This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kvZI6IQbdiSKjxaHWC-dDsiNrxc.roa File: kvZI6IQbdiSKjxaHWC-dDsiNrxc.roa (raw, json) Hash identifier: PC2ZsdlT4gRkJz6Vr4wPydnbTSQk5ss53NeFEB8NiHU= Subject key identifier: 92:F6:48:E8:84:1B:76:24:8A:8F:16:87:58:2F:9D:0E:C8:8D:AF:17 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E5CCF994F2C532BEED0A0FDF0E0B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kvZI6IQbdiSKjxaHWC-dDsiNrxc.roa Signing time: Fri 02 Jan 2026 12:20:25 +0000 ROA not before: Fri 02 Jan 2026 12:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203453 IP address blocks: 2a0c:9a40:89d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e5:cc:f9:94:f2:c5:32:be:ed:0a:0f:df:0e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f648e8841b76248a8f1687582f9d0ec88daf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:f5:67:ff:e9:03:fa:a7:9b:19:56:99:75: e9:f9:6c:13:3d:6a:0a:93:38:42:b8:58:a1:0a:ec: b9:f0:b4:b1:c6:3f:46:22:cd:c8:69:e9:37:83:94: 3e:c1:c9:32:50:a2:94:54:7a:23:bd:e1:17:93:18: 60:c2:86:a2:f6:ef:a4:0f:ca:85:50:54:6a:2e:d1: f5:ba:cf:5a:6f:67:e2:c4:3c:c8:83:e0:95:1e:89: ef:a6:ed:77:f9:c6:4b:60:53:39:61:af:f1:ef:70: 1e:98:d1:c7:6b:46:8f:34:48:dd:b2:2f:3c:46:9e: 44:c6:ba:74:f9:af:cf:5a:41:bd:d7:da:2b:34:68: 90:12:66:b0:38:2b:5c:ef:f1:7c:11:1c:64:41:91: bc:9f:9b:0a:3c:61:d5:e9:66:2e:c8:30:e4:36:84: bb:a7:c3:d0:be:7c:2e:20:17:0e:0b:10:ef:a5:a6: 45:72:37:d6:96:30:c0:db:e2:32:5e:e8:f3:d6:58: c7:ff:2c:7e:42:76:dc:ea:0f:a9:a4:a6:64:06:ca: 15:97:10:ef:4d:80:bc:e6:ec:fe:e8:de:59:74:ff: 05:c3:d2:11:f7:44:f4:25:0b:b3:a4:fb:7f:59:b2: 96:eb:4d:a0:f4:3e:09:72:ce:3b:1b:10:a1:ae:8b: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:48:E8:84:1B:76:24:8A:8F:16:87:58:2F:9D:0E:C8:8D:AF:17 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kvZI6IQbdiSKjxaHWC-dDsiNrxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:89d0::/48 Signature Algorithm: sha256WithRSAEncryption 48:5e:f5:f9:a5:bf:eb:3f:74:af:3e:70:c1:28:9a:de:ce:f5: f1:0a:5c:8b:e4:ad:72:c8:78:fe:34:c1:0d:eb:47:0b:fb:65: 8b:da:1a:75:bf:cd:47:e1:43:8f:88:a5:23:bc:43:f5:15:9e: f3:6b:f7:44:fb:14:76:40:e3:5f:f4:ce:c5:80:00:37:98:89: 71:03:00:e0:28:8e:11:1a:9a:ed:cd:e5:bb:86:76:80:01:e7: 1f:aa:d2:f1:da:0b:5b:f5:46:f8:c5:73:26:2a:92:f7:22:ab: 15:93:3d:02:72:b2:0e:61:8d:f1:58:04:c0:ef:15:1a:62:e6: 5f:6a:d0:10:87:e1:b3:40:51:88:b0:9c:6f:91:13:be:a2:4f: a2:7f:7c:ca:49:e6:cb:ea:e8:5e:d0:49:4f:3e:d7:c2:c7:73: 85:db:de:61:b4:7f:f4:3c:27:3d:4f:af:d0:91:c4:d9:72:7e: 03:91:68:8e:c4:86:ca:c2:d1:e0:84:75:a4:58:81:ca:de:95: 05:3c:88:40:5c:42:ed:94:8e:56:c6:df:c1:64:1c:3c:07:c3: 62:75:64:b3:d0:92:de:0b:6b:e3:1b:0b:74:4b:0b:65:1c:f4: c6:06:2d:5b:fb:39:da:d9:7b:d7:d9:5d:ab:20:51:73:4c:d5: 98:6d:ff:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puXM+ZTyxTK+7QoP3w4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY2NDhlODg0MWI3NjI0OGE4ZjE2ODc1ODJmOWQwZWM4OGRhZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlX1Z//pA/qnmxlWmXXp+WwTPWoK kzhCuFihCuy58LSxxj9GIs3Iaek3g5Q+wckyUKKUVHojveEXkxhgwoai9u+kD8qF UFRqLtH1us9ab2fixDzIg+CVHonvpu13+cZLYFM5Ya/x73AemNHHa0aPNEjdsi88 Rp5Exrp0+a/PWkG919orNGiQEmawOCtc7/F8ERxkQZG8n5sKPGHV6WYuyDDkNoS7 p8PQvnwuIBcOCxDvpaZFcjfWljDA2+IyXujz1ljH/yx+Qnbc6g+ppKZkBsoVlxDv TYC85uz+6N5ZdP8Fw9IR90T0JQuzpPt/WbKW602g9D4Jcs47GxChrotc+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJL2SOiEG3Ykio8Wh1gvnQ7Ija8XMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEva3ZaSTZJUWJkaVNLanhhSFdDLWREc2lOcnhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQInQ MA0GCSqGSIb3DQEBCwUAA4IBAQBIXvX5pb/rP3SvPnDBKJrezvXxClyL5K1yyHj+ NMEN60cL+2WL2hp1v81H4UOPiKUjvEP1FZ7za/dE+xR2QONf9M7FgAA3mIlxAwDg KI4RGprtzeW7hnaAAecfqtLx2gtb9Ub4xXMmKpL3IqsVkz0CcrIOYY3xWATA7xUa YuZfatAQh+GzQFGIsJxvkRO+ok+if3zKSebL6uhe0ElPPtfCx3OF295htH/0PCc9 T6/QkcTZcn4DkWiOxIbKwtHghHWkWIHK3pUFPIhAXELtlI5Wxt/BZBw8B8NidWSz 0JLeC2vjGwt0SwtlHPTGBi1b+zna2XvX2V2rIFFzTNWYbf9S -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:54 2026 by rpki-client