This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/Km_5u_8-0UPIHvzrlRYqORNlnWI.roa File: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (raw, json) Hash identifier: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg= Subject key identifier: 2A:6F:F9:BB:FF:3E:D1:43:C8:1E:FC:EB:95:16:2A:39:13:65:9D:62 Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Certificate serial: 019B77591FB7D936F7CA4D730F2C74CD437D Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/Km_5u_8-0UPIHvzrlRYqORNlnWI.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 2001:67c:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:b7:d9:36:f7:ca:4d:73:0f:2c:74:cd:43:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a6ff9bbff3ed143c81efceb95162a3913659d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:c8:f5:e0:b7:38:c6:a2:0b:67:a1:1a:6d: 8a:ba:6a:e0:73:2f:ac:60:a6:e1:8c:da:e3:56:68: 95:95:a9:94:97:27:10:56:f9:c0:d7:9f:a4:7d:31: 65:42:0d:dc:6b:49:93:43:53:cb:da:42:bd:a3:72: a3:e9:46:d3:d2:e8:40:f0:bb:ad:09:a7:0b:46:fe: 24:45:c6:62:d3:22:5a:06:4e:5d:39:e6:24:4e:23: 98:a9:16:d6:5c:29:68:ad:f2:a5:05:d7:c8:49:e8: 8c:36:05:bf:7f:9c:99:82:57:ff:6c:71:f2:01:3d: fa:46:16:90:fe:5e:79:2f:65:92:dc:46:b9:5f:d1: 3c:d0:7d:c5:78:78:6b:32:23:46:40:99:1a:68:ad: 66:5d:9c:b1:fd:3f:9b:1e:0a:90:0c:09:68:40:11: 62:25:9d:81:85:d0:53:ee:79:a8:75:7f:60:bf:5c: 8a:92:c9:cd:95:b4:8c:9e:4a:0a:d1:0f:bc:07:24: 75:88:e5:c6:57:83:6d:2a:be:1f:51:57:05:c4:e4: bc:13:d8:b9:a9:ef:bb:56:1e:ba:9f:f3:99:31:95: 91:a4:9b:ef:20:97:96:59:c2:ec:f3:b3:76:7f:44: 62:5b:3e:57:1e:fe:fd:7e:34:ed:61:b2:52:5c:f3: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6F:F9:BB:FF:3E:D1:43:C8:1E:FC:EB:95:16:2A:39:13:65:9D:62 X509v3 Authority Key Identifier: keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/Km_5u_8-0UPIHvzrlRYqORNlnWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:420::/48 Signature Algorithm: sha256WithRSAEncryption dc:4e:fd:01:c0:54:7c:7f:29:de:cb:d1:68:94:9b:ff:61:38: 2d:58:47:9c:0c:87:aa:e6:d1:c6:da:7b:c4:39:fc:24:77:d2: 48:3e:43:bb:0b:45:6d:c4:35:2c:70:26:13:1c:b5:5b:55:00: 16:3b:37:3b:d4:11:36:57:48:dd:57:af:64:a8:46:dd:10:4b: ce:67:5b:a8:e3:48:e2:1f:18:85:fb:27:fe:01:27:40:70:9b: a2:e2:1c:78:6e:c4:d1:8f:76:7a:ec:01:77:f9:4b:b9:1b:aa: fb:f6:c8:34:08:89:72:e5:49:83:88:1b:1e:62:7d:81:a9:a1: 1b:ae:39:e7:ef:79:31:4b:e1:8b:17:63:c3:fe:9f:53:fc:7a: f0:e4:67:b8:34:a8:8c:f0:a6:32:bf:03:9f:ec:d4:e9:f8:eb: 85:cc:34:49:9f:75:44:7a:ae:8b:f1:98:f8:00:3d:5d:d8:75: b3:b8:2a:be:81:f9:5a:a7:88:ac:84:dc:27:d5:7d:37:2c:f5: 2e:0e:5d:cc:89:b6:28:e5:2e:f2:df:8e:59:29:53:21:19:bc: 0a:e0:62:fd:03:4d:c4:2e:c1:05:73:1f:87:9d:ce:5a:e4:bd: 1f:73:f5:1d:8c:a6:9d:24:01:48:57:02:93:c8:e2:90:73:5b: 0b:57:ee:5a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WR+32Tb3yk1zDyx0zUN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy ODM2ZGMwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTZmZjliYmZmM2VkMTQzYzgxZWZjZWI5NTE2MmEzOTEzNjU5ZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpvI9eC3OMaiC2ehGm2Kumrgcy+s YKbhjNrjVmiVlamUlycQVvnA15+kfTFlQg3ca0mTQ1PL2kK9o3Kj6UbT0uhA8Lut CacLRv4kRcZi0yJaBk5dOeYkTiOYqRbWXClorfKlBdfISeiMNgW/f5yZglf/bHHy AT36RhaQ/l55L2WS3Ea5X9E80H3FeHhrMiNGQJkaaK1mXZyx/T+bHgqQDAloQBFi JZ2BhdBT7nmodX9gv1yKksnNlbSMnkoK0Q+8ByR1iOXGV4NtKr4fUVcFxOS8E9i5 qe+7Vh66n/OZMZWRpJvvIJeWWcLs87N2f0RiWz5XHv79fjTtYbJSXPMQZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCpv+bv/PtFDyB7865UWKjkTZZ1iMB8GA1UdIwQY MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt MDY1ZWQ0ZDg0NDFmLzEvS21fNXVfOC0wVVBJSHZ6cmxSWXFPUk5sbldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAQg MA0GCSqGSIb3DQEBCwUAA4IBAQDcTv0BwFR8fyney9FolJv/YTgtWEecDIeq5tHG 2nvEOfwkd9JIPkO7C0VtxDUscCYTHLVbVQAWOzc71BE2V0jdV69kqEbdEEvOZ1uo 40jiHxiF+yf+ASdAcJui4hx4bsTRj3Z67AF3+Uu5G6r79sg0CIly5UmDiBseYn2B qaEbrjnn73kxS+GLF2PD/p9T/Hrw5Ge4NKiM8KYyvwOf7NTp+OuFzDRJn3VEeq6L 8Zj4AD1d2HWzuCq+gflap4ishNwn1X03LPUuDl3MibYo5S7y345ZKVMhGbwK4GL9 A03ELsEFcx+Hnc5a5L0fc/UdjKadJAFIVwKTyOKQc1sLV+5a -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:31 2026 by rpki-client