This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/kIwcjzINW8dxv0n9475H5UAlv-o.roa File: kIwcjzINW8dxv0n9475H5UAlv-o.roa (raw, json) Hash identifier: z7kthu14PX9eFygYlQs12XpkisLRPxXCnKfsTXiY9WE= Subject key identifier: 90:8C:1C:8F:32:0D:5B:C7:71:BF:49:FD:E3:BE:47:E5:40:25:BF:EA Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7111F9CCA42D2EA369F64DAF42B2E Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/kIwcjzINW8dxv0n9475H5UAlv-o.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13068 IP address blocks: 2a01:190:1505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:1f:9c:ca:42:d2:ea:36:9f:64:da:f4:2b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908c1c8f320d5bc771bf49fde3be47e54025bfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:d3:86:4a:f7:06:fb:f2:43:bd:c3:c6:51: 36:9c:2d:e1:53:53:87:76:47:6a:4a:3c:35:b7:a0: 50:b1:1f:ff:5e:9b:32:46:e6:68:5c:aa:86:0a:74: 0b:32:16:4a:f3:2e:52:15:00:10:a5:38:54:56:06: e9:73:f9:e8:8b:f1:2b:1b:ad:7b:d7:ff:71:96:83: b8:16:61:b1:27:11:fa:9f:d3:92:87:b9:c2:e8:50: fb:48:72:48:57:d5:30:69:c1:5e:16:8b:f0:ef:37: 24:4f:ed:3f:c7:4f:db:a8:0e:91:1a:4d:36:b1:a3: a6:f0:f7:b1:99:91:02:fb:39:e0:64:2a:32:ed:5b: 9b:1d:38:54:20:62:12:b4:6e:b4:b4:1e:0d:80:85: 12:ec:07:87:25:07:6f:7d:94:73:46:15:8c:40:c6: f9:4a:e3:45:0b:d4:ab:88:86:6f:63:e1:2a:ac:55: a7:96:28:ef:3c:38:b5:30:b2:3c:90:9f:39:c4:b6: 68:58:27:6d:75:01:cb:e0:28:ec:ea:29:ee:1d:04: 21:97:80:cc:4f:f0:ab:db:07:e6:12:10:53:cb:dd: 46:16:72:f1:c3:45:25:a7:ed:09:f2:ce:ee:9c:fa: 9e:96:69:40:cf:bb:a3:ff:e0:10:71:3d:a6:b5:67: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:1C:8F:32:0D:5B:C7:71:BF:49:FD:E3:BE:47:E5:40:25:BF:EA X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/kIwcjzINW8dxv0n9475H5UAlv-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:1505::/48 Signature Algorithm: sha256WithRSAEncryption c9:67:56:9f:24:4c:59:db:0b:76:f0:f2:05:44:fd:be:ea:89: 58:7a:24:55:6a:58:ca:72:91:25:19:95:8e:17:b0:ef:75:0b: 65:3b:ec:bf:97:b6:20:d6:53:c7:26:52:7c:9e:b9:27:31:96: 5c:13:c6:bc:d7:e8:91:af:9b:c9:d5:13:5b:38:b4:1e:0b:6e: af:84:c3:e5:9c:ee:6c:4e:2b:27:38:11:0e:eb:95:cc:34:99: 91:a6:19:1f:a4:d4:95:7b:10:5f:8b:ee:9d:a7:df:de:3e:c9: 0c:99:21:3e:dc:74:cb:86:7b:74:c4:d0:29:17:f2:9a:bb:09: 98:cf:75:90:c7:73:73:bd:78:09:22:0e:1b:c5:56:db:e2:f6: 90:8f:b4:b5:40:88:70:ca:6e:2f:90:a4:0d:0a:3e:8d:18:2a: f4:7b:ea:e6:26:38:21:11:66:48:44:bb:7e:f3:e4:70:f8:89: 05:38:3a:44:3a:09:91:da:bb:18:7d:94:29:cc:34:32:a1:ed: 94:5b:0f:02:08:8b:4b:90:5d:9c:6a:43:17:22:04:dc:2c:8f: b9:d5:30:d9:b8:e1:f3:3e:6f:2e:6d:97:d5:0d:84:f3:78:49: f3:2b:22:c3:51:ef:85:d3:c4:bb:e4:15:61:64:d3:93:dc:b6: f8:b6:25:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxEfnMpC0uo2n2Ta9CsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDhjMWM4ZjMyMGQ1YmM3NzFiZjQ5ZmRlM2JlNDdlNTQwMjViZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosfThkr3BvvyQ73DxlE2nC3hU1OH dkdqSjw1t6BQsR//XpsyRuZoXKqGCnQLMhZK8y5SFQAQpThUVgbpc/noi/ErG617 1/9xloO4FmGxJxH6n9OSh7nC6FD7SHJIV9UwacFeFovw7zckT+0/x0/bqA6RGk02 saOm8PexmZEC+zngZCoy7VubHThUIGIStG60tB4NgIUS7AeHJQdvfZRzRhWMQMb5 SuNFC9SriIZvY+EqrFWnlijvPDi1MLI8kJ85xLZoWCdtdQHL4Cjs6inuHQQhl4DM T/Cr2wfmEhBTy91GFnLxw0Ulp+0J8s7unPqelmlAz7uj/+AQcT2mtWfhfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJCMHI8yDVvHcb9J/eO+R+VAJb/qMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEva0l3Y2p6SU5XOGR4djBuOTQ3NUg1VUFsdi1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBUF MA0GCSqGSIb3DQEBCwUAA4IBAQDJZ1afJExZ2wt28PIFRP2+6olYeiRValjKcpEl GZWOF7DvdQtlO+y/l7Yg1lPHJlJ8nrknMZZcE8a81+iRr5vJ1RNbOLQeC26vhMPl nO5sTisnOBEO65XMNJmRphkfpNSVexBfi+6dp9/ePskMmSE+3HTLhnt0xNApF/Ka uwmYz3WQx3NzvXgJIg4bxVbb4vaQj7S1QIhwym4vkKQNCj6NGCr0e+rmJjghEWZI RLt+8+Rw+IkFODpEOgmR2rsYfZQpzDQyoe2UWw8CCItLkF2cakMXIgTcLI+51TDZ uOHzPm8ubZfVDYTzeEnzKyLDUe+F08S75BVhZNOT3Lb4tiXS -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:44 2026 by rpki-client