This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa File: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (raw, json) Hash identifier: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w= Subject key identifier: D2:4C:1F:79:BF:BC:29:89:E3:4F:50:DA:5D:31:60:F0:D2:95:E5:0B Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 019B76EAEA331DEC7D4C2AB18D278C13F654 Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60084 IP address blocks: 2a00:ab00:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ea:33:1d:ec:7d:4c:2a:b1:8d:27:8c:13:f6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d24c1f79bfbc2989e34f50da5d3160f0d295e50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:1d:fb:86:ae:ae:3c:40:de:34:59:35:8b: 5e:26:df:44:01:34:a0:98:21:ac:55:89:5f:93:05: 29:47:2d:f9:c7:b7:42:10:75:3c:d1:46:ee:a9:84: 96:ba:8a:4b:8f:8f:87:24:f3:6b:a7:aa:2f:b0:5b: 69:d5:1a:1e:f5:fd:b0:15:a8:f6:ef:8b:b5:4a:61: e7:03:1c:34:a6:5f:4d:c8:32:37:49:2a:31:9d:ac: 8c:ce:35:3c:d5:96:e6:c7:1a:0b:86:41:66:3a:38: 81:dd:ef:22:b6:d1:4b:1f:32:93:4b:af:8f:1c:e5: 39:ed:aa:70:e0:fd:ea:ed:fa:19:8c:60:5d:11:35: 7f:ff:9c:71:92:a0:31:3b:24:22:9e:df:6b:aa:12: cb:11:16:45:3b:f1:55:26:90:09:24:14:1c:c4:bd: bb:35:62:e8:af:2a:00:68:69:f8:37:3f:06:37:5c: ac:b1:6c:80:1e:3e:dc:03:3d:f0:ca:72:f8:cc:be: 34:69:ed:08:97:ad:69:bc:0a:11:4a:14:ab:1f:93: 7c:a8:15:c2:44:f6:5e:ff:4c:1b:33:82:8b:62:e2: 84:56:89:47:d6:61:c2:3d:bb:db:0e:c0:68:cd:c5: bc:af:23:15:c1:aa:cc:a3:b1:02:bf:6f:03:cb:1e: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4C:1F:79:BF:BC:29:89:E3:4F:50:DA:5D:31:60:F0:D2:95:E5:0B X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:ab00:7000::/36 Signature Algorithm: sha256WithRSAEncryption 39:b1:97:b6:10:8a:d5:04:4f:62:27:fe:68:ef:46:55:6f:55: 56:7c:9b:ad:32:29:0c:ea:cd:1e:89:96:26:58:3f:30:24:94: 19:3c:1e:12:34:d4:b3:f2:c5:90:37:bb:1b:10:b0:be:f3:72: c9:78:28:19:0a:fe:2f:6b:a3:07:90:f8:15:2e:2f:c4:aa:cc: b3:9e:c1:c3:48:c2:b7:e2:45:ae:d3:ee:37:0b:5c:0b:7e:cf: b7:fa:cc:60:59:be:bd:e5:e5:4d:12:ec:c3:bb:fb:07:52:e7: 3a:8c:7e:5b:78:a2:72:ed:1b:83:41:bd:9e:ec:b7:d5:cc:42: 9a:b9:b3:65:48:93:1e:d7:69:4e:3b:d1:5a:4c:47:7e:1f:77: c3:7d:7c:ec:47:22:25:de:0e:4a:5d:09:23:c2:cd:16:ed:61: 01:1d:b3:32:a8:ac:bc:0f:f3:ca:c3:d3:24:f7:65:de:11:4c: 03:20:7a:2d:8b:35:0d:05:0b:b3:5b:08:de:f9:72:53:db:a4: 34:6d:ec:a5:4e:c3:5c:0a:f2:04:62:fc:8d:cb:14:8c:52:4f: 44:bd:3f:3a:76:60:50:38:76:0b:4f:ad:f1:c9:9e:02:a7:f5: 2b:6e:44:d3:49:4f:1f:82:b8:bf:19:75:3c:06:ec:5f:39:28: e7:41:3d:aa -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt26uozHex9TCqxjSeME/ZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjRjMWY3OWJmYmMyOTg5ZTM0ZjUwZGE1ZDMxNjBmMGQyOTVlNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnsd+4aurjxA3jRZNYteJt9EATSg mCGsVYlfkwUpRy35x7dCEHU80UbuqYSWuopLj4+HJPNrp6ovsFtp1Roe9f2wFaj2 74u1SmHnAxw0pl9NyDI3SSoxnayMzjU81ZbmxxoLhkFmOjiB3e8ittFLHzKTS6+P HOU57apw4P3q7foZjGBdETV//5xxkqAxOyQint9rqhLLERZFO/FVJpAJJBQcxL27 NWLoryoAaGn4Nz8GN1yssWyAHj7cAz3wynL4zL40ae0Il61pvAoRShSrH5N8qBXC RPZe/0wbM4KLYuKEVolH1mHCPbvbDsBozcW8ryMVwarMo7ECv28Dyx47YQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNJMH3m/vCmJ409Q2l0xYPDSleULMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvMGt3ZmViLThLWW5qVDFEYVhURmc4TktWNVFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgCrAHAw DQYJKoZIhvcNAQELBQADggEBADmxl7YQitUET2In/mjvRlVvVVZ8m60yKQzqzR6J liZYPzAklBk8HhI01LPyxZA3uxsQsL7zcsl4KBkK/i9roweQ+BUuL8SqzLOewcNI wrfiRa7T7jcLXAt+z7f6zGBZvr3l5U0S7MO7+wdS5zqMflt4onLtG4NBvZ7st9XM Qpq5s2VIkx7XaU470VpMR34fd8N9fOxHIiXeDkpdCSPCzRbtYQEdszKorLwP88rD 0yT3Zd4RTAMgei2LNQ0FC7NbCN75clPbpDRt7KVOw1wK8gRi/I3LFIxST0S9Pzp2 YFA4dgtPrfHJngKn9StuRNNJTx+CuL8ZdTwG7F85KOdBPao= -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:13 2026 by rpki-client