This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa File: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (raw, json) Hash identifier: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc= Subject key identifier: 90:F1:7D:41:82:26:0D:0F:12:8D:50:89:2E:3D:CB:EA:3D:30:41:02 Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B7A5BA13CAFAE8B3D4D4CE3B9BBBAEBE0 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47496 IP address blocks: 2a0a:4587:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:a1:3c:af:ae:8b:3d:4d:4c:e3:b9:bb:ba:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90f17d4182260d0f128d50892e3dcbea3d304102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:a6:61:4c:6a:d8:83:a4:7f:6b:2c:73:f8: 88:68:d7:6b:9e:03:5a:31:61:c0:0f:ae:4d:72:a3: fe:30:f5:3d:89:26:82:8a:82:cf:97:4b:04:3a:32: d4:6d:28:06:d3:77:71:e8:fa:38:7b:8c:bc:0a:ab: 4a:eb:2a:a8:46:e1:2d:ff:82:bb:90:34:2c:ac:e1: bc:47:0f:cb:8f:c1:38:1f:24:0e:66:ea:ed:35:b4: 89:32:a2:9c:a1:0f:b0:89:4b:c0:74:3f:41:06:e0: d7:3f:bb:ca:7e:4d:65:9a:cd:30:de:bd:b6:a6:a6: cb:ea:c6:f8:74:39:59:ee:15:99:9f:73:a2:eb:9c: 96:c7:c8:4e:fb:40:0f:97:e3:74:b0:5d:e6:f5:02: 3e:21:1a:df:97:45:21:c7:0c:c8:81:d5:33:29:cf: 6e:51:20:36:4e:0a:26:22:a3:e1:98:ac:79:f9:9c: fe:f0:42:4a:fd:f2:c0:a1:db:3b:2f:93:c7:13:24: 70:ce:89:b1:e1:bf:05:28:98:21:06:05:54:40:17: 9c:b4:59:1e:1e:28:0a:af:72:57:06:af:03:1a:5d: c6:45:34:2e:87:9a:90:b3:13:5f:2d:de:f4:3c:16: e3:bd:a2:53:ca:f8:09:01:82:fc:c5:1c:c5:8d:27: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F1:7D:41:82:26:0D:0F:12:8D:50:89:2E:3D:CB:EA:3D:30:41:02 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4587:2040::/48 Signature Algorithm: sha256WithRSAEncryption 71:50:68:b6:f5:cf:00:e5:41:d4:db:d2:25:b1:66:c2:f1:42: a7:02:69:56:21:50:d9:f8:8a:dc:8e:e1:9e:26:95:b2:29:90: 64:b5:51:3a:17:3b:97:52:02:b8:a4:45:86:50:78:db:74:30: e8:88:bb:0e:ca:9c:74:0d:82:bd:69:8d:40:84:e1:00:9c:f7: 3b:7a:28:8d:25:61:b5:ae:50:71:d3:df:c8:e7:11:ad:c9:cb: 62:e4:5a:19:9b:ee:ea:ac:f9:da:d4:9a:32:ba:a2:0f:c1:11: 20:63:70:c1:c6:9b:e8:5f:84:aa:a3:68:e3:d4:cb:79:f8:97: 31:5f:aa:96:ee:7e:63:ce:7f:6b:79:54:c0:e5:13:01:85:02: ac:39:20:6b:c4:07:75:cb:04:f4:27:b7:1c:58:36:03:1b:34: cb:09:54:51:fb:2c:e4:5a:dc:82:3d:d2:ed:fc:b6:3a:6d:a9: 17:fb:78:42:16:f8:b6:49:2b:dd:b9:d4:29:21:56:0b:a1:dd: ec:17:66:22:5f:40:6c:47:8a:a9:88:15:87:4d:a6:1d:0a:6c: ba:ce:10:7a:61:5e:42:91:27:4a:be:c3:41:e3:15:e5:e1:ae: 1d:5e:e4:19:3f:69:3a:24:94:75:b4:f5:52:c8:4e:85:38:56: d6:ba:77:04 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6W6E8r66LPU1M47m7uuvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGYxN2Q0MTgyMjYwZDBmMTI4ZDUwODkyZTNkY2JlYTNkMzA0MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5SmYUxq2IOkf2ssc/iIaNdrngNa MWHAD65NcqP+MPU9iSaCioLPl0sEOjLUbSgG03dx6Po4e4y8CqtK6yqoRuEt/4K7 kDQsrOG8Rw/Lj8E4HyQOZurtNbSJMqKcoQ+wiUvAdD9BBuDXP7vKfk1lms0w3r22 pqbL6sb4dDlZ7hWZn3Oi65yWx8hO+0APl+N0sF3m9QI+IRrfl0UhxwzIgdUzKc9u USA2TgomIqPhmKx5+Zz+8EJK/fLAods7L5PHEyRwzomx4b8FKJghBgVUQBectFke HigKr3JXBq8DGl3GRTQuh5qQsxNfLd70PBbjvaJTyvgJAYL8xRzFjSc92wIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFJDxfUGCJg0PEo1QiS49y+o9MEECMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xL2tQRjlRWUltRFE4U2pWQ0pMajNMNmowd1FRSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCkWH IEAwDQYJKoZIhvcNAQELBQADggEBAHFQaLb1zwDlQdTb0iWxZsLxQqcCaVYhUNn4 ityO4Z4mlbIpkGS1UToXO5dSArikRYZQeNt0MOiIuw7KnHQNgr1pjUCE4QCc9zt6 KI0lYbWuUHHT38jnEa3Jy2LkWhmb7uqs+drUmjK6og/BESBjcMHGm+hfhKqjaOPU y3n4lzFfqpbufmPOf2t5VMDlEwGFAqw5IGvEB3XLBPQntxxYNgMbNMsJVFH7LORa 3II90u38tjptqRf7eEIW+LZJK9251CkhVguh3ewXZiJfQGxHiqmIFYdNph0KbLrO EHphXkKRJ0q+w0HjFeXhrh1e5Bk/aToklHW09VLIToU4Vta6dwQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:24 2026 by rpki-client