This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/kM7kkRJAnyhiR2AyP4z2W0PrTko.roa File: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (raw, json) Hash identifier: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0= Subject key identifier: 90:CE:E4:91:12:40:9F:28:62:47:60:32:3F:8C:F6:5B:43:EB:4E:4A Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b Certificate serial: 019B79107A53F71CD93CC1F866E30AA9580E Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/kM7kkRJAnyhiR2AyP4z2W0PrTko.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50989 IP address blocks: 2a00:1c20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7a:53:f7:1c:d9:3c:c1:f8:66:e3:0a:a9:58:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90cee49112409f28624760323f8cf65b43eb4e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:9e:63:36:97:29:92:48:9b:1b:26:ed:bf: 3b:f1:b9:52:e6:22:f0:a1:3f:29:57:03:26:af:f5: 10:60:e3:03:93:86:0a:84:0b:63:3c:9a:68:29:b3: 47:5e:cf:1d:51:d2:23:b3:40:b3:58:ff:26:17:ec: 69:64:3b:ba:21:53:01:e7:a1:78:af:b3:2d:51:98: b0:2a:3d:7b:21:a5:4e:9e:4f:41:66:56:d2:88:c6: 32:66:86:72:33:6d:26:65:a2:42:3c:8e:b0:48:52: 74:28:c4:94:49:29:8c:96:0c:e8:7f:d4:c8:5e:d3: 66:e5:72:7e:db:34:ec:6d:68:ec:a3:fe:15:9f:b1: 1b:12:4f:20:89:94:5b:f7:b4:49:14:0f:50:eb:62: 49:cb:5f:b8:f9:53:cb:64:1c:7a:f3:e0:8c:96:0b: 24:0d:15:6d:3b:14:e5:fe:b4:7c:2c:28:ca:7f:fa: ca:07:1d:a8:9a:b7:43:59:6f:e8:c5:c0:92:25:cd: b6:2a:e2:f5:97:08:f3:70:ba:d2:fa:42:87:73:83: 53:64:47:f6:53:61:f7:8c:d1:0a:22:ab:b4:43:f1: d0:5e:16:28:2f:97:e8:cc:7b:d6:00:e7:59:bf:c6: 70:e5:52:4a:62:24:3d:38:04:58:46:e8:80:18:f3: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CE:E4:91:12:40:9F:28:62:47:60:32:3F:8C:F6:5B:43:EB:4E:4A X509v3 Authority Key Identifier: keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/kM7kkRJAnyhiR2AyP4z2W0PrTko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1c20::/32 Signature Algorithm: sha256WithRSAEncryption ab:a2:af:8b:fd:3e:0c:d4:a9:52:2a:49:fc:4e:eb:8a:a2:35: b5:82:06:63:a3:c8:e8:62:8e:17:68:60:9a:ce:ad:43:dc:7a: e5:c2:9e:a7:82:0d:e0:e5:7d:c3:60:d6:d2:e6:f8:48:92:fb: 1d:82:04:f8:9e:21:78:5c:a7:d1:e5:18:fb:2c:c5:1d:b2:ae: ea:ed:26:6b:17:08:68:33:fb:38:49:25:96:aa:92:f1:4e:49: 52:3d:be:f4:50:35:14:6e:d1:75:e8:db:fc:25:f0:69:16:37: ee:fd:a3:ac:61:7d:35:fa:0c:43:e8:cb:64:d1:db:5c:95:78: 20:c3:8d:e0:ee:13:8f:1e:38:6d:ef:a2:27:bc:83:bf:23:1f: 55:68:13:55:6c:be:27:18:74:89:fc:31:29:ee:40:c8:97:23: 25:36:8e:44:57:e5:9c:ad:f1:8b:3b:5f:11:78:78:44:19:cd: cc:b6:98:91:bf:ed:0e:7b:76:29:2f:5c:7a:0e:48:34:99:2f: 75:f5:18:04:28:b8:dc:1d:2e:75:ef:9d:55:db:a7:2c:d4:ef: c2:b2:a9:35:82:41:a7:d1:81:8a:7c:f9:46:38:e8:38:10:8d: 60:5d:92:50:56:d3:76:df:b5:0a:f9:ae:5c:4a:22:c7:bc:0b: 48:81:75:83 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EHpT9xzZPMH4ZuMKqVgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3 YjUwM2IwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGNlZTQ5MTEyNDA5ZjI4NjI0NzYwMzIzZjhjZjY1YjQzZWI0ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UmeYzaXKZJImxsm7b878blS5iLw oT8pVwMmr/UQYOMDk4YKhAtjPJpoKbNHXs8dUdIjs0CzWP8mF+xpZDu6IVMB56F4 r7MtUZiwKj17IaVOnk9BZlbSiMYyZoZyM20mZaJCPI6wSFJ0KMSUSSmMlgzof9TI XtNm5XJ+2zTsbWjso/4Vn7EbEk8giZRb97RJFA9Q62JJy1+4+VPLZBx68+CMlgsk DRVtOxTl/rR8LCjKf/rKBx2omrdDWW/oxcCSJc22KuL1lwjzcLrS+kKHc4NTZEf2 U2H3jNEKIqu0Q/HQXhYoL5fozHvWAOdZv8Zw5VJKYiQ9OARYRuiAGPOEEQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJDO5JESQJ8oYkdgMj+M9ltD605KMB8GA1UdIwQY MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt OWMxYjJhZDU1OWFiLzEva003a2tSSkFueWhpUjJBeVA0ejJXMFByVGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgAcIDAN BgkqhkiG9w0BAQsFAAOCAQEAq6Kvi/0+DNSpUipJ/E7riqI1tYIGY6PI6GKOF2hg ms6tQ9x65cKep4IN4OV9w2DW0ub4SJL7HYIE+J4heFyn0eUY+yzFHbKu6u0maxcI aDP7OEkllqqS8U5JUj2+9FA1FG7Rdejb/CXwaRY37v2jrGF9NfoMQ+jLZNHbXJV4 IMON4O4Tjx44be+iJ7yDvyMfVWgTVWy+Jxh0ifwxKe5AyJcjJTaORFflnK3xiztf EXh4RBnNzLaYkb/tDnt2KS9ceg5INJkvdfUYBCi43B0ude+dVdunLNTvwrKpNYJB p9GBinz5RjjoOBCNYF2SUFbTdt+1CvmuXEoix7wLSIF1gw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:39 2026 by rpki-client