This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/K1-czU5faW_445U2vHd4Xx9oQDk.roa File: K1-czU5faW_445U2vHd4Xx9oQDk.roa (raw, json) Hash identifier: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw= Subject key identifier: 2B:5F:9C:CD:4E:5F:69:6F:F8:E3:95:36:BC:77:78:5F:1F:68:40:39 Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439 Certificate serial: 019B7DC9F1A5C7F30FF773136FAEE0219858 Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/K1-czU5faW_445U2vHd4Xx9oQDk.roa Signing time: Fri 02 Jan 2026 08:19:05 +0000 ROA not before: Fri 02 Jan 2026 08:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25182 IP address blocks: 2a02:458::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f1:a5:c7:f3:0f:f7:73:13:6f:ae:e0:21:98:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b5f9ccd4e5f696ff8e39536bc77785f1f684039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:aa:77:9f:95:02:32:d7:eb:74:38:c4:4c: 6d:3e:d7:96:da:a7:32:6b:b8:58:39:20:1e:ab:6a: 5c:ea:e6:a4:f3:05:9d:ea:f5:b3:ec:a3:66:1f:92: 8d:c4:84:2b:bc:71:09:dd:df:77:09:98:3d:17:4a: 9c:ce:43:ea:b5:aa:4e:3c:df:19:1a:de:e9:bb:9a: af:9c:ec:6e:58:25:b7:09:bb:a5:d3:28:a8:8e:e4: c2:d2:0c:08:14:7c:75:d1:fb:29:46:02:78:b6:e2: 2d:67:c7:95:b2:5b:5b:eb:87:94:92:d9:74:1f:28: 4d:69:e7:75:a6:02:28:c2:2f:a0:11:eb:cc:62:e3: 03:ed:c8:ca:1a:30:3e:d0:34:d5:e8:40:9a:68:8f: 75:06:de:20:85:be:cb:98:c6:3f:8d:94:38:b2:84: 10:b4:49:e2:4c:e7:94:02:69:76:93:d6:80:13:58: 1c:ce:24:4a:da:3f:ee:19:6c:bf:a1:4e:c0:6f:cd: 7d:95:3d:a2:0c:c1:f1:73:10:81:e1:73:a3:94:ab: 5c:00:66:13:d4:2b:9e:af:da:23:7b:39:93:5e:0d: c5:ac:cd:94:20:89:69:53:39:51:39:b4:ed:21:8b: 9e:44:64:22:79:4d:bb:c4:c0:5f:a0:0f:d8:b3:43: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5F:9C:CD:4E:5F:69:6F:F8:E3:95:36:BC:77:78:5F:1F:68:40:39 X509v3 Authority Key Identifier: keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/K1-czU5faW_445U2vHd4Xx9oQDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:458::/32 Signature Algorithm: sha256WithRSAEncryption 6c:48:2a:a2:fe:4b:17:52:93:de:3f:d7:e8:8a:92:69:aa:a4: d0:36:e2:8b:fa:fd:d9:b4:35:76:fb:da:18:79:5f:46:50:80: da:b5:75:87:74:20:c6:8b:14:87:1c:78:02:f2:54:19:16:dd: 0b:ec:c3:3f:43:89:ca:4c:fa:82:d0:0a:f4:61:4f:19:ee:bc: 30:b5:d2:3f:d0:90:ef:1a:1c:14:b5:c4:32:58:26:07:a1:4d: 9a:7b:a4:a7:9e:4d:d1:53:ca:a8:e1:0f:a9:eb:4b:a6:8b:08: a9:fb:eb:20:03:db:5d:22:1f:e4:a0:8c:25:62:d2:6b:8d:5a: 93:39:38:25:4e:ac:e2:d0:e5:1e:5e:f4:f1:d2:8e:8a:85:76: a4:d3:0f:f5:d8:c7:f4:47:28:ad:9f:56:55:4b:89:f4:15:96: 6b:d9:36:c1:86:22:be:14:57:d2:4e:ba:cc:6e:a0:ff:f1:8c: a4:58:a7:a1:56:05:11:86:28:9d:51:f7:12:5c:6c:57:28:c3: ed:51:0d:e8:76:32:87:bd:63:e4:01:7f:6e:28:1c:b0:73:3c: d7:0c:23:40:e4:02:ee:84:df:9f:78:c1:36:16:50:32:d6:8a: 90:0a:c0:03:e8:ee:4d:92:ad:50:f3:68:94:16:9f:58:3d:19: 3a:fa:e2:74 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yfGlx/MP93MTb67gIZhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDg2NjFjNmFlZWNhY2Q5YjcxMTc2YTcyZGU5NmM5YjQ1 MDk0MzkwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjVmOWNjZDRlNWY2OTZmZjhlMzk1MzZiYzc3Nzg1ZjFmNjg0MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXmqd5+VAjLX63Q4xExtPteW2qcy a7hYOSAeq2pc6uak8wWd6vWz7KNmH5KNxIQrvHEJ3d93CZg9F0qczkPqtapOPN8Z Gt7pu5qvnOxuWCW3Cbul0yiojuTC0gwIFHx10fspRgJ4tuItZ8eVsltb64eUktl0 HyhNaed1pgIowi+gEevMYuMD7cjKGjA+0DTV6ECaaI91Bt4ghb7LmMY/jZQ4soQQ tEniTOeUAml2k9aAE1gcziRK2j/uGWy/oU7Ab819lT2iDMHxcxCB4XOjlKtcAGYT 1Cuer9ojezmTXg3FrM2UIIlpUzlRObTtIYueRGQieU27xMBfoA/Ys0OtKQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCtfnM1OX2lv+OOVNrx3eF8faEA5MB8GA1UdIwQY MBaAFFcIZhxq7srNm3EXanLelsm0UJQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2It NDQxMDgxNjJlNDkyLzEvSzEtY3pVNWZhV180NDVVMnZIZDRYeDlvUURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2ItNDQxMDgxNjJlNDky LzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIEWDAN BgkqhkiG9w0BAQsFAAOCAQEAbEgqov5LF1KT3j/X6IqSaaqk0Dbii/r92bQ1dvva GHlfRlCA2rV1h3QgxosUhxx4AvJUGRbdC+zDP0OJykz6gtAK9GFPGe68MLXSP9CQ 7xocFLXEMlgmB6FNmnukp55N0VPKqOEPqetLposIqfvrIAPbXSIf5KCMJWLSa41a kzk4JU6s4tDlHl708dKOioV2pNMP9djH9EcorZ9WVUuJ9BWWa9k2wYYivhRX0k66 zG6g//GMpFinoVYFEYYonVH3ElxsVyjD7VEN6HYyh71j5AF/bigcsHM81wwjQOQC 7oTfn3jBNhZQMtaKkArAA+juTZKtUPNolBafWD0ZOvridA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:02 2026 by rpki-client