This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa File: Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa (raw, json) Hash identifier: zUSTD6UjYoCFyh+6Fa+acZar8+oT8zvNBGsiOc1YI1k= Subject key identifier: 2A:BD:62:F9:99:F2:4A:54:A6:AB:A0:49:A7:AA:91:58:7E:1D:91:9A Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BF7DC509A39CF31F6F7F9E478626 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214962 IP address blocks: 2a13:a5c7:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bf:7d:c5:09:a3:9c:f3:1f:6f:7f:9e:47:86:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2abd62f999f24a54a6aba049a7aa91587e1d919a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:1f:a0:25:1c:1e:e3:f4:33:29:ea:8b:08: 0c:53:1f:65:cf:bb:7d:2f:b5:88:83:c6:2a:f0:4f: d3:b5:de:6a:3f:9d:38:56:b1:8e:5a:ef:6b:28:e2: 3b:b9:21:88:0c:98:31:97:97:76:f7:ab:41:62:f2: d9:1a:aa:b8:7a:eb:a6:7d:e5:81:1f:28:51:23:4f: e6:2c:14:ea:ec:19:e4:aa:5d:86:f3:e3:6b:5d:25: ee:fe:45:33:03:46:d7:49:ed:19:13:29:43:9a:d6: 62:a5:c1:e6:8e:76:bc:0f:a8:10:e6:24:04:59:05: 4f:5a:cb:85:e4:4d:cc:57:98:3f:fd:c0:5a:29:74: ba:31:ac:70:71:1b:a5:23:3e:3b:9f:c4:4e:b7:47: 8c:f8:b6:a4:70:c8:9b:88:d1:f5:dd:3c:a1:36:af: 42:d8:80:2c:e6:7a:43:5d:d1:8b:9c:76:24:fa:f0: 62:cc:5f:51:ee:cc:52:3e:23:37:6a:81:6a:2b:0f: 6a:18:cc:0c:db:33:de:cf:f5:2f:fa:71:30:c0:98: 61:e2:4a:b0:68:6d:ca:cf:3a:d9:06:38:4d:fd:8d: 2c:31:aa:a5:69:17:95:45:de:f0:0c:e2:98:55:7d: c8:09:48:23:e0:f8:9b:f1:d4:74:a3:58:71:f4:ff: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BD:62:F9:99:F2:4A:54:A6:AB:A0:49:A7:AA:91:58:7E:1D:91:9A X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2000::/40 Signature Algorithm: sha256WithRSAEncryption 02:01:05:b5:17:65:f7:6b:e6:4a:fb:52:3a:68:f8:0b:d7:90: 1e:80:86:e8:2e:51:3d:30:66:b3:2e:bc:a0:c1:b2:d8:b0:ed: 35:cc:f9:4a:1e:b7:b7:32:76:40:42:e8:77:6e:89:bb:b8:be: cf:c4:57:c1:6e:c0:af:1b:5b:f7:b7:9e:ec:b3:f1:fe:a0:12: 7d:2e:df:08:78:85:0e:b6:cb:d8:dc:d3:f2:05:58:21:17:a2: eb:8b:80:8f:1b:20:2d:90:ef:c8:6f:67:f7:15:5e:a2:95:9d: 6e:5b:4c:24:49:5f:8e:67:07:c4:9f:c2:40:2e:87:b7:3c:e8: fe:b3:91:ef:c7:c8:25:e4:7f:bf:57:b2:98:b6:88:05:d3:33: f6:15:a7:27:3f:5d:0b:9b:0a:ca:6e:ec:19:d1:6a:84:02:bf: 64:b5:f0:b7:a6:ff:80:60:78:3f:16:60:7a:ab:8a:0f:ce:77: 45:0c:20:bd:f5:1d:13:8f:b8:a1:5d:1d:93:fb:1b:61:94:a1: 6d:2d:9f:47:07:16:ad:c8:15:97:6a:57:df:22:b2:5c:f1:f0: 00:61:38:18:c3:67:60:a3:5a:0c:b5:c1:6b:69:67:8c:0b:0a: 67:0a:95:64:99:de:60:34:03:5b:56:88:bc:d9:ad:c5:95:f3: 5b:7c:d8:30 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OL99xQmjnPMfb3+eR4YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWJkNjJmOTk5ZjI0YTU0YTZhYmEwNDlhN2FhOTE1ODdlMWQ5MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEgfoCUcHuP0MynqiwgMUx9lz7t9 L7WIg8Yq8E/Ttd5qP504VrGOWu9rKOI7uSGIDJgxl5d296tBYvLZGqq4euumfeWB HyhRI0/mLBTq7Bnkql2G8+NrXSXu/kUzA0bXSe0ZEylDmtZipcHmjna8D6gQ5iQE WQVPWsuF5E3MV5g//cBaKXS6MaxwcRulIz47n8ROt0eM+LakcMibiNH13TyhNq9C 2IAs5npDXdGLnHYk+vBizF9R7sxSPiM3aoFqKw9qGMwM2zPez/Uv+nEwwJhh4kqw aG3KzzrZBjhN/Y0sMaqlaReVRd7wDOKYVX3ICUgj4Pib8dR0o1hx9P9pnwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCq9YvmZ8kpUpqugSaeqkVh+HZGaMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvS3IxaS1abnlTbFNtcTZCSnA2cVJXSDRka1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxyAw DQYJKoZIhvcNAQELBQADggEBAAIBBbUXZfdr5kr7Ujpo+AvXkB6AhuguUT0wZrMu vKDBstiw7TXM+Uoet7cydkBC6Hduibu4vs/EV8FuwK8bW/e3nuyz8f6gEn0u3wh4 hQ62y9jc0/IFWCEXouuLgI8bIC2Q78hvZ/cVXqKVnW5bTCRJX45nB8SfwkAuh7c8 6P6zke/HyCXkf79Xspi2iAXTM/YVpyc/XQubCspu7BnRaoQCv2S18Lem/4BgeD8W YHqrig/Od0UMIL31HROPuKFdHZP7G2GUoW0tn0cHFq3IFZdqV98islzx8ABhOBjD Z2CjWgy1wWtpZ4wLCmcKlWSZ3mA0A1tWiLzZrcWV81t82DA= -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:02 2026 by rpki-client