This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa File: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (raw, json) Hash identifier: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc= Subject key identifier: 91:DD:BE:4E:18:1F:6F:63:2F:13:AC:B0:E9:5B:02:03:CC:F3:49:F4 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0C30A52F3D18D82803E14BBB96F3 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa Signing time: Thu 01 Jan 2026 14:17:51 +0000 ROA not before: Thu 01 Jan 2026 14:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215288 IP address blocks: 2a05:4140:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0c:30:a5:2f:3d:18:d8:28:03:e1:4b:bb:96:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91ddbe4e181f6f632f13acb0e95b0203ccf349f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7b:54:9f:5c:6c:74:a0:14:ba:63:1e:73:ce: 16:dc:e1:a7:14:40:a9:13:22:44:92:86:a0:ba:f8: ac:7a:30:2f:da:2a:f7:2e:ea:05:6b:13:95:a4:27: 48:31:70:12:31:11:30:22:e6:75:4c:b7:96:7d:96: fc:d3:0a:f4:47:45:5f:b9:71:d4:30:d7:f8:ba:73: ce:97:29:e5:e3:bc:d1:78:30:cb:e5:1e:47:b4:69: 8d:db:29:a9:43:41:57:5c:11:5b:5c:01:2a:2b:b0: a5:6f:05:d5:3a:d6:94:21:65:3b:75:b3:58:ff:47: 4d:db:ee:89:71:cf:6f:48:cc:f0:42:77:84:7e:0b: e1:6d:b6:45:d5:37:45:78:80:14:5c:e4:23:62:de: 2b:c3:fd:c8:c1:0c:c4:4b:0d:e4:12:92:99:f1:d5: d1:21:ea:5d:20:70:b4:14:75:b8:38:b7:18:4f:40: 1d:6e:7f:ef:52:6c:9f:d4:c0:47:cb:19:e0:23:b8: d0:ff:77:d1:20:3b:65:b2:be:7a:7b:02:29:a5:cf: 56:03:32:7e:bf:8a:40:48:84:2a:76:91:c7:12:98: a2:05:6a:78:7a:35:85:12:1c:9c:d6:bb:b2:a9:f7: fd:8d:a0:d1:6c:ce:5b:f7:69:9f:95:be:24:58:3c: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:BE:4E:18:1F:6F:63:2F:13:AC:B0:E9:5B:02:03:CC:F3:49:F4 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:56::/48 Signature Algorithm: sha256WithRSAEncryption 38:b3:33:0f:10:91:01:e7:7a:25:72:af:c5:b7:0f:bf:8f:07: 80:4b:af:b5:e7:58:d3:55:4f:0e:d5:0b:0d:9e:dc:cb:48:28: 1a:1e:94:50:2e:ca:14:e0:9f:c3:76:4e:e0:45:8e:50:1f:c1: d8:9b:34:3c:ad:4a:a7:1f:cb:35:62:ff:f2:f1:75:64:57:31: df:12:bc:f5:b7:eb:a0:7f:1e:46:6e:24:a6:49:bc:24:49:79: e0:48:6a:28:21:35:01:a9:7d:52:f9:8d:fa:97:ef:a3:cc:a3: 40:d1:12:87:9a:77:74:ec:31:95:36:fd:98:c4:70:1a:3f:00: 7c:5c:75:fd:d1:53:7d:81:5a:a2:b8:b4:04:35:c0:d0:a5:4b: fc:7f:b6:a6:3f:e9:5b:85:6b:9d:98:5e:c0:4b:e4:e4:0c:44: b2:72:00:ab:06:61:03:88:33:6c:2e:1e:a3:02:c6:4b:49:35: 3e:e4:41:c4:52:c7:05:f3:49:41:5f:80:3c:b1:65:d6:3c:89: 8a:58:86:b9:e4:d7:f4:e9:91:a5:6e:7a:75:1f:8d:04:9c:a6: df:d9:c1:f8:b4:6f:2f:fc:f1:bc:5f:c6:03:83:38:9e:fb:d6: e6:cc:a1:9a:65:d6:29:0a:0f:2a:a8:a4:94:81:be:d3:11:6a: 01:60:5a:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57AwwpS89GNgoA+FLu5bzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWRkYmU0ZTE4MWY2ZjYzMmYxM2FjYjBlOTViMDIwM2NjZjM0OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXtUn1xsdKAUumMec84W3OGnFECp EyJEkoaguvisejAv2ir3LuoFaxOVpCdIMXASMREwIuZ1TLeWfZb80wr0R0VfuXHU MNf4unPOlynl47zReDDL5R5HtGmN2ympQ0FXXBFbXAEqK7ClbwXVOtaUIWU7dbNY /0dN2+6Jcc9vSMzwQneEfgvhbbZF1TdFeIAUXOQjYt4rw/3IwQzESw3kEpKZ8dXR IepdIHC0FHW4OLcYT0Adbn/vUmyf1MBHyxngI7jQ/3fRIDtlsr56ewIppc9WAzJ+ v4pASIQqdpHHEpiiBWp4ejWFEhyc1ruyqff9jaDRbM5b92mflb4kWDxRBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJHdvk4YH29jLxOssOlbAgPM80n0MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEva2QyLVRoZ2ZiMk12RTZ5dzZWc0NBOHp6U2ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQABW MA0GCSqGSIb3DQEBCwUAA4IBAQA4szMPEJEB53olcq/Ftw+/jweAS6+151jTVU8O 1QsNntzLSCgaHpRQLsoU4J/Ddk7gRY5QH8HYmzQ8rUqnH8s1Yv/y8XVkVzHfErz1 t+ugfx5GbiSmSbwkSXngSGooITUBqX1S+Y36l++jzKNA0RKHmnd07DGVNv2YxHAa PwB8XHX90VN9gVqiuLQENcDQpUv8f7amP+lbhWudmF7AS+TkDESycgCrBmEDiDNs Lh6jAsZLSTU+5EHEUscF80lBX4A8sWXWPImKWIa55Nf06ZGlbnp1H40EnKbf2cH4 tG8v/PG8X8YDgzie+9bmzKGaZdYpCg8qqKSUgb7TEWoBYFq4 -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:02 2026 by rpki-client