This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa File: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (raw, json) Hash identifier: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA= Subject key identifier: 28:2E:B4:1C:E9:F8:A9:9F:E7:B7:92:03:B7:D9:97:0D:56:02:67:11 Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184 Certificate serial: 019B7A5A7D7F245CA43A67657BD2A53E7B16 Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa Signing time: Thu 01 Jan 2026 16:18:28 +0000 ROA not before: Thu 01 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198037 IP address blocks: 2a13:7dc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7d:7f:24:5c:a4:3a:67:65:7b:d2:a5:3e:7b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184 Validity Not Before: Jan 1 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=282eb41ce9f8a99fe7b79203b7d9970d56026711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:35:79:ca:24:09:a9:f6:36:e3:52:35:23: 90:5f:87:cb:71:37:d4:04:6f:d3:ff:18:59:ed:2e: c5:15:36:7c:1e:9c:a2:e5:63:0b:fe:36:96:21:a6: 2d:e4:8d:0a:4f:52:7a:a0:2e:09:7b:71:cd:73:13: 90:68:39:97:c6:67:d5:80:30:f3:44:f0:80:f3:c1: 7c:2a:a8:f5:9a:4c:5a:87:dd:94:2c:6a:ea:c9:8f: a2:0a:ab:4e:89:ae:43:a0:e0:47:78:67:ab:ec:ff: 72:f9:1a:88:79:fe:0e:98:5a:95:2a:7d:e0:a3:73: 5e:bc:6b:e1:17:a5:77:06:c3:11:d0:f9:e8:9d:86: d9:8e:8e:2b:5e:b8:f6:8d:20:46:7e:21:72:23:92: e5:c4:f4:00:33:fd:8a:56:bc:f4:ef:30:07:f1:3d: f0:31:7c:da:9f:9f:3a:0c:a1:75:81:cb:5d:b2:ee: b6:48:d6:8a:df:5a:d8:01:4e:2d:03:21:d1:94:ec: 5d:84:98:28:ad:6b:6c:f2:6d:5f:8a:c4:93:39:96: a7:f2:87:b6:7d:f7:c3:a8:1f:84:d4:b4:ca:47:f7: a7:51:cf:17:2c:c0:be:2b:f2:99:b9:fa:b6:96:ce: 15:6c:55:b3:87:c3:26:18:90:d5:cb:4b:62:5d:31: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2E:B4:1C:E9:F8:A9:9F:E7:B7:92:03:B7:D9:97:0D:56:02:67:11 X509v3 Authority Key Identifier: keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:7dc0::/29 Signature Algorithm: sha256WithRSAEncryption c8:07:48:dd:25:98:ef:73:79:74:6a:23:a6:ef:51:e5:86:3d: 98:32:ec:fd:8a:40:81:c2:e7:3c:fe:c9:cf:f3:4b:8f:a9:1f: e8:f3:e7:53:47:d3:15:03:b9:89:80:49:f8:56:eb:74:c5:f3: 45:d7:ef:9f:f9:f0:0c:09:31:85:46:00:99:5a:47:4d:ce:a4: 70:ae:c6:78:8e:64:07:0a:ed:e7:15:c7:b1:b6:f4:fb:b5:3b: 00:22:9d:a1:80:5a:5e:42:da:c7:7e:3c:fe:af:81:c7:ce:44: 25:53:e9:19:88:0c:37:1c:2d:dc:90:85:91:7f:35:58:9b:48: d4:8c:bb:f2:f7:a8:11:19:dc:7f:0f:cc:e2:a3:5c:75:dc:3b: 9e:c0:1a:8a:54:0e:9b:fb:7f:32:e3:6d:4b:02:98:d0:10:54: fe:7e:7a:97:24:5e:4b:49:d4:3c:80:c7:32:9f:aa:ad:8d:bd: fa:cc:ac:fd:c1:ad:61:ff:d4:ae:7f:02:ae:66:41:f5:e9:48: 3f:b6:83:b8:e9:bf:61:6c:5e:ce:d8:a8:45:d1:6e:f7:dd:a6: c0:27:47:b3:a2:ac:b3:56:64:b6:04:eb:a2:17:7e:09:c7:0f: 1b:6c:ac:48:ba:89:7e:6d:f6:3d:fb:d2:04:f9:d8:65:23:c7: 77:00:61:76 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wn1/JFykOmdle9KlPnsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw MjMxODQwHhcNMjYwMTAxMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODJlYjQxY2U5ZjhhOTlmZTdiNzkyMDNiN2Q5OTcwZDU2MDI2NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArts1ecokCan2NuNSNSOQX4fLcTfU BG/T/xhZ7S7FFTZ8Hpyi5WML/jaWIaYt5I0KT1J6oC4Je3HNcxOQaDmXxmfVgDDz RPCA88F8Kqj1mkxah92ULGrqyY+iCqtOia5DoOBHeGer7P9y+RqIef4OmFqVKn3g o3NevGvhF6V3BsMR0PnonYbZjo4rXrj2jSBGfiFyI5LlxPQAM/2KVrz07zAH8T3w MXzan586DKF1gctdsu62SNaK31rYAU4tAyHRlOxdhJgorWts8m1fisSTOZan8oe2 fffDqB+E1LTKR/enUc8XLMC+K/KZufq2ls4VbFWzh8MmGJDVy0tiXTHX5wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCgutBzp+Kmf57eSA7fZlw1WAmcRMB8GA1UdIwQY MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt Mjg4NDI1MjljN2ExLzEvS0M2MEhPbjRxWl9udDVJRHQ5bVhEVllDWnhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhN9wDAN BgkqhkiG9w0BAQsFAAOCAQEAyAdI3SWY73N5dGojpu9R5YY9mDLs/YpAgcLnPP7J z/NLj6kf6PPnU0fTFQO5iYBJ+FbrdMXzRdfvn/nwDAkxhUYAmVpHTc6kcK7GeI5k Bwrt5xXHsbb0+7U7ACKdoYBaXkLax348/q+Bx85EJVPpGYgMNxwt3JCFkX81WJtI 1Iy78veoERncfw/M4qNcddw7nsAailQOm/t/MuNtSwKY0BBU/n56lyReS0nUPIDH Mp+qrY29+sys/cGtYf/Urn8CrmZB9elIP7aDuOm/YWxeztioRdFu992mwCdHs6Ks s1ZktgTrohd+CccPG2ysSLqJfm32PfvSBPnYZSPHdwBhdg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:52 2026 by rpki-client