This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kXf1X-FwELSCuoszkiga6YLnh1s.roa File: kXf1X-FwELSCuoszkiga6YLnh1s.roa (raw, json) Hash identifier: l+3R+E4eHm+zdq5xZjP9SB0XTaJDoUqNn2jMerPeV4Y= Subject key identifier: 91:77:F5:5F:E1:70:10:B4:82:BA:8B:33:92:28:1A:E9:82:E7:87:5B Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA5532A29BE29D5D218FD4B476F4A3F Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kXf1X-FwELSCuoszkiga6YLnh1s.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60262 IP address blocks: 2a06:6ec0::/29 maxlen: 29 2a0e:6c40::/29 maxlen: 29 2a0e:8780::/29 maxlen: 29 2a0e:a280::/29 maxlen: 29 2a0e:a3c0::/29 maxlen: 29 2a0e:a580::/29 maxlen: 29 2a0e:bac0::/29 maxlen: 29 2a0e:be80::/29 maxlen: 29 2a0e:c180::/29 maxlen: 29 2a0e:c740::/29 maxlen: 29 2a0e:ee80::/29 maxlen: 29 2a0f:a40::/29 maxlen: 29 2a0f:fc0::/29 maxlen: 29 2a0f:32c0::/29 maxlen: 29 2a0f:3340::/29 maxlen: 29 2a0f:33c0::/29 maxlen: 29 2a0f:3440::/29 maxlen: 29 2a0f:34c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:53:2a:29:be:29:d5:d2:18:fd:4b:47:6f:4a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9177f55fe17010b482ba8b3392281ae982e7875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:33:75:63:72:42:fe:d4:08:cb:eb:87:94: 96:63:1c:53:04:4a:8e:83:2a:71:de:bf:53:ac:43: 20:4d:14:1f:7a:80:d2:be:fe:81:54:86:58:c8:82: 0c:8e:74:07:5e:3d:bc:b6:87:14:81:e4:ec:25:a0: 8d:23:60:1d:7c:9e:6e:7f:f1:6d:b4:31:44:9d:36: 5e:6e:ea:c2:02:59:d4:46:cb:7c:55:3f:6f:b4:12: c2:b6:7e:e2:31:66:0f:28:76:ad:cc:7b:73:3b:78: b8:b9:7c:39:66:af:f8:cf:73:19:e9:30:a5:7c:e3: 8e:72:35:98:06:96:9d:98:3b:d2:76:69:5d:cb:b5: 26:4f:0d:a4:21:11:2c:19:51:4e:1d:48:12:a8:49: 48:cd:66:71:a9:4f:3e:db:98:d5:07:23:f2:7d:85: d6:2c:ef:8b:74:40:f0:90:a0:fb:9b:bc:6a:22:7d: 54:40:50:51:37:80:d3:c6:d2:54:81:ad:95:ec:85: a6:32:5d:c0:61:f2:da:f2:4e:c1:30:df:bb:50:50: 51:5c:0a:78:fc:45:90:98:61:76:f6:05:f6:e5:d7: 9f:e7:67:57:fe:85:26:16:c4:5b:ec:62:34:34:31: 63:ff:6f:27:1f:53:06:f0:00:f1:23:b7:6a:9a:55: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:77:F5:5F:E1:70:10:B4:82:BA:8B:33:92:28:1A:E9:82:E7:87:5B X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kXf1X-FwELSCuoszkiga6YLnh1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:6ec0::/29 2a0e:6c40::/29 2a0e:8780::/29 2a0e:a280::/29 2a0e:a3c0::/29 2a0e:a580::/29 2a0e:bac0::/29 2a0e:be80::/29 2a0e:c180::/29 2a0e:c740::/29 2a0e:ee80::/29 2a0f:a40::/29 2a0f:fc0::/29 2a0f:32c0::/29 2a0f:3340::/29 2a0f:33c0::/29 2a0f:3440::/29 2a0f:34c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:a5:e1:b8:42:c5:c9:90:df:d5:ab:18:f7:9a:26:25:21:89: 48:13:06:72:c3:b3:07:c6:8e:f8:82:d0:05:d9:f1:20:24:69: b7:36:64:1b:f4:dc:08:c4:31:6a:e4:94:0f:de:ed:8f:63:c6: 6e:98:f4:1a:3d:36:b9:82:f5:02:70:02:f4:c0:28:93:c7:7e: ce:03:86:7f:87:a7:50:71:83:70:e9:cf:ec:1b:02:b7:b9:b2: 8c:77:79:99:6c:a6:ad:0d:e5:5e:17:27:bf:2b:fa:82:0e:48: b0:9a:79:c2:a5:8a:9d:21:39:73:cf:40:5e:ba:69:3f:32:a5: 7d:10:ec:ed:cd:9d:8a:fb:ea:a0:fa:92:3b:2a:84:e5:41:cf: ee:0c:5b:18:2c:a3:91:53:d2:bc:a7:f1:05:b8:f4:fe:a1:59: 0d:f5:9a:4d:d3:4f:f1:e1:ba:e0:11:df:73:0a:bc:4f:c4:1c: e9:68:bf:e7:83:ba:76:8f:e3:28:92:4a:df:3b:04:91:34:3f: 05:87:a7:50:d4:9f:e3:d2:bf:18:37:1d:88:14:37:15:6d:8e: 74:ab:88:8b:fc:7f:f7:75:7c:43:7b:f2:5d:3f:9d:86:38:a5: 37:fc:76:13:0c:60:da:3d:74:0f:da:e3:ee:f6:0e:3f:ae:51: 2a:ea:67:ea -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt7pVMqKb4p1dIY/UtHb0o/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTc3ZjU1ZmUxNzAxMGI0ODJiYThiMzM5MjI4MWFlOTgyZTc4NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u0zdWNyQv7UCMvrh5SWYxxTBEqO gypx3r9TrEMgTRQfeoDSvv6BVIZYyIIMjnQHXj28tocUgeTsJaCNI2AdfJ5uf/Ft tDFEnTZeburCAlnURst8VT9vtBLCtn7iMWYPKHatzHtzO3i4uXw5Zq/4z3MZ6TCl fOOOcjWYBpadmDvSdmldy7UmTw2kIREsGVFOHUgSqElIzWZxqU8+25jVByPyfYXW LO+LdEDwkKD7m7xqIn1UQFBRN4DTxtJUga2V7IWmMl3AYfLa8k7BMN+7UFBRXAp4 /EWQmGF29gX25def52dX/oUmFsRb7GI0NDFj/28nH1MG8ADxI7dqmlUkIQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFJF39V/hcBC0grqLM5IoGumC54dbMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEva1hmMVgtRndFTFNDdW9zemtpZ2E2WUxuaDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAIwfgMFAyoG bsADBQMqDmxAAwUDKg6HgAMFAyoOooADBQMqDqPAAwUDKg6lgAMFAyoOusADBQMq Dr6AAwUDKg7BgAMFAyoOx0ADBQMqDu6AAwUDKg8KQAMFAyoPD8ADBQMqDzLAAwUD Kg8zQAMFAyoPM8ADBQMqDzRAAwUDKg80wDANBgkqhkiG9w0BAQsFAAOCAQEArqXh uELFyZDf1asY95omJSGJSBMGcsOzB8aO+ILQBdnxICRptzZkG/TcCMQxauSUD97t j2PGbpj0Gj02uYL1AnAC9MAok8d+zgOGf4enUHGDcOnP7BsCt7myjHd5mWymrQ3l Xhcnvyv6gg5IsJp5wqWKnSE5c89AXrppPzKlfRDs7c2divvqoPqSOyqE5UHP7gxb GCyjkVPSvKfxBbj0/qFZDfWaTdNP8eG64BHfcwq8T8Qc6Wi/54O6do/jKJJK3zsE kTQ/BYenUNSf49K/GDcdiBQ3FW2OdKuIi/x/93V8Q3vyXT+dhjilN/x2Ewxg2j10 D9rj7vYOP65RKupn6g== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client