This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/kl-QOGVe7PK91vpCi2USAa3ccpw.roa File: kl-QOGVe7PK91vpCi2USAa3ccpw.roa (raw, json) Hash identifier: HWbTD/Tv8Ial6ox3QeIYsotL/F4NlFjQ8kHdlhrPJ4Y= Subject key identifier: 92:5F:90:38:65:5E:EC:F2:BD:D6:FA:42:8B:65:12:01:AD:DC:72:9C Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Certificate serial: 019B7D5D001C22672303E4FE986B093DABF7 Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/kl-QOGVe7PK91vpCi2USAa3ccpw.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43024 IP address blocks: 77.95.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:00:1c:22:67:23:03:e4:fe:98:6b:09:3d:ab:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=925f9038655eecf2bdd6fa428b651201addc729c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:36:b1:2a:b1:bb:01:b4:82:44:2a:ba:c3: 5b:85:99:d6:b6:ff:76:be:f1:c8:8c:6c:20:55:b0: bd:c2:58:99:68:09:92:b4:53:33:6a:c8:7b:08:a4: e5:d4:a4:ea:47:36:71:c9:15:5a:98:65:fc:66:92: 82:38:ad:0a:0d:4c:53:de:4c:80:ee:6d:f0:6a:e4: 41:51:3a:e1:d0:b7:c4:94:4a:84:48:06:f8:fb:33: 1a:62:3a:e9:48:ed:e2:75:9f:bc:1b:44:95:55:58: 4e:c8:03:16:f9:b7:a3:5a:5c:52:f8:48:ff:9f:fc: 5e:45:8e:c9:9d:ac:b7:13:8d:62:fd:0d:7d:cb:e1: 36:14:bf:d7:2c:ca:9e:3f:e6:8f:88:da:36:ee:c4: 9b:d8:50:03:24:f8:bb:f1:78:94:24:d5:3a:26:b1: 2e:94:91:46:11:08:4c:6a:cd:03:a9:50:8b:41:55: 03:a3:50:58:c6:99:e2:08:38:62:6e:15:b9:53:27: 32:ca:d6:9e:b1:88:7e:52:76:d8:b2:ea:80:ed:c4: 46:c5:a9:bb:51:3f:80:09:be:d3:69:15:75:a7:ea: 9f:da:c4:cf:04:eb:43:05:92:aa:96:5c:63:3c:4e: c4:39:00:c9:c3:e1:54:78:53:64:57:52:ff:4e:6a: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5F:90:38:65:5E:EC:F2:BD:D6:FA:42:8B:65:12:01:AD:DC:72:9C X509v3 Authority Key Identifier: keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/kl-QOGVe7PK91vpCi2USAa3ccpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.16.0/22 Signature Algorithm: sha256WithRSAEncryption 21:c2:42:3a:35:4b:97:3c:9c:33:2a:d8:56:38:65:db:86:0e: de:b5:35:e9:b4:a3:1e:b0:cd:97:55:7b:df:67:36:81:7c:4f: 80:c0:93:f2:45:05:de:55:ce:dd:81:2d:a7:9c:73:7e:bd:ec: 77:c2:67:17:7a:ce:36:f6:78:e7:27:f3:05:8b:d3:21:91:2d: 56:5e:fb:02:7c:88:37:44:cf:a5:70:fd:5f:1a:ce:30:07:f2: 90:19:48:1d:71:4b:d1:35:69:91:1e:5e:97:06:ca:ad:24:fe: fe:00:1e:ba:6b:dc:ce:1e:4e:e9:12:11:23:a7:a6:58:fd:de: 3c:e7:c9:c2:9e:7e:e6:2c:20:ea:75:1a:2b:e1:53:33:28:2f: 98:4f:b8:66:48:d6:c6:6c:d9:58:6c:c4:f4:38:22:47:c5:d0: d6:5e:ce:b2:af:2a:40:58:32:6f:2d:33:03:1f:2b:1d:b8:b1: 63:29:df:18:c9:1a:3a:1c:b4:34:c0:ef:a9:3b:aa:fd:80:0e: 03:9e:97:6a:3d:c4:65:21:ce:36:83:41:ca:86:07:4c:17:61: 2e:d8:5f:5c:e8:07:d2:93:9f:69:05:a6:6b:5e:b3:2e:2f:a6: b0:2b:42:fb:5e:8c:fd:f6:a4:39:1e:54:0a:bb:78:ab:9e:e5: 9f:6b:b7:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQAcImcjA+T+mGsJPav3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz ZGVhYTgwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjVmOTAzODY1NWVlY2YyYmRkNmZhNDI4YjY1MTIwMWFkZGM3MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEk2sSqxuwG0gkQqusNbhZnWtv92 vvHIjGwgVbC9wliZaAmStFMzash7CKTl1KTqRzZxyRVamGX8ZpKCOK0KDUxT3kyA 7m3wauRBUTrh0LfElEqESAb4+zMaYjrpSO3idZ+8G0SVVVhOyAMW+bejWlxS+Ej/ n/xeRY7Jnay3E41i/Q19y+E2FL/XLMqeP+aPiNo27sSb2FADJPi78XiUJNU6JrEu lJFGEQhMas0DqVCLQVUDo1BYxpniCDhibhW5UycyytaesYh+UnbYsuqA7cRGxam7 UT+ACb7TaRV1p+qf2sTPBOtDBZKqllxjPE7EOQDJw+FUeFNkV1L/TmqKMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJfkDhlXuzyvdb6QotlEgGt3HKcMB8GA1UdIwQY MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct NTU0MjYzODE5NTNjLzEva2wtUU9HVmU3UEs5MXZwQ2kyVVNBYTNjY3B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTV8QMA0G CSqGSIb3DQEBCwUAA4IBAQAhwkI6NUuXPJwzKthWOGXbhg7etTXptKMesM2XVXvf ZzaBfE+AwJPyRQXeVc7dgS2nnHN+vex3wmcXes429njnJ/MFi9MhkS1WXvsCfIg3 RM+lcP1fGs4wB/KQGUgdcUvRNWmRHl6XBsqtJP7+AB66a9zOHk7pEhEjp6ZY/d48 58nCnn7mLCDqdRor4VMzKC+YT7hmSNbGbNlYbMT0OCJHxdDWXs6yrypAWDJvLTMD HysduLFjKd8YyRo6HLQ0wO+pO6r9gA4DnpdqPcRlIc42g0HKhgdMF2Eu2F9c6AfS k59pBaZrXrMuL6awK0L7Xoz99qQ5HlQKu3irnuWfa7dW -----END CERTIFICATE-----Generated at Tue Jan 13 08:07:53 2026 by rpki-client