This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/KUICOncS7D3aHrthtZYJyWJb3so.roa File: KUICOncS7D3aHrthtZYJyWJb3so.roa (raw, json) Hash identifier: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4= Subject key identifier: 29:42:02:3A:77:12:EC:3D:DA:1E:BB:61:B5:96:09:C9:62:5B:DE:CA Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E3895D12A93179B53C62B80BB54DF08 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/KUICOncS7D3aHrthtZYJyWJb3so.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15435 IP address blocks: 2a07:3501:1030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:95:d1:2a:93:17:9b:53:c6:2b:80:bb:54:df:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2942023a7712ec3dda1ebb61b59609c9625bdeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:8d:37:66:11:77:f1:89:59:c3:22:61:77: d7:d3:a4:3f:73:1d:b1:cc:e2:b9:c9:b2:83:7c:74: 47:df:bf:29:6b:18:a1:a6:6d:db:d2:86:d1:18:d7: 44:87:63:15:a1:c2:3e:ed:ca:0a:e5:f5:fc:6a:83: c7:7d:64:9d:50:22:1c:1a:c3:45:ae:65:32:59:04: 82:62:b0:84:94:e6:6c:85:43:e1:7e:4a:2b:08:27: fe:05:40:7e:0f:60:bc:73:e5:4d:f2:ed:3d:be:40: ed:93:47:ee:70:6c:5a:f2:90:a1:00:72:4d:5b:3d: 40:95:a9:d8:48:e6:cd:47:1b:da:cf:41:38:73:cd: d8:61:76:a0:61:49:a3:df:a2:a9:54:9d:76:cd:1e: ef:7e:9a:bf:1d:af:f0:41:e8:a3:8d:0a:27:a1:f8: 83:ec:30:de:93:d7:1d:8e:f1:c1:c5:ea:0c:6a:a6: 5b:90:80:fc:a7:6c:8d:0d:d8:38:58:e0:dd:13:d9: 87:64:4d:02:6f:9e:1b:16:4c:90:9d:36:ff:85:5a: 6e:d9:36:8b:fa:d6:cb:4d:ae:3e:03:f6:bd:de:d7: 9c:22:c2:d6:b5:e6:d1:16:8d:e5:66:3b:70:6f:cb: c4:40:34:e7:01:f5:9c:6e:2c:ef:fc:d8:28:1f:3f: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:02:3A:77:12:EC:3D:DA:1E:BB:61:B5:96:09:C9:62:5B:DE:CA X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/KUICOncS7D3aHrthtZYJyWJb3so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3501:1030::/48 Signature Algorithm: sha256WithRSAEncryption 74:11:c0:5c:53:02:ab:c1:6d:aa:d1:ff:c3:72:70:1a:cf:b1: 21:df:68:30:e3:8d:7f:3a:19:00:14:49:27:5b:97:2b:52:d9: 2e:ed:a3:11:ff:45:59:32:ff:e7:a0:89:6a:e7:d7:e1:b6:ce: c0:62:47:e4:c8:a0:b7:02:fc:9d:af:e1:fc:84:fb:9c:76:da: 9a:0c:5c:42:63:a7:06:94:d9:09:b0:9d:dc:0c:d3:74:6f:98: 1f:db:9a:19:9c:81:35:58:40:b1:75:26:6a:a5:9b:52:c6:78: a1:4a:1f:82:96:af:5c:90:49:56:9d:7c:08:00:f9:01:b6:fe: bc:0d:82:12:33:ce:be:c7:31:fb:bc:85:15:8a:03:1f:7f:fd: cb:dd:e7:5f:31:85:f4:42:3d:0c:84:58:82:d6:4f:0f:31:24: d8:87:11:5b:15:19:9e:7e:33:61:6c:be:80:08:e3:f8:be:cb: 27:e0:d8:d7:31:20:05:d5:67:2f:56:96:66:55:19:45:3a:3c: 03:f5:d5:67:44:4b:cd:64:f9:94:34:00:74:8e:7e:02:a3:b5: 26:01:59:01:06:0d:2e:20:cd:cf:1b:e7:7d:23:29:3b:12:51: 1e:45:f1:85:0d:3c:0f:2b:be:95:ef:f8:bf:a7:0e:c5:94:9b: 22:cf:4e:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OJXRKpMXm1PGK4C7VN8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTQyMDIzYTc3MTJlYzNkZGExZWJiNjFiNTk2MDljOTYyNWJkZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFWNN2YRd/GJWcMiYXfX06Q/cx2x zOK5ybKDfHRH378paxihpm3b0obRGNdEh2MVocI+7coK5fX8aoPHfWSdUCIcGsNF rmUyWQSCYrCElOZshUPhfkorCCf+BUB+D2C8c+VN8u09vkDtk0fucGxa8pChAHJN Wz1AlanYSObNRxvaz0E4c83YYXagYUmj36KpVJ12zR7vfpq/Ha/wQeijjQonofiD 7DDek9cdjvHBxeoMaqZbkID8p2yNDdg4WODdE9mHZE0Cb54bFkyQnTb/hVpu2TaL +tbLTa4+A/a93tecIsLWtebRFo3lZjtwb8vEQDTnAfWcbizv/NgoHz8YeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFClCAjp3Euw92h67YbWWCcliW97KMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvS1VJQ09uY1M3RDNhSHJ0aHRaWUp5V0piM3NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ARAw MA0GCSqGSIb3DQEBCwUAA4IBAQB0EcBcUwKrwW2q0f/DcnAaz7Eh32gw441/OhkA FEknW5crUtku7aMR/0VZMv/noIlq59fhts7AYkfkyKC3Avydr+H8hPucdtqaDFxC Y6cGlNkJsJ3cDNN0b5gf25oZnIE1WECxdSZqpZtSxnihSh+Clq9ckElWnXwIAPkB tv68DYISM86+xzH7vIUVigMff/3L3edfMYX0Qj0MhFiC1k8PMSTYhxFbFRmefjNh bL6ACOP4vssn4NjXMSAF1WcvVpZmVRlFOjwD9dVnREvNZPmUNAB0jn4Co7UmAVkB Bg0uIM3PG+d9Iyk7ElEeRfGFDTwPK76V7/i/pw7FlJsiz07Y -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:44 2026 by rpki-client