This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/krxQoQpADGwrNtF32wcvVXkDpM4.roa File: krxQoQpADGwrNtF32wcvVXkDpM4.roa (raw, json) Hash identifier: T/5MSZCP6XfC0z7V2YyYRpV0hTQ4s9MowyKI/yjRRPw= Subject key identifier: 92:BC:50:A1:0A:40:0C:6C:2B:36:D1:77:DB:07:2F:55:79:03:A4:CE Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B79108FE5080071C36A95482C36738B02 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/krxQoQpADGwrNtF32wcvVXkDpM4.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12857 IP address blocks: 2a00:b400::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8f:e5:08:00:71:c3:6a:95:48:2c:36:73:8b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92bc50a10a400c6c2b36d177db072f557903a4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:5a:ef:f1:3a:f7:4e:26:52:d4:3b:32:8f: f7:f2:ad:d3:b6:32:a4:df:58:ce:97:35:50:ea:6f: 09:56:37:6b:ef:6d:bb:ea:db:da:83:c3:6a:ed:93: 46:f8:7f:ab:59:01:c2:cf:78:0f:02:2c:65:df:76: 3f:87:b5:a2:f8:40:cc:b1:bc:2c:bd:d8:ea:84:25: e3:80:c9:d1:10:a5:07:3d:20:01:cf:30:60:c5:98: a4:c1:9f:bf:c4:ef:e6:b6:f2:c2:d3:b1:67:c5:0e: bf:88:dd:30:79:61:7a:55:b7:d0:e9:db:bf:45:e2: df:b8:f5:35:4f:43:25:2e:c6:b5:0d:09:f7:45:cf: 92:5f:07:6d:39:b4:72:8f:89:e0:50:a8:70:9d:84: a6:90:09:e8:15:22:45:54:5e:0e:a9:00:b1:f7:65: ff:e0:83:ce:80:c7:c8:10:f4:af:b8:96:92:61:ab: 7d:1d:bc:80:f0:94:c4:34:17:c8:1d:02:72:72:aa: 49:3a:ef:73:82:32:fb:3f:69:89:0a:19:b0:9c:33: 45:7c:9f:86:29:62:31:58:a9:2a:ef:37:c3:4c:a9: 3c:f0:55:53:c2:f9:df:83:87:b6:f7:b3:ae:96:61: b1:3f:45:02:f6:65:ee:98:4a:83:7f:33:e6:b9:94: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BC:50:A1:0A:40:0C:6C:2B:36:D1:77:DB:07:2F:55:79:03:A4:CE X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/krxQoQpADGwrNtF32wcvVXkDpM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:b400::/29 Signature Algorithm: sha256WithRSAEncryption 0b:3d:1a:32:e8:aa:65:c5:47:3e:06:7c:f1:12:34:01:19:6a: 6b:88:b7:fd:b0:49:1b:9a:5f:5c:ff:ab:0b:08:03:d5:c5:51: e0:aa:f9:e8:47:ea:99:e4:41:40:f9:ea:08:da:62:02:d8:86: f7:eb:ec:a4:5f:8f:0f:6b:31:a5:23:85:86:5e:9b:dc:7e:49: c2:da:0b:77:f6:e2:1a:04:a5:0d:6c:f4:e4:78:08:7a:cc:bb: e3:b5:50:30:f5:65:f5:99:a6:08:e9:78:a4:8d:28:4e:7d:8d: 64:d6:ea:ef:06:7c:68:b3:c3:45:ad:74:df:e2:e5:9b:85:96: 65:3b:dc:58:98:02:45:a5:e3:4d:ba:bd:c6:9b:5d:47:ae:6f: 17:16:6d:58:f2:b7:97:5d:cc:23:c8:6a:76:bf:2e:e7:84:66: 0f:c1:83:f9:06:3a:67:b5:7d:0d:dd:b5:ce:8e:b1:9a:de:a2: 23:13:e6:46:34:9f:3d:36:5a:00:84:66:31:e4:74:45:a4:48: f8:9a:e9:b6:9d:48:c0:a0:be:a4:56:fe:cc:28:a1:83:07:b4: 17:40:0c:fa:8a:29:72:58:88:db:91:cf:2c:a3:c0:4d:14:c7: ed:56:a7:0d:c3:c8:79:2b:6b:d9:b4:23:e8:52:e9:87:44:44: aa:a5:a8:40 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EI/lCABxw2qVSCw2c4sCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmJjNTBhMTBhNDAwYzZjMmIzNmQxNzdkYjA3MmY1NTc5MDNhNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnta7/E6904mUtQ7Mo/38q3TtjKk 31jOlzVQ6m8JVjdr72276tvag8Nq7ZNG+H+rWQHCz3gPAixl33Y/h7Wi+EDMsbws vdjqhCXjgMnREKUHPSABzzBgxZikwZ+/xO/mtvLC07FnxQ6/iN0weWF6VbfQ6du/ ReLfuPU1T0MlLsa1DQn3Rc+SXwdtObRyj4ngUKhwnYSmkAnoFSJFVF4OqQCx92X/ 4IPOgMfIEPSvuJaSYat9HbyA8JTENBfIHQJycqpJOu9zgjL7P2mJChmwnDNFfJ+G KWIxWKkq7zfDTKk88FVTwvnfg4e297OulmGxP0UC9mXumEqDfzPmuZRl6wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJK8UKEKQAxsKzbRd9sHL1V5A6TOMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEva3J4UW9RcEFER3dyTnRGMzJ3Y3ZWWGtEcE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgC0ADAN BgkqhkiG9w0BAQsFAAOCAQEACz0aMuiqZcVHPgZ88RI0ARlqa4i3/bBJG5pfXP+r CwgD1cVR4Kr56EfqmeRBQPnqCNpiAtiG9+vspF+PD2sxpSOFhl6b3H5JwtoLd/bi GgSlDWz05HgIesy747VQMPVl9ZmmCOl4pI0oTn2NZNbq7wZ8aLPDRa103+Llm4WW ZTvcWJgCRaXjTbq9xptdR65vFxZtWPK3l13MI8hqdr8u54RmD8GD+QY6Z7V9Dd21 zo6xmt6iIxPmRjSfPTZaAIRmMeR0RaRI+Jrptp1IwKC+pFb+zCihgwe0F0AM+oop cliI25HPLKPATRTH7VanDcPIeStr2bQj6FLph0REqqWoQA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:42 2026 by rpki-client