This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/KugaWmKDH5zmP1qk0Gs_X_lRxec.roa File: KugaWmKDH5zmP1qk0Gs_X_lRxec.roa (raw, json) Hash identifier: fOb4VBofOKdn9ud8meXq7CZuYCgE1vtlbf2YWR92Bb8= Subject key identifier: 2A:E8:1A:5A:62:83:1F:9C:E6:3F:5A:A4:D0:6B:3F:5F:F9:51:C5:E7 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A30776CDD510348EDFE1A11D6BA7 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/KugaWmKDH5zmP1qk0Gs_X_lRxec.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43639 IP address blocks: 2a02:26f0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a3:07:76:cd:d5:10:34:8e:df:e1:a1:1d:6b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ae81a5a62831f9ce63f5aa4d06b3f5ff951c5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:7f:17:57:e4:71:38:07:94:81:c2:cb:be: a4:2d:b6:2e:3f:53:74:e6:9a:82:bf:06:de:12:66: 6b:0a:b4:09:76:90:48:d8:a3:00:e8:12:6a:bf:6b: cd:78:f0:67:5b:91:08:a0:97:52:37:47:14:e7:96: 1b:07:d6:7d:f6:f9:e1:94:d5:24:b5:8c:ff:f0:fe: 05:ef:3f:f2:e2:35:d9:15:e0:e4:d0:da:b0:09:b5: f4:70:85:41:72:f6:00:6c:84:2a:3b:e2:e8:fe:39: 1c:3c:f8:89:21:c4:04:08:ba:01:7b:e3:c7:7d:d5: 11:06:e9:27:9a:1d:09:f2:09:07:25:a1:66:76:bd: 39:c4:e3:f2:12:1e:99:95:05:1c:19:70:a9:ed:26: 96:da:ec:f9:ff:2f:ba:4a:75:4a:26:38:5f:8f:18: 29:f7:69:e1:30:47:84:a2:84:6c:40:86:0d:5e:b7: 57:3e:37:1b:75:27:aa:f3:ce:71:6a:3c:b2:3e:d9: f1:57:5a:9a:e9:90:61:d8:06:5c:69:47:d1:e1:2c: 42:5f:15:01:c1:ae:c0:3b:08:ca:57:62:6c:23:27: 9b:63:e0:f1:b4:26:8d:9b:e5:77:11:2c:37:d2:b4: 78:13:b4:1d:b8:f5:67:6a:d2:f9:ee:34:7a:5c:c6: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E8:1A:5A:62:83:1F:9C:E6:3F:5A:A4:D0:6B:3F:5F:F9:51:C5:E7 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/KugaWmKDH5zmP1qk0Gs_X_lRxec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:26f0:80::/48 Signature Algorithm: sha256WithRSAEncryption 41:6c:da:14:d5:93:bb:f5:52:df:b4:92:dd:53:8e:d6:bf:60: 00:f6:f0:76:f1:d4:e2:83:f3:5f:92:a4:36:25:f5:af:eb:91: 6a:8e:ad:10:14:47:64:1e:85:8b:0a:2d:42:91:cd:62:99:ed: 6d:4e:8b:e6:6e:a8:8b:78:97:2b:c2:29:67:e8:bb:91:57:0b: 79:c4:ac:08:07:11:34:a6:a8:fd:60:f6:c9:4c:6c:b7:bd:b7: bb:00:bf:f8:0c:bc:13:9d:bb:d3:2f:e1:78:7c:9a:7d:21:a0: 4f:e6:9f:51:47:3f:eb:f5:e8:4e:39:73:e0:21:9a:07:68:52: 5c:ef:7e:3a:54:6b:d7:e5:45:4a:1e:4a:a5:81:40:57:37:d4: 53:53:5d:31:73:af:60:a8:4f:07:12:c5:8f:e0:93:8e:ae:8c: 45:76:fc:b5:d9:b4:97:56:16:c7:f6:cc:1a:32:41:f0:dc:db: ac:ea:8c:ad:6f:bf:15:65:cb:38:06:56:85:63:e8:db:fb:4c: 48:a2:be:14:42:03:ac:36:fa:30:80:ee:a9:0f:3e:62:df:35: 85:7e:b1:3c:1f:01:be:01:c4:6f:f8:b5:7d:1c:0d:08:61:84: 3a:b7:86:ac:77:ac:d6:d3:af:37:6d:72:78:44:18:99:ea:5d: 37:6e:35:c5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FaMHds3VEDSO3+GhHWunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWU4MWE1YTYyODMxZjljZTYzZjVhYTRkMDZiM2Y1ZmY5NTFjNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5d/F1fkcTgHlIHCy76kLbYuP1N0 5pqCvwbeEmZrCrQJdpBI2KMA6BJqv2vNePBnW5EIoJdSN0cU55YbB9Z99vnhlNUk tYz/8P4F7z/y4jXZFeDk0NqwCbX0cIVBcvYAbIQqO+Lo/jkcPPiJIcQECLoBe+PH fdURBuknmh0J8gkHJaFmdr05xOPyEh6ZlQUcGXCp7SaW2uz5/y+6SnVKJjhfjxgp 92nhMEeEooRsQIYNXrdXPjcbdSeq885xajyyPtnxV1qa6ZBh2AZcaUfR4SxCXxUB wa7AOwjKV2JsIyebY+DxtCaNm+V3ESw30rR4E7QduPVnatL57jR6XMZO9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCroGlpigx+c5j9apNBrP1/5UcXnMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvS3VnYVdtS0RINXptUDFxazBHc19YX2xSeGVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIm8ACA MA0GCSqGSIb3DQEBCwUAA4IBAQBBbNoU1ZO79VLftJLdU47Wv2AA9vB28dTig/Nf kqQ2JfWv65Fqjq0QFEdkHoWLCi1Ckc1ime1tTovmbqiLeJcrwiln6LuRVwt5xKwI BxE0pqj9YPbJTGy3vbe7AL/4DLwTnbvTL+F4fJp9IaBP5p9RRz/r9ehOOXPgIZoH aFJc7346VGvX5UVKHkqlgUBXN9RTU10xc69gqE8HEsWP4JOOroxFdvy12bSXVhbH 9swaMkHw3Nus6oytb78VZcs4BlaFY+jb+0xIor4UQgOsNvowgO6pDz5i3zWFfrE8 HwG+AcRv+LV9HA0IYYQ6t4asd6zW0683bXJ4RBiZ6l03bjXF -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:44 2026 by rpki-client