This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kFkHRiensr2v4DMzqtgkeEXf4nY.roa File: kFkHRiensr2v4DMzqtgkeEXf4nY.roa (raw, json) Hash identifier: Eejk8h2/8yAZa/9j50qU7MRuUcGuefO0f7VoJ1GbPjw= Subject key identifier: 90:59:07:46:27:A7:B2:BD:AF:E0:33:33:AA:D8:24:78:45:DF:E2:76 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F858E8B871BA5D03C4437A589200833 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kFkHRiensr2v4DMzqtgkeEXf4nY.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59678 IP address blocks: 2a0f:b241:15::/48 maxlen: 48 2a0f:b241:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8e:8b:87:1b:a5:d0:3c:44:37:a5:89:20:08:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9059074627a7b2bdafe03333aad8247845dfe276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:39:9d:d5:16:2e:b5:38:de:1a:58:48:5a: b2:85:b0:19:a7:c3:a3:5a:eb:ae:53:97:1d:c1:78: 29:09:27:0c:14:ac:e7:9a:6b:84:f0:c9:5c:55:38: 2a:e4:99:2f:50:4e:55:10:23:7a:47:f8:89:b8:2d: 92:12:8c:49:eb:e7:f4:79:9c:07:05:fc:3f:9d:3f: e5:49:06:1a:de:67:f6:a8:ca:55:e6:b1:b3:38:8c: 24:3f:95:46:b1:b4:60:9a:d9:84:9d:07:6e:bf:01: aa:f8:9a:12:b5:35:0b:ac:9e:0c:a4:38:4a:40:f3: ed:16:45:ea:56:23:44:4d:e6:5a:e8:18:32:40:0b: 81:70:14:ec:62:4e:68:a6:dd:92:55:fb:1f:ce:f8: 50:9c:66:40:1f:7a:09:3a:6b:8c:a8:ec:c2:62:f6: b7:76:f9:5c:4e:b3:54:dd:12:6a:9b:18:43:e5:d2: 9e:17:1f:50:16:53:bf:55:e5:68:b6:57:ea:e0:d9: 01:aa:b8:2a:93:b1:bb:5a:5e:6f:86:aa:e4:0f:74: bf:73:26:14:37:65:3a:4e:87:c7:42:fb:03:a0:3b: 0a:a7:3f:07:45:41:cb:81:12:b8:de:e5:dd:d7:af: 6a:2b:fc:9b:94:f2:85:6d:0a:38:20:4b:68:87:84: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:59:07:46:27:A7:B2:BD:AF:E0:33:33:AA:D8:24:78:45:DF:E2:76 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kFkHRiensr2v4DMzqtgkeEXf4nY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b241:15::/48 2a0f:b241:123::/48 Signature Algorithm: sha256WithRSAEncryption 66:13:5b:2a:7f:b5:8e:1c:c5:41:46:64:ed:77:de:ec:93:f0: 4b:e4:48:61:ae:17:a4:94:ba:9f:c8:12:18:de:f4:15:8b:3c: 19:40:cf:b7:23:61:ec:2c:de:2c:19:0e:83:c7:13:34:e4:90: fe:74:4a:cf:b7:b8:aa:5c:fe:e5:35:8c:79:4f:8f:b1:fc:ac: da:a4:bf:7b:ac:67:e9:14:2e:29:81:1b:28:58:a2:2a:de:44: b1:f9:2f:bc:3e:67:5d:18:91:ad:58:ca:1c:5b:4d:7d:67:45: 25:db:0c:4a:47:44:7a:71:9e:f0:8f:81:d6:25:1d:fd:f8:91: 9c:3e:f1:b6:45:8e:79:f7:6f:68:24:48:a1:25:60:23:f4:a7: 7f:86:ff:cb:f6:71:c7:89:9a:03:f4:71:5a:03:f8:39:59:90: 07:54:f3:9f:6a:4a:16:5c:d7:97:d2:83:09:d0:34:52:4f:cc: 32:f9:d0:bd:d7:7f:22:df:76:3d:55:4b:3b:1e:f2:c5:f0:99: b8:28:a9:01:6a:1c:6f:44:e7:3d:7e:a1:3b:90:d8:26:0e:2c: b5:56:3c:a9:e4:0d:85:4c:26:09:e9:c9:cf:9b:0b:c8:22:cb: 83:45:89:71:fc:6d:d9:88:b6:5b:34:f5:74:cb:c8:ee:df:99: c9:32:82:a9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hY6Lhxul0DxEN6WJIAgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDU5MDc0NjI3YTdiMmJkYWZlMDMzMzNhYWQ4MjQ3ODQ1ZGZlMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYM5ndUWLrU43hpYSFqyhbAZp8Oj WuuuU5cdwXgpCScMFKznmmuE8MlcVTgq5JkvUE5VECN6R/iJuC2SEoxJ6+f0eZwH Bfw/nT/lSQYa3mf2qMpV5rGzOIwkP5VGsbRgmtmEnQduvwGq+JoStTULrJ4MpDhK QPPtFkXqViNETeZa6BgyQAuBcBTsYk5opt2SVfsfzvhQnGZAH3oJOmuMqOzCYva3 dvlcTrNU3RJqmxhD5dKeFx9QFlO/VeVotlfq4NkBqrgqk7G7Wl5vhqrkD3S/cyYU N2U6TofHQvsDoDsKpz8HRUHLgRK43uXd169qK/yblPKFbQo4IEtoh4R6dwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJBZB0Ynp7K9r+AzM6rYJHhF3+J2MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEva0ZrSFJpZW5zcjJ2NERNenF0Z2tlRVhmNG5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+yQQAV AwcAKg+yQQEjMA0GCSqGSIb3DQEBCwUAA4IBAQBmE1sqf7WOHMVBRmTtd97sk/BL 5EhhrheklLqfyBIY3vQVizwZQM+3I2HsLN4sGQ6DxxM05JD+dErPt7iqXP7lNYx5 T4+x/KzapL97rGfpFC4pgRsoWKIq3kSx+S+8PmddGJGtWMocW019Z0Ul2wxKR0R6 cZ7wj4HWJR39+JGcPvG2RY55929oJEihJWAj9Kd/hv/L9nHHiZoD9HFaA/g5WZAH VPOfakoWXNeX0oMJ0DRST8wy+dC9138i33Y9VUs7HvLF8Jm4KKkBahxvROc9fqE7 kNgmDiy1Vjyp5A2FTCYJ6cnPmwvIIsuDRYlx/G3ZiLZbNPV0y8ju35nJMoKp -----END CERTIFICATE-----Generated at Wed Jan 21 11:58:59 2026 by rpki-client