This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kNXSQnW7_P8ntSSXDnxRMraKaXM.roa File: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (raw, json) Hash identifier: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A= Subject key identifier: 90:D5:D2:42:75:BB:FC:FF:27:B5:24:97:0E:7C:51:32:B6:8A:69:73 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A7A256CF229D15563B36CA06E4FD Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kNXSQnW7_P8ntSSXDnxRMraKaXM.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213065 IP address blocks: 2a07:3502:1122::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:a2:56:cf:22:9d:15:56:3b:36:ca:06:e4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90d5d24275bbfcff27b524970e7c5132b68a6973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:72:67:74:45:ad:cc:1f:8e:2d:51:00:6b: 92:63:b3:c1:c4:00:dd:ff:4b:d2:07:51:5b:e6:7b: c4:74:b5:e8:21:c7:d7:8e:13:54:67:5c:47:53:9c: 91:73:6d:6b:fc:17:1d:ba:36:50:3a:7f:fc:2c:ad: b4:26:78:0f:11:ab:ba:82:eb:3e:e5:14:58:db:e3: 86:2f:16:4f:28:17:de:74:04:6b:77:0d:54:08:09: 4d:a8:dd:16:0f:47:6c:18:98:fc:95:e3:ba:4b:d4: 73:b5:7a:42:44:aa:53:ad:f9:d8:2f:8f:df:94:ee: e7:e3:5c:55:11:96:31:c6:4c:2e:3b:ec:f8:2a:ee: e3:e0:10:3e:09:f3:64:02:35:f3:1c:f7:67:ef:aa: f4:60:a5:94:a9:10:5e:5e:32:92:24:ce:35:7c:94: 28:76:9d:91:e8:61:a3:80:9f:7a:7c:cf:4f:ee:6a: 02:35:d5:85:0e:4d:fd:4f:33:a3:bb:01:cb:76:25: 42:62:96:b7:8c:27:01:4f:bf:c0:7d:cc:c3:43:57: 02:9b:67:78:dc:6d:c5:ba:c2:30:e5:f1:5e:00:03: 95:d1:9e:80:cb:82:87:9b:e2:8f:d0:90:4e:61:82: 19:9b:ec:4d:a5:2a:d6:53:e2:40:05:91:4c:9a:6b: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D5:D2:42:75:BB:FC:FF:27:B5:24:97:0E:7C:51:32:B6:8A:69:73 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kNXSQnW7_P8ntSSXDnxRMraKaXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3502:1122::/47 Signature Algorithm: sha256WithRSAEncryption 60:18:3b:b5:46:d2:be:6c:ae:9d:f4:9f:f2:f5:15:e2:0e:1a: cb:d0:26:2b:17:f2:79:08:e7:1e:e4:e4:cf:2d:29:a4:c8:2f: 3c:5d:e7:e4:23:3b:9a:82:ae:e7:ab:4a:d2:f6:b9:9d:9d:d7: 89:40:d8:27:c0:53:11:08:73:38:d7:16:fb:b0:07:1b:d0:e1: 7d:d8:fd:93:d3:aa:e6:60:91:52:20:6a:8b:43:f5:a8:07:b5: 73:24:f1:c1:c6:35:11:e2:87:62:c8:6f:71:5d:23:66:f4:89: 07:7d:89:dd:a0:43:18:0a:6c:24:50:78:be:cb:ef:da:a8:f7: 1f:65:58:da:76:b7:4f:c8:e5:94:3b:42:eb:50:62:78:ee:38: b5:62:f0:af:d4:d9:e8:43:33:36:c7:66:d7:6a:5a:e3:62:d8: f2:80:43:59:a9:6f:81:fe:82:f8:63:34:f1:e6:96:a9:3c:ef: 9e:fe:b0:35:35:9f:90:8d:bb:bc:d7:6b:85:0b:5c:92:77:75: 39:58:1f:81:d4:78:84:95:39:b1:7c:70:7f:ca:09:04:f0:47: 3f:cb:1e:36:56:56:70:48:d4:42:d1:23:ab:1d:09:fb:fc:90: 2d:65:13:02:7f:92:96:1d:e2:b1:f0:83:a9:a0:89:99:4c:f9: ca:50:85:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKeiVs8inRVWOzbKBuT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGQ1ZDI0Mjc1YmJmY2ZmMjdiNTI0OTcwZTdjNTEzMmI2OGE2OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm5yZ3RFrcwfji1RAGuSY7PBxADd /0vSB1Fb5nvEdLXoIcfXjhNUZ1xHU5yRc21r/BcdujZQOn/8LK20JngPEau6gus+ 5RRY2+OGLxZPKBfedARrdw1UCAlNqN0WD0dsGJj8leO6S9RztXpCRKpTrfnYL4/f lO7n41xVEZYxxkwuO+z4Ku7j4BA+CfNkAjXzHPdn76r0YKWUqRBeXjKSJM41fJQo dp2R6GGjgJ96fM9P7moCNdWFDk39TzOjuwHLdiVCYpa3jCcBT7/AfczDQ1cCm2d4 3G3FusIw5fFeAAOV0Z6Ay4KHm+KP0JBOYYIZm+xNpSrWU+JABZFMmmsTfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJDV0kJ1u/z/J7Uklw58UTK2imlzMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEva05YU1FuVzdfUDhudFNTWERueFJNcmFLYVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgc1AhEi MA0GCSqGSIb3DQEBCwUAA4IBAQBgGDu1RtK+bK6d9J/y9RXiDhrL0CYrF/J5COce 5OTPLSmkyC88XefkIzuagq7nq0rS9rmdndeJQNgnwFMRCHM41xb7sAcb0OF92P2T 06rmYJFSIGqLQ/WoB7VzJPHBxjUR4odiyG9xXSNm9IkHfYndoEMYCmwkUHi+y+/a qPcfZVjadrdPyOWUO0LrUGJ47ji1YvCv1NnoQzM2x2bXalrjYtjygENZqW+B/oL4 YzTx5papPO+e/rA1NZ+Qjbu812uFC1ySd3U5WB+B1HiElTmxfHB/ygkE8Ec/yx42 VlZwSNRC0SOrHQn7/JAtZRMCf5KWHeKx8IOpoImZTPnKUIUO -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:43 2026 by rpki-client