This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kj0PgBnGcDTGupdwqz3VCbxQDUs.roa File: kj0PgBnGcDTGupdwqz3VCbxQDUs.roa (raw, json) Hash identifier: Rod5mkqH1MRq0BkKg0ktRdbppjfC7C7Nyu6+de/QoxQ= Subject key identifier: 92:3D:0F:80:19:C6:70:34:C6:BA:97:70:AB:3D:D5:09:BC:50:0D:4B Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019BB681214A602F3624B8646D76DF782700 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kj0PgBnGcDTGupdwqz3VCbxQDUs.roa Signing time: Tue 13 Jan 2026 08:37:54 +0000 ROA not before: Tue 13 Jan 2026 08:37:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202396 IP address blocks: 2a0e:aa07:e280::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:81:21:4a:60:2f:36:24:b8:64:6d:76:df:78:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 13 08:37:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=923d0f8019c67034c6ba9770ab3dd509bc500d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:48:27:50:95:65:f0:a3:ba:da:9a:35:99: f4:79:b4:5f:13:a0:e5:e7:d8:e9:2a:16:c2:87:c2: dc:4a:a9:de:a9:23:c1:10:01:d5:24:e3:29:5d:ef: 29:12:10:34:ca:c3:df:e6:ef:a1:9a:0f:02:f6:0f: 54:6d:e5:b5:6b:93:b4:24:68:75:49:08:60:7d:14: 42:6b:6e:94:76:59:a9:a4:bc:5a:d6:9e:16:67:b3: dd:16:50:11:a2:c4:a1:80:a3:a3:90:71:42:2e:1f: c8:d5:42:63:26:19:34:40:90:9a:43:2d:a7:66:be: 3f:88:a6:08:8b:c7:d7:cc:a1:f3:8b:ff:2b:6f:f0: 51:8a:fc:0c:67:0b:04:9e:76:3d:ae:39:0e:0d:f0: d3:d5:a2:c7:3e:c8:c3:3e:5a:e2:ac:f4:42:f7:c6: 89:8e:51:18:50:ae:dc:86:cd:d6:d0:06:20:7c:21: db:98:8f:17:ee:7c:4a:eb:97:5d:3f:95:9f:70:f3: f5:d8:b6:af:b2:7e:c7:b8:30:4a:68:8f:52:4c:76: 7b:77:37:fd:8f:56:da:02:b7:7f:d5:b7:64:df:c4: 0a:72:84:a1:c3:82:9e:7d:d3:ac:c6:85:6a:bc:b1: 60:6d:0b:7e:c5:61:a5:fb:16:b7:9e:8f:11:da:33: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:0F:80:19:C6:70:34:C6:BA:97:70:AB:3D:D5:09:BC:50:0D:4B X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kj0PgBnGcDTGupdwqz3VCbxQDUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e280::/44 Signature Algorithm: sha256WithRSAEncryption 0f:32:ec:93:b2:5c:9a:c9:76:a7:53:14:f5:a7:b7:c6:ed:b7: 41:ea:ee:2e:7f:b4:7d:af:47:b8:9e:b1:ae:a1:0f:14:ba:de: 95:5c:26:18:47:6e:a7:9e:94:b3:98:3a:5a:db:32:c0:3a:be: 69:55:08:8f:5c:82:a7:2a:77:b1:a8:25:b9:ff:79:f0:3b:74: 82:7f:b1:22:a3:60:9c:4f:1a:de:ad:66:c1:11:67:9f:19:e6: e3:b8:f8:fd:17:35:38:89:54:35:93:7b:02:04:44:7e:41:17: 97:2c:13:7d:d0:a7:ab:32:15:f1:93:a6:06:47:a8:05:31:53: cb:41:ed:7d:87:cc:f0:6b:35:1b:2a:60:b3:3e:0e:03:96:71: f3:56:59:aa:02:b1:70:7a:67:d2:4b:93:47:9a:a6:7a:ec:4f: dc:1b:b9:99:ef:82:15:51:76:8c:8a:84:ee:d8:cd:6f:26:43: 60:8e:a7:1f:7c:7a:f8:a5:54:cd:fa:2c:fe:15:6a:94:a6:90: 00:72:de:bd:d1:03:08:44:eb:90:01:28:a3:e9:f6:a3:51:9c: 84:d7:c2:91:a5:89:dc:40:59:c8:54:dd:27:2d:d9:00:e9:c1: b5:38:11:ba:14:20:fc:e3:78:81:d8:6f:4a:db:14:e0:db:98: 2b:bd:77:4a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZu2gSFKYC82JLhkbXbfeCcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTEzMDgzNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjNkMGY4MDE5YzY3MDM0YzZiYTk3NzBhYjNkZDUwOWJjNTAwZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW5IJ1CVZfCjutqaNZn0ebRfE6Dl 59jpKhbCh8LcSqneqSPBEAHVJOMpXe8pEhA0ysPf5u+hmg8C9g9UbeW1a5O0JGh1 SQhgfRRCa26UdlmppLxa1p4WZ7PdFlARosShgKOjkHFCLh/I1UJjJhk0QJCaQy2n Zr4/iKYIi8fXzKHzi/8rb/BRivwMZwsEnnY9rjkODfDT1aLHPsjDPlrirPRC98aJ jlEYUK7chs3W0AYgfCHbmI8X7nxK65ddP5WfcPP12Lavsn7HuDBKaI9STHZ7dzf9 j1baArd/1bdk38QKcoShw4KefdOsxoVqvLFgbQt+xWGl+xa3no8R2jMe/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJI9D4AZxnA0xrqXcKs91Qm8UA1LMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEva2owUGdCbkdjRFRHdXBkd3F6M1ZDYnhRRFVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+KA MA0GCSqGSIb3DQEBCwUAA4IBAQAPMuyTslyayXanUxT1p7fG7bdB6u4uf7R9r0e4 nrGuoQ8Uut6VXCYYR26nnpSzmDpa2zLAOr5pVQiPXIKnKnexqCW5/3nwO3SCf7Ei o2CcTxrerWbBEWefGebjuPj9FzU4iVQ1k3sCBER+QReXLBN90KerMhXxk6YGR6gF MVPLQe19h8zwazUbKmCzPg4DlnHzVlmqArFwemfSS5NHmqZ67E/cG7mZ74IVUXaM ioTu2M1vJkNgjqcffHr4pVTN+iz+FWqUppAAct690QMIROuQASij6fajUZyE18KR pYncQFnIVN0nLdkA6cG1OBG6FCD843iB2G9K2xTg25grvXdK -----END CERTIFICATE-----Generated at Mon Jan 19 07:30:15 2026 by rpki-client