This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/KSQwvTcsugLeF8ojPhELBKcj4Vw.roa File: KSQwvTcsugLeF8ojPhELBKcj4Vw.roa (raw, json) Hash identifier: 9l2WRr+rrJBrqb+AyibzJsgOlsg/AuUh8/D4ng4z+vQ= Subject key identifier: 29:24:30:BD:37:2C:BA:02:DE:17:CA:23:3E:11:0B:04:A7:23:E1:5C Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019B79ECDB6FC48829F96AFA516ABA0ADC17 Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/KSQwvTcsugLeF8ojPhELBKcj4Vw.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a13:27c0:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:db:6f:c4:88:29:f9:6a:fa:51:6a:ba:0a:dc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=292430bd372cba02de17ca233e110b04a723e15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:dd:e4:19:74:2f:f3:a2:cc:fa:60:55:8f: af:de:46:5a:fb:4c:3e:f2:81:2b:c3:80:2c:51:a5: 6f:43:88:e3:6f:57:53:f8:75:be:f3:55:29:ab:d7: fe:29:62:f8:a8:d0:12:39:be:c2:09:a9:a5:71:65: 74:6a:d0:1f:37:52:fc:f2:f8:a1:ae:23:4e:03:e3: 3b:61:b0:0a:8a:13:17:40:53:29:d3:ed:6a:cb:b2: 51:e2:ec:d7:77:3b:61:db:37:7b:69:ea:32:c3:76: 7e:74:ca:6f:1d:47:04:cd:3f:3e:0a:4a:5d:d4:19: fc:37:33:1f:67:c1:16:b1:c9:61:de:24:0b:b7:6d: 7c:87:89:28:6c:a4:fb:64:71:ef:10:da:d9:dd:6b: ff:05:61:66:8b:55:89:73:2a:43:05:41:b8:67:b2: 0c:9c:ef:92:94:68:d2:88:7c:62:75:e9:f2:b1:55: 78:b4:13:3c:0a:0c:ad:f4:67:0c:5e:d3:9c:96:4b: 4f:ac:ee:08:9a:cf:94:51:86:8f:6f:12:ba:92:91: 29:e1:15:47:ec:7d:49:49:f9:b4:f7:1a:95:29:7d: 4f:7f:7f:b7:96:f8:b8:75:50:2a:a8:24:68:26:8c: c1:b9:58:d9:8d:45:97:57:3a:fb:ce:b3:b0:94:b9: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:24:30:BD:37:2C:BA:02:DE:17:CA:23:3E:11:0B:04:A7:23:E1:5C X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/KSQwvTcsugLeF8ojPhELBKcj4Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:27c0:10::/44 Signature Algorithm: sha256WithRSAEncryption d4:04:03:ce:56:4b:36:08:bc:e2:da:10:83:50:cb:af:fe:5f: c4:e5:7b:99:bc:4c:3c:8b:ed:d4:57:df:86:48:d4:5b:97:78: 4c:49:cb:3b:74:32:28:e4:5f:12:54:51:69:28:42:75:06:24: 2e:13:f6:f4:fd:58:bd:63:41:fc:66:13:27:75:db:0e:1a:e6: 96:ac:92:02:38:5d:6b:6a:2c:ef:6a:2c:5d:e4:f8:86:f2:0e: 84:0a:fc:00:b6:69:6c:d0:4e:68:b2:f0:69:f9:94:a4:97:65: 12:a9:f7:31:49:41:21:cb:a5:ae:41:8e:ae:c0:2a:63:2c:76: 3f:53:c4:c5:d5:29:7c:48:08:08:92:2c:57:73:24:6c:be:fa: 6e:d0:18:c6:1d:04:73:97:14:ee:70:0b:e3:d6:70:d3:e9:d8: a8:c1:8d:30:ec:49:20:80:d8:62:27:8f:44:59:4e:0b:bb:69: 1c:6b:5b:2f:73:1d:93:3d:51:7b:a6:af:f4:38:9e:8a:cd:2c: 20:03:49:f1:be:32:e6:a2:00:ea:fc:02:f6:bd:b7:b5:25:b5: 97:c7:72:c3:37:30:c6:e5:04:91:4f:87:45:4b:6f:ba:6c:52: df:43:22:42:af:28:df:5a:66:34:79:b7:45:46:5a:5d:2c:5d: e1:11:21:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57NtvxIgp+Wr6UWq6CtwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTI0MzBiZDM3MmNiYTAyZGUxN2NhMjMzZTExMGIwNGE3MjNlMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuErd5Bl0L/OizPpgVY+v3kZa+0w+ 8oErw4AsUaVvQ4jjb1dT+HW+81Upq9f+KWL4qNASOb7CCamlcWV0atAfN1L88vih riNOA+M7YbAKihMXQFMp0+1qy7JR4uzXdzth2zd7aeoyw3Z+dMpvHUcEzT8+Ckpd 1Bn8NzMfZ8EWsclh3iQLt218h4kobKT7ZHHvENrZ3Wv/BWFmi1WJcypDBUG4Z7IM nO+SlGjSiHxidenysVV4tBM8Cgyt9GcMXtOclktPrO4Ims+UUYaPbxK6kpEp4RVH 7H1JSfm09xqVKX1Pf3+3lvi4dVAqqCRoJozBuVjZjUWXVzr7zrOwlLmn9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCkkML03LLoC3hfKIz4RCwSnI+FcMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvS1NRd3ZUY3N1Z0xlRjhvalBoRUxCS2NqNFZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhMnwAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQDUBAPOVks2CLzi2hCDUMuv/l/E5XuZvEw8i+3U V9+GSNRbl3hMScs7dDIo5F8SVFFpKEJ1BiQuE/b0/Vi9Y0H8ZhMnddsOGuaWrJIC OF1raizvaixd5PiG8g6ECvwAtmls0E5osvBp+ZSkl2USqfcxSUEhy6WuQY6uwCpj LHY/U8TF1Sl8SAgIkixXcyRsvvpu0BjGHQRzlxTucAvj1nDT6diowY0w7EkggNhi J49EWU4Lu2kca1svcx2TPVF7pq/0OJ6KzSwgA0nxvjLmogDq/AL2vbe1JbWXx3LD NzDG5QSRT4dFS2+6bFLfQyJCryjfWmY0ebdFRlpdLF3hESE1 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:35 2026 by rpki-client