This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/KwoH9rX0fG1WK7HpMnqPB23ssB4.roa File: KwoH9rX0fG1WK7HpMnqPB23ssB4.roa (raw, json) Hash identifier: sjYd4LRAPn0dfzC2/zot0w98zlOUul3pMhPUiDIGgp8= Subject key identifier: 2B:0A:07:F6:B5:F4:7C:6D:56:2B:B1:E9:32:7A:8F:07:6D:EC:B0:1E Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf Certificate serial: 019B7D5AEEF057501CC5F19821D6688CA9C2 Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/KwoH9rX0fG1WK7HpMnqPB23ssB4.roa Signing time: Fri 02 Jan 2026 06:17:50 +0000 ROA not before: Fri 02 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a01:bb20::/29 maxlen: 29 2a01:bb22::/33 maxlen: 33 2a01:bb22:8000::/33 maxlen: 33 2a01:bb24::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ee:f0:57:50:1c:c5:f1:98:21:d6:68:8c:a9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b0a07f6b5f47c6d562bb1e9327a8f076decb01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:13:f0:90:60:fe:b9:36:d4:e7:7e:64:eb: 36:5c:6e:7b:5d:70:8a:97:22:bc:3c:5b:63:75:51: 19:39:c4:54:cc:29:e9:3e:85:44:d5:b6:21:7e:67: 53:26:89:60:ce:90:3f:23:02:52:36:fa:bd:3d:e2: 11:3f:28:b4:32:79:2c:50:84:6b:8f:5a:11:1b:f6: 29:c7:74:a9:1b:f1:d8:38:89:a7:62:5e:c2:28:ec: 2e:59:ea:f5:84:6a:ab:ea:d2:09:fc:c9:a6:50:16: ab:69:ca:67:0e:11:6d:cd:b5:6d:0f:51:07:16:64: 9b:a1:d2:20:8f:51:db:ca:82:ef:3d:de:43:83:b5: 3e:6b:be:95:32:5a:04:93:eb:f1:13:f3:1b:11:57: 83:9c:88:e7:76:17:c1:cf:69:8f:8f:56:df:50:2a: b0:d2:f4:0a:2e:06:31:0d:20:56:da:4b:3f:7f:5c: 37:84:79:a7:4b:02:6d:e2:e1:39:62:96:38:8a:99: fb:c2:40:f5:a1:eb:88:40:0b:5f:8b:4e:e0:c9:6b: 42:b2:26:18:63:93:e5:12:cf:74:53:b9:64:90:a4: fd:29:18:5a:fd:a9:fe:d9:8c:da:54:75:99:46:9f: 40:42:d1:d0:19:ec:79:17:45:86:0c:f8:ca:c5:2b: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:07:F6:B5:F4:7C:6D:56:2B:B1:E9:32:7A:8F:07:6D:EC:B0:1E X509v3 Authority Key Identifier: keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/KwoH9rX0fG1WK7HpMnqPB23ssB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:bb20::/29 Signature Algorithm: sha256WithRSAEncryption 38:97:b8:fd:fa:5a:ce:cb:d5:8b:7e:dc:ce:e4:2e:04:37:e4: 36:e9:fd:f1:0c:28:c9:8d:c0:7e:b0:2a:84:0c:14:01:eb:53: 91:46:8e:89:db:13:fc:25:f4:33:7e:80:30:20:f2:ab:96:b5: 66:d8:a9:1b:b0:cb:4d:ae:f3:bf:a2:04:ce:21:57:b1:52:d7: 0d:42:5f:9c:ce:9e:f2:db:a4:b0:d7:5c:4a:32:98:79:93:2f: dd:7a:4b:19:8b:c2:44:fc:c8:5c:85:96:bd:2f:bb:28:32:03: 06:cd:42:d9:d9:cf:34:68:79:ba:7c:b1:78:f7:42:bd:6f:3f: d8:88:a0:cc:9a:47:f6:d1:45:3d:2c:4a:3e:73:76:c2:11:b2: 11:0f:af:0b:8e:1b:45:3b:94:f1:e4:bc:9c:13:e3:0d:58:58: 65:6e:8f:9e:89:db:0a:2f:84:9c:b6:05:e6:2a:ac:19:b9:cf: 35:37:4b:26:f8:f1:a7:a1:f6:d9:cf:9c:59:1d:a2:91:82:27: da:1b:39:1e:75:34:ec:7f:d5:7f:47:50:60:4b:83:20:45:ea: 29:69:bd:c6:c3:37:c2:ef:66:30:62:42:c7:93:69:f0:1d:5b: bf:73:2c:a7:d1:f0:50:bf:2b:f2:91:11:0b:30:aa:37:1d:15: c3:57:90:e1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9Wu7wV1AcxfGYIdZojKnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm YWJiZGYwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjBhMDdmNmI1ZjQ3YzZkNTYyYmIxZTkzMjdhOGYwNzZkZWNiMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0wT8JBg/rk21Od+ZOs2XG57XXCK lyK8PFtjdVEZOcRUzCnpPoVE1bYhfmdTJolgzpA/IwJSNvq9PeIRPyi0MnksUIRr j1oRG/Ypx3SpG/HYOImnYl7CKOwuWer1hGqr6tIJ/MmmUBaracpnDhFtzbVtD1EH FmSbodIgj1HbyoLvPd5Dg7U+a76VMloEk+vxE/MbEVeDnIjndhfBz2mPj1bfUCqw 0vQKLgYxDSBW2ks/f1w3hHmnSwJt4uE5YpY4ipn7wkD1oeuIQAtfi07gyWtCsiYY Y5PlEs90U7lkkKT9KRha/an+2YzaVHWZRp9AQtHQGex5F0WGDPjKxSvV2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCsKB/a19HxtViux6TJ6jwdt7LAeMB8GA1UdIwQY MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt YzYyM2VkOGYyZjI4LzEvS3dvSDlyWDBmRzFXSzdIcE1ucVBCMjNzc0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4 LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgG7IDAN BgkqhkiG9w0BAQsFAAOCAQEAOJe4/fpazsvVi37czuQuBDfkNun98QwoyY3AfrAq hAwUAetTkUaOidsT/CX0M36AMCDyq5a1ZtipG7DLTa7zv6IEziFXsVLXDUJfnM6e 8tuksNdcSjKYeZMv3XpLGYvCRPzIXIWWvS+7KDIDBs1C2dnPNGh5unyxePdCvW8/ 2IigzJpH9tFFPSxKPnN2whGyEQ+vC44bRTuU8eS8nBPjDVhYZW6PnonbCi+EnLYF 5iqsGbnPNTdLJvjxp6H22c+cWR2ikYIn2hs5HnU07H/Vf0dQYEuDIEXqKWm9xsM3 wu9mMGJCx5Np8B1bv3Msp9HwUL8r8pERCzCqNx0Vw1eQ4Q== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:05 2026 by rpki-client