This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kmUrTr4RAiU1B_kQ_xTDV-pinOE.roa File: kmUrTr4RAiU1B_kQ_xTDV-pinOE.roa (raw, json) Hash identifier: FIXtFMHoDQ0mp8bhga9zd4ckUNNTiY4jZPWKottZ6Yo= Subject key identifier: 92:65:2B:4E:BE:11:02:25:35:07:F9:10:FF:14:C3:57:EA:62:9C:E1 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39614ED16CC1D9398757320D24668F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kmUrTr4RAiU1B_kQ_xTDV-pinOE.roa Signing time: Fri 02 Jan 2026 10:20:48 +0000 ROA not before: Fri 02 Jan 2026 10:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213449 IP address blocks: 2a0c:b641:260::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:61:4e:d1:6c:c1:d9:39:87:57:32:0d:24:66:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92652b4ebe1102253507f910ff14c357ea629ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:dc:33:77:00:c3:39:a5:65:b2:12:15:b3: c6:50:a2:06:ee:b6:46:38:44:71:05:6f:46:cf:91: a1:01:d2:26:fa:79:fc:40:02:ee:57:d1:2f:e8:d8: c1:97:6c:e5:bf:8a:15:52:e7:d4:c7:ba:5a:ac:c4: 0a:4e:38:78:eb:ce:71:6d:7f:61:77:7f:4d:00:84: b0:38:eb:39:2f:6e:2f:42:46:35:4b:4c:92:51:42: 51:80:93:b1:4e:e9:49:20:5f:5e:bd:c0:4a:84:9c: 51:3e:db:c2:fb:f1:23:92:d0:ec:a2:78:e8:39:49: a5:c0:d3:16:51:4a:6e:6e:3a:88:aa:1d:82:e6:5d: 49:33:a0:b8:c4:e7:ac:42:fa:63:56:cd:f1:70:82: 5e:d7:41:2b:56:7e:e1:8d:c8:80:d4:29:fb:50:ca: 83:6a:34:f7:24:6e:9b:cc:b6:90:9c:69:f8:b2:36: c4:0f:7d:d5:3d:51:01:6d:4e:81:a2:e5:e8:f4:ff: 04:fa:4d:5b:b3:e3:84:b8:02:19:e1:50:b8:54:b7: e1:69:0d:6e:21:c7:cc:d5:78:d3:fe:c9:e9:11:4f: 9b:20:0a:92:f4:38:8e:c7:d9:ca:1e:a8:d7:9c:05: 77:9f:9d:87:f6:26:62:64:48:26:f7:42:75:d7:56: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:65:2B:4E:BE:11:02:25:35:07:F9:10:FF:14:C3:57:EA:62:9C:E1 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kmUrTr4RAiU1B_kQ_xTDV-pinOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:260::/44 Signature Algorithm: sha256WithRSAEncryption 5c:80:a3:f0:e0:1a:2c:11:10:b2:5c:40:19:97:1e:08:46:a4: 5d:dc:49:01:40:a3:9c:ee:bc:cc:c7:4b:f1:78:ee:4c:ee:0c: e1:03:7f:5c:b1:57:ed:a8:ba:1e:f0:83:bc:cd:e6:5f:dc:a0: ec:32:d7:04:7f:57:86:6a:e5:02:3a:23:72:66:7c:54:4a:a6: 64:77:10:c5:84:03:a1:78:42:0b:2e:94:db:35:3a:7c:37:ae: 08:9e:a5:f8:e4:21:6a:97:5c:c2:e1:2f:65:87:9a:f4:8b:a0: 6e:5d:90:4d:14:c8:7f:e4:45:ef:0c:a6:d1:70:3f:9e:79:17: 02:9f:4f:1f:d0:dd:36:51:1d:d3:13:5d:5f:6a:ba:8c:23:3a: 18:42:de:33:47:04:b3:8f:eb:cb:88:3d:c6:d4:43:8b:b2:dd: 9c:55:df:36:4b:cf:0b:7c:32:59:1d:fe:24:c4:4b:64:69:9c: 4b:73:26:6c:19:51:18:18:8a:62:b6:1b:25:5e:35:ea:e5:f0: 12:e1:c9:1c:0b:a6:7d:3d:62:2f:c6:75:52:9b:19:cf:bc:82: b5:38:c9:22:de:31:53:24:b8:1f:ce:9c:bf:08:58:1e:3f:89: 48:86:8b:51:ac:1d:da:d3:d8:0c:15:cf:9d:b3:cc:65:55:27: e0:eb:a5:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWFO0WzB2TmHVzINJGaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjY1MmI0ZWJlMTEwMjI1MzUwN2Y5MTBmZjE0YzM1N2VhNjI5Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19vcM3cAwzmlZbISFbPGUKIG7rZG OERxBW9Gz5GhAdIm+nn8QALuV9Ev6NjBl2zlv4oVUufUx7parMQKTjh4685xbX9h d39NAISwOOs5L24vQkY1S0ySUUJRgJOxTulJIF9evcBKhJxRPtvC+/EjktDsonjo OUmlwNMWUUpubjqIqh2C5l1JM6C4xOesQvpjVs3xcIJe10ErVn7hjciA1Cn7UMqD ajT3JG6bzLaQnGn4sjbED33VPVEBbU6BouXo9P8E+k1bs+OEuAIZ4VC4VLfhaQ1u IcfM1XjT/snpEU+bIAqS9DiOx9nKHqjXnAV3n52H9iZiZEgm90J111bGswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJJlK06+EQIlNQf5EP8Uw1fqYpzhMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEva21VclRyNFJBaVUxQl9rUV94VERWLXBpbk9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQJg MA0GCSqGSIb3DQEBCwUAA4IBAQBcgKPw4BosERCyXEAZlx4IRqRd3EkBQKOc7rzM x0vxeO5M7gzhA39csVftqLoe8IO8zeZf3KDsMtcEf1eGauUCOiNyZnxUSqZkdxDF hAOheEILLpTbNTp8N64InqX45CFql1zC4S9lh5r0i6BuXZBNFMh/5EXvDKbRcD+e eRcCn08f0N02UR3TE11farqMIzoYQt4zRwSzj+vLiD3G1EOLst2cVd82S88LfDJZ Hf4kxEtkaZxLcyZsGVEYGIpithslXjXq5fAS4ckcC6Z9PWIvxnVSmxnPvIK1OMki 3jFTJLgfzpy/CFgeP4lIhotRrB3a09gMFc+ds8xlVSfg66VI -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:27 2026 by rpki-client