This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-kcqLKRRNRN7zByR3l2g7aDOb7A.roa File: 1-kcqLKRRNRN7zByR3l2g7aDOb7A.roa (raw, json) Hash identifier: c26wulggqxyYDB2+KXWUOFgnBVIn493VQsZqqwGaCr4= Subject key identifier: FA:47:2A:2C:A4:51:35:13:7B:CC:1C:91:DE:5D:A0:ED:A0:CE:6F:B0 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA718768371DDEA4535ACF2EAB913E8 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-kcqLKRRNRN7zByR3l2g7aDOb7A.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216101 IP address blocks: 2a0c:9a40:9b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:18:76:83:71:dd:ea:45:35:ac:f2:ea:b9:13:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa472a2ca45135137bcc1c91de5da0eda0ce6fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:87:da:ca:33:31:f9:30:15:c3:e2:ff:62: 2b:b7:3f:04:67:21:6f:1b:f9:46:14:91:44:33:04: a1:28:50:70:4a:e5:84:de:3b:ef:d8:64:82:09:2a: 72:b0:4b:4d:3f:e4:95:58:9f:30:39:26:dc:0b:e1: a1:40:ee:c8:05:d1:2a:c7:ce:7b:ec:4d:cc:48:57: de:be:9e:bb:a7:ce:4f:7a:b5:e9:5f:88:6c:4a:be: 67:10:a7:8a:e7:dd:b6:c9:72:b2:c3:e1:32:f4:99: 04:a5:ff:fe:27:70:8e:41:75:c7:91:3a:f3:26:55: e9:fa:d8:5b:29:a6:38:7c:87:e8:02:31:8c:3d:d2: cf:37:dd:2a:3a:fb:c1:fd:fe:23:ac:91:4e:18:cd: f3:eb:bf:f5:10:a3:38:ea:fe:ef:8d:df:4d:cd:e4: 2f:2a:9d:fd:98:4b:b5:f7:5e:28:bd:f7:7e:3e:73: 35:31:e6:e1:c2:0b:ce:d4:14:cd:1e:9f:86:e0:34: 07:54:27:20:60:c6:7b:f9:48:de:21:09:a0:76:d5: 3b:4f:84:6d:ab:fd:44:06:e9:39:73:73:a3:3e:43: 25:b7:72:a8:68:d6:9d:f5:c9:1b:73:94:10:f8:8e: ef:0f:ae:f0:3f:4e:c9:c0:32:89:5a:38:8d:2d:3a: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:47:2A:2C:A4:51:35:13:7B:CC:1C:91:DE:5D:A0:ED:A0:CE:6F:B0 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-kcqLKRRNRN7zByR3l2g7aDOb7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:9b00::/40 Signature Algorithm: sha256WithRSAEncryption 5d:2a:38:fa:ca:b3:e4:0c:66:c4:c9:d0:c5:89:4b:04:ce:ad: d1:14:f9:0f:d1:d5:57:a3:ad:74:b7:d6:11:fa:b3:a8:f3:27: 9c:61:b6:98:88:7f:d9:3b:a6:c7:1e:dd:44:48:07:96:b0:2f: db:b4:a5:56:93:4e:cc:44:91:cc:3c:d5:9f:dc:36:f9:28:02: d1:37:60:d7:1b:df:e5:28:de:e8:07:12:45:4e:4a:06:9a:19: 12:8c:89:d8:f1:cd:23:65:6b:a1:91:d7:21:28:20:8a:fd:f3: a5:b5:ae:c7:db:f9:56:e6:e6:86:1f:77:85:17:c2:0b:c5:a6: 49:00:ab:1a:9e:66:ab:75:4f:2d:0a:77:7f:18:18:51:16:d1: 81:03:a4:dd:50:64:21:18:64:4e:97:b3:32:4f:8e:3a:06:45: 0c:91:06:35:67:37:3e:4c:be:30:98:21:cd:c1:d5:69:d2:46: e5:21:2b:bc:c3:62:14:51:9e:0b:3a:f8:8e:0f:a3:c6:3e:03: fe:97:28:90:5d:3b:d8:89:16:0b:33:2b:b0:92:16:65:e0:63: ea:eb:6b:3e:93:61:ba:6c:8e:fe:18:5e:c2:28:88:a2:40:f3: 77:c3:8b:e5:2b:2b:60:ad:ff:de:b8:a2:6d:5d:e3:d7:cd:fb: 33:ae:39:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxh2g3Hd6kU1rPLquRPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ3MmEyY2E0NTEzNTEzN2JjYzFjOTFkZTVkYTBlZGEwY2U2ZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopeH2sozMfkwFcPi/2Irtz8EZyFv G/lGFJFEMwShKFBwSuWE3jvv2GSCCSpysEtNP+SVWJ8wOSbcC+GhQO7IBdEqx857 7E3MSFfevp67p85PerXpX4hsSr5nEKeK5922yXKyw+Ey9JkEpf/+J3COQXXHkTrz JlXp+thbKaY4fIfoAjGMPdLPN90qOvvB/f4jrJFOGM3z67/1EKM46v7vjd9NzeQv Kp39mEu1914ovfd+PnM1MebhwgvO1BTNHp+G4DQHVCcgYMZ7+UjeIQmgdtU7T4Rt q/1EBuk5c3OjPkMlt3KoaNad9ckbc5QQ+I7vD67wP07JwDKJWjiNLTr+xwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPpHKiykUTUTe8wckd5doO2gzm+wMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMS1rY3FMS1JSTlJON3pCeVIzbDJnN2FET2I3QS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZh OC8xL25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoMmkCb MA0GCSqGSIb3DQEBCwUAA4IBAQBdKjj6yrPkDGbEydDFiUsEzq3RFPkP0dVXo610 t9YR+rOo8yecYbaYiH/ZO6bHHt1ESAeWsC/btKVWk07MRJHMPNWf3Db5KALRN2DX G9/lKN7oBxJFTkoGmhkSjInY8c0jZWuhkdchKCCK/fOlta7H2/lW5uaGH3eFF8IL xaZJAKsanmardU8tCnd/GBhRFtGBA6TdUGQhGGROl7MyT446BkUMkQY1Zzc+TL4w mCHNwdVp0kblISu8w2IUUZ4LOviOD6PGPgP+lyiQXTvYiRYLMyuwkhZl4GPq62s+ k2G6bI7+GF7CKIiiQPN3w4vlKytgrf/euKJtXePXzfszrjn0 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:13 2026 by rpki-client