This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa File: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (raw, json) Hash identifier: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc= Subject key identifier: 90:A6:70:D8:D9:2F:80:E6:08:93:52:24:61:14:3C:93:D0:BE:7B:2A Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB5FDA87B55D7CD05F0153E313EAFD Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211184 IP address blocks: 2a12:4946:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5f:da:87:b5:5d:7c:d0:5f:01:53:e3:13:ea:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a670d8d92f80e60893522461143c93d0be7b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:22:5a:18:e6:25:c2:14:65:f0:5a:40:54: 3d:b9:5d:9b:64:d8:4c:01:e0:ea:d2:47:79:52:9c: a7:96:86:e8:72:b1:40:03:73:f9:71:48:96:73:96: 8f:f5:0f:6f:42:f9:66:de:af:29:0d:50:d9:2e:b1: c5:99:9c:9e:ab:3f:d4:f0:af:ae:72:16:6d:4a:c3: 2e:0f:84:31:dc:fa:63:74:50:9c:d0:18:14:80:8d: 1a:12:88:f7:83:c0:12:ba:df:13:a8:a3:e3:a2:92: b8:61:c0:46:4c:fa:e8:be:6d:c4:a5:67:55:54:6e: c1:91:da:60:06:e6:bd:9e:bf:00:3f:cb:b4:1f:81: a1:c2:10:38:b2:46:7f:4f:61:46:d9:ef:86:2e:2d: 06:52:7a:99:69:0e:c1:a1:b7:69:7d:66:96:7c:8a: 33:f8:c5:a8:e8:40:17:07:b5:e8:f0:90:c5:91:22: 11:0e:15:e4:46:40:5a:63:0f:1a:25:c7:0e:e2:d7: b1:4c:2c:2a:23:ff:2c:9a:2a:26:11:dc:67:37:a7: 2f:c0:df:f8:50:4e:57:d4:87:2a:11:32:a6:8b:07: 89:2c:e0:77:02:06:74:06:aa:a5:c1:85:0c:88:9f: f9:ee:58:1a:08:47:36:16:9d:20:07:62:6b:0c:71: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:70:D8:D9:2F:80:E6:08:93:52:24:61:14:3C:93:D0:BE:7B:2A X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4946:4000::/44 Signature Algorithm: sha256WithRSAEncryption 09:30:7d:7a:8a:61:53:19:50:ad:90:02:73:08:da:97:9a:f2: 68:55:e9:c7:6f:7e:08:d9:f0:90:92:5b:40:20:9d:df:17:46: 61:0e:32:b7:d6:58:2e:9e:48:a1:c9:b9:3f:d8:f8:d4:0e:e3: 36:f2:9c:39:e9:ec:db:1f:d9:a4:17:07:21:e9:2f:6b:69:34: 3f:39:cc:3f:95:96:20:b7:aa:b3:1c:55:be:57:b2:82:b9:9a: 86:30:f6:e9:08:31:5e:bf:8e:6a:15:81:40:a8:74:92:39:2e: 03:97:73:9c:1b:44:9f:40:73:7f:03:46:6c:c6:47:30:36:8f: 50:b7:25:6e:a9:f6:81:8e:ae:43:5f:d7:81:89:60:44:b9:53: 42:54:a0:fd:90:9e:5f:cc:98:ba:55:4a:e3:59:c9:7e:99:3c: 6b:12:c4:5f:6a:0f:2a:a8:e9:c9:7f:7c:8d:e1:c1:6d:3e:19: 63:6c:8d:96:d9:7b:0d:a2:dd:28:76:6a:24:c1:cf:9a:4a:f6: bd:0d:dc:cb:80:9a:2b:96:28:43:ab:5c:46:a3:7e:94:b1:43: 7f:0e:f0:79:02:55:76:ea:fd:c7:9f:95:e8:91:55:06:8e:fc: 82:5b:6f:21:45:19:31:51:fb:c5:50:87:be:4b:52:28:29:d9: 4b:55:41:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9y1/ah7VdfNBfAVPjE+r9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE2NzBkOGQ5MmY4MGU2MDg5MzUyMjQ2MTE0M2M5M2QwYmU3YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLsiWhjmJcIUZfBaQFQ9uV2bZNhM AeDq0kd5UpynlobocrFAA3P5cUiWc5aP9Q9vQvlm3q8pDVDZLrHFmZyeqz/U8K+u chZtSsMuD4Qx3PpjdFCc0BgUgI0aEoj3g8ASut8TqKPjopK4YcBGTProvm3EpWdV VG7BkdpgBua9nr8AP8u0H4GhwhA4skZ/T2FG2e+GLi0GUnqZaQ7BobdpfWaWfIoz +MWo6EAXB7Xo8JDFkSIRDhXkRkBaYw8aJccO4texTCwqI/8smiomEdxnN6cvwN/4 UE5X1IcqETKmiweJLOB3AgZ0BqqlwYUMiJ/57lgaCEc2Fp0gB2JrDHGriwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJCmcNjZL4DmCJNSJGEUPJPQvnsqMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEva0tadzJOa3ZnT1lJazFJa1lSUThrOUMtZXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJJRkAA MA0GCSqGSIb3DQEBCwUAA4IBAQAJMH16imFTGVCtkAJzCNqXmvJoVenHb34I2fCQ kltAIJ3fF0ZhDjK31lgunkihybk/2PjUDuM28pw56ezbH9mkFwch6S9raTQ/Ocw/ lZYgt6qzHFW+V7KCuZqGMPbpCDFev45qFYFAqHSSOS4Dl3OcG0SfQHN/A0Zsxkcw No9QtyVuqfaBjq5DX9eBiWBEuVNCVKD9kJ5fzJi6VUrjWcl+mTxrEsRfag8qqOnJ f3yN4cFtPhljbI2W2XsNot0odmokwc+aSva9DdzLgJorlihDq1xGo36UsUN/DvB5 AlV26v3Hn5XokVUGjvyCW28hRRkxUfvFUIe+S1IoKdlLVUG9 -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:46 2026 by rpki-client