This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/KK2v8jbRzNSix0weCfB4skmPx1c.roa File: KK2v8jbRzNSix0weCfB4skmPx1c.roa (raw, json) Hash identifier: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw= Subject key identifier: 28:AD:AF:F2:36:D1:CC:D4:A2:C7:4C:1E:09:F0:78:B2:49:8F:C7:57 Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115 Certificate serial: 019B7DC9A6CA19DF2B40113A039A0F38C140 Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/KK2v8jbRzNSix0weCfB4skmPx1c.roa Signing time: Fri 02 Jan 2026 08:18:46 +0000 ROA not before: Fri 02 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197248 IP address blocks: 2001:678:117c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a6:ca:19:df:2b:40:11:3a:03:9a:0f:38:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115 Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28adaff236d1ccd4a2c74c1e09f078b2498fc757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:71:02:81:79:39:4c:ac:fc:b4:cf:a4:f8: 29:b1:d9:17:ce:70:89:0e:b7:2c:ed:fa:be:72:00: 28:4c:c0:d1:c9:9f:86:98:fa:71:f4:b1:73:54:53: 45:bb:59:7b:35:2e:52:93:e3:56:23:de:3c:6b:cd: f2:27:0b:70:9f:da:94:4e:9e:da:c8:63:6f:11:c9: ba:12:10:2b:8d:6b:72:eb:f9:46:3c:d0:e1:d2:3b: 4f:8e:82:c4:a6:46:e0:63:0c:a8:d1:53:b2:b7:a5: c3:64:93:88:3e:1b:71:2d:ac:e3:db:44:d2:68:92: bc:6a:20:22:00:17:dc:70:18:d8:14:f9:45:cf:3e: 01:d6:a8:c2:d6:d3:d4:ca:c6:ed:12:3a:c8:b1:5c: 6e:d9:01:91:cc:28:e3:45:d9:46:9b:04:72:ca:fd: a5:e0:ed:f3:8c:78:3b:9e:a8:0d:3e:b2:43:f7:f7: 57:b2:d8:57:76:de:5b:18:51:4d:fe:a3:ed:d4:5b: f9:ea:a7:01:e2:bc:74:0d:28:d4:a4:0f:25:b7:19: 34:d8:14:f4:7d:68:c6:2e:f1:94:57:c4:07:d3:db: a4:93:80:90:f0:9d:03:07:4d:37:26:e9:3e:a2:1a: f1:08:f5:e3:68:a5:6b:de:cf:09:10:a6:85:16:c0: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AD:AF:F2:36:D1:CC:D4:A2:C7:4C:1E:09:F0:78:B2:49:8F:C7:57 X509v3 Authority Key Identifier: keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/KK2v8jbRzNSix0weCfB4skmPx1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:117c::/48 Signature Algorithm: sha256WithRSAEncryption 37:7f:c3:79:00:d5:6b:12:5b:a2:b2:ce:10:d2:4f:7c:0a:67: 93:8e:3b:e5:4f:a3:a9:89:20:92:65:0f:a2:ed:c8:30:96:33: 0d:b9:92:ad:78:fa:8a:4c:bd:d6:09:65:c2:de:8f:b7:9d:a2: e6:a3:44:0d:7c:15:5e:79:4c:11:fd:fc:66:df:16:73:a2:0f: ce:d5:0c:e9:73:98:42:e0:b9:78:02:de:d4:53:86:24:a6:21: ea:07:bf:1a:7e:ee:b2:8c:98:a4:6c:ab:f7:4d:29:cc:7f:0b: 4f:7c:b1:e7:fc:75:96:2e:f4:18:d2:e5:70:60:af:9c:83:84: 8c:ce:5f:1d:42:7a:d3:3f:2b:2e:61:b6:10:d7:c5:4c:6e:d9: 48:d0:4f:cf:59:ff:92:a9:87:b7:72:4d:80:9a:c9:10:62:4c: 8d:a5:5b:90:28:43:2e:ac:89:2e:9a:7f:3c:1e:63:cf:55:26: 00:6d:98:f5:9e:9c:27:62:eb:1f:04:58:aa:49:c0:a9:0e:60: 75:be:ce:aa:3d:34:f3:9b:63:37:7a:ba:72:56:ea:8e:70:0d: 41:6d:28:a9:61:d4:0f:78:62:7d:b6:35:3c:f0:49:2d:ff:86: 1a:a3:6a:1a:c6:77:a3:41:b7:de:73:1d:83:27:f9:8f:22:6f: 48:38:e8:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yabKGd8rQBE6A5oPOMFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzQzMjI5ZGUyNTFjYzg4MjVhN2M0NGM4ZmU5M2U0YWNk YmMxMTUwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGFkYWZmMjM2ZDFjY2Q0YTJjNzRjMWUwOWYwNzhiMjQ5OGZjNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDVxAoF5OUys/LTPpPgpsdkXznCJ Drcs7fq+cgAoTMDRyZ+GmPpx9LFzVFNFu1l7NS5Sk+NWI948a83yJwtwn9qUTp7a yGNvEcm6EhArjWty6/lGPNDh0jtPjoLEpkbgYwyo0VOyt6XDZJOIPhtxLazj20TS aJK8aiAiABfccBjYFPlFzz4B1qjC1tPUysbtEjrIsVxu2QGRzCjjRdlGmwRyyv2l 4O3zjHg7nqgNPrJD9/dXsthXdt5bGFFN/qPt1Fv56qcB4rx0DSjUpA8ltxk02BT0 fWjGLvGUV8QH09ukk4CQ8J0DB003Juk+ohrxCPXjaKVr3s8JEKaFFsDKOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCitr/I20czUosdMHgnweLJJj8dXMB8GA1UdIwQY MBaAFDM0MineJRzIglp8RMj+k+Ss28EVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUt NjQ4MzJiMzkwNTdkLzEvS0sydjhqYlJ6TlNpeDB3ZUNmQjRza21QeDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUtNjQ4MzJiMzkwNTdk LzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBF8 MA0GCSqGSIb3DQEBCwUAA4IBAQA3f8N5ANVrEluiss4Q0k98CmeTjjvlT6OpiSCS ZQ+i7cgwljMNuZKtePqKTL3WCWXC3o+3naLmo0QNfBVeeUwR/fxm3xZzog/O1Qzp c5hC4Ll4At7UU4YkpiHqB78afu6yjJikbKv3TSnMfwtPfLHn/HWWLvQY0uVwYK+c g4SMzl8dQnrTPysuYbYQ18VMbtlI0E/PWf+SqYe3ck2AmskQYkyNpVuQKEMurIku mn88HmPPVSYAbZj1npwnYusfBFiqScCpDmB1vs6qPTTzm2M3erpyVuqOcA1BbSip YdQPeGJ9tjU88Ekt/4Yao2oaxnejQbfecx2DJ/mPIm9IOOjj -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:55 2026 by rpki-client