This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/Km329xYl0mWvscl4C7smwLfJLZM.roa File: Km329xYl0mWvscl4C7smwLfJLZM.roa (raw, json) Hash identifier: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg= Subject key identifier: 2A:6D:F6:F7:16:25:D2:65:AF:B1:C9:78:0B:BB:26:C0:B7:C9:2D:93 Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Certificate serial: 019B791127CF384A14A51919FACB24A5F5B0 Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/Km329xYl0mWvscl4C7smwLfJLZM.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a11:9c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:27:cf:38:4a:14:a5:19:19:fa:cb:24:a5:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a6df6f71625d265afb1c9780bbb26c0b7c92d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:90:9e:1a:c2:4f:e5:4d:c8:ed:37:ce:2c: 2a:21:f5:b4:f5:d5:67:bd:ca:18:cc:fe:f7:40:27: 82:da:0c:49:50:9d:b3:14:4a:6e:f1:9d:93:3b:a8: 4e:1d:cb:b1:e1:8b:7c:6b:6b:7e:0b:01:e5:4f:8f: 0a:08:f9:d3:0f:06:25:78:9a:65:9c:76:6f:95:9c: 3f:38:fb:cd:bc:7a:0e:22:27:df:a5:c7:1e:3c:67: 0d:19:72:e1:f4:1e:fb:8f:61:b3:78:4d:74:77:05: cf:ab:bd:ee:2f:06:d5:10:aa:90:f6:2f:ac:3e:cf: d5:2c:68:55:f6:8f:48:2b:6a:89:81:35:df:ca:ef: b4:36:33:c8:95:97:d7:3b:a2:42:c9:58:06:df:77: ea:5d:35:82:90:e4:cb:0d:2c:29:f7:2e:ac:48:c4: b7:36:37:2a:a7:91:23:c0:a0:3e:01:64:2d:57:ce: 96:85:5b:2f:78:32:e7:6d:d8:c3:99:22:be:56:38: fc:1f:cf:5a:9c:e7:3a:8e:d8:f6:b4:eb:0c:25:4f: 72:3f:6c:68:49:27:d1:6a:ce:a0:00:96:81:a0:ae: a8:4b:39:8b:b5:f4:49:bb:ad:29:83:b7:4c:ef:9d: c8:2d:2d:ec:69:d6:ec:cd:cb:7c:7f:1b:48:e0:33: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6D:F6:F7:16:25:D2:65:AF:B1:C9:78:0B:BB:26:C0:B7:C9:2D:93 X509v3 Authority Key Identifier: keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/Km329xYl0mWvscl4C7smwLfJLZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:9c80::/29 Signature Algorithm: sha256WithRSAEncryption 42:f3:60:57:ce:d0:96:89:08:14:1d:ff:ce:73:4f:9f:f0:65: dd:d1:22:ae:5a:f2:40:93:f1:3b:38:9b:38:43:51:ab:bd:40: 43:54:da:4a:2e:66:ea:51:26:a9:8a:14:52:6f:ee:c7:5d:e9: d0:b9:c0:a4:65:07:0b:4e:8d:eb:a1:c0:94:fd:f8:2d:7d:aa: 26:bc:5c:81:c6:02:b0:ef:a5:03:13:ac:93:99:30:5b:6e:b8: ba:05:af:7c:20:47:7e:3e:37:c5:01:91:00:37:be:60:8b:26: 43:b1:fd:f1:3c:4f:17:9e:9e:bd:60:29:1c:49:ed:a7:cd:23: a0:43:2e:ef:2e:0b:22:03:fb:5e:9f:10:e7:18:de:14:05:af: 8d:11:85:ff:a3:b7:0e:c7:56:37:5a:9b:a2:95:ee:b6:c0:a4: e7:91:47:d8:51:d9:dd:0d:30:1e:4e:ec:37:5e:7a:18:ae:75: 19:f4:c1:f5:3e:b2:74:66:2c:f8:e0:88:b1:f9:75:0c:37:aa: df:32:9b:4e:67:63:f2:73:a3:cd:a5:75:3b:8d:52:54:c3:2c: b3:61:14:b7:ba:ba:ae:1f:75:d6:0a:17:bd:25:89:a0:a2:a7: 30:0c:f8:00:3d:00:e2:ff:cd:d1:20:41:f1:f3:67:4d:d5:16: d4:fd:1e:4d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ESfPOEoUpRkZ+sskpfWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2 MWEwNDgwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTZkZjZmNzE2MjVkMjY1YWZiMWM5NzgwYmJiMjZjMGI3YzkyZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qQnhrCT+VNyO03ziwqIfW09dVn vcoYzP73QCeC2gxJUJ2zFEpu8Z2TO6hOHcux4Yt8a2t+CwHlT48KCPnTDwYleJpl nHZvlZw/OPvNvHoOIiffpccePGcNGXLh9B77j2GzeE10dwXPq73uLwbVEKqQ9i+s Ps/VLGhV9o9IK2qJgTXfyu+0NjPIlZfXO6JCyVgG33fqXTWCkOTLDSwp9y6sSMS3 Njcqp5EjwKA+AWQtV86WhVsveDLnbdjDmSK+Vjj8H89anOc6jtj2tOsMJU9yP2xo SSfRas6gAJaBoK6oSzmLtfRJu60pg7dM753ILS3sadbszct8fxtI4DOs7QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCpt9vcWJdJlr7HJeAu7JsC3yS2TMB8GA1UdIwQY MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt OTgxMTg0ZGVlMTMxLzEvS20zMjl4WWwwbVd2c2NsNEM3c213TGZKTFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGcgDAN BgkqhkiG9w0BAQsFAAOCAQEAQvNgV87QlokIFB3/znNPn/Bl3dEirlryQJPxOzib OENRq71AQ1TaSi5m6lEmqYoUUm/ux13p0LnApGUHC06N66HAlP34LX2qJrxcgcYC sO+lAxOsk5kwW264ugWvfCBHfj43xQGRADe+YIsmQ7H98TxPF56evWApHEntp80j oEMu7y4LIgP7Xp8Q5xjeFAWvjRGF/6O3DsdWN1qbopXutsCk55FH2FHZ3Q0wHk7s N156GK51GfTB9T6ydGYs+OCIsfl1DDeq3zKbTmdj8nOjzaV1O41SVMMss2EUt7q6 rh911goXvSWJoKKnMAz4AD0A4v/N0SBB8fNnTdUW1P0eTQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client