This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K1B8elwUChCUkEIfiX-t3TuPITI.roa File: K1B8elwUChCUkEIfiX-t3TuPITI.roa (raw, json) Hash identifier: IPtIfGg4B1Rfmm1I1oJrXuEnKm6MHkgo3BrTJEfySQ4= Subject key identifier: 2B:50:7C:7A:5C:14:0A:10:94:90:42:1F:89:7F:AD:DD:3B:8F:21:32 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB087FA8845DEED170BD320BF4BE4 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K1B8elwUChCUkEIfiX-t3TuPITI.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209215 IP address blocks: 2a0e:aa06:460::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b0:87:fa:88:45:de:ed:17:0b:d3:20:bf:4b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b507c7a5c140a109490421f897faddd3b8f2132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:4f:aa:6d:b8:1d:37:80:a9:91:ac:bc:10: 26:66:7f:63:fe:ab:f4:59:6b:96:d0:ed:0b:99:ff: 97:17:bb:3a:01:ec:3d:05:c8:52:23:1b:da:5f:c9: 7e:c5:34:9c:7c:91:3a:16:2f:81:e6:8f:64:c2:ad: a7:60:4b:12:c0:e3:31:dc:43:b8:76:23:c1:b6:03: 7c:d7:58:bf:2e:ef:9e:e8:59:36:68:59:53:6c:25: 5a:1c:3e:01:aa:23:f8:13:17:04:3b:ee:da:57:df: 44:4a:45:2c:a0:76:d5:0b:85:4b:59:22:a2:42:3e: c8:67:38:bf:f3:c4:15:61:b4:a5:ee:ef:ff:6f:c7: 9d:e6:9b:0d:7b:e6:6d:5b:0a:13:b9:f4:a6:e9:11: fd:01:f5:38:af:2c:36:f4:0a:5b:04:14:0b:84:f8: 7e:d2:50:dd:d7:88:27:e1:26:40:ce:10:74:89:23: 84:5c:cd:c1:e2:b6:72:10:28:0a:0b:2f:55:72:19: e4:88:7b:1f:fc:51:6e:f2:a3:74:54:12:6b:88:dd: 8c:fc:20:c1:26:39:3b:8e:3f:65:69:c1:8e:b2:07: 46:e8:41:d8:38:df:94:d5:71:b8:41:77:c9:2d:22: a5:51:04:89:a2:8b:95:8d:62:5f:62:20:09:21:cc: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:50:7C:7A:5C:14:0A:10:94:90:42:1F:89:7F:AD:DD:3B:8F:21:32 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K1B8elwUChCUkEIfiX-t3TuPITI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:460::/44 Signature Algorithm: sha256WithRSAEncryption 09:97:2a:86:9e:1b:03:b4:2f:2d:3a:04:2d:44:c5:5a:66:c9: 89:77:44:71:66:13:e1:f8:c7:42:2c:0b:c0:82:e1:71:7c:2d: cb:ce:3b:8e:e7:32:3b:d7:d2:b4:fa:83:24:56:5a:d1:4f:6d: 14:58:8e:0b:8e:ed:95:5c:ba:71:ba:c5:10:42:3e:01:03:de: 36:4c:7d:58:32:5b:25:65:e5:d5:6e:a0:76:0f:98:1b:2f:4c: 87:db:1d:f6:dd:a7:d9:0c:d7:0d:51:a6:cf:63:8f:2c:77:07: e0:64:6e:5e:e4:c3:56:1d:09:e4:5e:07:55:54:da:31:44:75: 1f:3d:bd:90:fa:22:15:6f:87:91:a7:36:f6:2c:5a:26:ee:c9: 6c:90:0d:4f:e8:c7:8b:14:84:5a:d3:96:e3:13:f5:91:71:bf: 56:79:00:c8:60:d2:e2:5a:4c:df:d8:24:9a:40:c2:2e:82:0a: e4:9b:95:bc:98:58:4f:fd:fc:9f:6f:45:31:ce:ef:9e:14:19: a1:3f:50:61:2e:51:d1:fb:cc:55:c5:7d:6c:7f:4c:16:8c:b0: 20:28:05:4f:ea:4d:51:f3:66:bc:b2:63:99:66:05:44:3d:5e: c7:0f:21:4c:ac:c6:86:52:29:b0:8a:8b:30:0c:92:6b:4e:a9: 77:0a:4e:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frCH+ohF3u0XC9Mgv0vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjUwN2M3YTVjMTQwYTEwOTQ5MDQyMWY4OTdmYWRkZDNiOGYyMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHRPqm24HTeAqZGsvBAmZn9j/qv0 WWuW0O0Lmf+XF7s6Aew9BchSIxvaX8l+xTScfJE6Fi+B5o9kwq2nYEsSwOMx3EO4 diPBtgN811i/Lu+e6Fk2aFlTbCVaHD4BqiP4ExcEO+7aV99ESkUsoHbVC4VLWSKi Qj7IZzi/88QVYbSl7u//b8ed5psNe+ZtWwoTufSm6RH9AfU4ryw29ApbBBQLhPh+ 0lDd14gn4SZAzhB0iSOEXM3B4rZyECgKCy9VchnkiHsf/FFu8qN0VBJriN2M/CDB Jjk7jj9lacGOsgdG6EHYON+U1XG4QXfJLSKlUQSJoouVjWJfYiAJIcw3TQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCtQfHpcFAoQlJBCH4l/rd07jyEyMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSzFCOGVsd1VDaENVa0VJZmlYLXQzVHVQSVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgRg MA0GCSqGSIb3DQEBCwUAA4IBAQAJlyqGnhsDtC8tOgQtRMVaZsmJd0RxZhPh+MdC LAvAguFxfC3LzjuO5zI719K0+oMkVlrRT20UWI4Lju2VXLpxusUQQj4BA942TH1Y MlslZeXVbqB2D5gbL0yH2x323afZDNcNUabPY48sdwfgZG5e5MNWHQnkXgdVVNox RHUfPb2Q+iIVb4eRpzb2LFom7slskA1P6MeLFIRa05bjE/WRcb9WeQDIYNLiWkzf 2CSaQMIuggrkm5W8mFhP/fyfb0Uxzu+eFBmhP1BhLlHR+8xVxX1sf0wWjLAgKAVP 6k1R82a8smOZZgVEPV7HDyFMrMaGUimwioswDJJrTql3Ck5O -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:20 2026 by rpki-client