This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/KrIInPELjjew4quQUoraQV6OouY.roa File: KrIInPELjjew4quQUoraQV6OouY.roa (raw, json) Hash identifier: NtU0df/ycHtiT+ibZK9f1mw26Vwk+NDyWyhgJQLn/V0= Subject key identifier: 2A:B2:08:9C:F1:0B:8E:37:B0:E2:AB:90:52:8A:DA:41:5E:8E:A2:E6 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80295552137757AD68D3EA978B8F63 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/KrIInPELjjew4quQUoraQV6OouY.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214495 IP address blocks: 2a0f:7803:db00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:55:52:13:77:57:ad:68:d3:ea:97:8b:8f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ab2089cf10b8e37b0e2ab90528ada415e8ea2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:9f:ed:43:1c:71:71:ab:a1:10:c1:da:46: 9e:02:60:4b:42:02:ca:c7:87:06:e0:18:8f:54:64: 95:9a:56:30:1b:89:61:b6:97:30:0a:ae:f1:5b:7f: 2c:d3:74:54:d2:45:8b:43:84:e3:a0:42:a6:18:ee: 35:4f:09:b9:99:09:f7:d9:a3:55:06:7e:db:10:cc: 2e:eb:90:88:88:cb:1b:85:cb:ca:84:a6:91:67:5a: 42:e2:aa:12:f2:2f:c1:f5:e2:54:ea:89:4e:8d:eb: 14:59:c0:0b:5f:39:57:6d:dd:61:8a:38:b8:62:2b: 96:a5:e8:0a:26:9f:8e:84:0b:d9:69:4a:aa:d6:a8: d2:43:08:42:01:4f:70:03:e5:d6:1e:95:c0:1e:5e: c2:f9:92:cf:4d:6b:ff:3b:8b:16:de:26:90:d9:b8: 3f:f9:70:8b:05:23:13:2f:af:aa:c4:d0:b5:60:1d: 79:8d:97:cd:e6:36:b2:df:a4:69:48:ec:89:61:8c: de:65:ee:e8:6d:29:f8:94:75:5a:34:82:db:b5:1e: 2f:aa:99:8c:9f:dd:2d:bd:bf:bd:b2:ee:1c:74:80: c2:e7:82:e9:89:d2:c4:9c:b5:20:55:35:38:9e:61: 6e:7b:4d:03:87:93:ab:a4:69:51:69:26:88:d0:35: 99:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:08:9C:F1:0B:8E:37:B0:E2:AB:90:52:8A:DA:41:5E:8E:A2:E6 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/KrIInPELjjew4quQUoraQV6OouY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:db00::/40 Signature Algorithm: sha256WithRSAEncryption 73:cf:38:81:65:86:bf:f0:db:1a:6f:77:8f:b7:cf:59:e2:bf: 26:11:0f:8c:c6:04:2a:3f:0b:b5:77:c2:d8:3a:0b:7a:79:ec: 20:a4:b5:e4:a8:54:f0:01:d3:48:ab:47:d5:08:f5:a2:f9:94: 40:81:98:9a:4f:f7:f3:0b:7f:20:65:01:23:9b:ee:ea:a6:ae: 9b:37:95:ff:a2:12:99:ca:ec:1a:31:dc:af:96:df:5d:b6:6d: ad:48:ef:0b:a3:ec:8d:49:aa:94:24:06:94:eb:93:86:83:e0: a3:b4:ea:fc:cf:ae:72:db:45:66:2c:80:f0:d9:24:40:a4:83: 5c:3c:2d:3c:2f:6b:3f:13:3e:04:ed:5d:b2:07:53:f4:5b:80: cf:0d:5d:3c:18:b8:0c:e0:69:25:43:d6:0f:87:99:92:11:94: 46:a7:7e:47:69:a9:03:59:f8:7a:53:44:15:f9:e9:b4:dc:86: 26:4f:af:6a:5b:d1:10:7e:26:ad:22:81:34:de:5c:ea:7c:91: f4:2a:bc:94:a4:13:33:71:da:e2:c1:07:f1:d7:10:09:13:42: e0:ee:d6:2a:6f:37:9d:ad:29:4f:98:4f:f6:ea:e2:c4:ba:07: a4:d1:b6:f7:3c:c7:57:98:68:18:0f:22:74:39:63:28:ef:d8: f0:9d:37:81 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gClVUhN3V61o0+qXi49jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWIyMDg5Y2YxMGI4ZTM3YjBlMmFiOTA1MjhhZGE0MTVlOGVhMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eyf7UMccXGroRDB2kaeAmBLQgLK x4cG4BiPVGSVmlYwG4lhtpcwCq7xW38s03RU0kWLQ4TjoEKmGO41Twm5mQn32aNV Bn7bEMwu65CIiMsbhcvKhKaRZ1pC4qoS8i/B9eJU6olOjesUWcALXzlXbd1hiji4 YiuWpegKJp+OhAvZaUqq1qjSQwhCAU9wA+XWHpXAHl7C+ZLPTWv/O4sW3iaQ2bg/ +XCLBSMTL6+qxNC1YB15jZfN5jay36RpSOyJYYzeZe7obSn4lHVaNILbtR4vqpmM n90tvb+9su4cdIDC54LpidLEnLUgVTU4nmFue00Dh5OrpGlRaSaI0DWZUwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCqyCJzxC443sOKrkFKK2kFejqLmMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvS3JJSW5QRUxqamV3NHF1UVVvcmFRVjZPb3VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg94A9sw DQYJKoZIhvcNAQELBQADggEBAHPPOIFlhr/w2xpvd4+3z1nivyYRD4zGBCo/C7V3 wtg6C3p57CCkteSoVPAB00irR9UI9aL5lECBmJpP9/MLfyBlASOb7uqmrps3lf+i EpnK7Box3K+W3122ba1I7wuj7I1JqpQkBpTrk4aD4KO06vzPrnLbRWYsgPDZJECk g1w8LTwvaz8TPgTtXbIHU/RbgM8NXTwYuAzgaSVD1g+HmZIRlEanfkdpqQNZ+HpT RBX56bTchiZPr2pb0RB+Jq0igTTeXOp8kfQqvJSkEzNx2uLBB/HXEAkTQuDu1ipv N52tKU+YT/bq4sS6B6TRtvc8x1eYaBgPInQ5Yyjv2PCdN4E= -----END CERTIFICATE-----Generated at Tue Jan 20 00:29:38 2026 by rpki-client