This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa File: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (raw, json) Hash identifier: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA= Subject key identifier: 91:4A:83:D4:1F:C7:AA:B4:46:40:C7:DD:9B:4A:7F:9C:BE:6A:D5:8A Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Certificate serial: 019B79EC9A27E09C90C30258A1BF18671CFD Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199768 IP address blocks: 2001:67c:28e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9a:27:e0:9c:90:c3:02:58:a1:bf:18:67:1c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=914a83d41fc7aab44640c7dd9b4a7f9cbe6ad58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:00:bc:13:59:34:b8:70:0a:04:e3:0e:7c: 72:c1:55:98:59:fd:ee:97:7d:75:10:e8:b8:2e:73: b2:c3:54:ad:5b:41:e8:be:54:4d:14:f3:02:36:ea: 5d:51:c5:0e:ec:e3:d8:b3:da:38:71:8d:ec:31:33: 5b:e7:0d:05:08:d6:5f:ec:3b:72:11:8c:1a:8e:77: 0f:b3:4c:23:83:eb:ff:0f:00:69:28:82:eb:a1:3c: 03:ff:d4:4e:41:13:f6:49:51:15:69:bf:7e:13:58: 05:bd:96:63:a1:cf:9a:af:d1:78:d4:eb:c7:a1:45: f2:ff:f1:37:44:29:16:cb:bf:e5:94:02:75:2f:af: cb:8f:4e:07:0a:5b:c0:fe:8e:28:35:53:4b:cd:35: 41:69:86:3b:9c:fb:18:ee:50:04:e1:f4:52:98:50: 10:eb:d6:41:41:25:2d:cc:95:fd:89:92:3f:8e:02: ae:1f:d5:1c:3f:ce:0b:ff:8f:d4:68:81:4d:d6:81: 1a:54:9e:00:6d:e2:70:70:de:4b:4c:91:c2:bc:b5: d8:b7:17:a4:dc:2f:77:55:e3:72:f3:60:12:13:14: e5:23:7c:8e:f2:ae:f3:f8:d3:4a:0a:30:5a:29:06: 4c:c4:17:1e:6d:87:42:96:e9:e2:e7:2b:0a:d6:be: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:83:D4:1F:C7:AA:B4:46:40:C7:DD:9B:4A:7F:9C:BE:6A:D5:8A X509v3 Authority Key Identifier: keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:28e8::/48 Signature Algorithm: sha256WithRSAEncryption 8e:0e:e7:e4:48:c1:17:be:cd:13:40:c8:fd:6f:53:01:7a:26: 67:de:9c:15:21:e5:28:8c:0d:81:a1:22:9b:9d:5c:33:65:46: c5:60:4d:49:cb:d7:8c:2f:f9:81:3d:dc:6c:0e:71:ba:07:e3: 9b:01:a1:d9:b1:91:d7:c4:a8:7a:9a:74:c4:14:eb:9a:b1:b8: db:be:11:6d:59:0b:3d:6b:db:a7:46:ed:bf:98:0d:62:ad:c6: db:ef:d8:7f:d9:a0:8d:83:2d:f1:af:4d:78:62:d1:04:cd:84: 44:e7:65:26:9a:e9:41:f4:34:8a:93:2a:bb:4e:5e:14:28:df: 73:b9:72:a5:f7:13:26:f6:91:e8:0a:68:95:7e:cc:30:67:46: 60:8b:8e:44:e1:9e:62:09:bb:8a:8e:69:3f:ea:6d:15:c6:ac: 6c:23:5b:94:14:b4:93:c9:d7:d0:90:8a:73:17:83:b1:74:8a: e3:62:41:ce:d6:56:98:4a:cb:a4:a8:d6:ff:dd:0b:fe:9b:3d: fc:fe:9f:32:b5:ea:f0:8b:d2:42:a6:8a:36:10:c8:19:e5:ec: 14:f1:8d:95:bf:39:47:69:0e:00:8a:2b:39:78:d7:8e:f6:11: 07:dc:f0:fd:cf:dc:5b:cd:cf:f5:d5:14:6e:86:74:e2:68:94: 28:52:e8:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57Jon4JyQwwJYob8YZxz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2EyMmQzY2U0NTNhYzBjMDNjYTliNmMyMTQwNzcxNGVi Nzg0MjUwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTRhODNkNDFmYzdhYWI0NDY0MGM3ZGQ5YjRhN2Y5Y2JlNmFkNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdoAvBNZNLhwCgTjDnxywVWYWf3u l311EOi4LnOyw1StW0HovlRNFPMCNupdUcUO7OPYs9o4cY3sMTNb5w0FCNZf7Dty EYwajncPs0wjg+v/DwBpKILroTwD/9ROQRP2SVEVab9+E1gFvZZjoc+ar9F41OvH oUXy//E3RCkWy7/llAJ1L6/Lj04HClvA/o4oNVNLzTVBaYY7nPsY7lAE4fRSmFAQ 69ZBQSUtzJX9iZI/jgKuH9UcP84L/4/UaIFN1oEaVJ4AbeJwcN5LTJHCvLXYtxek 3C93VeNy82ASExTlI3yO8q7z+NNKCjBaKQZMxBcebYdCluni5ysK1r60oQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJFKg9Qfx6q0RkDH3ZtKf5y+atWKMB8GA1UdIwQY MBaAFG7KItPORTrAwDyptsIUB3FOt4QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEt ODA5Y2E1MzRmYTU4LzEva1VxRDFCX0hxclJHUU1mZG0wcF9uTDVxMVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEtODA5Y2E1MzRmYTU4 LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCjo MA0GCSqGSIb3DQEBCwUAA4IBAQCODufkSMEXvs0TQMj9b1MBeiZn3pwVIeUojA2B oSKbnVwzZUbFYE1Jy9eML/mBPdxsDnG6B+ObAaHZsZHXxKh6mnTEFOuasbjbvhFt WQs9a9unRu2/mA1ircbb79h/2aCNgy3xr014YtEEzYRE52UmmulB9DSKkyq7Tl4U KN9zuXKl9xMm9pHoCmiVfswwZ0Zgi45E4Z5iCbuKjmk/6m0VxqxsI1uUFLSTydfQ kIpzF4OxdIrjYkHO1laYSsukqNb/3Qv+mz38/p8yterwi9JCpoo2EMgZ5ewU8Y2V vzlHaQ4Aiis5eNeO9hEH3PD9z9xbzc/11RRuhnTiaJQoUuhn -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:17 2026 by rpki-client