This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/keGrabfGTJ2PEb01MkX--1neS-4.roa File: keGrabfGTJ2PEb01MkX--1neS-4.roa (raw, json) Hash identifier: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A= Subject key identifier: 91:E1:AB:69:B7:C6:4C:9D:8F:11:BD:35:32:45:FE:FB:59:DE:4B:EE Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37E9B427003283D33D202C3218707 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/keGrabfGTJ2PEb01MkX--1neS-4.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216334 IP address blocks: 2a12:b3c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7e:9b:42:70:03:28:3d:33:d2:02:c3:21:87:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91e1ab69b7c64c9d8f11bd353245fefb59de4bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:0a:21:94:42:9b:8f:ff:63:66:24:e3:53: e0:f7:48:71:16:c3:1c:8a:00:e3:6c:24:fe:fc:77: 4d:cb:60:aa:f8:e1:47:27:84:b2:b3:77:fa:1e:55: 0c:86:58:f1:56:71:fb:8b:19:2e:4e:24:de:83:5f: f5:7c:a0:fc:22:a4:38:77:d6:e5:39:92:b2:c9:85: 64:e1:63:53:a4:49:48:f4:d8:7e:a8:04:df:07:db: 21:ae:97:c4:f4:85:9a:b9:9a:5e:4d:d5:d5:dc:66: f3:fb:7d:d2:9a:c6:95:b9:ac:da:1b:10:77:c3:b2: cf:28:b4:f3:e6:3b:54:b3:86:da:43:42:b2:14:37: ed:6f:1d:bd:7d:d4:30:44:1f:3f:ea:ad:17:98:c1: eb:b2:9e:cf:0f:10:46:ed:e2:57:a7:b2:28:91:a2: 7a:33:85:33:35:4c:dc:0a:25:90:d2:fb:d0:d9:f2: af:7a:83:f9:a9:46:4f:72:30:69:93:30:bb:d7:fb: 69:d8:df:7f:43:01:e6:8f:23:a0:3b:69:db:ce:b4: df:c4:6f:eb:98:b5:48:83:cd:c5:d2:d1:5d:f9:c0: 75:be:7d:d0:85:b8:e6:ee:05:46:af:55:d0:ed:48: 21:d2:c7:92:fe:21:6b:31:e9:26:c1:20:0e:ff:0d: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E1:AB:69:B7:C6:4C:9D:8F:11:BD:35:32:45:FE:FB:59:DE:4B:EE X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/keGrabfGTJ2PEb01MkX--1neS-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:b3c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 3f:04:c6:72:01:b8:99:1c:88:3a:6e:00:6b:f4:3d:9b:39:d5: f0:00:42:32:72:4f:28:40:5e:41:e4:e4:1a:bc:58:67:db:b5: 5c:83:f4:b7:aa:9e:5a:e3:ee:7f:64:40:9b:3e:32:eb:16:4f: c7:90:b5:22:a9:27:2f:bb:bc:51:71:60:88:f1:b4:5e:31:d4: 77:57:ad:b1:93:05:d2:d5:17:1e:f7:c8:92:b7:4a:25:55:ca: 77:1f:71:c9:aa:37:49:8e:bd:2b:12:19:7c:f8:16:05:69:99: 30:de:c1:3c:b3:3c:f4:f0:95:6b:f3:22:de:a0:de:73:55:43: ad:72:d8:a6:93:aa:36:23:a4:87:f9:9a:c4:d4:2a:91:ed:aa: df:b1:bb:37:6a:e1:96:9c:c6:82:6d:8e:f8:fe:15:6a:a7:bc: f1:b3:51:50:41:dd:27:ca:05:43:a8:d9:14:a7:d0:b3:61:6b: 9e:61:30:e9:42:84:d2:16:94:91:81:ea:ac:26:90:f0:c3:4f: e5:1a:7f:bf:a9:9d:9e:0c:55:c1:1b:e3:b6:91:44:a8:51:8b: e6:66:ac:1f:b7:da:2e:03:b8:62:6c:32:b2:4c:53:dc:9d:15: b9:70:0a:8a:b3:1e:f5:41:15:f1:9d:38:4e:38:12:07:86:0a: 3f:b3:c8:8f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o36bQnADKD0z0gLDIYcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWUxYWI2OWI3YzY0YzlkOGYxMWJkMzUzMjQ1ZmVmYjU5ZGU0YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQKIZRCm4//Y2Yk41Pg90hxFsMc igDjbCT+/HdNy2Cq+OFHJ4Sys3f6HlUMhljxVnH7ixkuTiTeg1/1fKD8IqQ4d9bl OZKyyYVk4WNTpElI9Nh+qATfB9shrpfE9IWauZpeTdXV3Gbz+33SmsaVuazaGxB3 w7LPKLTz5jtUs4baQ0KyFDftbx29fdQwRB8/6q0XmMHrsp7PDxBG7eJXp7IokaJ6 M4UzNUzcCiWQ0vvQ2fKveoP5qUZPcjBpkzC71/tp2N9/QwHmjyOgO2nbzrTfxG/r mLVIg83F0tFd+cB1vn3Qhbjm7gVGr1XQ7Ugh0seS/iFrMekmwSAO/w2QLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJHhq2m3xkydjxG9NTJF/vtZ3kvuMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEva2VHcmFiZkdUSjJQRWIwMU1rWC0tMW5lUy00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKzwAAB MA0GCSqGSIb3DQEBCwUAA4IBAQA/BMZyAbiZHIg6bgBr9D2bOdXwAEIyck8oQF5B 5OQavFhn27Vcg/S3qp5a4+5/ZECbPjLrFk/HkLUiqScvu7xRcWCI8bReMdR3V62x kwXS1Rce98iSt0olVcp3H3HJqjdJjr0rEhl8+BYFaZkw3sE8szz08JVr8yLeoN5z VUOtctimk6o2I6SH+ZrE1CqR7arfsbs3auGWnMaCbY74/hVqp7zxs1FQQd0nygVD qNkUp9CzYWueYTDpQoTSFpSRgeqsJpDww0/lGn+/qZ2eDFXBG+O2kUSoUYvmZqwf t9ouA7hibDKyTFPcnRW5cAqKsx71QRXxnThOOBIHhgo/s8iP -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:26 2026 by rpki-client