This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa File: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (raw, json) Hash identifier: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478= Subject key identifier: 2B:01:04:60:83:B1:E9:D0:81:3B:C3:BA:11:7B:89:AC:FD:92:C4:40 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0BC17EF0226E14CDC84CC95779EE Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa Signing time: Thu 01 Jan 2026 14:17:51 +0000 ROA not before: Thu 01 Jan 2026 14:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214948 IP address blocks: 2a05:4140:66::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0b:c1:7e:f0:22:6e:14:cd:c8:4c:c9:57:79:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b01046083b1e9d0813bc3ba117b89acfd92c440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:21:da:e6:12:bc:c4:6e:7b:09:f2:29:58: 6c:f6:9c:0c:2a:1e:85:54:4f:8b:86:30:bd:4b:ab: 27:36:59:d7:58:d0:5f:3d:77:bd:4b:62:b4:e2:62: 91:4c:71:2b:44:4e:2a:c5:53:85:aa:8c:8f:71:08: 69:19:5f:8c:01:8f:c5:ce:d2:2d:d2:47:52:f4:96: 7a:d9:32:d8:9e:de:94:8b:af:7f:ad:53:b5:4a:f2: aa:af:69:ae:5f:d0:9e:07:df:f6:49:1d:75:8c:81: 53:a4:79:54:9e:68:b5:74:66:39:13:53:7c:7d:a1: 50:3c:a7:0d:4d:77:0d:84:b6:07:f1:a8:e0:74:a8: da:e7:b3:86:89:2d:97:b6:fe:90:41:4e:ee:2c:22: 9e:e0:e8:96:13:2d:09:e3:1e:4f:99:6f:13:fc:fd: 3c:7f:92:90:d2:e4:b8:de:9a:71:ba:05:52:a8:98: 8b:20:48:61:6c:0a:56:73:ad:92:58:8e:88:c1:d9: 06:e6:b9:0d:aa:af:e6:18:44:10:29:e6:49:32:1c: ec:74:a1:a0:31:49:1a:52:d2:44:0a:9c:aa:ac:88: 74:72:6d:dd:86:e2:65:83:79:a4:aa:cb:8b:3a:d2: 31:65:19:94:d2:46:b7:f0:36:8e:fe:ef:47:10:dd: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:01:04:60:83:B1:E9:D0:81:3B:C3:BA:11:7B:89:AC:FD:92:C4:40 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:66::/48 Signature Algorithm: sha256WithRSAEncryption 3d:f0:55:d5:56:70:bd:68:3f:e9:7e:20:5c:a2:8b:11:2e:34: 22:ff:51:f1:18:73:32:3e:dd:0e:97:d5:3f:ab:59:ae:20:35: 39:52:36:ae:04:4a:b3:4d:be:df:3a:bb:b8:5f:a2:1b:89:aa: b9:13:0d:3d:10:85:94:f7:a8:13:29:ae:a9:3e:78:bc:5c:b4: d6:ce:6c:d3:97:79:b3:b4:ac:1e:29:3f:4c:bf:b3:ff:d7:5d: 41:cf:81:5a:2a:d3:67:48:2a:fa:53:a5:44:8e:9a:e6:9d:40: b7:dd:57:b1:7f:95:8a:3c:6f:84:3f:f2:5d:62:22:21:61:85: ca:79:e4:73:36:15:aa:54:bc:2e:b6:e4:13:b0:bc:04:82:4b: 36:83:11:1c:79:78:27:0c:2a:c4:ba:94:12:56:a3:23:69:39: ea:f9:45:ab:38:7a:fa:31:42:8f:af:21:05:1f:20:00:78:73: 8a:9e:20:36:2b:63:75:82:25:dd:3d:3f:ed:b7:c8:e7:45:51: 32:55:16:9a:64:e0:ec:e1:0c:1d:ac:d6:80:f8:21:15:e8:7b: 43:e0:14:82:24:15:58:ed:fb:13:35:9b:f0:fc:21:b5:4e:08: d9:98:d6:52:02:7b:05:1f:3e:f8:ef:53:f0:b7:eb:fb:b1:56: 2f:f7:1c:0c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57AvBfvAibhTNyEzJV3nuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjAxMDQ2MDgzYjFlOWQwODEzYmMzYmExMTdiODlhY2ZkOTJjNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrAh2uYSvMRuewnyKVhs9pwMKh6F VE+LhjC9S6snNlnXWNBfPXe9S2K04mKRTHErRE4qxVOFqoyPcQhpGV+MAY/FztIt 0kdS9JZ62TLYnt6Ui69/rVO1SvKqr2muX9CeB9/2SR11jIFTpHlUnmi1dGY5E1N8 faFQPKcNTXcNhLYH8ajgdKja57OGiS2Xtv6QQU7uLCKe4OiWEy0J4x5PmW8T/P08 f5KQ0uS43ppxugVSqJiLIEhhbApWc62SWI6IwdkG5rkNqq/mGEQQKeZJMhzsdKGg MUkaUtJECpyqrIh0cm3dhuJlg3mkqsuLOtIxZRmU0ka38DaO/u9HEN3piwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCsBBGCDsenQgTvDuhF7iaz9ksRAMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvS3dFRVlJT3g2ZENCTzhPNkVYdUpyUDJTeEVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQABm MA0GCSqGSIb3DQEBCwUAA4IBAQA98FXVVnC9aD/pfiBcoosRLjQi/1HxGHMyPt0O l9U/q1muIDU5UjauBEqzTb7fOru4X6Ibiaq5Ew09EIWU96gTKa6pPni8XLTWzmzT l3mztKweKT9Mv7P/111Bz4FaKtNnSCr6U6VEjprmnUC33Vexf5WKPG+EP/JdYiIh YYXKeeRzNhWqVLwutuQTsLwEgks2gxEceXgnDCrEupQSVqMjaTnq+UWrOHr6MUKP ryEFHyAAeHOKniA2K2N1giXdPT/tt8jnRVEyVRaaZODs4QwdrNaA+CEV6HtD4BSC JBVY7fsTNZvw/CG1TgjZmNZSAnsFHz7471Pwt+v7sVYv9xwM -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:41 2026 by rpki-client