This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kzC9EFyelmmomZF_e2XmyJabbWQ.roa File: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (raw, json) Hash identifier: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA= Subject key identifier: 93:30:BD:10:5C:9E:96:69:A8:99:91:7F:7B:65:E6:C8:96:9B:6D:64 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA715551519D2535D8067032DB285B3 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kzC9EFyelmmomZF_e2XmyJabbWQ.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39702 IP address blocks: 2a0d:2146:bf00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:15:55:15:19:d2:53:5d:80:67:03:2d:b2:85:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9330bd105c9e9669a899917f7b65e6c8969b6d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:a0:28:6a:c5:16:21:f4:30:8d:a6:92:5a: 56:79:24:42:85:a3:b9:89:31:a3:1a:a7:d4:33:d2: bc:4d:21:75:73:40:9f:51:4f:81:51:8f:99:fb:1e: b1:da:01:d6:ca:87:4e:05:92:00:92:b7:35:4b:a8: 03:13:f0:f3:fd:5e:1a:9e:71:25:bb:e6:62:f7:01: 56:b2:12:81:fc:81:df:54:0a:e5:08:00:db:f4:2f: e6:4e:49:0d:0a:a5:82:7a:9a:8a:5b:90:e6:ea:20: 6c:01:0d:a9:44:ab:f4:d2:bb:da:fa:5f:3f:0a:e0: d6:8c:33:bf:54:ba:b8:8b:37:a5:72:ef:58:08:1f: 05:9a:c1:98:1f:5f:d1:1b:e4:0d:f7:5a:b0:79:2c: 41:c9:46:f5:05:23:c4:38:62:59:20:b6:2d:c3:9f: bb:cc:28:9b:20:aa:f3:97:97:a1:ef:ed:f7:92:50: 48:89:a2:a6:75:09:17:7b:34:05:8a:b8:8e:8c:90: 13:bc:66:93:06:9c:2f:10:e1:4c:f1:ea:c9:f5:93: b8:6c:48:93:b9:60:d0:81:46:23:51:c4:ca:7f:22: 17:db:2e:e5:84:99:8d:db:93:ec:29:7e:f2:76:dc: 41:d4:13:e9:c6:36:0d:ab:b0:67:71:ff:6b:51:e3: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:BD:10:5C:9E:96:69:A8:99:91:7F:7B:65:E6:C8:96:9B:6D:64 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kzC9EFyelmmomZF_e2XmyJabbWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:bf00::/40 Signature Algorithm: sha256WithRSAEncryption 60:ee:00:b4:3c:82:e7:7d:15:77:2e:df:8a:1d:31:93:bf:82: ed:a1:e7:12:c6:e8:2c:ad:78:f5:6a:62:c7:03:4a:cd:33:d8: f5:08:c4:4f:56:78:9f:e6:99:ac:62:b2:e3:1b:98:62:83:6a: f6:90:4f:66:ec:d5:94:aa:d8:38:77:a6:85:83:cd:c0:14:ad: 70:95:40:ee:5d:5a:67:f3:98:cc:cd:1c:08:8d:62:2f:b9:35: 2d:5f:ab:d0:f8:4d:9f:07:3a:f5:6f:cd:d5:74:a9:fe:58:05: 58:90:aa:b4:91:af:55:95:82:03:f8:72:fc:19:80:50:8a:d6: 04:90:b4:41:3e:33:8a:c4:85:83:2c:96:ba:92:6c:f6:d9:92: f8:87:41:9e:15:ad:21:74:f9:d7:48:e1:30:35:1a:d1:f6:27: bd:9e:1f:52:55:08:d2:81:40:9c:5c:3e:ba:3a:66:15:47:88: dd:27:74:d2:c8:4c:c9:86:ec:bb:f8:26:ca:d4:d2:26:53:8a: 3b:16:00:63:a9:db:46:75:89:36:52:98:f8:fb:b6:2d:51:ba: cc:c4:68:d1:b5:08:fb:4c:c3:3f:b1:9f:c1:df:b8:9a:c7:f3: 93:1e:5b:e8:22:5b:d4:64:7c:bc:0b:d0:ab:dc:9c:3f:2e:69: 32:0b:ce:93 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pxVVFRnSU12AZwMtsoWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzMwYmQxMDVjOWU5NjY5YTg5OTkxN2Y3YjY1ZTZjODk2OWI2ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPmgKGrFFiH0MI2mklpWeSRChaO5 iTGjGqfUM9K8TSF1c0CfUU+BUY+Z+x6x2gHWyodOBZIAkrc1S6gDE/Dz/V4annEl u+Zi9wFWshKB/IHfVArlCADb9C/mTkkNCqWCepqKW5Dm6iBsAQ2pRKv00rva+l8/ CuDWjDO/VLq4izelcu9YCB8FmsGYH1/RG+QN91qweSxByUb1BSPEOGJZILYtw5+7 zCibIKrzl5eh7+33klBIiaKmdQkXezQFiriOjJATvGaTBpwvEOFM8erJ9ZO4bEiT uWDQgUYjUcTKfyIX2y7lhJmN25PsKX7ydtxB1BPpxjYNq7Bncf9rUeNuBwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJMwvRBcnpZpqJmRf3tl5siWm21kMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEva3pDOUVGeWVsbW1vbVpGX2UyWG15SmFiYldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg0hRr8w DQYJKoZIhvcNAQELBQADggEBAGDuALQ8gud9FXcu34odMZO/gu2h5xLG6CytePVq YscDSs0z2PUIxE9WeJ/mmaxisuMbmGKDavaQT2bs1ZSq2Dh3poWDzcAUrXCVQO5d WmfzmMzNHAiNYi+5NS1fq9D4TZ8HOvVvzdV0qf5YBViQqrSRr1WVggP4cvwZgFCK 1gSQtEE+M4rEhYMslrqSbPbZkviHQZ4VrSF0+ddI4TA1GtH2J72eH1JVCNKBQJxc Pro6ZhVHiN0ndNLITMmG7Lv4JsrU0iZTijsWAGOp20Z1iTZSmPj7ti1RuszEaNG1 CPtMwz+xn8HfuJrH85MeW+giW9RkfLwL0KvcnD8uaTILzpM= -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:53 2026 by rpki-client