This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KTNMtzV66OXnYYdm7J09oFRFo_o.roa File: KTNMtzV66OXnYYdm7J09oFRFo_o.roa (raw, json) Hash identifier: +gMdu+g62ZtWekQGQ8qU3ri/GdH23ybriDZDhQ5OFzo= Subject key identifier: 29:33:4C:B7:35:7A:E8:E5:E7:61:87:66:EC:9D:3D:A0:54:45:A3:FA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D7B04E8BE599CE5AFBD57BBF5EE8F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KTNMtzV66OXnYYdm7J09oFRFo_o.roa Signing time: Fri 02 Jan 2026 06:20:36 +0000 ROA not before: Fri 02 Jan 2026 06:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215562 IP address blocks: 2a0e:97c0:8d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:7b:04:e8:be:59:9c:e5:af:bd:57:bb:f5:ee:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29334cb7357ae8e5e7618766ec9d3da05445a3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:03:8e:12:1a:bf:60:77:b0:01:dc:69:d8:cc: 57:db:01:85:5e:21:7e:32:94:4e:00:1c:7f:01:8c: a1:e2:28:e7:81:ba:1c:41:28:08:c6:04:e3:5d:06: 44:e6:68:38:b7:92:3c:0b:c4:9b:e0:fb:c3:29:33: 27:b3:70:59:33:92:a1:57:83:ba:10:77:1e:17:06: dd:51:85:77:d0:3c:7e:ec:b4:25:62:56:f1:fc:fc: 05:4b:8a:76:8c:6f:91:19:8e:51:2d:c6:d9:59:b9: 2a:3c:5b:06:79:49:0e:2f:29:a9:e6:de:d0:38:a5: 25:73:b1:cb:fc:a4:29:94:f8:03:0f:e4:a5:13:59: 7a:73:99:65:9b:97:ab:77:38:76:88:2b:68:2f:a1: 29:8d:00:8d:20:67:ad:90:d8:8d:57:7d:bf:33:0f: af:d6:49:87:b3:7b:84:d1:c3:59:61:6f:15:27:91: 4e:81:9d:8a:f8:e7:1a:ea:39:f9:87:db:89:f3:f4: a0:66:71:0a:35:fb:ec:98:e3:de:f8:2e:13:89:4f: 18:89:fd:a1:f3:ed:74:1f:ed:9d:7f:67:de:ee:0d: 43:15:02:09:6c:67:54:53:5d:12:9c:a0:9a:34:29: 6b:82:67:f4:bc:12:5f:9d:64:9b:89:e5:8a:66:93: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:33:4C:B7:35:7A:E8:E5:E7:61:87:66:EC:9D:3D:A0:54:45:A3:FA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KTNMtzV66OXnYYdm7J09oFRFo_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:8d0::/44 Signature Algorithm: sha256WithRSAEncryption 24:a3:67:ed:de:f9:44:22:4c:1a:62:4a:fd:d0:24:d1:47:63: 67:25:a6:0e:26:dd:b7:c8:5e:7a:8a:7a:a7:e6:fc:5d:48:95: 1a:b6:9b:3e:79:97:65:9e:0a:6c:f2:e7:d7:18:ac:90:5f:81: 25:eb:aa:c9:3c:c0:50:e0:c2:01:b8:ba:89:d4:73:fa:54:0c: 76:4f:cd:a6:f5:e3:6c:a0:d8:31:ad:3c:9c:cf:6a:6f:a3:09: bb:52:f9:45:d0:5f:61:a1:37:5f:96:48:35:75:ca:f0:8c:f2: e6:74:b5:94:ef:9b:ed:e4:1a:a7:43:67:6d:d3:41:42:85:75: ce:93:6d:92:b1:20:9e:49:d1:a2:b6:3c:f9:97:cc:43:79:7c: 98:3d:1d:bb:2b:0e:b4:bf:cf:b9:fa:04:88:09:6a:19:94:7b: e6:93:6a:1f:d4:fe:b9:7d:03:c4:6c:60:fb:0d:48:fc:44:c3: 3a:7a:a7:1e:9e:f9:c2:bd:d4:40:2a:32:7d:f3:7a:33:dc:f1: 32:ff:bd:a0:68:d4:a1:92:82:d7:6c:39:8f:74:e8:cc:13:a4: 04:7c:66:82:4c:bd:84:60:ee:42:07:e4:33:54:d4:43:40:b0: 19:b3:8c:40:0f:8c:50:61:7d:e5:63:db:b4:b4:30:1f:db:88: 68:73:27:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXsE6L5ZnOWvvVe79e6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTMzNGNiNzM1N2FlOGU1ZTc2MTg3NjZlYzlkM2RhMDU0NDVhM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gOOEhq/YHewAdxp2MxX2wGFXiF+ MpROABx/AYyh4ijngbocQSgIxgTjXQZE5mg4t5I8C8Sb4PvDKTMns3BZM5KhV4O6 EHceFwbdUYV30Dx+7LQlYlbx/PwFS4p2jG+RGY5RLcbZWbkqPFsGeUkOLymp5t7Q OKUlc7HL/KQplPgDD+SlE1l6c5llm5erdzh2iCtoL6EpjQCNIGetkNiNV32/Mw+v 1kmHs3uE0cNZYW8VJ5FOgZ2K+Oca6jn5h9uJ8/SgZnEKNfvsmOPe+C4TiU8Yif2h 8+10H+2df2fe7g1DFQIJbGdUU10SnKCaNClrgmf0vBJfnWSbieWKZpOt1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCkzTLc1eujl52GHZuydPaBURaP6MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvS1ROTXR6VjY2T1huWVlkbTdKMDlvRlJGb19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAjQ MA0GCSqGSIb3DQEBCwUAA4IBAQAko2ft3vlEIkwaYkr90CTRR2NnJaYOJt23yF56 inqn5vxdSJUatps+eZdlngps8ufXGKyQX4El66rJPMBQ4MIBuLqJ1HP6VAx2T82m 9eNsoNgxrTycz2pvowm7UvlF0F9hoTdflkg1dcrwjPLmdLWU75vt5BqnQ2dt00FC hXXOk22SsSCeSdGitjz5l8xDeXyYPR27Kw60v8+5+gSICWoZlHvmk2of1P65fQPE bGD7DUj8RMM6eqcenvnCvdRAKjJ983oz3PEy/72gaNShkoLXbDmPdOjME6QEfGaC TL2EYO5CB+QzVNRDQLAZs4xAD4xQYX3lY9u0tDAf24hocyfh -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:51 2026 by rpki-client