This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k8wtoFntQXfaTRAg2XmkjcijLe0.roa File: k8wtoFntQXfaTRAg2XmkjcijLe0.roa (raw, json) Hash identifier: lViRlpfL/DCuPTPCAL8fSJNJ79sFxhKX6yheIDk+e1o= Subject key identifier: 93:CC:2D:A0:59:ED:41:77:DA:4D:10:20:D9:79:A4:8D:C8:A3:2D:ED Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA4CEB4071AA8C27CBABCEE17AFAE Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k8wtoFntQXfaTRAg2XmkjcijLe0.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197626 IP address blocks: 2a0e:aa07:e0f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a4:ce:b4:07:1a:a8:c2:7c:ba:bc:ee:17:af:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93cc2da059ed4177da4d1020d979a48dc8a32ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:5d:4b:d2:68:3e:df:8b:f0:db:eb:39:45: 4b:dc:4e:61:88:4b:d1:31:bd:28:c5:e5:2d:44:7e: 91:45:14:0c:94:5f:67:6f:52:82:a3:29:d5:53:54: dc:45:74:42:e1:56:31:5f:b1:46:ac:e5:05:d1:52: 87:45:2e:81:03:2a:26:49:a7:6b:76:33:b5:6f:8e: 58:4e:ae:f1:02:71:60:8f:d9:4e:1f:d0:52:28:5f: 1f:27:72:0e:f6:bf:bb:64:02:42:0b:7c:f4:24:64: 85:f2:4f:1c:1e:0e:a2:9e:37:43:a5:2b:aa:65:ec: 4f:d9:03:ab:28:5f:84:12:e5:24:6f:5a:a4:bb:2f: a4:56:a3:a4:fd:df:95:b3:18:01:a1:07:e0:7e:0c: 42:02:c0:d3:80:21:f8:7c:24:12:93:37:e9:4e:91: 80:ae:7e:8c:ff:3d:d0:cb:2c:6e:03:c9:05:c4:b7: e6:50:ec:d1:35:5b:40:58:9d:0c:94:95:c2:8a:8c: 8a:e7:15:7a:3f:8c:4a:b6:e2:1a:19:23:7e:52:23: 69:cc:11:5c:5e:54:0c:42:bb:f1:c1:56:47:06:d4: a6:10:9f:90:3c:35:dc:6f:8f:ce:a4:a5:67:c2:a8: c9:95:1d:00:20:3b:df:32:8d:f2:ae:f0:67:2b:d7: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:2D:A0:59:ED:41:77:DA:4D:10:20:D9:79:A4:8D:C8:A3:2D:ED X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k8wtoFntQXfaTRAg2XmkjcijLe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e0f0::/44 Signature Algorithm: sha256WithRSAEncryption 20:10:a2:98:8e:7b:ba:b0:73:b0:44:dc:c6:75:ff:5c:03:0f: 14:e0:8a:46:43:33:25:28:1e:59:d8:95:21:13:fc:62:ed:20: a8:be:8a:2b:93:16:b7:36:13:45:bf:85:6b:b9:f3:eb:ba:bf: 07:74:1e:51:c5:88:ad:7c:43:f0:2d:d8:0f:d4:56:ca:0a:3c: ca:e2:6a:4b:33:5d:ba:81:c8:e6:23:ff:61:f4:89:95:f7:b3: b6:2d:89:c7:d3:42:fc:6c:e4:df:50:67:3a:28:86:3f:3f:72: 6b:27:ec:51:8f:fe:d3:f3:3f:77:f7:64:93:11:80:4e:40:43: e6:26:88:9f:24:2f:dc:5f:3b:f6:de:af:9a:fa:56:10:27:4b: 4a:00:4b:ae:25:a6:3f:42:10:62:95:72:d0:64:c8:bd:59:ad: a6:4e:6d:b3:92:e4:e0:27:97:cd:81:48:31:fe:a7:49:23:34: d8:c0:04:75:04:96:c6:58:78:98:09:e6:18:5f:0b:e2:6e:fb: 3c:3a:08:c5:44:27:b0:01:e8:02:24:d9:30:8b:aa:d4:d8:20: de:2a:ae:f4:4d:05:86:97:b3:b2:7a:29:69:bd:84:d3:94:e8: 10:44:27:0f:dd:4e:5c:b9:03:bd:e0:ac:5b:be:9b:39:25:22: 69:d0:a6:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqTOtAcaqMJ8urzuF6+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2NjMmRhMDU5ZWQ0MTc3ZGE0ZDEwMjBkOTc5YTQ4ZGM4YTMyZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz5dS9JoPt+L8NvrOUVL3E5hiEvR Mb0oxeUtRH6RRRQMlF9nb1KCoynVU1TcRXRC4VYxX7FGrOUF0VKHRS6BAyomSadr djO1b45YTq7xAnFgj9lOH9BSKF8fJ3IO9r+7ZAJCC3z0JGSF8k8cHg6injdDpSuq ZexP2QOrKF+EEuUkb1qkuy+kVqOk/d+VsxgBoQfgfgxCAsDTgCH4fCQSkzfpTpGA rn6M/z3QyyxuA8kFxLfmUOzRNVtAWJ0MlJXCioyK5xV6P4xKtuIaGSN+UiNpzBFc XlQMQrvxwVZHBtSmEJ+QPDXcb4/OpKVnwqjJlR0AIDvfMo3yrvBnK9eKrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJPMLaBZ7UF32k0QINl5pI3Ioy3tMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvazh3dG9GbnRRWGZhVFJBZzJYbWtqY2lqTGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Dw MA0GCSqGSIb3DQEBCwUAA4IBAQAgEKKYjnu6sHOwRNzGdf9cAw8U4IpGQzMlKB5Z 2JUhE/xi7SCovoorkxa3NhNFv4VrufPrur8HdB5RxYitfEPwLdgP1FbKCjzK4mpL M126gcjmI/9h9ImV97O2LYnH00L8bOTfUGc6KIY/P3JrJ+xRj/7T8z9392STEYBO QEPmJoifJC/cXzv23q+a+lYQJ0tKAEuuJaY/QhBilXLQZMi9Wa2mTm2zkuTgJ5fN gUgx/qdJIzTYwAR1BJbGWHiYCeYYXwvibvs8OgjFRCewAegCJNkwi6rU2CDeKq70 TQWGl7OyeilpvYTTlOgQRCcP3U5cuQO94Kxbvps5JSJp0Kb4 -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client