This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/kK-6fQrzsRk0MQ6JvvaSNaKSTKs.roa File: kK-6fQrzsRk0MQ6JvvaSNaKSTKs.roa (raw, json) Hash identifier: 0exZUPcXiwTKpSTKVCr4NknGMyTmcx77pbjOlPukMY0= Subject key identifier: 90:AF:BA:7D:0A:F3:B1:19:34:31:0E:89:BE:F6:92:35:A2:92:4C:AB Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84C958C8CCC4D38A52F1E19AE2F03F Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/kK-6fQrzsRk0MQ6JvvaSNaKSTKs.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 2a0a:e2c0::/29 maxlen: 32 2a12:6740::/29 maxlen: 30 2a12:8ec0::/29 maxlen: 30 2a12:ccc0::/29 maxlen: 30 2a12:d3c0::/29 maxlen: 30 2a12:e240::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c9:58:c8:cc:c4:d3:8a:52:f1:e1:9a:e2:f0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90afba7d0af3b11934310e89bef69235a2924cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:19:10:0c:70:f6:54:f7:53:64:24:ff:1e: 43:6a:7d:a9:5b:d2:2b:e1:68:ed:16:b6:35:be:b6: 81:36:3d:c5:52:72:06:64:e2:a2:7d:75:39:1c:0e: 02:a6:9d:cf:b4:79:e0:31:d3:bd:0c:df:79:59:61: d1:bb:43:fc:e3:20:85:fa:b2:cc:6c:1b:2b:23:08: 64:b0:35:a6:85:88:c8:a1:89:14:50:cb:01:36:bc: 59:27:94:e8:0b:e1:f7:90:3f:b1:20:26:23:7b:89: b0:e9:2c:3b:6c:6f:bf:4f:cb:52:f9:9a:c6:4b:13: 6a:a9:45:ea:77:93:5a:76:2c:a9:15:c7:51:a0:90: f9:16:65:68:6a:f8:24:fc:e6:d6:33:8a:2c:76:1b: 69:d5:a0:29:82:1c:76:25:a8:d3:74:30:c6:8f:33: 68:03:80:51:cb:c1:3b:f2:0b:89:dd:8f:a1:1b:50: 06:b5:1c:99:00:85:1a:41:56:64:f7:9c:fb:3c:81: ba:60:82:67:6d:ba:c6:f2:41:7c:50:44:c2:02:07: 46:b3:9b:01:e8:21:c9:a4:74:6b:0a:d2:1d:ca:a6: 72:a2:08:15:eb:57:d2:5d:61:c1:91:5d:56:2c:04: 69:7b:ee:0e:4f:b1:65:07:a8:36:dd:73:a9:e8:4f: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AF:BA:7D:0A:F3:B1:19:34:31:0E:89:BE:F6:92:35:A2:92:4C:AB X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/kK-6fQrzsRk0MQ6JvvaSNaKSTKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e2c0::/29 2a12:6740::/29 2a12:8ec0::/29 2a12:ccc0::/29 2a12:d3c0::/29 2a12:e240::/29 Signature Algorithm: sha256WithRSAEncryption 6f:9d:42:d1:e8:88:3f:18:c6:48:b1:34:f0:1b:12:49:b0:77: 43:83:cc:09:36:af:d4:7e:b8:2b:b9:54:19:b4:78:ff:0e:98: db:57:ee:a4:f1:d4:9a:a2:da:0e:21:a7:55:1a:d2:52:80:97: a6:26:a8:0e:32:e5:21:b1:c6:83:f3:26:2f:9a:f5:2a:3c:a6: 9c:46:65:a6:10:02:9a:d6:43:a4:c4:c4:69:50:a9:07:37:3e: 13:94:14:1c:f3:58:d1:19:dd:36:71:77:34:60:7f:cb:d5:96: 4f:5b:9b:85:50:23:41:ef:f7:83:73:80:4b:00:b1:c3:cb:b1: 1d:34:af:b8:ee:5c:f6:82:38:b1:93:83:f5:76:0c:e1:ef:6f: f7:79:c8:e0:9b:19:82:0a:c5:70:2a:bd:fa:5e:1a:49:54:38: f9:5f:9a:7e:13:d1:6f:e4:ef:3b:f7:d9:bd:8e:8c:cf:c9:ce: 41:13:cd:82:c1:42:43:2e:61:22:a2:05:77:0a:be:52:a2:6f: 4f:91:5b:11:49:20:57:29:9b:4e:79:fa:95:61:fe:de:e4:f4: 16:0a:f9:18:7f:f3:1b:4b:39:00:b0:d7:e7:cb:b2:eb:d4:e9: 42:0d:20:99:13:ac:6e:bb:44:bb:67:8e:c6:59:1e:74:a9:c5: c0:d7:e3:6c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/hMlYyMzE04pS8eGa4vA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGFmYmE3ZDBhZjNiMTE5MzQzMTBlODliZWY2OTIzNWEyOTI0Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIEZEAxw9lT3U2Qk/x5Dan2pW9Ir 4WjtFrY1vraBNj3FUnIGZOKifXU5HA4Cpp3PtHngMdO9DN95WWHRu0P84yCF+rLM bBsrIwhksDWmhYjIoYkUUMsBNrxZJ5ToC+H3kD+xICYje4mw6Sw7bG+/T8tS+ZrG SxNqqUXqd5NadiypFcdRoJD5FmVoavgk/ObWM4osdhtp1aApghx2JajTdDDGjzNo A4BRy8E78guJ3Y+hG1AGtRyZAIUaQVZk95z7PIG6YIJnbbrG8kF8UETCAgdGs5sB 6CHJpHRrCtIdyqZyoggV61fSXWHBkV1WLARpe+4OT7FlB6g23XOp6E9tSwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJCvun0K87EZNDEOib72kjWikkyrMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEva0stNmZRcnpzUmswTVE2SnZ2YVNOYUtTVEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKgriwAMF AyoSZ0ADBQMqEo7AAwUDKhLMwAMFAyoS08ADBQMqEuJAMA0GCSqGSIb3DQEBCwUA A4IBAQBvnULR6Ig/GMZIsTTwGxJJsHdDg8wJNq/UfrgruVQZtHj/DpjbV+6k8dSa otoOIadVGtJSgJemJqgOMuUhscaD8yYvmvUqPKacRmWmEAKa1kOkxMRpUKkHNz4T lBQc81jRGd02cXc0YH/L1ZZPW5uFUCNB7/eDc4BLALHDy7EdNK+47lz2gjixk4P1 dgzh72/3ecjgmxmCCsVwKr36XhpJVDj5X5p+E9Fv5O8799m9jozPyc5BE82CwUJD LmEiogV3Cr5Som9PkVsRSSBXKZtOefqVYf7e5PQWCvkYf/MbSzkAsNfny7Lr1OlC DSCZE6xuu0S7Z47GWR50qcXA1+Ns -----END CERTIFICATE-----Generated at Tue Jan 27 01:15:15 2026 by rpki-client