This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/KVEesZy60JcmrCD9X0Zw8ckitl8.roa File: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (raw, json) Hash identifier: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0= Subject key identifier: 29:51:1E:B1:9C:BA:D0:97:26:AC:20:FD:5F:46:70:F1:C9:22:B6:5F Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a Certificate serial: 019B79ECCD18C64D05F6A89F933E4CC8EB6D Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/KVEesZy60JcmrCD9X0Zw8ckitl8.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29632 IP address blocks: 2001:67c:1874::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cd:18:c6:4d:05:f6:a8:9f:93:3e:4c:c8:eb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29511eb19cbad09726ac20fd5f4670f1c922b65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:db:31:d9:74:21:08:48:14:2f:9a:a1:76: 97:78:cc:3c:d4:04:c9:3d:29:85:81:06:f4:eb:b2: b4:ce:6a:b7:a4:72:49:e3:0a:c5:6a:5e:cc:1b:d7: ba:55:66:99:0b:b2:fb:13:2a:e9:ba:cb:79:39:b6: 0e:d4:a8:f6:65:c0:0f:84:d2:49:f7:5c:b6:bb:7c: 9f:87:98:7f:d2:f9:6a:b2:e5:60:e7:2e:72:aa:a4: 25:10:18:c2:73:ef:c6:bc:c6:77:43:7a:e2:c9:24: e4:21:b8:0c:cb:89:de:67:fe:3b:b8:b7:f7:fc:98: 11:f1:a1:b2:44:4a:8b:06:ab:b2:9a:b6:c0:52:3a: e9:62:56:76:73:e9:46:ce:5d:40:f7:f3:85:5a:d6: e4:d9:c1:aa:1f:da:56:85:fb:e7:83:13:3e:0d:dd: 49:6c:cd:ba:71:3e:24:45:c6:bd:62:5f:a6:cc:3e: 5c:d3:ce:a6:5c:0a:7b:ff:70:a4:04:e3:da:cf:37: 73:b7:70:2b:38:fa:b7:28:f3:1a:0a:82:e2:76:e6: 3f:b5:f5:98:d1:fd:97:c0:fe:da:51:6d:5c:02:01: 46:97:11:7e:49:6d:19:b2:86:5f:8e:04:fe:63:53: e2:59:2d:b0:81:9d:2a:84:de:b1:f6:01:f3:17:d9: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:51:1E:B1:9C:BA:D0:97:26:AC:20:FD:5F:46:70:F1:C9:22:B6:5F X509v3 Authority Key Identifier: keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/KVEesZy60JcmrCD9X0Zw8ckitl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1874::/48 Signature Algorithm: sha256WithRSAEncryption 3d:5d:9b:ac:d7:78:90:46:c3:77:8b:ed:61:21:a2:8a:c9:05: e0:f5:ec:14:15:aa:8f:13:5b:ed:ce:6f:24:3c:d6:64:af:8d: 4b:15:88:ba:26:c5:d9:b3:6f:ee:51:87:bd:6e:98:4a:88:0f: d3:75:2e:a9:ab:87:d9:3f:22:25:37:a3:f5:46:ee:a1:15:4d: a0:6a:d6:8c:88:c8:aa:09:ed:f6:e1:d6:ba:34:71:fe:42:04: 40:20:58:fc:cd:be:bb:ed:43:a5:e0:83:f7:b6:d3:2b:1f:13: 12:b5:46:f9:f0:93:da:7e:9b:74:2e:84:4d:63:d0:93:f5:39: bd:a4:26:70:e9:ef:76:ff:b4:3e:45:85:c1:ae:1a:66:37:18: 2c:46:c2:ee:1b:75:34:ad:86:7e:6a:c2:54:7a:a2:5c:f3:69: d2:50:38:86:52:76:92:20:51:d3:23:68:d5:f9:dc:88:00:3c: 61:cb:0c:fd:3b:6b:69:6d:95:8a:58:0e:6a:e6:44:df:60:38: 34:dc:e0:fe:eb:b4:5e:38:43:fe:8c:f4:a7:4e:0a:cc:6c:8e: 83:14:49:6b:23:3a:16:24:a2:ae:30:3b:57:fb:6c:01:53:05: a7:df:2d:74:99:4c:76:88:f5:9e:11:84:bc:6c:39:16:a4:12: 6a:f0:8d:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57M0Yxk0F9qifkz5MyOttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx NDAzOGEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTUxMWViMTljYmFkMDk3MjZhYzIwZmQ1ZjQ2NzBmMWM5MjJiNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53fbMdl0IQhIFC+aoXaXeMw81ATJ PSmFgQb067K0zmq3pHJJ4wrFal7MG9e6VWaZC7L7Eyrpust5ObYO1Kj2ZcAPhNJJ 91y2u3yfh5h/0vlqsuVg5y5yqqQlEBjCc+/GvMZ3Q3riySTkIbgMy4neZ/47uLf3 /JgR8aGyREqLBquymrbAUjrpYlZ2c+lGzl1A9/OFWtbk2cGqH9pWhfvngxM+Dd1J bM26cT4kRca9Yl+mzD5c086mXAp7/3CkBOPazzdzt3ArOPq3KPMaCoLiduY/tfWY 0f2XwP7aUW1cAgFGlxF+SW0ZsoZfjgT+Y1PiWS2wgZ0qhN6x9gHzF9nRlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFClRHrGcutCXJqwg/V9GcPHJIrZfMB8GA1UdIwQY MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt MmE1ZTk4YWJkMWYzLzEvS1ZFZXNaeTYwSmNtckNEOVgwWnc4Y2tpdGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBh0 MA0GCSqGSIb3DQEBCwUAA4IBAQA9XZus13iQRsN3i+1hIaKKyQXg9ewUFaqPE1vt zm8kPNZkr41LFYi6JsXZs2/uUYe9bphKiA/TdS6pq4fZPyIlN6P1Ru6hFU2gataM iMiqCe324da6NHH+QgRAIFj8zb677UOl4IP3ttMrHxMStUb58JPafpt0LoRNY9CT 9Tm9pCZw6e92/7Q+RYXBrhpmNxgsRsLuG3U0rYZ+asJUeqJc82nSUDiGUnaSIFHT I2jV+dyIADxhywz9O2tpbZWKWA5q5kTfYDg03OD+67ReOEP+jPSnTgrMbI6DFElr IzoWJKKuMDtX+2wBUwWn3y10mUx2iPWeEYS8bDkWpBJq8I3U -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:18 2026 by rpki-client