This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa File: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (raw, json) Hash identifier: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0= Subject key identifier: 28:2A:F7:5C:F0:DE:4E:55:8A:3B:E6:CF:23:AF:C7:FC:2C:75:5A:14 Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Certificate serial: 019B77592BFEF2047CFAA945190F16BACA36 Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211509 IP address blocks: 2001:678:3f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:fe:f2:04:7c:fa:a9:45:19:0f:16:ba:ca:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=282af75cf0de4e558a3be6cf23afc7fc2c755a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:32:0f:10:c7:80:82:06:d9:a1:71:e6:93: ea:27:84:72:3b:8a:a7:05:03:71:41:cf:43:24:7a: 41:e1:55:5b:f2:0d:90:73:27:3c:41:fb:35:b9:8b: f8:16:d7:cb:84:56:6e:5a:d4:a1:14:5a:35:7c:27: 6e:ba:4c:1a:bd:fc:18:df:13:ec:8f:28:33:41:70: 16:de:e1:7c:01:07:88:73:46:5e:63:8a:eb:03:20: fb:8c:97:ff:94:a4:a6:92:87:ab:b7:cc:54:43:7f: 40:5d:df:74:0f:91:f9:dd:65:e2:ef:80:70:5d:7e: 9f:fc:2e:ba:29:14:90:47:a7:43:03:8b:ec:9c:2a: 86:1d:67:f7:54:78:01:5c:57:9d:70:df:ac:e9:92: 32:ab:d1:68:a6:61:69:43:55:c1:7c:60:a6:f9:fe: 0d:44:91:6d:53:95:6e:1a:7e:43:7e:77:01:67:b9: 56:09:70:da:9d:41:d8:89:44:7a:95:1c:9e:bf:aa: 8c:5f:0e:d3:d7:ac:19:88:6b:32:6a:cd:a7:35:1e: 93:52:07:83:5f:b7:46:66:5f:de:d8:5f:5f:1c:7a: e2:27:aa:e0:c5:c6:c8:6b:db:d4:d6:91:90:d1:c5: 76:5d:36:58:74:87:8f:05:ca:93:3a:91:fa:66:d7: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:F7:5C:F0:DE:4E:55:8A:3B:E6:CF:23:AF:C7:FC:2C:75:5A:14 X509v3 Authority Key Identifier: keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:3f4::/48 Signature Algorithm: sha256WithRSAEncryption af:df:5d:e6:39:04:ea:f5:5c:1d:67:f2:88:20:af:fe:a3:b8: 2e:69:20:b1:60:91:de:e7:f7:44:c0:c4:fe:f6:2a:16:24:9b: 7e:86:6f:2f:cb:c9:b1:30:4a:86:2e:cb:6b:a3:67:65:f9:45: 5c:9f:c2:16:77:3e:77:62:1c:88:42:1a:65:d8:bc:72:93:49: 45:0a:39:6c:10:f6:2a:cb:c7:87:f9:e9:d7:76:f0:fe:5b:44: b8:af:88:60:07:09:35:13:e3:65:03:84:3e:c9:31:77:06:15: 42:d2:0e:b2:6a:c4:9e:7e:fb:29:eb:0f:7f:c9:c3:c5:42:95: f0:37:26:5e:00:5b:52:6d:f3:b9:12:d2:8f:a8:35:37:ef:90: 8d:a0:07:f0:36:4b:93:55:b3:26:1d:31:ae:20:02:70:2a:8d: 85:b4:da:48:6c:ce:b6:12:4e:bd:57:d7:6d:25:25:0d:40:ef: 52:fa:3f:80:e3:36:c3:bf:32:91:f3:5b:bc:3f:1a:9e:d4:a9: d7:4a:e0:00:b9:b4:ab:82:d0:43:c9:28:06:ef:3d:33:33:f7: 87:0f:4d:fc:45:24:29:eb:12:ed:e3:f9:61:fe:24:fd:39:42: 88:94:ea:d2:e3:43:7a:7d:5b:89:9b:85:14:d9:8b:1b:24:c3: 08:43:be:98 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WSv+8gR8+qlFGQ8Wuso2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh ZmQ3MTIwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODJhZjc1Y2YwZGU0ZTU1OGEzYmU2Y2YyM2FmYzdmYzJjNzU1YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtikyDxDHgIIG2aFx5pPqJ4RyO4qn BQNxQc9DJHpB4VVb8g2Qcyc8Qfs1uYv4FtfLhFZuWtShFFo1fCduukwavfwY3xPs jygzQXAW3uF8AQeIc0ZeY4rrAyD7jJf/lKSmkoert8xUQ39AXd90D5H53WXi74Bw XX6f/C66KRSQR6dDA4vsnCqGHWf3VHgBXFedcN+s6ZIyq9FopmFpQ1XBfGCm+f4N RJFtU5VuGn5DfncBZ7lWCXDanUHYiUR6lRyev6qMXw7T16wZiGsyas2nNR6TUgeD X7dGZl/e2F9fHHriJ6rgxcbIa9vU1pGQ0cV2XTZYdIePBcqTOpH6ZtcWrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCgq91zw3k5VijvmzyOvx/wsdVoUMB8GA1UdIwQY MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt MmY5MDZkYTJlZjIwLzEvS0NyM1hQRGVUbFdLTy1iUEk2X0hfQ3gxV2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAP0 MA0GCSqGSIb3DQEBCwUAA4IBAQCv313mOQTq9VwdZ/KIIK/+o7guaSCxYJHe5/dE wMT+9ioWJJt+hm8vy8mxMEqGLstro2dl+UVcn8IWdz53YhyIQhpl2Lxyk0lFCjls EPYqy8eH+enXdvD+W0S4r4hgBwk1E+NlA4Q+yTF3BhVC0g6yasSefvsp6w9/ycPF QpXwNyZeAFtSbfO5EtKPqDU375CNoAfwNkuTVbMmHTGuIAJwKo2FtNpIbM62Ek69 V9dtJSUNQO9S+j+A4zbDvzKR81u8Pxqe1KnXSuAAubSrgtBDySgG7z0zM/eHD038 RSQp6xLt4/lh/iT9OUKIlOrS40N6fVuJm4UU2YsbJMMIQ76Y -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:04 2026 by rpki-client