This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/k67mEO0t0tJUsBP0oaGa_fY-YqI.roa File: k67mEO0t0tJUsBP0oaGa_fY-YqI.roa (raw, json) Hash identifier: 3BHwNI6SSXsZQpeYLr26AYv9S9LCz1pb1vfNvFaDDEw= Subject key identifier: 93:AE:E6:10:ED:2D:D2:D2:54:B0:13:F4:A1:A1:9A:FD:F6:3E:62:A2 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82E453DC5E80067F5679F937E77A66 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/k67mEO0t0tJUsBP0oaGa_fY-YqI.roa Signing time: Fri 02 Jan 2026 16:20:43 +0000 ROA not before: Fri 02 Jan 2026 16:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398355 IP address blocks: 2a0b:b87:ffbd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e4:53:dc:5e:80:06:7f:56:79:f9:37:e7:7a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93aee610ed2dd2d254b013f4a1a19afdf63e62a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:94:c9:42:a8:aa:e0:08:d0:c1:d8:b6:49:8c: 4e:f6:d6:61:c9:b2:4c:51:44:2d:99:4e:a8:3b:d3: e8:2f:0b:98:f1:65:be:a4:f5:4a:f4:b6:85:6d:06: e8:90:4f:2a:b9:c5:88:48:61:7f:8f:fe:90:e6:e4: fc:fc:4b:1e:55:69:f9:22:b9:fd:34:33:f3:bd:96: 7d:a0:92:26:1a:62:d7:3c:31:64:e4:4b:75:4a:83: fb:80:1f:2d:0a:27:51:dd:96:17:65:c8:c9:ef:44: 16:33:80:ad:cc:f5:d9:c2:3e:18:46:ab:7e:0a:5a: 15:5d:82:33:57:ce:f1:9d:8a:22:16:44:12:47:c7: c0:f7:0d:e7:d5:33:18:09:17:8a:27:f4:17:8d:69: 9f:39:cf:2c:4a:07:13:5c:ad:40:c9:0c:86:8d:dd: cd:40:d3:cf:1a:af:40:43:25:a5:79:6c:53:39:14: 69:44:25:cd:ee:22:c2:b3:e2:79:8c:70:86:90:95: ce:12:a2:ae:a5:14:ec:00:d2:ff:cd:1d:28:fd:ad: 6f:a0:63:58:86:a6:a7:4a:12:40:5e:56:d0:14:37: 71:fe:d5:b6:81:97:3a:7a:64:04:c6:3f:6d:85:81: dd:ca:a5:66:c3:af:e8:d6:de:e8:df:2b:b7:4e:68: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AE:E6:10:ED:2D:D2:D2:54:B0:13:F4:A1:A1:9A:FD:F6:3E:62:A2 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/k67mEO0t0tJUsBP0oaGa_fY-YqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffbd::/48 Signature Algorithm: sha256WithRSAEncryption 35:2b:f1:90:55:d7:e3:a8:7a:ad:62:bd:4d:40:29:cc:96:0e: e7:b8:9b:34:c8:95:ce:a4:77:8b:c6:9d:a1:b6:14:99:74:69: bd:40:55:16:3a:ff:21:16:f5:0a:e1:a3:6b:e5:a2:76:a8:2c: a0:c0:06:40:d2:d5:89:a1:22:73:bb:1c:86:6a:fe:74:6b:02: 84:5e:75:c8:02:29:8d:90:ff:72:63:cc:f8:4d:38:52:1b:10: ca:fb:0f:c4:57:54:d2:87:6a:86:7b:d8:57:4a:23:a0:3c:87: 04:50:6f:26:72:44:6d:86:03:77:45:0d:75:58:52:09:64:61: 07:1d:f2:9f:8d:e6:1b:af:09:61:82:9a:38:72:05:dd:f4:fe: db:6c:a7:e6:b2:e2:92:54:88:b7:70:5f:b2:1c:ae:c6:90:ff: c9:b7:e8:8a:17:29:01:f2:1d:51:93:22:2e:02:72:c5:0e:1d: 1a:74:69:ff:6f:36:d5:70:16:79:17:10:de:7d:a3:f2:eb:2a: f4:b9:76:bc:48:79:5a:39:f2:c6:ca:18:57:75:e8:06:52:68: 61:98:58:85:60:e4:a9:87:0c:45:4f:3e:32:f6:ce:3c:cd:06: 6a:64:ec:bf:60:b7:04:56:ed:87:14:82:3e:0a:6f:0a:43:ca: 7d:20:12:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/guRT3F6ABn9Wefk353pmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2FlZTYxMGVkMmRkMmQyNTRiMDEzZjRhMWExOWFmZGY2M2U2MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pTJQqiq4AjQwdi2SYxO9tZhybJM UUQtmU6oO9PoLwuY8WW+pPVK9LaFbQbokE8qucWISGF/j/6Q5uT8/EseVWn5Irn9 NDPzvZZ9oJImGmLXPDFk5Et1SoP7gB8tCidR3ZYXZcjJ70QWM4CtzPXZwj4YRqt+ CloVXYIzV87xnYoiFkQSR8fA9w3n1TMYCReKJ/QXjWmfOc8sSgcTXK1AyQyGjd3N QNPPGq9AQyWleWxTORRpRCXN7iLCs+J5jHCGkJXOEqKupRTsANL/zR0o/a1voGNY hqanShJAXlbQFDdx/tW2gZc6emQExj9thYHdyqVmw6/o1t7o3yu3TmiqMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJOu5hDtLdLSVLAT9KGhmv32PmKiMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvazY3bUVPMHQwdEpVc0JQMG9hR2FfZlktWXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+9 MA0GCSqGSIb3DQEBCwUAA4IBAQA1K/GQVdfjqHqtYr1NQCnMlg7nuJs0yJXOpHeL xp2hthSZdGm9QFUWOv8hFvUK4aNr5aJ2qCygwAZA0tWJoSJzuxyGav50awKEXnXI AimNkP9yY8z4TThSGxDK+w/EV1TSh2qGe9hXSiOgPIcEUG8mckRthgN3RQ11WFIJ ZGEHHfKfjeYbrwlhgpo4cgXd9P7bbKfmsuKSVIi3cF+yHK7GkP/Jt+iKFykB8h1R kyIuAnLFDh0adGn/bzbVcBZ5FxDefaPy6yr0uXa8SHlaOfLGyhhXdegGUmhhmFiF YOSphwxFTz4y9s48zQZqZOy/YLcEVu2HFII+Cm8KQ8p9IBJj -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:18 2026 by rpki-client