This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/kNwz-wn_5ECRjM46-yQxMUhYtyI.roa File: kNwz-wn_5ECRjM46-yQxMUhYtyI.roa (raw, json) Hash identifier: OusCMQlVI/Xz35FKi6gsyq4hpCK4uJL+aBVwWyq7Jvo= Subject key identifier: 90:DC:33:FB:09:FF:E4:40:91:8C:CE:3A:FB:24:31:31:48:58:B7:22 Certificate issuer: /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3 Certificate serial: 019B3DF252D4CFEF4C71D81D5782371FBD5B Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/kNwz-wn_5ECRjM46-yQxMUhYtyI.roa Signing time: Sat 20 Dec 2025 22:47:29 +0000 ROA not before: Sat 20 Dec 2025 22:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213599 IP address blocks: 2a12:5480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:f2:52:d4:cf:ef:4c:71:d8:1d:57:82:37:1f:bd:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3 Validity Not Before: Dec 20 22:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=90dc33fb09ffe440918cce3afb2431314858b722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:35:53:a4:e8:b4:01:6a:de:d4:01:87:31: ee:98:e5:2f:1f:02:79:8d:71:ab:60:da:58:fe:6b: 93:5e:93:51:cc:07:9e:b0:94:1b:96:4c:c8:d0:10: 99:42:0a:9e:58:f4:1e:43:06:ea:59:14:24:38:93: fb:a3:06:fe:34:05:99:3e:5a:99:a2:83:3b:e5:41: 1c:89:f8:cf:d2:78:91:6c:e0:bd:44:a9:79:76:70: de:00:cb:95:99:8d:c7:da:0b:03:ce:ce:39:24:9f: a3:22:89:d0:3e:0f:20:a8:44:6c:74:a6:95:5d:1b: bd:1a:be:51:2c:0d:ad:c0:fb:d4:b3:02:03:53:fe: e3:cf:d2:d4:a3:41:89:d3:f5:61:3e:ce:f2:aa:2a: e9:ef:34:c4:e5:99:2b:87:c4:56:31:3c:dd:20:d5: a8:d6:55:93:aa:3d:4a:44:d4:da:ef:d0:18:f9:f5: d6:36:bc:64:1a:e5:c8:1c:c6:19:14:86:ca:38:64: 39:08:d6:51:c3:f4:fb:9a:f0:17:b4:77:5c:e5:1a: 2b:dd:02:89:55:55:8d:5b:d8:83:62:69:66:47:ae: a3:b8:a4:d6:1c:f5:ca:0f:ae:0a:8e:9a:b2:2f:25: 7f:8f:81:bc:d9:12:e8:5b:43:21:bc:c8:9c:82:5c: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DC:33:FB:09:FF:E4:40:91:8C:CE:3A:FB:24:31:31:48:58:B7:22 X509v3 Authority Key Identifier: keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/kNwz-wn_5ECRjM46-yQxMUhYtyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5480::/32 Signature Algorithm: sha256WithRSAEncryption 05:76:da:8e:50:24:43:13:8b:ce:f7:18:90:d7:43:ce:8b:38: 78:32:ce:e8:b1:f0:70:c4:f2:2b:fd:15:96:53:c8:b2:de:e5: 98:bd:5e:38:7b:8e:da:13:55:9b:61:be:cf:d7:78:b9:f8:d6: db:1d:61:c5:e5:9e:98:15:13:8b:de:41:ee:92:fc:1f:c9:e4: f0:64:aa:06:56:f8:fc:a9:58:ff:ff:74:fb:43:10:99:f7:e0: 7a:01:a8:f8:d0:24:fc:32:22:e7:11:0d:ab:03:9e:63:c0:09: d3:85:97:7b:f7:c0:28:dc:10:a5:83:6a:6e:6c:e1:bd:df:a4: 80:68:7d:a5:77:1d:67:57:2f:f6:ad:59:dc:e6:36:4f:b1:f5: f2:28:a6:9c:e8:da:f3:76:ae:23:89:88:7b:46:53:7a:16:be: d1:1c:39:ed:8c:54:6c:af:6f:24:2e:17:40:10:66:f7:37:99: 9c:56:0a:eb:13:68:a6:25:6a:6a:86:ce:38:e7:9c:b8:dc:0e: 07:ec:90:9b:13:a1:8f:fd:f5:41:8b:a8:90:25:1a:01:e7:2f: a8:f5:2f:1f:f5:66:54:a2:53:ef:44:6f:d7:3e:9e:12:05:c5: 75:de:10:48:3b:6b:68:c4:32:bd:78:26:27:d7:3f:32:4d:77: b5:48:3e:a6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZs98lLUz+9McdgdV4I3H71bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjNmNTY0MTYzZjY0ZWFmMWUxYWRhNmQ2NjhjYWQ1OWQ1 YWIwYTMwHhcNMjUxMjIwMjI0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGRjMzNmYjA5ZmZlNDQwOTE4Y2NlM2FmYjI0MzEzMTQ4NThiNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnc1U6TotAFq3tQBhzHumOUvHwJ5 jXGrYNpY/muTXpNRzAeesJQblkzI0BCZQgqeWPQeQwbqWRQkOJP7owb+NAWZPlqZ ooM75UEcifjP0niRbOC9RKl5dnDeAMuVmY3H2gsDzs45JJ+jIonQPg8gqERsdKaV XRu9Gr5RLA2twPvUswIDU/7jz9LUo0GJ0/VhPs7yqirp7zTE5Zkrh8RWMTzdINWo 1lWTqj1KRNTa79AY+fXWNrxkGuXIHMYZFIbKOGQ5CNZRw/T7mvAXtHdc5Ror3QKJ VVWNW9iDYmlmR66juKTWHPXKD64KjpqyLyV/j4G82RLoW0MhvMicglwZZwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJDcM/sJ/+RAkYzOOvskMTFIWLciMB8GA1UdIwQY MBaAFGIj9WQWP2Tq8eGtptZoytWdWrCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUt ZTk3YjY1Nzk0NDM5LzEva053ei13bl81RUNSak00Ni15UXhNVWhZdHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUtZTk3YjY1Nzk0NDM5 LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJUgDAN BgkqhkiG9w0BAQsFAAOCAQEABXbajlAkQxOLzvcYkNdDzos4eDLO6LHwcMTyK/0V llPIst7lmL1eOHuO2hNVm2G+z9d4ufjW2x1hxeWemBUTi95B7pL8H8nk8GSqBlb4 /KlY//90+0MQmffgegGo+NAk/DIi5xENqwOeY8AJ04WXe/fAKNwQpYNqbmzhvd+k gGh9pXcdZ1cv9q1Z3OY2T7H18iimnOja83auI4mIe0ZTeha+0Rw57YxUbK9vJC4X QBBm9zeZnFYK6xNopiVqaobOOOecuNwOB+yQmxOhj/31QYuokCUaAecvqPUvH/Vm VKJT70Rv1z6eEgXFdd4QSDtraMQyvXgmJ9c/Mk13tUg+pg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:17 2025 by rpki-client