This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/kN8sJaIrd98steTWsu3vc7sEjKI.roa File: kN8sJaIrd98steTWsu3vc7sEjKI.roa (raw, json) Hash identifier: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI= Subject key identifier: 90:DF:2C:25:A2:2B:77:DF:2C:B5:E4:D6:B2:ED:EF:73:BB:04:8C:A2 Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Certificate serial: 019B7834DD1FE1DB9BD66D6DACC003C64541 Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/kN8sJaIrd98steTWsu3vc7sEjKI.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39892 IP address blocks: 2001:67c:1098::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dd:1f:e1:db:9b:d6:6d:6d:ac:c0:03:c6:45:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90df2c25a22b77df2cb5e4d6b2edef73bb048ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:2a:51:8c:4d:5d:4c:03:42:60:4a:30:30: 8c:ab:94:9e:9a:19:5a:7e:55:2a:35:86:7b:bf:e9: ec:1a:3b:19:0f:ae:cb:db:6f:c7:97:e9:ba:c3:fe: 0c:0c:05:45:ec:07:2c:a9:05:7d:e1:f4:bd:ea:66: e7:de:03:c4:c3:08:e6:78:f7:88:52:1b:2e:81:f4: 1b:04:31:4b:c6:14:14:55:1e:8f:81:3c:32:27:7e: b3:43:f0:a4:35:c9:d4:40:4f:61:ee:89:fa:bb:47: 93:b2:bb:05:24:ce:ba:a7:9e:5b:53:c4:b6:9c:07: f2:48:5f:c5:6a:1c:f6:bd:68:d4:92:69:01:72:d7: 26:29:67:8d:f7:15:e5:37:ed:9e:9a:7b:91:bd:31: c5:af:e6:3b:f9:ab:17:3d:da:08:cc:55:b5:57:db: c0:8b:94:2c:63:4b:0d:e3:ef:cd:fb:7d:1d:2d:32: 0a:43:e3:e5:55:69:18:4b:72:29:6a:e6:b4:fd:54: 8e:c2:76:1a:85:8a:58:09:1b:41:43:94:d2:94:eb: dc:ad:72:3b:d6:dc:ca:bb:5b:16:73:b6:e3:0c:3b: 71:56:56:dd:42:30:e0:46:ee:21:70:2d:8c:42:71: c7:aa:58:bc:1f:4c:c6:8b:95:30:82:c4:d6:9c:0c: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DF:2C:25:A2:2B:77:DF:2C:B5:E4:D6:B2:ED:EF:73:BB:04:8C:A2 X509v3 Authority Key Identifier: keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/kN8sJaIrd98steTWsu3vc7sEjKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1098::/48 Signature Algorithm: sha256WithRSAEncryption 99:6f:ab:86:1d:dd:4b:e1:06:81:b5:ad:99:94:8a:91:ba:57: e6:f2:f6:19:de:70:eb:11:f9:88:09:d9:45:27:cd:6a:11:3c: b2:9e:2f:41:a2:4b:9f:bd:f8:31:95:de:d7:18:0b:72:46:3f: 4c:2b:a7:92:76:c9:cb:18:a4:fe:18:91:06:1c:08:2a:59:48: 71:92:72:f9:05:fe:2b:17:d9:9c:96:f5:30:36:c4:ca:c4:f0: 62:ae:45:16:1e:4f:23:88:65:fc:0a:fd:4e:58:0b:bc:e7:ab: 4d:be:95:e1:cc:e6:5b:ad:52:bd:11:23:34:55:b1:76:6e:66: f7:77:77:cb:a5:0e:eb:18:6f:3e:67:ad:8f:f4:ce:d5:ad:6b: 03:0a:ac:f1:6a:e3:28:f6:a9:18:b2:89:cc:51:ee:af:40:5c: da:b6:61:f1:98:bd:59:fc:64:a3:8a:bd:82:a1:16:49:fc:f6: 42:76:de:21:33:13:56:1b:7d:59:96:dd:c5:7d:bf:aa:3a:ed: 91:4b:8c:6d:da:64:68:2e:06:a1:6d:e6:66:20:a8:54:c5:b3: 0e:93:b3:e5:e6:20:20:05:8e:c1:42:bb:f3:bd:02:73:ee:80: 3e:b8:cb:0e:60:98:71:9d:55:a6:7c:68:a0:46:e7:60:32:76: a2:0b:eb:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NN0f4dub1m1trMADxkVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl YmQ2MWMwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGRmMmMyNWEyMmI3N2RmMmNiNWU0ZDZiMmVkZWY3M2JiMDQ4Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeAqUYxNXUwDQmBKMDCMq5Semhla flUqNYZ7v+nsGjsZD67L22/Hl+m6w/4MDAVF7AcsqQV94fS96mbn3gPEwwjmePeI UhsugfQbBDFLxhQUVR6PgTwyJ36zQ/CkNcnUQE9h7on6u0eTsrsFJM66p55bU8S2 nAfySF/Fahz2vWjUkmkBctcmKWeN9xXlN+2emnuRvTHFr+Y7+asXPdoIzFW1V9vA i5QsY0sN4+/N+30dLTIKQ+PlVWkYS3Ipaua0/VSOwnYahYpYCRtBQ5TSlOvcrXI7 1tzKu1sWc7bjDDtxVlbdQjDgRu4hcC2MQnHHqli8H0zGi5UwgsTWnAxd6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJDfLCWiK3ffLLXk1rLt73O7BIyiMB8GA1UdIwQY MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt MGJkOWRkZjM5NzBlLzEva044c0phSXJkOThzdGVUV3N1M3ZjN3NFaktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBCY MA0GCSqGSIb3DQEBCwUAA4IBAQCZb6uGHd1L4QaBta2ZlIqRulfm8vYZ3nDrEfmI CdlFJ81qETyyni9Bokufvfgxld7XGAtyRj9MK6eSdsnLGKT+GJEGHAgqWUhxknL5 Bf4rF9mclvUwNsTKxPBirkUWHk8jiGX8Cv1OWAu856tNvpXhzOZbrVK9ESM0VbF2 bmb3d3fLpQ7rGG8+Z62P9M7VrWsDCqzxauMo9qkYsonMUe6vQFzatmHxmL1Z/GSj ir2CoRZJ/PZCdt4hMxNWG31Zlt3Ffb+qOu2RS4xt2mRoLgahbeZmIKhUxbMOk7Pl 5iAgBY7BQrvzvQJz7oA+uMsOYJhxnVWmfGigRudgMnaiC+u+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:39 2026 by rpki-client