This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/kmw9YJjp_LPgO_qE8ViZ_Ay1Bz8.roa File: kmw9YJjp_LPgO_qE8ViZ_Ay1Bz8.roa (raw, json) Hash identifier: mxe6yoyzNcCaoZ9vp6kYV/xA+nt3ozTGbvnq52q7+uU= Subject key identifier: 92:6C:3D:60:98:E9:FC:B3:E0:3B:FA:84:F1:58:99:FC:0C:B5:07:3F Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7FA9DFA2DD8CDFE915C6782AAE7A15C2 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/kmw9YJjp_LPgO_qE8ViZ_Ay1Bz8.roa Signing time: Fri 02 Jan 2026 17:03:17 +0000 ROA not before: Fri 02 Jan 2026 17:03:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200455 IP address blocks: 2a14:67c2:b00::/40 maxlen: 48 2a14:67c3:80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a9:df:a2:dd:8c:df:e9:15:c6:78:2a:ae:7a:15:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 2 17:03:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926c3d6098e9fcb3e03bfa84f15899fc0cb5073f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:6e:28:96:2a:5c:96:ce:af:46:9a:10:8a: 96:3d:3b:6b:08:cc:f2:42:7f:a4:17:07:1e:88:ae: 7f:d5:fb:5f:60:8a:77:c3:10:2f:35:87:5f:f9:0c: 09:a4:cc:05:2a:08:78:0b:30:76:e2:22:40:8d:ff: 4d:65:d1:0b:fb:09:10:7b:45:4c:5b:c8:ff:fb:15: 65:93:b6:58:56:2d:c4:dd:a5:28:21:e2:01:30:f0: 2c:be:fd:4c:b2:1a:0d:e1:1a:3e:fd:81:5e:e9:3f: 2c:46:de:d0:ec:c1:4a:0d:46:10:46:22:c0:23:ad: 96:e3:d3:2c:cf:8e:5d:55:93:3d:f6:1c:d4:98:1a: 98:fd:41:92:9b:45:51:60:2c:9b:73:e0:4e:f2:c2: fd:d5:2e:07:e6:83:58:84:5d:67:47:b5:48:82:2f: 43:7f:29:20:63:ad:92:6f:e2:d3:07:19:c7:bc:27: fa:fb:71:6b:46:e2:58:e0:48:be:13:9a:56:69:2d: b9:ee:71:1a:e2:ad:10:1c:2c:f6:d1:9b:f3:96:8f: f6:84:21:ba:20:63:bc:f7:bd:71:a7:31:ba:59:e3: 97:3e:1c:b2:22:4f:22:0a:e0:75:f4:18:19:6c:e3: a9:1e:ac:8a:24:c5:76:a9:a4:ce:fd:30:00:74:c0: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6C:3D:60:98:E9:FC:B3:E0:3B:FA:84:F1:58:99:FC:0C:B5:07:3F X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/kmw9YJjp_LPgO_qE8ViZ_Ay1Bz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:b00::/40 2a14:67c3:80::/44 Signature Algorithm: sha256WithRSAEncryption 99:71:a0:d4:66:46:81:74:e7:37:e1:b5:34:9e:e3:ed:a1:72: 8f:da:60:4c:40:3d:76:96:96:bc:0b:14:32:aa:db:37:00:d0: 2a:3b:dc:b8:e5:d4:38:9d:23:06:00:eb:32:c8:b9:c7:74:29: a8:5b:f5:08:2e:7c:80:5d:b7:06:2c:5a:e7:fa:07:4a:3a:f0: fa:db:0a:f9:1b:b8:10:9f:73:d6:11:6c:5f:aa:1d:b7:af:39: 3e:57:83:e7:8c:c1:46:5f:7c:2a:c8:ab:5c:1b:15:ea:32:2c: 3f:f2:cc:e2:cf:da:02:4c:c8:98:10:96:a3:32:69:17:71:72: 90:79:0e:7c:f6:7a:ed:ce:a5:a4:43:bc:4a:d3:f7:53:65:6b: 31:c8:c2:c1:29:b7:98:2c:ef:2d:1d:f7:3c:64:8e:e2:21:d2: b8:cd:d3:fd:ec:9e:90:1f:88:c5:0a:df:c9:fa:1d:20:96:38: 8c:a8:e3:cc:b7:91:0f:a7:bf:fb:76:f1:16:9f:a7:f8:df:17: 56:37:6d:30:1b:45:c8:4c:9a:b6:c1:89:77:c1:b2:d1:51:92: ef:2b:d0:1c:36:ea:2b:4b:9f:55:21:04:28:49:d4:c1:87:90: 5a:b5:19:1e:ca:0f:0f:be:fc:3c:99:cd:63:72:85:74:f8:23: 33:87:99:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/qd+i3Yzf6RXGeCquehXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAyMTcwMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZjM2Q2MDk4ZTlmY2IzZTAzYmZhODRmMTU4OTlmYzBjYjUwNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntVuKJYqXJbOr0aaEIqWPTtrCMzy Qn+kFwceiK5/1ftfYIp3wxAvNYdf+QwJpMwFKgh4CzB24iJAjf9NZdEL+wkQe0VM W8j/+xVlk7ZYVi3E3aUoIeIBMPAsvv1MshoN4Ro+/YFe6T8sRt7Q7MFKDUYQRiLA I62W49Msz45dVZM99hzUmBqY/UGSm0VRYCybc+BO8sL91S4H5oNYhF1nR7VIgi9D fykgY62Sb+LTBxnHvCf6+3FrRuJY4Ei+E5pWaS257nEa4q0QHCz20Zvzlo/2hCG6 IGO8971xpzG6WeOXPhyyIk8iCuB19BgZbOOpHqyKJMV2qaTO/TAAdMBNEwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFJJsPWCY6fyz4Dv6hPFYmfwMtQc/MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEva213OVlKanBfTFBnT19xRThWaVpfQXkxQno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKhRnwgsD BwQqFGfDAIAwDQYJKoZIhvcNAQELBQADggEBAJlxoNRmRoF05zfhtTSe4+2hco/a YExAPXaWlrwLFDKq2zcA0Co73Ljl1DidIwYA6zLIucd0Kahb9QgufIBdtwYsWuf6 B0o68PrbCvkbuBCfc9YRbF+qHbevOT5Xg+eMwUZffCrIq1wbFeoyLD/yzOLP2gJM yJgQlqMyaRdxcpB5Dnz2eu3OpaRDvErT91NlazHIwsEpt5gs7y0d9zxkjuIh0rjN 0/3snpAfiMUK38n6HSCWOIyo48y3kQ+nv/t28Rafp/jfF1Y3bTAbRchMmrbBiXfB stFRku8r0Bw26itLn1UhBChJ1MGHkFq1GR7KDw++/DyZzWNyhXT4IzOHmYw= -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:56 2026 by rpki-client