This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kPuaGGpgPFaSy8l51khULbVxhXc.roa File: kPuaGGpgPFaSy8l51khULbVxhXc.roa (raw, json) Hash identifier: Y+Q2JGNOS1HAT07eAUA5KgVCAQRh0qQ9l5cMZfqTzho= Subject key identifier: 90:FB:9A:18:6A:60:3C:56:92:CB:C9:79:D6:48:54:2D:B5:71:85:77 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B744F79A33B25D4FCDB40DF19482 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kPuaGGpgPFaSy8l51khULbVxhXc.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215052 IP address blocks: 2a12:bec4:11d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b7:44:f7:9a:33:b2:5d:4f:cd:b4:0d:f1:94:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fb9a186a603c5692cbc979d648542db5718577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fd:73:25:cc:2a:2f:75:f0:8c:63:6b:46:5e: 34:6d:f2:b2:11:c1:2c:d7:e3:59:62:17:68:fa:a7: 1f:95:58:22:7a:95:ca:e4:47:60:7b:a4:70:d2:c8: b9:9c:2e:f5:41:7d:4e:13:20:a6:05:9f:46:a9:32: 65:e2:3c:61:2a:9a:4c:d3:7c:7a:82:30:12:14:38: 9e:eb:25:c9:5e:f7:74:39:c7:98:d1:39:ff:67:01: 79:85:de:e4:7d:dc:21:52:a0:76:4a:98:65:7a:59: b6:3e:89:17:3f:71:3e:46:dc:16:a0:bc:e5:0c:51: de:90:4f:19:ed:53:33:7a:c9:41:6e:ca:cf:4c:75: 52:b1:ca:a5:28:57:91:e7:2b:62:85:fa:f1:11:c8: 0d:ca:b5:14:56:b9:89:64:e0:a0:c5:bb:d4:ef:c2: 07:0b:17:ea:0d:5a:59:f5:8d:75:0f:85:5c:c0:7e: 97:94:a8:92:be:ce:50:a2:79:46:df:52:a6:bc:fd: b9:09:20:34:28:c4:db:b1:c8:b3:ec:12:43:a8:69: 33:78:95:0e:78:af:1e:74:6b:68:18:41:7f:43:32: 57:7c:97:2a:b2:49:cf:fb:df:46:99:94:1d:a5:28: e8:29:bf:7e:71:5f:92:2b:eb:a8:60:7a:40:2f:6a: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:9A:18:6A:60:3C:56:92:CB:C9:79:D6:48:54:2D:B5:71:85:77 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kPuaGGpgPFaSy8l51khULbVxhXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:11d0::/44 Signature Algorithm: sha256WithRSAEncryption 4d:c5:b7:76:3d:fa:5b:2a:e6:e4:33:4a:cd:a2:2d:ee:bc:ff: de:7e:29:43:a7:f5:75:db:e2:2b:c0:43:35:6d:5f:fa:a8:4e: 61:29:7d:80:8e:b9:cf:97:01:5d:d5:55:f1:17:fa:50:34:ad: 47:66:2e:cd:9f:36:a5:3f:bc:12:4f:15:8d:63:8c:16:1d:64: d8:60:08:5e:78:35:21:4c:d1:f4:f2:83:c9:41:eb:18:08:03: d4:85:8b:71:e5:b0:68:5e:2e:e0:7b:af:7a:90:ba:e6:7a:2b: ed:f0:bb:1a:24:ab:ff:ee:33:c2:f1:5c:a2:76:2a:36:8a:77: 67:0c:2f:17:89:e3:e6:dd:9c:69:04:31:5f:14:b3:5d:36:2c: b1:f1:d5:ee:aa:0d:0a:88:81:b1:f7:d5:a9:31:c4:81:82:71: e5:9a:35:d3:8a:41:28:d9:13:f8:63:54:25:be:b9:59:eb:49: 77:3c:0f:78:1b:f5:07:24:f7:12:58:de:90:d6:ba:2d:4a:29: ef:eb:68:19:5f:4d:46:ab:77:0e:e9:b7:ad:90:7f:15:ff:c4: e4:86:ef:c9:57:15:cf:b6:77:7f:60:50:d4:45:9d:d3:c9:d0: 95:0e:a2:9f:97:80:ab:34:16:fa:86:83:ff:26:cd:e2:66:98: 71:9c:c1:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELdE95ozsl1PzbQN8ZSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZiOWExODZhNjAzYzU2OTJjYmM5NzlkNjQ4NTQyZGI1NzE4NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/1zJcwqL3XwjGNrRl40bfKyEcEs 1+NZYhdo+qcflVgiepXK5Edge6Rw0si5nC71QX1OEyCmBZ9GqTJl4jxhKppM03x6 gjASFDie6yXJXvd0OceY0Tn/ZwF5hd7kfdwhUqB2Sphlelm2PokXP3E+RtwWoLzl DFHekE8Z7VMzeslBbsrPTHVSscqlKFeR5ytihfrxEcgNyrUUVrmJZOCgxbvU78IH CxfqDVpZ9Y11D4VcwH6XlKiSvs5QonlG31KmvP25CSA0KMTbsciz7BJDqGkzeJUO eK8edGtoGEF/QzJXfJcqsknP+99GmZQdpSjoKb9+cV+SK+uoYHpAL2q2VQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJD7mhhqYDxWksvJedZIVC21cYV3MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEva1B1YUdHcGdQRmFTeThsNTFraFVMYlZ4aFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBHQ MA0GCSqGSIb3DQEBCwUAA4IBAQBNxbd2PfpbKubkM0rNoi3uvP/efilDp/V12+Ir wEM1bV/6qE5hKX2AjrnPlwFd1VXxF/pQNK1HZi7NnzalP7wSTxWNY4wWHWTYYAhe eDUhTNH08oPJQesYCAPUhYtx5bBoXi7ge696kLrmeivt8LsaJKv/7jPC8Vyidio2 indnDC8XiePm3ZxpBDFfFLNdNiyx8dXuqg0KiIGx99WpMcSBgnHlmjXTikEo2RP4 Y1QlvrlZ60l3PA94G/UHJPcSWN6Q1rotSinv62gZX01Gq3cO6betkH8V/8Tkhu/J VxXPtnd/YFDURZ3TydCVDqKfl4CrNBb6hoP/Js3iZphxnMEp -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:24 2026 by rpki-client