This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/kMa3jYCmN7waNwsLMbRxg8toUX4.roa File: kMa3jYCmN7waNwsLMbRxg8toUX4.roa (raw, json) Hash identifier: 8Wv4epjiq8kJysZgLrpdXKcPBVyOj3sbTfiO2uuE99k= Subject key identifier: 90:C6:B7:8D:80:A6:37:BC:1A:37:0B:0B:31:B4:71:83:CB:68:51:7E Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F8562818FA1E4068540DFB12C1BE Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/kMa3jYCmN7waNwsLMbRxg8toUX4.roa Signing time: Fri 02 Jan 2026 14:19:33 +0000 ROA not before: Fri 02 Jan 2026 14:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51819 IP address blocks: 2a02:2698:9400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f8:56:28:18:fa:1e:40:68:54:0d:fb:12:c1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c6b78d80a637bc1a370b0b31b47183cb68517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:83:2a:20:38:89:ce:f2:c3:e5:dc:b8:60: 32:25:9f:7a:2a:e7:66:59:1b:ce:66:d5:6e:5a:28: a4:25:af:4f:ab:d0:17:63:1b:f7:6e:e7:5b:d5:3e: 96:4b:66:8e:3c:cb:4c:40:20:cf:5f:8b:5d:66:c7: e7:0a:5d:2a:03:51:0c:b4:b9:73:42:61:93:73:8a: ec:73:d3:f4:16:03:8c:16:58:e4:20:38:07:53:0a: 45:01:f8:fb:e6:70:ac:4d:8c:2a:64:33:ee:e0:d3: dc:5e:c8:80:74:8d:47:85:48:e2:c1:49:b4:ba:fe: ef:25:03:cc:38:ad:b5:b1:c7:01:20:d3:6d:4a:1a: dd:64:91:cb:7f:46:71:d3:43:61:b7:e6:61:fe:b0: 77:2c:85:0c:a7:9c:99:be:57:b1:d8:dd:7d:e3:9c: 81:04:55:c3:31:aa:bd:a6:a8:17:2d:ad:6e:3a:3e: 72:29:a4:28:29:73:a0:4d:b7:4e:32:9f:c5:c3:67: f0:14:6d:be:d1:4a:49:ad:1b:c5:be:7a:ea:26:b4: e1:9b:a0:f1:bc:c7:2e:d9:23:fd:81:cd:18:eb:3f: c9:3d:71:3a:b0:93:1c:2e:16:11:cf:2c:f0:d7:02: 51:51:06:30:e2:e5:06:0d:13:8c:cf:8e:97:17:8a: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C6:B7:8D:80:A6:37:BC:1A:37:0B:0B:31:B4:71:83:CB:68:51:7E X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/kMa3jYCmN7waNwsLMbRxg8toUX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:9400::/38 Signature Algorithm: sha256WithRSAEncryption 0d:7a:59:28:1a:9f:28:1f:2a:f3:2c:1f:2b:dc:5a:19:08:12: 0e:b2:9b:5c:7e:90:ac:90:b7:8a:e9:39:79:7b:09:30:03:f2: 48:db:a9:8a:9b:f5:d6:9d:43:40:4b:e6:16:36:5e:b8:c3:e0: b8:82:be:53:d2:68:8e:52:a7:33:e3:8f:17:5a:15:89:2a:0e: 75:cb:7d:9b:84:9c:64:ed:fb:cb:b6:39:ac:b8:1c:44:9b:c9: 4b:8a:d2:d8:9b:6b:a9:69:48:0d:de:08:49:55:c4:5c:4a:89: 9b:ed:f0:ce:5a:69:e6:0d:ac:15:24:b0:65:ff:18:1f:96:d6: 20:7e:d3:d6:1e:8a:41:42:b3:c4:28:28:31:00:01:47:dc:02: 66:7a:a2:a9:c9:62:5b:f0:e3:6d:56:48:f4:c3:81:68:0f:61: 90:37:d6:27:ee:fc:c1:13:1f:eb:ea:3b:e4:b7:9a:c6:cf:c7: b8:dc:a2:07:3d:8f:7e:d4:cd:9c:75:f1:a2:3d:2b:04:ea:70: c3:b5:e7:6e:ed:d9:44:a9:d2:35:62:9f:7e:5d:b7:e4:07:56: 26:01:6d:77:38:80:cd:e2:db:28:1b:b7:b5:2f:7a:dd:b3:6a: b3:ac:6e:3d:13:cf:0c:8e:e1:f2:3e:3b:58:cd:6b:68:d1:5d: f7:a0:b9:9e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/hWKBj6HkBoVA37EsG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGM2Yjc4ZDgwYTYzN2JjMWEzNzBiMGIzMWI0NzE4M2NiNjg1MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz+DKiA4ic7yw+XcuGAyJZ96Kudm WRvOZtVuWiikJa9Pq9AXYxv3budb1T6WS2aOPMtMQCDPX4tdZsfnCl0qA1EMtLlz QmGTc4rsc9P0FgOMFljkIDgHUwpFAfj75nCsTYwqZDPu4NPcXsiAdI1HhUjiwUm0 uv7vJQPMOK21sccBINNtShrdZJHLf0Zx00Nht+Zh/rB3LIUMp5yZvlex2N1945yB BFXDMaq9pqgXLa1uOj5yKaQoKXOgTbdOMp/Fw2fwFG2+0UpJrRvFvnrqJrThm6Dx vMcu2SP9gc0Y6z/JPXE6sJMcLhYRzyzw1wJRUQYw4uUGDROMz46XF4pM0QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJDGt42Apje8GjcLCzG0cYPLaFF+MB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEva01hM2pZQ21ON3dhTndzTE1iUnhnOHRvVVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmJQw DQYJKoZIhvcNAQELBQADggEBAA16WSganygfKvMsHyvcWhkIEg6ym1x+kKyQt4rp OXl7CTAD8kjbqYqb9dadQ0BL5hY2XrjD4LiCvlPSaI5SpzPjjxdaFYkqDnXLfZuE nGTt+8u2Oay4HESbyUuK0tiba6lpSA3eCElVxFxKiZvt8M5aaeYNrBUksGX/GB+W 1iB+09YeikFCs8QoKDEAAUfcAmZ6oqnJYlvw421WSPTDgWgPYZA31ifu/METH+vq O+S3msbPx7jcogc9j37UzZx18aI9KwTqcMO1527t2USp0jVin35dt+QHViYBbXc4 gM3i2ygbt7Uvet2zarOsbj0TzwyO4fI+O1jNa2jRXfeguZ4= -----END CERTIFICATE-----Generated at Thu Feb 5 06:00:18 2026 by rpki-client