This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/KgDvJO7R9xt8L6g89R0awXRGW1s.roa File: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (raw, json) Hash identifier: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY= Subject key identifier: 2A:00:EF:24:EE:D1:F7:1B:7C:2F:A8:3C:F5:1D:1A:C1:74:46:5B:5B Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d Certificate serial: 019B7DCA4D3F7F835E23B22EFF86FB651AAC Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/KgDvJO7R9xt8L6g89R0awXRGW1s.roa Signing time: Fri 02 Jan 2026 08:19:28 +0000 ROA not before: Fri 02 Jan 2026 08:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59570 IP address blocks: 2001:678:d30::/48 maxlen: 48 2001:678:d34::/48 maxlen: 48 2001:67c:2148::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4d:3f:7f:83:5e:23:b2:2e:ff:86:fb:65:1a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a00ef24eed1f71b7c2fa83cf51d1ac174465b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:82:67:3e:ba:3c:59:ec:c3:cf:ad:15:37: e5:41:5c:ab:1c:9d:7a:91:0c:f0:8e:f4:5e:4c:21: d0:e5:51:e5:5b:cd:c0:3a:97:2b:e3:d9:6b:28:dd: 79:32:27:12:19:b7:7d:df:26:4c:02:6a:d4:81:5d: b5:af:9f:ac:58:78:f7:e8:ea:7e:9c:40:99:c5:53: 61:19:8c:b6:3c:bc:52:10:fd:d9:c2:64:5c:8c:5f: a5:f6:a2:d1:89:1f:91:d0:af:92:a2:4e:67:a5:d6: f0:92:9a:8b:ac:2b:33:7f:97:ae:e9:a8:4f:ff:cd: 86:c4:b6:f3:b9:73:07:40:41:8f:89:83:a7:f0:02: e0:73:38:89:20:ac:c7:30:01:14:53:b7:80:66:86: 4a:31:4b:ea:cc:61:db:53:de:12:4e:43:87:bc:52: 78:2c:14:92:57:59:ef:87:e0:9f:2b:3f:95:9c:a1: 44:eb:f9:21:91:11:77:80:ac:c6:a7:e1:2d:28:e6: d4:a2:33:94:4c:7a:d4:93:fe:bd:8a:f3:9f:00:a0: e1:60:fd:2d:a2:0d:1d:b7:5b:53:e1:b2:04:45:47: ea:7b:58:ef:b9:18:79:ac:3a:0a:2e:37:2e:21:d0: 76:40:6d:21:b4:99:51:40:f2:e0:2a:21:21:42:b2: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:EF:24:EE:D1:F7:1B:7C:2F:A8:3C:F5:1D:1A:C1:74:46:5B:5B X509v3 Authority Key Identifier: keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/KgDvJO7R9xt8L6g89R0awXRGW1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d30::/48 2001:678:d34::/48 2001:67c:2148::/48 Signature Algorithm: sha256WithRSAEncryption 73:33:b8:fa:02:ca:fa:b6:e2:56:29:43:05:47:c3:b7:69:63: 44:20:50:e8:dd:69:67:c3:68:82:08:5a:b4:5b:c7:cc:c2:9b: 48:a3:ea:d1:28:60:0d:15:a5:99:35:9a:28:84:81:e9:9f:3c: 0c:cc:d3:77:c1:61:43:4b:34:02:13:ac:38:81:a3:88:1a:27: 20:1e:6a:46:94:33:a8:2d:eb:ca:24:39:26:cc:9d:c6:b7:2f: bf:48:bb:fc:ce:ca:75:9c:af:24:15:6d:a5:78:9c:88:21:2a: 41:02:29:9e:fd:63:a1:1e:35:99:37:4d:ac:81:f1:dc:b8:e0: cc:28:47:54:e6:cc:81:b1:76:22:dd:cf:77:9c:c1:60:e1:e0: 19:22:33:b9:22:85:5e:cf:65:2e:22:48:df:cf:02:8f:7c:c8: 9b:62:03:9f:7b:71:0a:a0:31:f7:37:9a:a7:b0:12:0a:1d:2e: c7:29:14:ab:3f:b0:77:2b:88:06:41:4d:44:ca:16:7f:3a:d2: 95:6e:b6:35:5d:2d:4d:2a:a5:e4:31:67:7b:72:5c:ae:2a:3d: 15:aa:cd:5e:ce:22:8f:ef:64:2a:37:e3:0d:2c:7e:a7:c0:6b: 9d:67:05:4f:f7:26:8f:1e:a9:7b:be:e8:e3:b0:ef:98:27:12: 5d:e3:63:1a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yk0/f4NeI7Iu/4b7ZRqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjYyMWVlMzFlMDZhYWRjMWNhM2EzNzZlNDU3ZDhkMDQ5 NmIxMGQwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTAwZWYyNGVlZDFmNzFiN2MyZmE4M2NmNTFkMWFjMTc0NDY1YjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSmCZz66PFnsw8+tFTflQVyrHJ16 kQzwjvReTCHQ5VHlW83AOpcr49lrKN15MicSGbd93yZMAmrUgV21r5+sWHj36Op+ nECZxVNhGYy2PLxSEP3ZwmRcjF+l9qLRiR+R0K+Sok5npdbwkpqLrCszf5eu6ahP /82GxLbzuXMHQEGPiYOn8ALgcziJIKzHMAEUU7eAZoZKMUvqzGHbU94STkOHvFJ4 LBSSV1nvh+CfKz+VnKFE6/khkRF3gKzGp+EtKObUojOUTHrUk/69ivOfAKDhYP0t og0dt1tT4bIERUfqe1jvuRh5rDoKLjcuIdB2QG0htJlRQPLgKiEhQrKr+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCoA7yTu0fcbfC+oPPUdGsF0RltbMB8GA1UdIwQY MBaAFPwmIe4x4Gqtwco6N25FfY0ElrENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQt MTE5YmJkNzYxOTczLzEvS2dEdkpPN1I5eHQ4TDZnODlSMGF3WFJHVzFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQtMTE5YmJkNzYxOTcz LzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGeA0w AwcAIAEGeA00AwcAIAEGfCFIMA0GCSqGSIb3DQEBCwUAA4IBAQBzM7j6Asr6tuJW KUMFR8O3aWNEIFDo3Wlnw2iCCFq0W8fMwptIo+rRKGANFaWZNZoohIHpnzwMzNN3 wWFDSzQCE6w4gaOIGicgHmpGlDOoLevKJDkmzJ3Gty+/SLv8zsp1nK8kFW2leJyI ISpBAime/WOhHjWZN02sgfHcuODMKEdU5syBsXYi3c93nMFg4eAZIjO5IoVez2Uu IkjfzwKPfMibYgOfe3EKoDH3N5qnsBIKHS7HKRSrP7B3K4gGQU1EyhZ/OtKVbrY1 XS1NKqXkMWd7clyuKj0Vqs1eziKP72QqN+MNLH6nwGudZwVP9yaPHql7vujjsO+Y JxJd42Ma -----END CERTIFICATE-----Generated at Wed Jan 21 01:34:20 2026 by rpki-client