This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/kyFtrhkemjgtn6nfJ8PYS2qoqCo.roa File: kyFtrhkemjgtn6nfJ8PYS2qoqCo.roa (raw, json) Hash identifier: w10iKJ0RTTmxE5IgnJn5M8JSWdlNM0Lfl75Krs9dqEo= Subject key identifier: 93:21:6D:AE:19:1E:9A:38:2D:9F:A9:DF:27:C3:D8:4B:6A:A8:A8:2A Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F15143410874A2C4EA8BC94D3DD4A6D Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/kyFtrhkemjgtn6nfJ8PYS2qoqCo.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212470 IP address blocks: 2a14:c380:260::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:14:34:10:87:4a:2c:4e:a8:bc:94:d3:dd:4a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93216dae191e9a382d9fa9df27c3d84b6aa8a82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:87:35:d7:b2:cb:52:d2:a4:d2:8f:0c:6b: b3:46:d7:5e:79:49:83:c9:c7:01:39:dc:4f:e0:ab: 13:a3:9e:12:ad:81:c2:66:65:02:8e:8d:e4:cb:89: c8:35:f3:fb:a4:75:59:06:03:fa:59:dc:b6:fa:80: 68:01:2e:f2:86:36:5c:b0:ee:5c:76:06:83:08:ab: 27:32:00:7d:10:82:6a:c0:60:35:4e:48:12:1a:89: e1:e1:9d:5b:28:9b:58:b6:7e:68:59:db:c5:46:50: b7:4c:23:e6:9d:39:a9:8a:41:33:99:e0:b1:f6:9f: bf:2a:ee:84:61:9e:cd:fd:e5:8c:a9:f7:cf:ca:69: e5:7b:fd:f6:77:d4:6a:23:fb:72:27:7b:bc:d0:53: bd:38:b1:2a:5e:62:64:d2:94:44:1e:46:e1:44:07: 8d:f0:f9:38:92:eb:8e:48:f9:30:b8:52:38:ca:f1: 7a:f9:33:1f:ca:61:4e:ed:21:cd:20:63:83:ad:18: 4b:8a:4d:22:92:9f:2e:28:a9:1f:42:e5:5f:6e:81: db:7f:6a:3b:c0:0f:d6:33:a4:b9:15:de:e4:fc:f5: 68:c3:4e:64:69:1c:82:67:2e:3d:b5:b8:96:a4:76: 67:d6:3a:ab:d6:05:1b:5e:d2:8a:82:5e:45:f8:4c: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:6D:AE:19:1E:9A:38:2D:9F:A9:DF:27:C3:D8:4B:6A:A8:A8:2A X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/kyFtrhkemjgtn6nfJ8PYS2qoqCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:260::/44 Signature Algorithm: sha256WithRSAEncryption 11:31:b7:6d:49:90:bc:96:b1:dd:85:7c:9f:89:c8:c7:cd:bb: e7:03:55:7b:97:00:e5:e5:96:46:e1:4f:5a:86:e5:79:b3:50: e4:98:18:5d:e9:57:50:e5:1d:da:75:a6:04:c6:b7:c7:f8:a4: bd:6e:32:71:8d:b7:24:a8:58:f5:73:75:b7:e1:04:53:7d:4d: 16:6b:7f:43:81:62:5c:6b:23:6e:55:c4:09:f2:88:67:de:ef: cb:03:c3:c4:2c:2c:39:eb:da:59:22:11:02:00:68:e5:02:18: e8:80:d6:76:d2:e5:fa:4f:c3:1a:d2:6e:af:df:0e:25:5e:f2: 99:22:a3:bb:78:12:e0:a5:9d:b6:2c:7d:93:6c:b9:bd:d0:82: 08:e9:52:8c:dc:8c:c2:74:b6:d4:a4:a0:66:ba:b5:4e:4a:62: a4:13:92:c0:23:dc:07:05:82:a8:ee:52:54:2d:f5:d4:93:8f: 62:ea:19:3f:36:9a:0c:90:fd:80:e6:9f:2c:07:20:d6:e4:9f: 80:4d:51:82:fa:d6:23:97:eb:96:f6:b2:03:50:79:ee:ee:6c: e4:29:28:82:74:ab:b9:ee:18:a1:3a:70:90:c4:4f:cc:8e:e7: 4f:14:49:ae:54:6c:64:e1:10:22:56:1e:9b:13:87:69:ba:1d: 74:26:94:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRQ0EIdKLE6ovJTT3UptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzIxNmRhZTE5MWU5YTM4MmQ5ZmE5ZGYyN2MzZDg0YjZhYThhODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp02HNdeyy1LSpNKPDGuzRtdeeUmD yccBOdxP4KsTo54SrYHCZmUCjo3ky4nINfP7pHVZBgP6Wdy2+oBoAS7yhjZcsO5c dgaDCKsnMgB9EIJqwGA1TkgSGonh4Z1bKJtYtn5oWdvFRlC3TCPmnTmpikEzmeCx 9p+/Ku6EYZ7N/eWMqffPymnle/32d9RqI/tyJ3u80FO9OLEqXmJk0pREHkbhRAeN 8Pk4kuuOSPkwuFI4yvF6+TMfymFO7SHNIGODrRhLik0ikp8uKKkfQuVfboHbf2o7 wA/WM6S5Fd7k/PVow05kaRyCZy49tbiWpHZn1jqr1gUbXtKKgl5F+EwKcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJMhba4ZHpo4LZ+p3yfD2EtqqKgqMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEva3lGdHJoa2Vtamd0bjZuZko4UFlTMnFvcUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAJg MA0GCSqGSIb3DQEBCwUAA4IBAQARMbdtSZC8lrHdhXyficjHzbvnA1V7lwDl5ZZG 4U9ahuV5s1DkmBhd6VdQ5R3adaYExrfH+KS9bjJxjbckqFj1c3W34QRTfU0Wa39D gWJcayNuVcQJ8ohn3u/LA8PELCw569pZIhECAGjlAhjogNZ20uX6T8Ma0m6v3w4l XvKZIqO7eBLgpZ22LH2TbLm90III6VKM3IzCdLbUpKBmurVOSmKkE5LAI9wHBYKo 7lJULfXUk49i6hk/NpoMkP2A5p8sByDW5J+ATVGC+tYjl+uW9rIDUHnu7mzkKSiC dKu57hihOnCQxE/MjudPFEmuVGxk4RAiVh6bE4dpuh10JpS/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:40 2026 by rpki-client