This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/Kioc6B7Fyfli6FCiujhE8Qm79C0.roa File: Kioc6B7Fyfli6FCiujhE8Qm79C0.roa (raw, json) Hash identifier: QvwIZ61NmPvndcfj0ICAM5kw0hGVe6xU34dEpUs0Jmk= Subject key identifier: 2A:2A:1C:E8:1E:C5:C9:F9:62:E8:50:A2:BA:38:44:F1:09:BB:F4:2D Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113 Certificate serial: 019B7E37E6E66F8E30D574BB57E82AC1CCA7 Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/Kioc6B7Fyfli6FCiujhE8Qm79C0.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208658 IP address blocks: 2001:678:aac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e6:e6:6f:8e:30:d5:74:bb:57:e8:2a:c1:cc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a2a1ce81ec5c9f962e850a2ba3844f109bbf42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c9:a1:06:23:6c:4b:17:8c:f7:d5:e5:e6:4e: 1d:b2:a9:ad:c3:20:f6:09:21:63:40:16:c4:3c:69: c9:73:18:3a:f5:e8:95:45:a4:aa:f5:e8:49:30:6d: 56:f2:7e:06:3d:8c:51:5d:0c:e6:bf:11:7b:1d:44: d1:c8:e7:88:19:75:3e:9e:9e:c2:56:10:f8:96:1d: d4:10:0d:8c:d5:06:7b:b9:9c:a2:30:76:1b:b5:64: 98:38:42:62:11:6b:02:89:38:af:57:a0:54:8b:63: fa:ee:cd:da:ff:f5:41:62:d9:f8:80:a6:dd:84:c0: 7b:5e:3e:67:d0:8c:70:a8:58:32:e7:79:ff:c6:fe: 13:28:d9:93:02:8d:3d:a2:c7:ba:e1:ec:3c:be:2c: c4:ca:61:35:f0:47:bf:ef:60:02:38:7c:f6:d0:49: ad:ad:2b:89:5c:3a:38:44:be:dd:11:8a:97:df:16: 7c:70:bc:22:84:b4:40:7f:5c:96:25:d2:26:bb:8f: 31:42:2e:5c:70:cf:0c:cb:6a:04:ce:5e:dc:65:55: ee:82:f6:b2:b5:3a:ea:d6:37:42:93:5c:2c:79:70: 52:2d:3d:14:46:c6:59:a9:d4:c5:d5:4c:be:0d:5a: a2:f7:d9:c7:ea:8f:70:67:fd:81:61:81:b8:71:f3: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:1C:E8:1E:C5:C9:F9:62:E8:50:A2:BA:38:44:F1:09:BB:F4:2D X509v3 Authority Key Identifier: keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/Kioc6B7Fyfli6FCiujhE8Qm79C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:aac::/48 Signature Algorithm: sha256WithRSAEncryption 6c:36:e3:95:af:e9:ba:03:e4:b7:23:10:50:24:7d:bb:32:b4: 93:d7:72:0b:20:ae:b1:7e:a2:a8:6a:66:57:62:49:d0:c4:a9: e1:87:60:2b:ab:31:eb:77:8d:9e:48:73:3d:f0:7f:19:7a:fd: 7e:a3:1d:78:10:6b:39:5f:02:7f:bc:36:dc:05:1e:4a:c3:f0: 9b:75:bb:6e:61:d7:af:e6:2a:2f:41:06:d4:3c:09:b1:9a:7b: 0f:b1:da:dd:23:bc:20:18:b2:a8:d6:df:be:85:22:ab:4b:bf: af:e4:9d:91:72:4b:5a:58:22:1d:b2:d0:85:54:38:7d:f5:37: de:25:e2:5e:99:b9:38:58:c3:f9:70:ca:8e:cf:d7:3b:3d:fa: 37:92:8d:81:ae:b4:36:2d:23:04:4e:2a:ed:76:b4:ec:d9:71: eb:f6:46:d4:64:d9:65:ec:0c:6b:45:eb:37:80:ca:85:6c:42: f8:3a:cf:d1:81:f5:ca:3f:8a:8b:7c:bd:fb:02:ad:13:6e:ef: d3:65:59:d1:cf:78:09:e1:05:f2:4f:03:b3:2e:be:fa:76:7e: 9c:01:87:72:e9:80:25:44:5e:9a:48:d8:6b:6b:c0:f1:4f:b1: f2:5e:16:c3:dc:28:74:23:49:15:8b:c2:92:18:88:57:e1:20: 6b:76:15:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N+bmb44w1XS7V+gqwcynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzM2I0NmUzYTlkZDViN2VhOGE4YmZkYTJmNmUzYmFkMTU1 MDkxMTMwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTJhMWNlODFlYzVjOWY5NjJlODUwYTJiYTM4NDRmMTA5YmJmNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cmhBiNsSxeM99Xl5k4dsqmtwyD2 CSFjQBbEPGnJcxg69eiVRaSq9ehJMG1W8n4GPYxRXQzmvxF7HUTRyOeIGXU+np7C VhD4lh3UEA2M1QZ7uZyiMHYbtWSYOEJiEWsCiTivV6BUi2P67s3a//VBYtn4gKbd hMB7Xj5n0IxwqFgy53n/xv4TKNmTAo09ose64ew8vizEymE18Ee/72ACOHz20Emt rSuJXDo4RL7dEYqX3xZ8cLwihLRAf1yWJdImu48xQi5ccM8My2oEzl7cZVXugvay tTrq1jdCk1wseXBSLT0URsZZqdTF1Uy+DVqi99nH6o9wZ/2BYYG4cfPbDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCoqHOgexcn5YuhQoro4RPEJu/QtMB8GA1UdIwQY MBaAFFM7RuOp3Vt+qKi/2i9uO60VUJETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXp0RzQ2bmRXMzZvcUxfYUwyNDdyUlZRa1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9mNTBlMmQtZTQwMC00NGYxLTg4MzIt ZTI2OTYwYmYzNGU1LzEvS2lvYzZCN0Z5ZmxpNkZDaXVqaEU4UW03OUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9mNTBlMmQtZTQwMC00NGYxLTg4MzItZTI2OTYwYmYzNGU1 LzEvVXp0RzQ2bmRXMzZvcUxfYUwyNDdyUlZRa1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAqs MA0GCSqGSIb3DQEBCwUAA4IBAQBsNuOVr+m6A+S3IxBQJH27MrST13ILIK6xfqKo amZXYknQxKnhh2ArqzHrd42eSHM98H8Zev1+ox14EGs5XwJ/vDbcBR5Kw/Cbdbtu Ydev5iovQQbUPAmxmnsPsdrdI7wgGLKo1t++hSKrS7+v5J2RcktaWCIdstCFVDh9 9TfeJeJembk4WMP5cMqOz9c7Pfo3ko2BrrQ2LSMETirtdrTs2XHr9kbUZNll7Axr Res3gMqFbEL4Os/RgfXKP4qLfL37Aq0Tbu/TZVnRz3gJ4QXyTwOzLr76dn6cAYdy 6YAlRF6aSNhra8DxT7HyXhbD3Ch0I0kVi8KSGIhX4SBrdhVT -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:47 2026 by rpki-client