This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KRHptO1zmbIyifSeFxyIv-dNLmU.roa File: KRHptO1zmbIyifSeFxyIv-dNLmU.roa (raw, json) Hash identifier: vqdARnX4BGbCtdzTyUyZN79MLtUDDBBXxZ34YIlxYxc= Subject key identifier: 29:11:E9:B4:ED:73:99:B2:32:89:F4:9E:17:1C:88:BF:E7:4D:2E:65 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3D0D35F3715C8A1511A086317A39 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KRHptO1zmbIyifSeFxyIv-dNLmU.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211337 IP address blocks: 2a0e:97c0:860::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3d:0d:35:f3:71:5c:8a:15:11:a0:86:31:7a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2911e9b4ed7399b23289f49e171c88bfe74d2e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:f6:b1:12:85:d3:a5:89:92:36:c0:f3:31: d0:af:d0:48:53:ea:d7:09:21:c2:df:76:44:d3:97: 5f:10:d8:5f:8d:f5:7e:84:fc:a9:6c:16:6b:f5:6b: 5f:bb:15:32:45:75:da:2a:5c:39:aa:3f:2c:2d:3c: 77:f6:90:bb:aa:c0:1f:c7:27:6a:4a:58:2f:5c:e6: 1f:9e:bd:06:b8:28:ed:eb:a8:c4:06:93:be:91:a7: 50:e5:ca:ad:0f:87:fa:7a:ec:d2:07:40:47:16:83: b9:5a:11:90:ee:98:1c:bd:63:69:57:5e:ed:34:69: 7c:8b:6b:fe:28:74:3c:4a:71:df:2a:ff:e5:df:b3: 0d:9a:6a:f0:80:3e:a1:b2:94:5f:96:83:cf:78:38: af:d3:c7:d6:70:5a:3a:0d:72:5d:40:80:df:bb:70: 23:bb:cc:fc:e8:c8:24:80:42:ff:85:e1:88:14:7a: 34:be:4d:83:fe:23:0a:8a:3d:52:6b:e8:21:c5:66: 4d:16:5d:96:0d:c0:34:9a:ba:40:ab:4f:bc:66:d0: 6f:b7:33:7b:6d:3e:89:35:bd:71:0e:29:d3:57:72: cb:1e:1c:5e:07:5a:30:f0:5c:6a:e0:72:42:c0:df: cf:1d:a9:2e:5a:e5:a9:e0:df:88:78:16:ac:ca:b2: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:11:E9:B4:ED:73:99:B2:32:89:F4:9E:17:1C:88:BF:E7:4D:2E:65 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KRHptO1zmbIyifSeFxyIv-dNLmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:860::/48 Signature Algorithm: sha256WithRSAEncryption cb:e8:90:b1:e2:c7:0f:fb:4a:7b:c4:81:07:bb:db:ed:ea:b1: ca:79:1a:cf:93:11:86:e3:14:fd:31:5f:04:5e:1b:16:0a:4b: 60:09:a6:a4:23:80:b8:44:ce:2b:3e:c9:45:15:d4:72:74:72: 29:9b:01:ee:6e:d6:c0:8a:59:58:c6:bb:04:3f:91:8e:33:04: 85:0d:02:cf:2f:ea:ea:ee:6d:a1:a9:ff:c4:be:29:cc:10:f7: c5:32:bd:c4:36:4d:d4:e1:c9:91:e1:e6:8e:62:42:a7:6a:d5: bd:60:16:bb:e3:94:bf:ad:a4:5b:b0:ec:85:30:63:ba:95:b1: f9:70:31:73:7d:d7:8f:be:71:da:9e:bc:2a:47:de:4b:85:a5: d2:03:65:2c:66:2a:f6:db:31:39:af:2b:56:34:b5:2a:a2:e5: 67:10:e2:e4:85:d9:2c:4d:13:2d:1e:ec:91:11:5f:13:59:8f: 4f:07:3b:72:ca:5f:e4:f2:2b:04:f2:60:23:47:b8:d4:d6:36: 0a:26:10:b2:09:a2:08:47:a1:1c:00:94:6a:74:bc:b8:89:68: 2f:f7:f9:6b:55:d6:ed:b1:b1:9f:38:11:f0:80:f1:0f:5a:56: 51:eb:cf:cc:db:a5:0c:14:c9:f1:d5:e1:e6:b6:f0:81:3b:4b: a6:f2:ad:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XT0NNfNxXIoVEaCGMXo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTExZTliNGVkNzM5OWIyMzI4OWY0OWUxNzFjODhiZmU3NGQyZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG32sRKF06WJkjbA8zHQr9BIU+rX CSHC33ZE05dfENhfjfV+hPypbBZr9WtfuxUyRXXaKlw5qj8sLTx39pC7qsAfxydq SlgvXOYfnr0GuCjt66jEBpO+kadQ5cqtD4f6euzSB0BHFoO5WhGQ7pgcvWNpV17t NGl8i2v+KHQ8SnHfKv/l37MNmmrwgD6hspRfloPPeDiv08fWcFo6DXJdQIDfu3Aj u8z86MgkgEL/heGIFHo0vk2D/iMKij1Sa+ghxWZNFl2WDcA0mrpAq0+8ZtBvtzN7 bT6JNb1xDinTV3LLHhxeB1ow8Fxq4HJCwN/PHakuWuWp4N+IeBasyrKsuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCkR6bTtc5myMon0nhcciL/nTS5lMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvS1JIcHRPMXptYkl5aWZTZUZ4eUl2LWROTG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAhg MA0GCSqGSIb3DQEBCwUAA4IBAQDL6JCx4scP+0p7xIEHu9vt6rHKeRrPkxGG4xT9 MV8EXhsWCktgCaakI4C4RM4rPslFFdRydHIpmwHubtbAillYxrsEP5GOMwSFDQLP L+rq7m2hqf/EvinMEPfFMr3ENk3U4cmR4eaOYkKnatW9YBa745S/raRbsOyFMGO6 lbH5cDFzfdePvnHanrwqR95LhaXSA2UsZir22zE5rytWNLUqouVnEOLkhdksTRMt HuyREV8TWY9PBztyyl/k8isE8mAjR7jU1jYKJhCyCaIIR6EcAJRqdLy4iWgv9/lr VdbtsbGfOBHwgPEPWlZR68/M26UMFMnx1eHmtvCBO0um8q3g -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:05 2026 by rpki-client