This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/kUfpnQONG0EuaUE2rzE8Xk8ewzg.roa File: kUfpnQONG0EuaUE2rzE8Xk8ewzg.roa (raw, json) Hash identifier: m582BqFcPLn0BgLwQ/eeQutqG8eJoaxvasfexxjqW4E= Subject key identifier: 91:47:E9:9D:03:8D:1B:41:2E:69:41:36:AF:31:3C:5E:4F:1E:C3:38 Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Certificate serial: 019B7CED3CA12C555270DFE75A5783B98BF6 Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/kUfpnQONG0EuaUE2rzE8Xk8ewzg.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a14:6:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3c:a1:2c:55:52:70:df:e7:5a:57:83:b9:8b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9147e99d038d1b412e694136af313c5e4f1ec338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:82:dc:6c:c5:66:12:6a:56:4d:da:5d:5d: f3:1d:61:a8:83:66:53:a2:f8:cc:a7:95:55:54:33: 45:92:fb:03:66:f2:fd:ed:80:71:d0:03:a0:07:f4: 89:6f:b5:b8:b4:57:42:c2:ba:10:ec:7d:b6:84:cf: ed:87:2d:2f:0a:93:ed:0d:ee:df:36:5a:bc:2b:aa: c6:5b:a8:36:11:41:fe:b5:29:53:1e:e3:7a:ed:a8: 51:6e:46:02:10:b2:4a:72:8c:7d:98:bc:c5:e3:69: 5b:6e:a1:ca:3b:c8:c8:51:80:44:b2:ed:2d:a7:41: fd:f8:da:7a:b8:c4:45:ae:63:00:28:21:ed:d5:61: f5:dc:11:2e:a4:3c:a9:8d:76:b1:a3:06:82:65:bd: 25:1a:a1:25:84:d9:dc:3a:cf:e5:61:fc:09:7f:ee: 32:8a:e9:e0:31:4a:66:36:71:3f:72:2e:89:ff:f9: 78:b6:f8:6b:84:c5:40:87:f0:b1:ca:77:12:19:37: d5:a1:a3:17:21:f0:25:40:9f:aa:d6:89:27:23:3a: 71:5e:32:6e:33:1c:95:b4:bd:cb:e0:d1:65:70:d7: 4c:70:d6:5a:5e:00:5d:8c:e3:d9:e5:2c:dc:cc:f0: 3d:36:ec:e1:d9:a0:f8:4b:6f:32:7b:e4:c9:fb:f1: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:E9:9D:03:8D:1B:41:2E:69:41:36:AF:31:3C:5E:4F:1E:C3:38 X509v3 Authority Key Identifier: keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/kUfpnQONG0EuaUE2rzE8Xk8ewzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6:11::/48 Signature Algorithm: sha256WithRSAEncryption a7:72:e3:9e:79:d5:f5:38:16:72:ed:2c:a3:b9:da:0a:b2:ab: 81:b3:ad:7b:a9:80:8c:24:1b:6b:3e:c4:6b:08:cd:bf:9f:a3: c7:4e:26:65:16:ed:6c:1c:83:80:d0:fe:9e:23:7b:0a:2a:3b: 61:9d:8d:e4:0f:50:5a:ba:fd:01:e0:84:64:26:5b:f1:38:85: b3:06:7f:51:36:38:a6:e5:cf:1f:87:f2:08:e8:93:40:c3:1c: 48:b5:c9:9e:98:5d:db:4f:43:8b:06:bc:83:fd:a4:c3:d5:e8: f2:bc:5e:c8:6c:a4:2c:2d:51:78:57:fc:08:d1:b5:13:6e:52: 85:02:cb:e2:65:65:e2:a7:e1:17:a2:43:49:9c:39:6f:a0:8a: 56:07:a3:79:53:55:a9:c0:05:9e:b2:7d:21:14:54:72:c4:78: 09:7d:7c:de:38:c9:86:ae:00:58:bf:79:4f:1d:c1:b6:19:b1: ca:8b:2c:f5:6a:42:a7:91:5a:8c:cb:24:b8:01:96:a4:35:47: c6:52:15:a1:04:ca:a0:ab:fd:61:bf:a1:fb:b7:23:03:fc:94: b9:0b:b3:5e:1f:8a:07:9d:7c:ac:db:2f:2a:a7:66:64:0a:9f: d8:8b:d8:42:93:5d:d4:9d:a9:c1:11:56:53:1c:e5:99:0d:15: a7:37:bb:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87TyhLFVScN/nWleDuYv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy YzI2YmEwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ3ZTk5ZDAzOGQxYjQxMmU2OTQxMzZhZjMxM2M1ZTRmMWVjMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9WC3GzFZhJqVk3aXV3zHWGog2ZT ovjMp5VVVDNFkvsDZvL97YBx0AOgB/SJb7W4tFdCwroQ7H22hM/thy0vCpPtDe7f Nlq8K6rGW6g2EUH+tSlTHuN67ahRbkYCELJKcox9mLzF42lbbqHKO8jIUYBEsu0t p0H9+Np6uMRFrmMAKCHt1WH13BEupDypjXaxowaCZb0lGqElhNncOs/lYfwJf+4y iungMUpmNnE/ci6J//l4tvhrhMVAh/CxyncSGTfVoaMXIfAlQJ+q1oknIzpxXjJu MxyVtL3L4NFlcNdMcNZaXgBdjOPZ5SzczPA9Nuzh2aD4S28ye+TJ+/El0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJFH6Z0DjRtBLmlBNq8xPF5PHsM4MB8GA1UdIwQY MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt MjIwMGIzY2M1N2U2LzEva1VmcG5RT05HMEV1YVVFMnJ6RThYazhld3pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2 LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhQABgAR MA0GCSqGSIb3DQEBCwUAA4IBAQCncuOeedX1OBZy7SyjudoKsquBs617qYCMJBtr PsRrCM2/n6PHTiZlFu1sHIOA0P6eI3sKKjthnY3kD1Bauv0B4IRkJlvxOIWzBn9R Njim5c8fh/II6JNAwxxItcmemF3bT0OLBryD/aTD1ejyvF7IbKQsLVF4V/wI0bUT blKFAsviZWXip+EXokNJnDlvoIpWB6N5U1WpwAWesn0hFFRyxHgJfXzeOMmGrgBY v3lPHcG2GbHKiyz1akKnkVqMyyS4AZakNUfGUhWhBMqgq/1hv6H7tyMD/JS5C7Ne H4oHnXys2y8qp2ZkCp/Yi9hCk13UnanBEVZTHOWZDRWnN7u4 -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:02 2026 by rpki-client