This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KQgvoIh25cHgJVsa7u4noVYyTas.roa File: KQgvoIh25cHgJVsa7u4noVYyTas.roa (raw, json) Hash identifier: h760cFJz7EvtuUjf36zmwI2YZ6vpNbRii1VdbYXXvT0= Subject key identifier: 29:08:2F:A0:88:76:E5:C1:E0:25:5B:1A:EE:EE:27:A1:56:32:4D:AB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3593187B2321422FB44BF6EABBA9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KQgvoIh25cHgJVsa7u4noVYyTas.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211044 IP address blocks: 2a0e:97c0:490::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:93:18:7b:23:21:42:2f:b4:4b:f6:ea:bb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29082fa08876e5c1e0255b1aeeee27a156324dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:fb:98:3e:96:82:71:36:07:75:43:bd:cf: 4d:52:f3:18:73:b3:31:cc:1b:10:b1:7e:02:60:33: 86:16:10:a9:4d:89:3d:3a:27:6b:6f:36:d3:ce:cf: 58:03:89:de:32:fc:6c:2a:fa:2a:0c:fd:0d:0f:7b: 28:66:72:58:fe:1b:f9:37:a1:b5:53:f2:92:ce:d2: 97:5a:b7:62:71:8e:93:82:be:18:c6:98:5c:6b:36: fa:9a:29:38:34:4e:00:11:18:76:b1:ab:91:5e:d2: 9a:1d:90:d8:00:47:e0:59:25:62:0d:b2:ab:7c:1a: d2:71:7e:9b:50:a1:df:26:bb:3c:a7:27:68:b3:61: ed:a5:d9:1e:a0:af:e6:f1:a5:3e:bb:4c:a5:97:09: 86:cb:35:3a:83:9b:83:0f:b8:92:3d:63:8e:8d:87: b1:c8:36:f5:e8:b7:60:3d:2d:b9:1f:ae:31:4e:9e: 30:2f:a7:d1:64:7f:34:01:00:fb:f6:24:f6:97:10: d5:80:0e:1a:04:65:3a:2e:46:6c:16:51:4f:66:1a: 23:9f:d9:44:c9:9c:3f:f3:7c:a0:a5:d2:fa:a7:a5: a0:5a:ff:83:9a:91:bd:58:72:04:09:e8:95:8c:9c: f0:42:63:cc:48:40:54:9c:4b:9c:04:6e:44:9d:2d: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:08:2F:A0:88:76:E5:C1:E0:25:5B:1A:EE:EE:27:A1:56:32:4D:AB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KQgvoIh25cHgJVsa7u4noVYyTas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:490::/44 Signature Algorithm: sha256WithRSAEncryption 6a:83:ad:1f:23:5c:cf:ef:3b:0f:47:e1:a7:ad:84:43:b8:b5: 29:82:05:2e:b0:5d:ee:f5:ed:d1:5a:ec:f8:59:cd:c4:a3:48: 1c:26:a4:d1:53:f8:fa:d7:ac:36:9e:90:c3:1f:f1:73:35:8f: 43:60:66:d9:d5:d1:69:90:e6:68:73:73:c1:20:7e:02:c2:12: 65:4f:ae:fa:ff:d2:64:2e:92:1d:13:ec:82:47:68:a4:c0:b6: 82:cd:ec:dd:7a:8a:c3:84:46:ac:03:11:e9:4d:47:45:92:0e: 2e:62:5b:f4:4b:33:82:64:c6:45:eb:e9:d9:c9:e1:43:56:26: 26:fb:01:d4:2b:69:b6:9e:4f:22:0a:4d:07:31:f8:0c:fc:46: d7:cb:be:d3:02:c6:26:f8:b0:3d:63:b4:91:38:cb:10:b2:1b: 5e:84:eb:9d:b3:b7:51:ca:5d:a6:da:79:22:a5:12:c7:8a:68: 8a:2e:b5:92:68:61:f6:68:7c:fb:c7:16:42:a0:ac:97:c1:8f: 95:4f:ea:0c:a2:af:f3:a5:2a:b4:1c:a5:e0:4c:0a:d5:47:d3: 25:ef:21:97:62:a8:1d:fb:80:08:8f:3b:40:7d:d8:9d:2f:9e: 28:ab:da:a6:5d:21:97:f6:15:5d:48:e7:e6:86:91:46:34:9d: b9:67:87:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTWTGHsjIUIvtEv26rupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTA4MmZhMDg4NzZlNWMxZTAyNTViMWFlZWVlMjdhMTU2MzI0ZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF/7mD6WgnE2B3VDvc9NUvMYc7Mx zBsQsX4CYDOGFhCpTYk9OidrbzbTzs9YA4neMvxsKvoqDP0ND3soZnJY/hv5N6G1 U/KSztKXWrdicY6Tgr4Yxphcazb6mik4NE4AERh2sauRXtKaHZDYAEfgWSViDbKr fBrScX6bUKHfJrs8pydos2HtpdkeoK/m8aU+u0yllwmGyzU6g5uDD7iSPWOOjYex yDb16LdgPS25H64xTp4wL6fRZH80AQD79iT2lxDVgA4aBGU6LkZsFlFPZhojn9lE yZw/83ygpdL6p6WgWv+DmpG9WHIECeiVjJzwQmPMSEBUnEucBG5EnS3GnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCkIL6CIduXB4CVbGu7uJ6FWMk2rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvS1Fndm9JaDI1Y0hnSlZzYTd1NG5vVll5VGFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwASQ MA0GCSqGSIb3DQEBCwUAA4IBAQBqg60fI1zP7zsPR+GnrYRDuLUpggUusF3u9e3R Wuz4Wc3Eo0gcJqTRU/j616w2npDDH/FzNY9DYGbZ1dFpkOZoc3PBIH4CwhJlT676 /9JkLpIdE+yCR2ikwLaCzezdeorDhEasAxHpTUdFkg4uYlv0SzOCZMZF6+nZyeFD ViYm+wHUK2m2nk8iCk0HMfgM/EbXy77TAsYm+LA9Y7SROMsQshtehOuds7dRyl2m 2nkipRLHimiKLrWSaGH2aHz7xxZCoKyXwY+VT+oMoq/zpSq0HKXgTArVR9Ml7yGX Yqgd+4AIjztAfdidL54oq9qmXSGX9hVdSOfmhpFGNJ25Z4es -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:43 2026 by rpki-client