This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/kXDi6qKHYQmt9htj9gX1rGIvybE.roa File: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (raw, json) Hash identifier: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE= Subject key identifier: 91:70:E2:EA:A2:87:61:09:AD:F6:1B:63:F6:05:F5:AC:62:2F:C9:B1 Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019B78355308231395B08C016BE1D6865301 Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/kXDi6qKHYQmt9htj9gX1rGIvybE.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212568 IP address blocks: 2a13:ccc6::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:53:08:23:13:95:b0:8c:01:6b:e1:d6:86:53:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9170e2eaa2876109adf61b63f605f5ac622fc9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:f7:8f:87:65:4e:60:f9:37:0c:4d:44:d8: c0:91:c7:c1:27:37:e6:16:22:f7:25:fe:a9:f5:74: 33:9c:57:48:59:c3:d0:e4:3b:9b:a6:ff:50:81:da: 8e:19:52:63:9b:68:b7:b2:aa:fd:bd:27:78:54:3e: cf:b9:0c:b6:e4:96:34:d7:85:37:9e:e6:07:ec:e5: c7:81:02:1d:a7:d2:17:10:76:81:26:d8:e0:c3:14: a5:32:d6:55:c5:08:03:c6:7a:e2:eb:80:63:0d:35: 46:f5:b2:32:d2:e9:db:95:e1:e8:51:cf:8c:a1:65: 1a:82:06:01:03:43:bd:cf:86:0f:7d:ea:20:0e:79: 1a:b2:e2:da:28:fa:26:6a:f1:c2:76:71:ad:f3:21: fa:76:56:14:17:2a:4f:84:63:fe:81:e0:21:20:a2: 7b:31:57:eb:db:1b:44:24:8a:b5:7f:09:24:10:df: db:45:6b:c6:24:9e:70:c6:ff:e1:62:f7:fa:91:2d: e4:40:50:a8:0c:08:29:d0:35:46:da:ff:8e:38:82: 20:e0:bc:4e:8d:39:49:30:cc:03:2b:38:85:b4:b7: 85:c0:35:83:38:77:c2:32:4d:2a:22:e8:1c:1f:66: 83:6a:e6:3a:13:a6:bc:50:19:d6:84:86:3e:db:c1: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:70:E2:EA:A2:87:61:09:AD:F6:1B:63:F6:05:F5:AC:62:2F:C9:B1 X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/kXDi6qKHYQmt9htj9gX1rGIvybE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ccc6::/44 Signature Algorithm: sha256WithRSAEncryption 6c:a0:63:5b:5a:2f:c6:5c:56:ed:64:f0:24:67:30:2b:00:7a: d7:17:0a:df:b9:b2:b2:b8:2d:2b:4b:b6:6b:11:0f:d2:d0:eb: 70:83:c8:58:73:5c:78:62:e7:e4:97:b3:67:d7:51:79:08:96: 0d:e8:fd:fe:8c:c0:18:e4:20:6a:c8:29:d7:64:56:f8:2e:c9: fe:f7:79:60:4e:e3:06:8c:58:df:f2:21:33:e1:06:6a:e3:81: 08:f3:14:b7:66:63:43:88:c1:19:2a:80:d3:77:a5:10:32:ea: 4a:24:47:18:af:fe:cc:4a:b6:6c:9b:68:a2:72:f8:91:7c:fa: cc:69:e4:2f:10:e5:6d:9b:a8:51:5c:07:5d:47:60:bf:98:d1: 8f:35:0d:37:bb:52:31:fb:99:e1:5a:87:ef:52:c4:d2:25:28: 20:1b:b7:d0:31:79:51:e4:3b:58:d9:d5:5c:76:8d:65:c3:e7: a6:a6:cd:c6:b6:f9:1f:1e:dd:1b:cb:e5:af:82:8a:bd:67:f5: ad:b6:93:81:a3:7b:b7:2d:5b:94:b3:4b:ed:b7:fd:74:d0:ab: 0a:e7:40:4b:ee:02:78:ae:81:fe:01:1b:f3:b1:3e:49:a0:d8: 3a:78:f8:fc:12:7d:65:9a:b9:64:04:cc:0b:86:76:23:74:b9: 2b:d7:2f:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NVMIIxOVsIwBa+HWhlMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTcwZTJlYWEyODc2MTA5YWRmNjFiNjNmNjA1ZjVhYzYyMmZjOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fL3j4dlTmD5NwxNRNjAkcfBJzfm FiL3Jf6p9XQznFdIWcPQ5Dubpv9QgdqOGVJjm2i3sqr9vSd4VD7PuQy25JY014U3 nuYH7OXHgQIdp9IXEHaBJtjgwxSlMtZVxQgDxnri64BjDTVG9bIy0unbleHoUc+M oWUaggYBA0O9z4YPfeogDnkasuLaKPomavHCdnGt8yH6dlYUFypPhGP+geAhIKJ7 MVfr2xtEJIq1fwkkEN/bRWvGJJ5wxv/hYvf6kS3kQFCoDAgp0DVG2v+OOIIg4LxO jTlJMMwDKziFtLeFwDWDOHfCMk0qIugcH2aDauY6E6a8UBnWhIY+28GxFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJFw4uqih2EJrfYbY/YF9axiL8mxMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEva1hEaTZxS0hZUW10OWh0ajlnWDFyR0l2eWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhPMxgAA MA0GCSqGSIb3DQEBCwUAA4IBAQBsoGNbWi/GXFbtZPAkZzArAHrXFwrfubKyuC0r S7ZrEQ/S0Otwg8hYc1x4Yufkl7Nn11F5CJYN6P3+jMAY5CBqyCnXZFb4Lsn+93lg TuMGjFjf8iEz4QZq44EI8xS3ZmNDiMEZKoDTd6UQMupKJEcYr/7MSrZsm2iicviR fPrMaeQvEOVtm6hRXAddR2C/mNGPNQ03u1Ix+5nhWofvUsTSJSggG7fQMXlR5DtY 2dVcdo1lw+emps3GtvkfHt0by+Wvgoq9Z/WttpOBo3u3LVuUs0vtt/100KsK50BL 7gJ4roH+ARvzsT5JoNg6ePj8En1lmrlkBMwLhnYjdLkr1y8V -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:46 2026 by rpki-client