This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa File: Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa (raw, json) Hash identifier: FunMB/X94eHRJVpgjb/DKK3OKKV8NdcYckDgjUBxDNs= Subject key identifier: 2B:3E:8C:47:36:40:6D:FD:0F:D9:F2:91:4A:8F:44:2B:72:E1:9C:D8 Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d Certificate serial: 019B76EB007AF9BE411A95363ABEC02996C4 Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35271 IP address blocks: 31.10.64.0/18 maxlen: 18 93.185.192.0/20 maxlen: 20 2a03:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:00:7a:f9:be:41:1a:95:36:3a:be:c0:29:96:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b3e8c4736406dfd0fd9f2914a8f442b72e19cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:89:36:ed:78:7b:9f:99:53:b2:c5:0d:fa: 3e:a1:26:e4:be:ea:3d:19:ef:dc:c4:53:22:d9:28: 0e:c3:4b:3e:00:fe:cd:bb:30:d5:34:1c:75:3f:bc: c9:d3:59:18:4c:7a:43:b6:bb:3a:19:d2:69:65:73: 5e:0f:4c:28:60:d5:f9:fa:db:f7:4d:a1:16:cb:6d: 68:30:6e:b8:56:91:5d:db:a9:31:8a:ec:bc:8b:83: af:35:7f:14:66:a3:ff:3e:b8:de:76:2c:5a:37:84: ad:eb:b8:af:e7:7e:35:28:a5:6b:bb:f1:07:32:f3: 53:38:68:30:0e:f7:4f:a4:d6:f9:d8:c8:1b:74:da: 7e:1c:d2:7c:7e:d6:76:66:29:95:52:c8:a7:cb:4f: be:a5:a3:e3:27:b1:70:01:be:5b:c8:fe:ac:4a:a4: b0:93:a9:49:c7:d0:35:af:c2:d2:5c:6c:6e:1e:05: f0:1c:4d:55:2b:f2:b0:cb:66:c9:e9:6d:b8:be:e5: 25:8e:98:3c:fa:a2:09:09:48:8d:15:43:05:5a:30: 5c:22:39:62:25:5a:5d:76:4c:85:92:e7:7f:19:84: 51:1d:3d:10:0e:05:20:c0:ec:ac:20:aa:1e:76:f2: 9c:6d:e0:28:5d:30:4e:d6:f1:e9:1d:df:6f:d6:26: f2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3E:8C:47:36:40:6D:FD:0F:D9:F2:91:4A:8F:44:2B:72:E1:9C:D8 X509v3 Authority Key Identifier: keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.64.0/18 93.185.192.0/20 IPv6: 2a03:700::/32 Signature Algorithm: sha256WithRSAEncryption 66:5c:5f:c8:32:4a:a1:71:df:cf:c6:c3:c9:33:7f:84:4a:1e: e5:30:c1:72:53:2b:50:b2:2e:9a:7a:dd:fc:c1:97:03:56:f0: e5:f3:34:8b:22:c4:01:32:4e:35:c3:4e:74:1d:b9:a8:fd:8d: 5c:48:be:6c:b0:93:ef:fe:4c:9c:59:01:72:cd:a7:7c:a1:d4: 69:ac:35:39:cb:5b:45:ab:44:23:a2:be:28:d4:eb:6b:51:f8: a3:01:3c:66:e5:07:8b:6c:1d:98:3b:19:7b:ad:ba:12:85:a0: 8d:d4:40:eb:29:1c:15:30:e1:3a:d6:c7:21:88:69:c4:9a:95: a2:f6:d9:62:ce:51:a5:90:e6:0c:85:28:56:a0:1b:89:94:95: 8a:46:d1:2a:7a:50:de:52:c1:fe:a3:92:f1:d4:8f:b8:64:35: 77:68:8a:14:39:42:48:d5:15:b5:52:4e:e8:77:75:0a:63:64: f3:a7:fa:40:66:f1:d0:5d:5e:5a:d9:5d:a2:e9:8d:71:81:8b: 70:18:f9:47:e6:15:9d:9d:bb:68:b5:c9:35:29:ef:8e:83:b8: 1c:c1:e1:16:f8:f4:b9:92:14:13:5a:93:8a:f2:4c:f2:97:aa: 13:e4:76:57:10:8d:5d:0e:f6:97:6f:02:a3:13:52:15:6e:eb: 98:21:31:e7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26wB6+b5BGpU2Or7AKZbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NjU2NzMzNGUwMzU2MzlkZDdjY2I0OTc2YTliMjcwZjcy NjMyMWQwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjNlOGM0NzM2NDA2ZGZkMGZkOWYyOTE0YThmNDQyYjcyZTE5Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv6JNu14e5+ZU7LFDfo+oSbkvuo9 Ge/cxFMi2SgOw0s+AP7NuzDVNBx1P7zJ01kYTHpDtrs6GdJpZXNeD0woYNX5+tv3 TaEWy21oMG64VpFd26kxiuy8i4OvNX8UZqP/PrjedixaN4St67iv5341KKVru/EH MvNTOGgwDvdPpNb52MgbdNp+HNJ8ftZ2ZimVUsiny0++paPjJ7FwAb5byP6sSqSw k6lJx9A1r8LSXGxuHgXwHE1VK/Kwy2bJ6W24vuUljpg8+qIJCUiNFUMFWjBcIjli JVpddkyFkud/GYRRHT0QDgUgwOysIKoedvKcbeAoXTBO1vHpHd9v1ibyDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCs+jEc2QG39D9nykUqPRCty4ZzYMB8GA1UdIwQY MBaAFFdlZzNOA1Y53XzLSXapsnD3JjIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUt ZTRmNjRiMGRlMzZhLzEvS3o2TVJ6WkFiZjBQMmZLUlNvOUVLM0xobk5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUtZTRmNjRiMGRlMzZh LzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGHwpAAwQE XbnAMA0EAgACMAcDBQAqAwcAMA0GCSqGSIb3DQEBCwUAA4IBAQBmXF/IMkqhcd/P xsPJM3+ESh7lMMFyUytQsi6aet38wZcDVvDl8zSLIsQBMk41w050Hbmo/Y1cSL5s sJPv/kycWQFyzad8odRprDU5y1tFq0Qjor4o1OtrUfijATxm5QeLbB2YOxl7rboS haCN1EDrKRwVMOE61schiGnEmpWi9tlizlGlkOYMhShWoBuJlJWKRtEqelDeUsH+ o5Lx1I+4ZDV3aIoUOUJI1RW1Uk7od3UKY2Tzp/pAZvHQXV5a2V2i6Y1xgYtwGPlH 5hWdnbtotck1Ke+Og7gcweEW+PS5khQTWpOK8kzyl6oT5HZXEI1dDvaXbwKjE1IV buuYITHn -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:53 2026 by rpki-client