This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kYIGrXRi1ekjdvSi5LCFYGMAxvY.roa File: kYIGrXRi1ekjdvSi5LCFYGMAxvY.roa (raw, json) Hash identifier: aBE7+XWmf9MQxz8x3pJVFTUSiUYl0K0wpM68hbvXi+0= Subject key identifier: 91:82:06:AD:74:62:D5:E9:23:76:F4:A2:E4:B0:85:60:63:00:C6:F6 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FB13B6799465510E95464D26CB6E Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kYIGrXRi1ekjdvSi5LCFYGMAxvY.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210890 IP address blocks: 2a0c:9a40:8030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fb:13:b6:79:94:65:51:0e:95:46:4d:26:cb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=918206ad7462d5e92376f4a2e4b085606300c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:28:e7:88:d7:cf:f0:01:aa:4d:20:01:c5: ad:67:1b:3a:b1:30:0d:9e:08:a5:e0:6c:db:2c:7d: 43:dc:3d:5a:47:b4:77:ca:f8:e8:23:ce:e9:b7:5a: 0e:03:a6:91:71:d7:4e:c0:56:86:66:a0:9b:0b:88: 63:94:ac:86:53:32:df:93:b3:e8:10:38:eb:f9:97: 72:bf:dc:ac:d2:02:23:3a:2f:7e:74:54:40:ff:4c: 76:4f:7c:d6:56:99:89:b2:57:de:04:92:3b:71:ea: 79:63:f3:66:24:77:c8:e7:fa:8a:85:cb:4f:f2:80: e2:bb:8b:a5:03:03:3e:df:b7:f2:f1:69:98:14:86: 21:e1:05:d2:b7:d8:b9:a0:cb:b2:72:23:05:63:40: e2:1e:ce:07:cb:df:8c:f9:40:d6:55:45:41:f7:46: 43:d9:bc:95:91:a5:8b:60:0f:36:e3:01:b3:ad:21: 6f:e6:0e:30:da:8f:2b:b2:74:44:3c:a3:81:4e:85: 02:1c:d3:11:17:05:e1:bc:36:80:22:25:b4:1f:7c: 4b:bb:6d:05:91:76:72:50:81:4e:22:b1:84:ed:45: 6f:4f:23:59:28:9f:cd:63:a2:5f:8f:40:12:b0:c4: 4f:a4:8c:22:2a:95:a6:0b:2b:98:34:9f:32:25:e8: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:82:06:AD:74:62:D5:E9:23:76:F4:A2:E4:B0:85:60:63:00:C6:F6 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kYIGrXRi1ekjdvSi5LCFYGMAxvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8030::/44 Signature Algorithm: sha256WithRSAEncryption 3e:2e:f1:b8:70:9f:c5:54:83:2b:22:55:95:a6:4a:a0:e2:c4: 5b:60:c2:9d:fb:3f:f2:34:89:ca:77:67:8a:83:d5:23:91:58: 47:bf:8c:b7:83:48:6b:d0:9c:ed:35:4e:43:3f:66:57:c3:cf: 3c:38:65:48:d0:a7:4f:65:35:df:c5:1d:ca:74:72:cd:31:a0: f8:9f:47:e6:ef:64:fc:55:85:ce:d2:2a:50:df:d8:61:25:32: 79:0d:0e:ad:5c:b6:4e:a0:d7:fe:df:6f:85:2a:60:d0:a9:de: 1d:08:5a:f9:2b:34:c0:97:c3:51:25:1d:fe:c9:ab:af:01:6c: 1f:bc:51:c5:50:39:36:af:f5:e2:58:b1:c6:cc:9f:d7:18:20: 95:76:e0:2a:b1:0a:bf:1c:ea:8b:ac:a0:54:75:61:d5:6d:d9: 92:00:e5:44:ef:39:88:27:37:65:28:13:71:c5:1a:56:84:de: dd:ba:40:d3:9e:1a:80:17:3c:d0:c9:38:51:5d:27:77:bb:87: be:1f:82:b4:85:47:d3:fc:d2:64:59:86:82:6a:de:de:11:38: 07:45:3d:49:1f:b6:00:d2:51:29:6c:03:bf:a3:1b:fe:8f:e3: 71:20:93:bf:61:2f:d6:97:2b:66:e6:44:86:94:7c:e5:c0:b1: 89:cd:bc:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvsTtnmUZVEOlUZNJstuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTgyMDZhZDc0NjJkNWU5MjM3NmY0YTJlNGIwODU2MDYzMDBjNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr04o54jXz/ABqk0gAcWtZxs6sTAN ngil4GzbLH1D3D1aR7R3yvjoI87pt1oOA6aRcddOwFaGZqCbC4hjlKyGUzLfk7Po EDjr+Zdyv9ys0gIjOi9+dFRA/0x2T3zWVpmJslfeBJI7cep5Y/NmJHfI5/qKhctP 8oDiu4ulAwM+37fy8WmYFIYh4QXSt9i5oMuyciMFY0DiHs4Hy9+M+UDWVUVB90ZD 2byVkaWLYA824wGzrSFv5g4w2o8rsnREPKOBToUCHNMRFwXhvDaAIiW0H3xLu20F kXZyUIFOIrGE7UVvTyNZKJ/NY6Jfj0ASsMRPpIwiKpWmCyuYNJ8yJehrBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJGCBq10YtXpI3b0ouSwhWBjAMb2MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEva1lJR3JYUmkxZWtqZHZTaTVMQ0ZZR01BeHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIAw MA0GCSqGSIb3DQEBCwUAA4IBAQA+LvG4cJ/FVIMrIlWVpkqg4sRbYMKd+z/yNInK d2eKg9UjkVhHv4y3g0hr0JztNU5DP2ZXw888OGVI0KdPZTXfxR3KdHLNMaD4n0fm 72T8VYXO0ipQ39hhJTJ5DQ6tXLZOoNf+32+FKmDQqd4dCFr5KzTAl8NRJR3+yauv AWwfvFHFUDk2r/XiWLHGzJ/XGCCVduAqsQq/HOqLrKBUdWHVbdmSAOVE7zmIJzdl KBNxxRpWhN7dukDTnhqAFzzQyThRXSd3u4e+H4K0hUfT/NJkWYaCat7eETgHRT1J H7YA0lEpbAO/oxv+j+NxIJO/YS/Wlytm5kSGlHzlwLGJzbzw -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client