This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa File: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (raw, json) Hash identifier: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM= Subject key identifier: 93:EB:B8:4F:47:B8:B5:5A:2B:06:81:B2:EA:77:F9:1B:0E:58:44:DB Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f Certificate serial: 019B7C1218C8B7E9020BDFC03A31D2D7B776 Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa Signing time: Fri 02 Jan 2026 00:18:39 +0000 ROA not before: Fri 02 Jan 2026 00:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202891 IP address blocks: 2001:678:bcc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:18:c8:b7:e9:02:0b:df:c0:3a:31:d2:d7:b7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f Validity Not Before: Jan 2 00:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93ebb84f47b8b55a2b0681b2ea77f91b0e5844db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:2a:c3:3a:77:64:b2:cf:a9:d3:38:5d:05: 2a:56:c6:b4:1d:5d:d1:9a:e4:77:d8:f6:a8:7c:a4: 00:66:9f:5e:7b:ec:44:8f:e4:ab:c1:19:39:59:d1: a8:3d:03:d0:96:97:2c:3a:a1:d1:23:ba:80:ab:77: a2:9e:be:4a:5d:cb:85:94:38:ad:36:d2:af:f1:8f: de:91:99:c0:24:9d:11:0f:6a:55:de:45:82:cf:64: 3a:54:8f:67:de:cd:63:7e:2c:9e:e7:f3:41:7d:88: e7:71:5e:be:e5:4f:1f:24:c9:43:1b:e7:e5:28:45: 76:b7:bc:9c:62:63:81:cd:65:1e:68:f9:0d:58:f7: bd:4a:fd:f2:4d:0a:c3:f2:dc:b4:76:f0:36:d5:ca: fd:d1:e3:6e:06:b0:40:53:05:33:20:1a:56:91:98: f9:ea:71:34:a6:66:c0:6f:86:74:cb:5a:29:fe:0f: b2:4c:b1:d4:2a:ec:c4:fa:10:fc:46:f7:d0:7b:87: 13:d3:d7:22:53:f2:9a:a9:a7:ce:52:71:0a:d9:ea: 04:42:47:3b:2d:a8:0e:a0:8b:8c:51:df:01:32:db: 27:dd:1f:72:d8:a7:82:6c:0b:4b:de:71:bb:2e:c5: 18:f0:9a:c1:2a:76:d3:e4:25:14:12:b2:37:a0:ce: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EB:B8:4F:47:B8:B5:5A:2B:06:81:B2:EA:77:F9:1B:0E:58:44:DB X509v3 Authority Key Identifier: keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:bcc::/48 Signature Algorithm: sha256WithRSAEncryption 39:29:49:af:15:0d:1c:58:47:d1:0c:f6:1a:19:2c:d2:b4:2f: e3:06:2c:a2:18:6c:d0:a2:73:84:fb:7b:b8:b4:a6:a6:45:68: 3c:80:f8:a5:5a:74:2a:50:61:63:f1:3d:19:07:0c:f3:0e:0c: 81:de:4d:81:de:1f:cc:e7:90:f6:5d:b7:5d:d6:db:fa:82:ae: 64:65:f4:25:85:f0:fa:08:88:1a:a7:34:b1:56:aa:42:43:88: 48:4c:ac:20:3b:d1:1a:78:a0:53:ef:ac:06:de:96:33:7f:51: 85:d9:c2:c0:d6:64:e3:13:e8:dc:5e:94:01:20:a6:89:1c:66: 9b:34:87:9d:df:e8:eb:b9:d8:81:1a:ca:f6:9c:66:c2:5f:5c: 46:a6:a1:72:d9:1a:ac:38:c6:41:b9:bc:8e:95:50:4e:0b:3f: 85:37:18:37:dd:80:e5:b2:3d:84:3e:02:ae:e1:a8:da:0f:b5: 33:bc:de:e9:43:7e:76:9f:92:b7:0c:70:85:d9:e4:eb:b9:ae: 32:25:cf:4d:4d:ce:06:f6:31:b2:90:68:03:99:3c:fb:c8:ed: 01:34:4b:c1:7f:65:ac:4a:56:f1:72:9d:4f:ca:39:23:de:d6: 3f:51:9a:d9:ad:83:7d:e8:ce:19:9a:98:b2:03:22:33:8a:06: 11:a9:09:b5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EhjIt+kCC9/AOjHS17d2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi ZDFjMmYwHhcNMjYwMTAyMDAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ViYjg0ZjQ3YjhiNTVhMmIwNjgxYjJlYTc3ZjkxYjBlNTg0NGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ8qwzp3ZLLPqdM4XQUqVsa0HV3R muR32PaofKQAZp9ee+xEj+SrwRk5WdGoPQPQlpcsOqHRI7qAq3einr5KXcuFlDit NtKv8Y/ekZnAJJ0RD2pV3kWCz2Q6VI9n3s1jfiye5/NBfYjncV6+5U8fJMlDG+fl KEV2t7ycYmOBzWUeaPkNWPe9Sv3yTQrD8ty0dvA21cr90eNuBrBAUwUzIBpWkZj5 6nE0pmbAb4Z0y1op/g+yTLHUKuzE+hD8RvfQe4cT09ciU/KaqafOUnEK2eoEQkc7 LagOoIuMUd8BMtsn3R9y2KeCbAtL3nG7LsUY8JrBKnbT5CUUErI3oM5NNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJPruE9HuLVaKwaBsup3+RsOWETbMB8GA1UdIwQY MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt Y2NjYmMyYWU2OTQ4LzEvay11NFQwZTR0Vm9yQm9HeTZuZjVHdzVZUk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4 LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAvM MA0GCSqGSIb3DQEBCwUAA4IBAQA5KUmvFQ0cWEfRDPYaGSzStC/jBiyiGGzQonOE +3u4tKamRWg8gPilWnQqUGFj8T0ZBwzzDgyB3k2B3h/M55D2Xbdd1tv6gq5kZfQl hfD6CIgapzSxVqpCQ4hITKwgO9EaeKBT76wG3pYzf1GF2cLA1mTjE+jcXpQBIKaJ HGabNIed3+jrudiBGsr2nGbCX1xGpqFy2RqsOMZBubyOlVBOCz+FNxg33YDlsj2E PgKu4ajaD7UzvN7pQ352n5K3DHCF2eTrua4yJc9NTc4G9jGykGgDmTz7yO0BNEvB f2WsSlbxcp1Pyjkj3tY/UZrZrYN96M4ZmpiyAyIzigYRqQm1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:23 2026 by rpki-client