dc:5e:03:8f:a4:3c:2c:4e:d0:76:56:91:86:26: 57:a6:9e:ed:5d:59:c4:d6:3f:03:de:a0:6d:1c:95: 2f:63:2e:19:d1:26:a8:50:50:cc:e9:47:be:da:2c: dd:83:89:be:67:fe:ad:0f:2d:0e:8f:7f:e4:3a:fd: 46:ef:4e:0b:56:fa:55:aa:d9:60:ff:02:97:fa:31: 20:29:f7:89:d0:ff:7c:02:f3:44:54:a1:f2:aa:05: 65:1a:26:2a:57:dc:79:e0:8c:87:c2:e1:10:eb:33: 0c:f8:c3:82:6c:e2:20:45:5b:ca:b1:89:b6:1e:10: d6:17:6b:e4:c2:10:21:a5:69:91:02:e0:7c:f1:88: f7:1c:94:fc:78:57:38:0b:34:7f:da:a6:6d:f8:d1: ae:99:2a:18:5f:a5:ad:0f:f3:dd:46:13:90:ae:bf: 09:17:79:e9:53:3b:9d:72:80:81:6f:e2:e9:96:f0: 1e:ae:d4:85:91:14:c8:47:eb:ef:a2:fd:af:2c:a5: 43:2d:aa:d0:21:58:86:16:86:6d:4a:d8:3c:01:bb: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:53:F1:43:2A:3D:58:CE:14:36:41:57:93:E2:4A:35:08:71:58:24 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.213.50.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f1:93:66:b8:d8:0d:3b:f2:89:31:e2:66:d4:c6:8b:81:0b: ba:f5:69:93:70:52:c7:d4:31:1b:b9:95:9b:d2:88:bd:d0:d0: 35:48:d6:6f:1c:b6:97:1a:65:a6:56:55:64:ba:1a:62:86:ee: 83:e4:0d:49:3f:fe:6e:ed:32:f0:d7:11:75:77:8c:9c:38:04: 42:b4:16:b1:80:b1:51:e2:24:ce:00:fd:51:ac:fe:f0:fc:6f: 96:bd:0f:76:be:0a:a4:1b:1b:2c:f6:44:ba:5b:25:78:92:d7: a2:aa:ff:80:c5:b2:10:3b:86:96:5d:ed:bb:ca:37:1c:db:90: 05:e0:10:22:10:fd:ac:2e:77:ff:3e:58:84:de:2f:cc:a7:4e: b7:c8:cc:c5:76:89:45:6b:c6:e6:cd:2d:7b:75:f4:77:18:65: f4:41:48:16:db:e7:98:cb:95:98:ac:78:92:bc:d0:36:b2:a2: d1:2a:38:1e:56:53:83:ab:9f:fd:8e:57:63:f7:eb:25:cc:86: 14:32:33:dc:3a:a1:fd:36:f4:e4:0b:c8:34:0e:4b:9f:2c:94: ef:4b:0f:af:31:3a:5c:28:49:f0:17:b9:f4:ec:21:be:29:6f: 37:0e:93:a4:19:86:01:89:17:1e:67:c7:01:bb:6d:25:bd:6c: 2a:e8:73:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E17MznjrUe8J4QnSKgvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTUzZjE0MzJhM2Q1OGNlMTQzNjQxNTc5M2UyNGEzNTA4NzE1ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6olr+pAzu1Oz5wQ0na89ckuvJU1 YiHZNqCxTS2YNfH7eFLiVC9HKK+h2esx3F4Dj6Q8LE7QdlaRhiZXpp7tXVnE1j8D 3qBtHJUvYy4Z0SaoUFDM6Ue+2izdg4m+Z/6tDy0Oj3/kOv1G704LVvpVqtlg/wKX +jEgKfeJ0P98AvNEVKHyqgVlGiYqV9x54IyHwuEQ6zMM+MOCbOIgRVvKsYm2HhDW F2vkwhAhpWmRAuB88Yj3HJT8eFc4CzR/2qZt+NGumSoYX6WtD/PdRhOQrr8JF3np UzudcoCBb+LplvAertSFkRTIR+vvov2vLKVDLarQIViGFoZtStg8AbsX/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpT8UMqPVjOFDZBV5PiSjUIcVgkMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvS2xQeFF5bzlXTTRVTmtGWGstSktOUWh4V0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNUyMA0G CSqGSIb3DQEBCwUAA4IBAQCM8ZNmuNgNO/KJMeJm1MaLgQu69WmTcFLH1DEbuZWb 0oi90NA1SNZvHLaXGmWmVlVkuhpihu6D5A1JP/5u7TLw1xF1d4ycOARCtBaxgLFR 4iTOAP1RrP7w/G+WvQ92vgqkGxss9kS6WyV4kteiqv+AxbIQO4aWXe27yjcc25AF 4BAiEP2sLnf/PliE3i/Mp063yMzFdolFa8bmzS17dfR3GGX0QUgW2+eYy5WYrHiS vNA2sqLRKjgeVlODq5/9jldj9+slzIYUMjPcOqH9NvTkC8g0DkufLJTvSw+vMTpc KEnwF7n07CG+KW83DpOkGYYBiRceZ8cBu20lvWwq6HPK -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:03 2026 by rpki-client