This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Kr_eJ3ohWJrFDW9_DV2Xb6zWU_8.roa File: Kr_eJ3ohWJrFDW9_DV2Xb6zWU_8.roa (raw, json) Hash identifier: 01bgPQzTzoxhE/noWfXZ5QmxxJ0fpF4TfnEcPR3gTcw= Subject key identifier: 2A:BF:DE:27:7A:21:58:9A:C5:0D:6F:7F:0D:5D:97:6F:AC:D6:53:FF Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A6D7DCEE9576C48C963406F38CC5 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Kr_eJ3ohWJrFDW9_DV2Xb6zWU_8.roa Signing time: Fri 02 Jan 2026 14:20:18 +0000 ROA not before: Fri 02 Jan 2026 14:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17035 IP address blocks: 2001:668:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a6:d7:dc:ee:95:76:c4:8c:96:34:06:f3:8c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2abfde277a21589ac50d6f7f0d5d976facd653ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:f9:49:f0:bb:5d:75:fc:98:76:0d:a4:d5: 92:4b:b2:f5:3c:77:20:0a:03:16:26:6b:a9:f1:63: 7a:5e:ce:33:0d:22:07:80:2c:f7:4b:33:51:b8:bc: 5f:eb:af:ff:6f:17:b4:6a:f6:81:ee:48:89:ba:25: 16:68:01:47:c8:4c:19:f2:71:33:3a:52:df:33:d5: 0b:6f:50:cd:bb:3d:ff:3b:67:d2:63:61:93:c4:7d: c3:ee:65:49:e6:f2:68:73:e4:1c:b2:85:f0:54:c6: 1e:a9:af:70:03:0a:71:34:c1:b2:00:1e:43:87:3f: 63:22:61:83:9c:c1:5a:a8:82:a6:36:7b:94:90:39: 7c:33:84:bb:61:a5:ec:82:1b:2b:65:7f:b3:f5:0f: 77:7b:0d:4b:6c:d0:93:9b:bd:fe:76:69:78:f4:0a: a2:fc:2b:14:38:74:fc:7b:6c:1a:08:d0:a8:ea:b6: 36:ab:8b:26:3e:a7:c4:bb:df:82:af:16:7e:b5:83: 61:3a:4a:98:c3:6a:8b:ea:69:cd:d3:be:40:65:4d: a4:22:ab:f3:56:22:01:98:ee:83:eb:c7:0c:f9:93: 1e:9c:7f:e2:af:a3:00:50:28:a5:e5:af:ad:36:7c: 1b:84:09:22:4d:1d:9e:4b:ad:d1:17:1f:5f:bf:94: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BF:DE:27:7A:21:58:9A:C5:0D:6F:7F:0D:5D:97:6F:AC:D6:53:FF X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Kr_eJ3ohWJrFDW9_DV2Xb6zWU_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:668:120::/48 Signature Algorithm: sha256WithRSAEncryption 7d:77:c9:5c:2c:23:76:03:7d:56:c4:ee:4b:70:e7:2c:ac:1a: 30:5e:8a:2d:43:30:38:1c:c4:37:c2:7b:91:77:69:64:2b:5c: 0b:aa:71:dd:bc:01:c6:ba:2a:b2:9a:c6:f1:91:e0:9c:04:27: cd:ba:a4:8b:7c:a6:2d:c3:f4:4e:56:3c:25:cf:8b:85:87:25: 66:41:34:ac:d7:e9:16:49:68:c0:d9:26:86:26:80:a1:db:ef: 9a:a9:58:e4:3d:f7:fc:fb:da:de:b6:ad:a0:b8:17:b2:b5:ab: 62:b7:8b:c0:4b:32:1a:5b:c0:00:a2:d9:93:33:c5:4a:82:d3: 52:01:29:b7:52:d3:cd:14:bd:8b:4e:c7:6c:e7:e4:26:9b:1d: 7e:ba:3e:67:ce:19:4b:64:b6:ac:fc:f2:f2:74:7e:99:f5:0d: 65:ed:12:05:29:b6:18:32:27:42:a5:90:c7:2b:9b:af:78:c1: 1b:30:56:5d:b3:ed:f5:0b:d6:76:3d:e3:b4:55:8a:fc:f4:e5: 07:26:73:8f:5f:06:16:25:1c:a3:16:0a:31:64:c9:bd:69:ba: 42:07:18:8c:ea:4f:5d:a0:81:36:f9:5c:9f:85:98:43:c7:55: 0a:b9:82:61:80:af:97:40:75:77:7a:a7:8d:ea:04:88:0c:d2: 56:94:d8:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FKbX3O6VdsSMljQG84zFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWJmZGUyNzdhMjE1ODlhYzUwZDZmN2YwZDVkOTc2ZmFjZDY1M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wj5SfC7XXX8mHYNpNWSS7L1PHcg CgMWJmup8WN6Xs4zDSIHgCz3SzNRuLxf66//bxe0avaB7kiJuiUWaAFHyEwZ8nEz OlLfM9ULb1DNuz3/O2fSY2GTxH3D7mVJ5vJoc+QcsoXwVMYeqa9wAwpxNMGyAB5D hz9jImGDnMFaqIKmNnuUkDl8M4S7YaXsghsrZX+z9Q93ew1LbNCTm73+dml49Aqi /CsUOHT8e2waCNCo6rY2q4smPqfEu9+CrxZ+tYNhOkqYw2qL6mnN075AZU2kIqvz ViIBmO6D68cM+ZMenH/ir6MAUCil5a+tNnwbhAkiTR2eS63RFx9fv5T4/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCq/3id6IViaxQ1vfw1dl2+s1lP/MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvS3JfZUozb2hXSnJGRFc5X0RWMlhiNnpXVV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGaAEg MA0GCSqGSIb3DQEBCwUAA4IBAQB9d8lcLCN2A31WxO5LcOcsrBowXootQzA4HMQ3 wnuRd2lkK1wLqnHdvAHGuiqymsbxkeCcBCfNuqSLfKYtw/ROVjwlz4uFhyVmQTSs 1+kWSWjA2SaGJoCh2++aqVjkPff8+9retq2guBeytatit4vASzIaW8AAotmTM8VK gtNSASm3UtPNFL2LTsds5+Qmmx1+uj5nzhlLZLas/PLydH6Z9Q1l7RIFKbYYMidC pZDHK5uveMEbMFZds+31C9Z2PeO0VYr89OUHJnOPXwYWJRyjFgoxZMm9abpCBxiM 6k9doIE2+VyfhZhDx1UKuYJhgK+XQHV3eqeN6gSIDNJWlNjw -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:05 2026 by rpki-client