This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/K-ahINdD41JgL-Byf45-aq4Yt-Y.roa File: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (raw, json) Hash identifier: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So= Subject key identifier: 2B:E6:A1:20:D7:43:E3:52:60:2F:E0:72:7F:8E:7E:6A:AE:18:B7:E6 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B7C800C40B15004F17C727BD6579D4F17 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/K-ahINdD41JgL-Byf45-aq4Yt-Y.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a13:5681:a181::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0c:40:b1:50:04:f1:7c:72:7b:d6:57:9d:4f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2be6a120d743e352602fe0727f8e7e6aae18b7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:cc:c7:82:75:70:46:b5:af:ef:59:a7:53: 55:f9:a3:28:e8:dd:79:09:80:c6:74:26:98:06:58: 99:78:15:ad:e4:86:6c:ef:f2:d0:b5:7b:b5:d4:32: b5:cc:f9:76:98:3f:66:b3:6c:3d:2b:f6:f2:2d:28: ec:e8:06:ab:44:d4:4f:b4:74:fb:ee:18:b6:77:c2: 3f:b1:2e:5a:48:e4:36:2e:6e:a4:ef:48:c5:fc:75: e8:55:a2:e3:1f:b3:07:81:b8:96:02:3f:9c:71:31: 0a:1e:9f:79:43:38:82:b3:7d:44:1b:12:6a:4f:43: e0:cc:86:80:2f:4e:6a:40:40:45:92:56:e5:29:50: 70:0b:e1:aa:97:b1:99:0c:6d:0a:c7:13:b8:85:09: 45:a5:6f:47:41:3d:c5:df:68:e7:15:49:89:48:3f: 13:b2:0f:78:94:f2:fe:aa:6a:63:bc:05:9e:6e:28: 67:30:a2:6a:91:16:db:54:1b:c5:62:4e:6b:67:03: 62:c9:43:ab:eb:8a:e5:33:15:8e:00:de:f5:bd:3b: 94:fc:3d:bb:d2:56:bb:96:51:65:79:15:36:8b:7d: c5:2f:04:0b:08:46:90:d0:cc:85:84:f1:a9:2d:47: 15:4a:8d:e8:17:03:d7:f3:e4:01:87:19:7a:de:12: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:A1:20:D7:43:E3:52:60:2F:E0:72:7F:8E:7E:6A:AE:18:B7:E6 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/K-ahINdD41JgL-Byf45-aq4Yt-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5681:a181::/48 Signature Algorithm: sha256WithRSAEncryption 77:14:71:2e:d7:16:94:57:c9:c5:32:73:57:91:f9:84:aa:82: 26:13:be:f3:69:84:fa:70:91:c4:20:91:00:3b:ab:5d:86:57: c6:9a:51:59:d7:1f:67:2a:7e:d1:1d:36:29:bb:a0:79:27:78: 6c:3a:0b:ce:d7:d6:b0:50:a4:7a:e9:e2:0a:f3:b6:4a:8e:39: ec:d4:e5:f6:0e:aa:6a:67:9f:72:ff:e7:11:b7:08:12:45:84: 3b:fd:6b:8e:26:3a:9c:31:1a:1c:1a:3c:3a:c9:02:80:77:25: d5:4b:e3:aa:94:3f:fe:e0:e8:9c:bc:f7:4e:06:00:d9:db:04: 5b:9e:38:83:0a:d0:db:98:93:60:0f:e7:e5:97:7e:62:66:67: fa:9c:5f:65:56:8b:77:f9:11:20:6b:a6:95:20:cf:39:87:4d: 3d:33:45:37:c3:9d:66:f6:23:30:50:45:db:f2:e1:67:03:84: c1:d9:9a:0f:a5:2f:f1:9b:02:12:d0:bb:46:ce:b9:77:e4:9c: 8e:ae:40:cb:7c:c1:13:d4:b7:7a:05:31:82:d3:8c:09:db:69: 44:d5:26:f4:db:d8:02:a3:2d:c3:df:8f:6a:fe:6f:c4:5d:8d: 09:5a:6f:53:85:a0:22:b0:a2:48:c7:d5:b7:0f:2b:0a:19:ee: 33:0e:c4:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gAxAsVAE8Xxye9ZXnU8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmU2YTEyMGQ3NDNlMzUyNjAyZmUwNzI3ZjhlN2U2YWFlMThiN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhzMx4J1cEa1r+9Zp1NV+aMo6N15 CYDGdCaYBliZeBWt5IZs7/LQtXu11DK1zPl2mD9ms2w9K/byLSjs6AarRNRPtHT7 7hi2d8I/sS5aSOQ2Lm6k70jF/HXoVaLjH7MHgbiWAj+ccTEKHp95QziCs31EGxJq T0PgzIaAL05qQEBFklblKVBwC+Gql7GZDG0KxxO4hQlFpW9HQT3F32jnFUmJSD8T sg94lPL+qmpjvAWebihnMKJqkRbbVBvFYk5rZwNiyUOr64rlMxWOAN71vTuU/D27 0la7llFleRU2i33FLwQLCEaQ0MyFhPGpLUcVSo3oFwPX8+QBhxl63hLM0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCvmoSDXQ+NSYC/gcn+OfmquGLfmMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvSy1haElOZEQ0MUpnTC1CeWY0NS1hcTRZdC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhNWgaGB MA0GCSqGSIb3DQEBCwUAA4IBAQB3FHEu1xaUV8nFMnNXkfmEqoImE77zaYT6cJHE IJEAO6tdhlfGmlFZ1x9nKn7RHTYpu6B5J3hsOgvO19awUKR66eIK87ZKjjns1OX2 DqpqZ59y/+cRtwgSRYQ7/WuOJjqcMRocGjw6yQKAdyXVS+OqlD/+4OicvPdOBgDZ 2wRbnjiDCtDbmJNgD+fll35iZmf6nF9lVot3+REga6aVIM85h009M0U3w51m9iMw UEXb8uFnA4TB2ZoPpS/xmwIS0LtGzrl35JyOrkDLfMET1Ld6BTGC04wJ22lE1Sb0 29gCoy3D349q/m/EXY0JWm9ThaAisKJIx9W3DysKGe4zDsQ2 -----END CERTIFICATE-----Generated at Thu Jan 22 01:13:32 2026 by rpki-client