This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa File: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (raw, json) Hash identifier: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw= Subject key identifier: 93:2D:4F:2D:F0:B9:36:2A:A4:FE:B3:8E:CC:D0:6B:F1:68:AA:DC:BB Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB89B899DFA710961D376EB97FEEBB Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141180 IP address blocks: 2a02:e0:3138::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:b8:99:df:a7:10:96:1d:37:6e:b9:7f:ee:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932d4f2df0b9362aa4feb38eccd06bf168aadcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:2f:48:a6:ce:73:34:ca:13:62:b8:01:02: 0b:39:79:59:af:db:00:a2:4a:a9:5f:e5:05:90:f6: cd:c9:d2:91:a7:27:a3:b4:dc:cb:4a:e3:a4:c3:ec: 2d:43:06:99:36:a6:af:4c:f8:04:24:71:51:9d:5e: ba:3c:d2:13:e0:3f:4c:d3:82:01:82:0f:ba:59:ff: f1:9e:18:f3:87:67:0b:e6:99:3f:0b:9a:90:d1:93: 0d:50:b9:d4:20:06:1a:1d:c9:29:8c:7e:8b:b9:17: c2:d8:b5:fa:26:0c:d6:d7:97:ba:bf:0b:d5:5e:6f: 53:2f:20:24:a4:ec:70:a7:7e:99:35:db:17:66:9b: 8b:9d:d5:94:de:6e:9a:b6:ce:80:b2:ff:57:8f:b2: 82:f6:4e:e9:07:9b:04:9b:32:60:ea:f2:05:b5:16: 46:0f:47:2f:26:53:9a:ed:a6:25:69:6a:33:64:fb: 5b:63:7b:6e:be:c3:6c:f3:7f:83:d7:99:ac:b1:c7: a1:9b:08:2c:41:74:46:ff:ed:77:df:c3:25:94:f4: b8:b7:fd:39:f8:e3:77:21:6e:d6:c5:81:cd:52:d1: b9:8b:7f:96:0c:d1:1d:c9:07:43:3f:67:49:54:04: c5:97:30:2c:28:23:96:2b:3d:02:4e:77:18:3c:55: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2D:4F:2D:F0:B9:36:2A:A4:FE:B3:8E:CC:D0:6B:F1:68:AA:DC:BB X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e0:3138::/48 Signature Algorithm: sha256WithRSAEncryption 11:72:eb:d5:5f:1f:47:8f:b8:14:58:e1:8e:3a:72:4a:79:0c: 99:11:0c:ec:47:9b:7c:fe:96:c8:c0:d5:db:2e:94:3d:3f:5e: 26:a8:34:d7:05:6c:b9:38:96:98:da:68:ce:14:49:2f:72:3e: 03:de:90:7d:a5:46:09:59:06:0c:10:82:78:36:72:07:6d:9c: 4b:56:e2:e3:15:05:b6:56:a6:11:7d:d9:13:25:14:a4:5b:52: 8c:21:59:0c:0c:86:64:32:4c:06:e8:6b:f7:84:ce:72:fe:5d: 03:f7:94:10:b0:8b:40:4e:30:95:5b:03:5e:33:30:8c:3b:b7: 0a:bd:57:a9:55:9a:4c:31:38:83:16:43:40:b8:bd:5d:5a:34: 17:a1:c2:80:cf:0f:0e:01:c0:b0:41:e1:27:86:7a:cb:c9:86: 73:e1:46:03:66:0d:92:85:ed:a6:21:9b:1b:1b:fd:b2:00:a7: 63:87:61:a9:4e:6c:93:ee:2e:54:1e:1b:b9:0b:55:b2:d0:ed: f3:5b:d0:98:6d:c6:8b:53:a5:7c:63:f8:ab:2b:6c:04:91:e6: 71:9d:21:82:2b:bf:27:82:ed:15:c7:03:34:a3:6b:94:78:5e: 0e:fd:b0:5b:ec:eb:e0:e9:03:7c:d6:61:78:97:c5:d1:04:95: 8b:2c:18:6e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264m4md+nEJYdN265f+67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzJkNGYyZGYwYjkzNjJhYTRmZWIzOGVjY2QwNmJmMTY4YWFkY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQIvSKbOczTKE2K4AQILOXlZr9sA okqpX+UFkPbNydKRpyejtNzLSuOkw+wtQwaZNqavTPgEJHFRnV66PNIT4D9M04IB gg+6Wf/xnhjzh2cL5pk/C5qQ0ZMNULnUIAYaHckpjH6LuRfC2LX6JgzW15e6vwvV Xm9TLyAkpOxwp36ZNdsXZpuLndWU3m6ats6Asv9Xj7KC9k7pB5sEmzJg6vIFtRZG D0cvJlOa7aYlaWozZPtbY3tuvsNs83+D15msscehmwgsQXRG/+1338MllPS4t/05 +ON3IW7WxYHNUtG5i3+WDNEdyQdDP2dJVATFlzAsKCOWKz0CTncYPFXdVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJMtTy3wuTYqpP6zjszQa/Foqty7MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEva3kxUExmQzVOaXFrX3JPT3pOQnI4V2lxM0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIA4DE4 MA0GCSqGSIb3DQEBCwUAA4IBAQARcuvVXx9Hj7gUWOGOOnJKeQyZEQzsR5t8/pbI wNXbLpQ9P14mqDTXBWy5OJaY2mjOFEkvcj4D3pB9pUYJWQYMEIJ4NnIHbZxLVuLj FQW2VqYRfdkTJRSkW1KMIVkMDIZkMkwG6Gv3hM5y/l0D95QQsItATjCVWwNeMzCM O7cKvVepVZpMMTiDFkNAuL1dWjQXocKAzw8OAcCwQeEnhnrLyYZz4UYDZg2She2m IZsbG/2yAKdjh2GpTmyT7i5UHhu5C1Wy0O3zW9CYbcaLU6V8Y/irK2wEkeZxnSGC K78ngu0VxwM0o2uUeF4O/bBb7Ovg6QN81mF4l8XRBJWLLBhu -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:10 2026 by rpki-client