This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/k0z7MDRM9uoQRi5FCpwKZccILJg.roa File: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (raw, json) Hash identifier: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng= Subject key identifier: 93:4C:FB:30:34:4C:F6:EA:10:46:2E:45:0A:9C:0A:65:C7:08:2C:98 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B94B527CBA24C88B832E14E2206BA3884 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/k0z7MDRM9uoQRi5FCpwKZccILJg.roa Signing time: Tue 06 Jan 2026 19:07:38 +0000 ROA not before: Tue 06 Jan 2026 19:07:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209034 IP address blocks: 2a0d:2146:8770::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:b5:27:cb:a2:4c:88:b8:32:e1:4e:22:06:ba:38:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 6 19:07:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=934cfb30344cf6ea10462e450a9c0a65c7082c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:08:01:5a:79:d4:4b:04:3a:2b:77:86:67: b9:4c:45:d3:ae:1f:4d:be:51:53:46:fd:d8:b9:b4: f0:6b:c8:21:7f:0d:fe:b8:96:37:e3:ae:92:e3:97: 4c:23:8a:c2:30:42:4c:a5:85:25:11:39:25:2f:4e: 0b:3a:fa:43:92:c4:a3:bc:a3:ce:58:5e:01:bb:bb: 56:ac:66:61:42:8a:5f:25:8e:4b:1b:67:f4:fd:e0: ef:c5:17:5d:4d:29:5b:f2:c0:39:8f:6f:e0:4b:f0: 31:8c:6c:84:e0:8a:65:0f:e2:cd:fe:6d:b9:e7:3b: 4f:a0:3d:62:a3:33:ac:cf:7c:86:7f:7b:00:6e:65: 2e:7f:08:36:c5:18:5f:5d:2f:da:be:1a:89:c5:8d: cd:6b:71:bd:7f:0e:0a:c4:3b:e1:cd:c7:50:27:8d: 90:48:6d:e8:27:82:b9:77:cf:11:b2:d1:cc:15:c6: 9a:d7:1b:7b:4e:f3:7a:ef:ae:95:b0:05:06:b6:33: 9d:dd:68:fb:3d:a0:7e:76:3c:9e:6a:4e:b1:16:5b: a1:04:a6:82:0e:bf:88:a5:51:f6:46:81:4b:00:7e: 4d:78:6f:b0:63:63:99:41:38:bf:fb:6e:f7:8a:a4: 31:28:70:04:78:7a:83:9a:05:8f:34:48:4c:ff:70: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4C:FB:30:34:4C:F6:EA:10:46:2E:45:0A:9C:0A:65:C7:08:2C:98 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/k0z7MDRM9uoQRi5FCpwKZccILJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:8770::/44 Signature Algorithm: sha256WithRSAEncryption 4e:7c:0a:42:cf:4f:c6:39:bf:6d:2d:88:5f:34:39:20:94:c1: d2:6b:57:9a:43:bc:ce:7e:25:7f:8e:87:82:2b:43:a5:b8:8f: 48:11:d9:7c:0f:78:91:01:1f:e7:39:e8:b6:f1:3f:33:c9:10: 3e:e2:db:11:f2:48:72:85:3c:38:18:58:f7:7f:e8:99:40:e7: bc:13:3f:0c:11:88:7b:65:a9:77:48:66:c4:22:1f:18:76:28: 3a:25:d9:96:09:67:48:d7:92:ac:c0:1b:de:9a:88:73:d4:93: a9:93:1f:da:50:14:22:e4:08:59:c4:92:2f:cb:09:00:0c:b2: 7e:0b:43:88:14:e2:26:15:b7:cb:bc:37:0a:8e:1e:e3:90:19: 48:77:7e:7f:fe:cd:f0:c1:7b:37:55:f5:e3:65:d8:97:ec:1b: 3b:d4:92:28:0c:d6:83:e8:bb:16:1a:a4:63:4d:a5:6e:b1:2b: 8e:4c:f0:70:d9:bb:33:8e:85:7b:8f:8b:bd:5d:33:32:ce:cd: 78:70:5b:00:eb:cd:c4:f8:e9:ad:0b:a2:b9:ab:88:cc:5a:5b: a7:9c:77:96:98:b8:4a:c8:90:2c:d2:37:d8:c5:0c:81:b7:a2: 95:77:aa:26:fc:df:11:02:74:11:f6:ff:af:ee:4d:c0:b9:55: 79:f0:1e:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuUtSfLokyIuDLhTiIGujiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTA2MTkwNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzRjZmIzMDM0NGNmNmVhMTA0NjJlNDUwYTljMGE2NWM3MDgyYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3QIAVp51EsEOit3hme5TEXTrh9N vlFTRv3YubTwa8ghfw3+uJY3466S45dMI4rCMEJMpYUlETklL04LOvpDksSjvKPO WF4Bu7tWrGZhQopfJY5LG2f0/eDvxRddTSlb8sA5j2/gS/AxjGyE4IplD+LN/m25 5ztPoD1iozOsz3yGf3sAbmUufwg2xRhfXS/avhqJxY3Na3G9fw4KxDvhzcdQJ42Q SG3oJ4K5d88RstHMFcaa1xt7TvN6766VsAUGtjOd3Wj7PaB+djyeak6xFluhBKaC Dr+IpVH2RoFLAH5NeG+wY2OZQTi/+273iqQxKHAEeHqDmgWPNEhM/3Dj2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJNM+zA0TPbqEEYuRQqcCmXHCCyYMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvazB6N01EUk05dW9RUmk1RkNwd0taY2NJTEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRodw MA0GCSqGSIb3DQEBCwUAA4IBAQBOfApCz0/GOb9tLYhfNDkglMHSa1eaQ7zOfiV/ joeCK0OluI9IEdl8D3iRAR/nOei28T8zyRA+4tsR8khyhTw4GFj3f+iZQOe8Ez8M EYh7Zal3SGbEIh8Ydig6JdmWCWdI15KswBvemohz1JOpkx/aUBQi5AhZxJIvywkA DLJ+C0OIFOImFbfLvDcKjh7jkBlId35//s3wwXs3VfXjZdiX7Bs71JIoDNaD6LsW GqRjTaVusSuOTPBw2bszjoV7j4u9XTMyzs14cFsA683E+OmtC6K5q4jMWlunnHeW mLhKyJAs0jfYxQyBt6KVd6om/N8RAnQR9v+v7k3AuVV58B7M -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:02 2026 by rpki-client