This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kzd2Zk7SftVtGDoW6PhHyMt37po.roa File: kzd2Zk7SftVtGDoW6PhHyMt37po.roa (raw, json) Hash identifier: Uq81W3Q9Kc7abNVujuwJXAiv5TThouPAv8t6BfvyHNo= Subject key identifier: 93:37:76:66:4E:D2:7E:D5:6D:18:3A:16:E8:F8:47:C8:CB:77:EE:9A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE93401D13DF1176CB2A2DC09EE30 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kzd2Zk7SftVtGDoW6PhHyMt37po.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201412 IP address blocks: 2a0e:b107:1cf0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e9:34:01:d1:3d:f1:17:6c:b2:a2:dc:09:ee:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=933776664ed27ed56d183a16e8f847c8cb77ee9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:5f:e9:de:1d:70:1a:1f:3a:3f:9f:86:d2: 7f:18:fa:66:da:53:ad:8f:0e:b8:70:d8:ce:fb:64: 50:65:55:0b:fa:bd:f6:7a:21:8b:a5:eb:46:08:c9: 8c:57:f6:bc:df:bb:5c:16:20:93:62:3d:58:57:2f: 2a:af:d3:51:a0:26:2e:65:fc:c3:76:d0:cc:d0:46: 38:a0:32:62:79:07:b4:9d:ab:90:74:05:6d:ca:ec: cc:ff:b2:2a:55:c6:0a:66:76:84:83:27:2f:f7:a6: b9:3c:4b:08:54:63:c6:d9:a0:58:2c:fa:ce:b9:73: 19:a4:43:45:26:f9:9a:d4:8b:6a:f1:83:f1:85:4f: 05:24:2e:fa:ab:86:4d:46:4c:69:3e:20:67:f6:f7: 59:c0:4f:df:2c:1f:14:2f:82:0c:42:ed:dd:0d:d5: ab:b1:3e:7e:c6:dd:f0:87:f2:e3:ff:38:b0:60:36: 68:df:64:4f:b7:f2:56:13:8b:c8:0a:81:fc:fa:6c: 2a:89:4e:07:e6:46:aa:43:f1:33:b0:ec:45:e5:e4: db:32:e7:f7:75:cd:92:ef:5e:1f:22:cb:a2:fa:52: 80:6a:b1:97:96:40:15:06:1d:da:58:95:35:84:5b: 3f:30:e5:68:8f:72:45:bc:a8:2a:40:23:45:9d:d7: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:37:76:66:4E:D2:7E:D5:6D:18:3A:16:E8:F8:47:C8:CB:77:EE:9A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kzd2Zk7SftVtGDoW6PhHyMt37po.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1cf0::/44 Signature Algorithm: sha256WithRSAEncryption 61:54:92:bb:a5:a6:76:60:76:35:ee:06:ad:52:eb:be:9c:5f: dc:67:ab:9d:6a:6e:90:54:4e:d8:14:fd:0a:7b:5c:e2:ae:67: ba:cb:9f:e0:99:15:13:b1:b5:af:11:5b:d7:96:ba:6b:fb:65: 6b:5d:99:9b:9d:97:87:37:39:31:c2:de:0b:a2:9c:5f:9a:3a: c4:94:ec:70:7f:50:47:61:7d:ba:ba:15:60:25:06:69:04:f8: 91:d2:b5:f9:2a:5a:b4:a5:56:d4:11:4b:e5:42:30:80:77:cf: e8:a0:7e:12:26:47:f6:b0:f4:8c:21:64:e7:82:fc:a9:c8:0c: 1b:0f:3c:ec:e3:b1:ae:d8:f4:92:86:b7:83:50:66:e0:4f:8d: 93:fa:d3:1b:4a:2f:44:24:e2:f2:a6:11:9d:f4:cc:cf:11:f8: e3:26:82:0f:74:21:74:0c:6d:d2:44:ad:31:72:8b:7c:44:c0: 89:9d:66:30:13:54:a8:54:a2:53:36:e6:59:99:b5:b9:11:eb: 46:24:e4:c9:ac:d0:2c:7c:95:57:45:20:4e:8b:81:7c:68:30: 0d:6a:fe:73:f2:e2:e0:5c:50:f3:1f:e7:1b:61:7e:f1:25:11: 45:79:ba:9b:5f:47:8d:cc:92:30:e6:ab:f5:00:4e:fb:c4:1a: dd:2c:23:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOk0AdE98RdssqLcCe4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzM3NzY2NjRlZDI3ZWQ1NmQxODNhMTZlOGY4NDdjOGNiNzdlZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM5f6d4dcBofOj+fhtJ/GPpm2lOt jw64cNjO+2RQZVUL+r32eiGLpetGCMmMV/a837tcFiCTYj1YVy8qr9NRoCYuZfzD dtDM0EY4oDJieQe0nauQdAVtyuzM/7IqVcYKZnaEgycv96a5PEsIVGPG2aBYLPrO uXMZpENFJvma1Itq8YPxhU8FJC76q4ZNRkxpPiBn9vdZwE/fLB8UL4IMQu3dDdWr sT5+xt3wh/Lj/ziwYDZo32RPt/JWE4vICoH8+mwqiU4H5kaqQ/EzsOxF5eTbMuf3 dc2S714fIsui+lKAarGXlkAVBh3aWJU1hFs/MOVoj3JFvKgqQCNFnddb5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJM3dmZO0n7VbRg6Fuj4R8jLd+6aMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEva3pkMlprN1NmdFZ0R0RvVzZQaEh5TXQzN3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxzw MA0GCSqGSIb3DQEBCwUAA4IBAQBhVJK7paZ2YHY17gatUuu+nF/cZ6udam6QVE7Y FP0Ke1zirme6y5/gmRUTsbWvEVvXlrpr+2VrXZmbnZeHNzkxwt4LopxfmjrElOxw f1BHYX26uhVgJQZpBPiR0rX5Klq0pVbUEUvlQjCAd8/ooH4SJkf2sPSMIWTngvyp yAwbDzzs47Gu2PSShreDUGbgT42T+tMbSi9EJOLyphGd9MzPEfjjJoIPdCF0DG3S RK0xcot8RMCJnWYwE1SoVKJTNuZZmbW5EetGJOTJrNAsfJVXRSBOi4F8aDANav5z 8uLgXFDzH+cbYX7xJRFFebqbX0eNzJIw5qv1AE77xBrdLCOX -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:01 2026 by rpki-client