This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/K0D8lGULxM-UXCeCOVJ5pAXuabs.roa File: K0D8lGULxM-UXCeCOVJ5pAXuabs.roa (raw, json) Hash identifier: Nv1XKAzgMAGbe3+Suuv8ghndfWxeTNLib9HzwiKwDB8= Subject key identifier: 2B:40:FC:94:65:0B:C4:CF:94:5C:27:82:39:52:79:A4:05:EE:69:BB Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7505B0ABFC0FA8903A034E067EBDA Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/K0D8lGULxM-UXCeCOVJ5pAXuabs.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134666 IP address blocks: 2a06:e881:4800::/48 maxlen: 48 2a06:e881:4801::/48 maxlen: 48 2a06:e881:480f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:50:5b:0a:bf:c0:fa:89:03:a0:34:e0:67:eb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b40fc94650bc4cf945c2782395279a405ee69bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:d1:3f:79:21:b1:9e:76:5e:9b:6b:2b:b7: db:ce:fe:16:b1:da:88:74:65:45:25:a6:39:47:24: 37:ce:c5:1c:1e:e8:42:1f:ae:b2:46:70:df:0b:16: a0:84:54:8a:77:e1:e3:79:3e:94:b0:33:c7:61:eb: ab:f2:0b:c5:b4:ae:96:52:63:06:64:e2:1d:0c:5b: e9:b1:98:23:e4:39:a2:b2:4a:5b:ab:fc:83:64:56: 15:86:39:eb:41:76:e2:39:97:65:8a:f9:90:93:16: 1a:79:af:96:bb:ae:51:2f:60:bb:56:74:98:45:49: a4:0f:b2:71:10:83:a4:3b:54:37:5d:f9:28:c3:cf: 1e:63:33:b9:40:57:fa:86:e4:9d:bb:57:f9:80:56: 6e:a6:fd:f4:e2:0d:b2:36:dd:50:06:b4:d8:89:db: c2:88:e4:0b:6b:31:e4:e4:14:78:b8:44:1a:d1:38: 80:72:68:20:e5:34:6d:87:0a:a1:e4:21:63:4d:4b: 3d:be:ff:bf:f4:f6:12:8d:31:c4:43:0b:d3:e2:d0: 96:51:84:0a:5f:0f:36:9f:60:fd:fb:95:4e:4d:24: 55:dc:ce:72:43:cc:6d:90:18:fe:48:4d:ea:e1:07: f2:bb:91:68:99:f4:58:63:a6:6f:16:16:84:10:55: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:FC:94:65:0B:C4:CF:94:5C:27:82:39:52:79:A4:05:EE:69:BB X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/K0D8lGULxM-UXCeCOVJ5pAXuabs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:4800::/47 2a06:e881:480f::/48 Signature Algorithm: sha256WithRSAEncryption 68:4c:d5:7e:9c:83:bf:73:c4:f5:a8:e9:90:f3:a5:9e:41:ad: fd:35:59:0f:f4:a8:46:57:ba:4b:b4:47:e5:c9:d4:79:b0:de: a9:c1:0b:41:a9:da:ed:94:aa:a0:30:09:bd:15:2a:88:f2:d6: 4d:bb:0a:31:6d:df:5b:c8:05:73:c2:cf:5b:5a:c5:c5:76:69: 0d:d6:95:b3:0e:bd:4d:7e:a7:8e:9b:af:00:2f:cc:6d:1c:fc: 7c:36:26:45:25:d6:2b:86:53:60:e1:52:46:f8:89:e5:c8:c7: bf:27:79:71:61:a7:88:98:a0:9d:8d:dc:80:39:5f:ad:3a:fe: 23:18:c1:fe:09:a2:3e:36:55:58:4e:29:35:c5:d9:e6:be:78: 57:00:40:9c:25:98:32:c2:71:da:f0:d8:ab:bf:b2:53:87:2e: e8:ff:3e:34:cc:68:34:33:79:90:ae:1a:45:d7:69:3c:8e:08: c1:6a:2b:39:36:96:88:e3:99:cf:c1:da:be:43:0e:c6:dd:05: 64:54:6a:f8:21:81:4f:b2:8e:7e:c8:29:bc:d1:10:3b:8d:92: ac:e1:4e:af:7d:36:25:11:55:13:41:3d:01:3c:69:70:28:26: f0:b0:e3:ab:19:19:a4:35:91:f1:a2:1b:db:65:21:e4:89:2c: 3d:3e:8f:9d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p1BbCr/A+okDoDTgZ+vaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjQwZmM5NDY1MGJjNGNmOTQ1YzI3ODIzOTUyNzlhNDA1ZWU2OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFHRP3khsZ52XptrK7fbzv4WsdqI dGVFJaY5RyQ3zsUcHuhCH66yRnDfCxaghFSKd+HjeT6UsDPHYeur8gvFtK6WUmMG ZOIdDFvpsZgj5Dmiskpbq/yDZFYVhjnrQXbiOZdlivmQkxYaea+Wu65RL2C7VnSY RUmkD7JxEIOkO1Q3Xfkow88eYzO5QFf6huSdu1f5gFZupv304g2yNt1QBrTYidvC iOQLazHk5BR4uEQa0TiAcmgg5TRthwqh5CFjTUs9vv+/9PYSjTHEQwvT4tCWUYQK Xw82n2D9+5VOTSRV3M5yQ8xtkBj+SE3q4Qfyu5FomfRYY6ZvFhaEEFX4YQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCtA/JRlC8TPlFwngjlSeaQF7mm7MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvSzBEOGxHVUx4TS1VWENlQ09WSjVwQVh1YWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgbogUgA AwcAKgbogUgPMA0GCSqGSIb3DQEBCwUAA4IBAQBoTNV+nIO/c8T1qOmQ86WeQa39 NVkP9KhGV7pLtEflydR5sN6pwQtBqdrtlKqgMAm9FSqI8tZNuwoxbd9byAVzws9b WsXFdmkN1pWzDr1NfqeOm68AL8xtHPx8NiZFJdYrhlNg4VJG+InlyMe/J3lxYaeI mKCdjdyAOV+tOv4jGMH+CaI+NlVYTik1xdnmvnhXAECcJZgywnHa8Nirv7JThy7o /z40zGg0M3mQrhpF12k8jgjBais5NpaI45nPwdq+Qw7G3QVkVGr4IYFPso5+yCm8 0RA7jZKs4U6vfTYlEVUTQT0BPGlwKCbwsOOrGRmkNZHxohvbZSHkiSw9Po+d -----END CERTIFICATE-----Generated at Sat Jan 10 06:37:40 2026 by rpki-client