This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/kVcl-lsZR6xyXsxO8aWh944dJv8.roa File: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (raw, json) Hash identifier: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY= Subject key identifier: 91:57:25:FA:5B:19:47:AC:72:5E:CC:4E:F1:A5:A1:F7:8E:1D:26:FF Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc Certificate serial: 019B7A5B9B2800150F5911F9A30F4DADD953 Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/kVcl-lsZR6xyXsxO8aWh944dJv8.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207021 IP address blocks: 2001:67c:10e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:28:00:15:0f:59:11:f9:a3:0f:4d:ad:d9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915725fa5b1947ac725ecc4ef1a5a1f78e1d26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:59:5c:d7:bb:05:2b:8a:91:32:12:d8:83: 2b:66:4c:a5:6c:d4:56:82:3f:9f:70:cd:a5:a3:f4: 62:61:cb:a8:bb:cc:e2:5a:ae:97:0b:eb:97:5d:33: 64:32:1c:59:99:c1:c9:c5:0c:c7:d9:5c:58:9b:65: d2:49:6e:cd:b6:19:e4:5f:b2:d1:d0:33:29:f8:28: 48:c6:da:2c:ec:fa:74:ca:b2:84:67:b8:e8:aa:6c: 28:67:68:ff:54:4f:63:00:b4:c0:70:48:ac:ad:5a: 2e:18:bb:12:55:cc:42:5c:9a:b1:82:53:b1:cf:a7: 57:10:1c:ea:64:5e:03:e3:f0:84:1d:cd:70:a2:0d: 4d:f6:dd:eb:e9:66:7a:5a:1f:a8:28:fa:db:83:22: d8:ee:be:f5:a9:e1:5d:0b:fa:d5:5b:87:6e:66:43: 29:ff:6b:09:0a:17:f9:26:b9:3a:3a:1c:d7:24:87: a0:cf:87:09:5b:75:b2:89:b0:17:f1:0c:c9:bb:84: d8:c2:6e:4b:c0:14:c3:89:a4:5e:22:1a:17:33:b0: 41:69:ff:59:15:e5:f6:b0:68:c9:3f:d7:05:4c:c4: 8a:63:30:c9:30:c8:51:06:35:8b:dc:3c:09:db:cc: 31:bb:45:27:04:77:68:d2:db:45:4a:7c:31:6e:bf: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:57:25:FA:5B:19:47:AC:72:5E:CC:4E:F1:A5:A1:F7:8E:1D:26:FF X509v3 Authority Key Identifier: keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/kVcl-lsZR6xyXsxO8aWh944dJv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:10e0::/48 Signature Algorithm: sha256WithRSAEncryption 8c:27:af:6d:d1:a3:fa:63:1a:a0:a3:b2:f6:58:65:54:ff:d3: f3:de:e5:e1:97:35:e0:ea:63:3d:34:b9:87:a0:ca:b2:ab:41: 4a:96:05:e8:3e:75:50:4a:d7:2c:6e:bf:11:52:73:68:d1:0e: 9a:28:fe:fc:ac:14:da:00:4b:b3:4b:76:6d:79:bd:e5:e6:9b: bf:4b:4b:7f:3b:f2:08:4f:83:7c:91:ed:84:8b:4c:30:09:a3: 43:88:92:cc:19:37:22:27:50:bf:1a:3f:06:98:ea:7b:d3:80: 87:14:b8:62:ec:5d:15:b2:38:c9:fb:ab:35:a1:1b:76:ac:a0: 1a:d2:ae:b2:3d:44:7c:c9:bc:3c:a5:e8:f6:45:c2:37:2d:37: c4:c2:6e:f4:68:89:dd:09:aa:59:4c:cf:14:0d:fc:d6:43:a1: 83:a8:f4:ca:41:21:d4:ab:df:9d:02:7b:31:5b:5c:22:d8:9d: 68:32:8f:98:36:1c:0b:36:e2:42:55:5a:e4:d0:9e:3b:6b:91: e1:11:eb:26:a7:a1:dd:3f:7f:57:39:89:aa:43:6d:77:5e:ba: b1:e7:5b:99:ab:ed:7b:10:d2:f8:4e:b5:93:2f:2a:3a:72:d3: 93:35:1f:fe:ae:ec:67:d6:a4:3d:33:d8:3b:92:f2:67:c1:9f: 00:49:b3:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W5soABUPWRH5ow9NrdlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm NTBkZmMwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTU3MjVmYTViMTk0N2FjNzI1ZWNjNGVmMWE1YTFmNzhlMWQyNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7dZXNe7BSuKkTIS2IMrZkylbNRW gj+fcM2lo/RiYcuou8ziWq6XC+uXXTNkMhxZmcHJxQzH2VxYm2XSSW7NthnkX7LR 0DMp+ChIxtos7Pp0yrKEZ7joqmwoZ2j/VE9jALTAcEisrVouGLsSVcxCXJqxglOx z6dXEBzqZF4D4/CEHc1wog1N9t3r6WZ6Wh+oKPrbgyLY7r71qeFdC/rVW4duZkMp /2sJChf5Jrk6OhzXJIegz4cJW3WyibAX8QzJu4TYwm5LwBTDiaReIhoXM7BBaf9Z FeX2sGjJP9cFTMSKYzDJMMhRBjWL3DwJ28wxu0UnBHdo0ttFSnwxbr8pQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJFXJfpbGUescl7MTvGlofeOHSb/MB8GA1UdIwQY MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt YmZjNzNkZDBiYmI2LzEva1ZjbC1sc1pSNnh5WHN4TzhhV2g5NDRkSnY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2 LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBDg MA0GCSqGSIb3DQEBCwUAA4IBAQCMJ69t0aP6Yxqgo7L2WGVU/9Pz3uXhlzXg6mM9 NLmHoMqyq0FKlgXoPnVQStcsbr8RUnNo0Q6aKP78rBTaAEuzS3Zteb3l5pu/S0t/ O/IIT4N8ke2Ei0wwCaNDiJLMGTciJ1C/Gj8GmOp704CHFLhi7F0VsjjJ+6s1oRt2 rKAa0q6yPUR8ybw8pej2RcI3LTfEwm70aIndCapZTM8UDfzWQ6GDqPTKQSHUq9+d AnsxW1wi2J1oMo+YNhwLNuJCVVrk0J47a5HhEesmp6HdP39XOYmqQ213Xrqx51uZ q+17ENL4TrWTLyo6ctOTNR/+ruxn1qQ9M9g7kvJnwZ8ASbOD -----END CERTIFICATE-----Generated at Tue Jan 27 05:33:06 2026 by rpki-client