This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/kIUbbYh6ze26nak_H_v-MD0wSSY.roa File: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (raw, json) Hash identifier: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo= Subject key identifier: 90:85:1B:6D:88:7A:CD:ED:BA:9D:A9:3F:1F:FB:FE:30:3D:30:49:26 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910ED66822BE1189DD3ACEE3420FFD0 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/kIUbbYh6ze26nak_H_v-MD0wSSY.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206275 IP address blocks: 2a0d:f407:1034::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ed:66:82:2b:e1:18:9d:d3:ac:ee:34:20:ff:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90851b6d887acdedba9da93f1ffbfe303d304926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:f6:aa:3f:a4:c6:49:cf:0e:b5:de:22:d5: 00:16:e6:5d:e4:6c:d2:d9:d8:19:af:25:73:c3:2c: 1e:94:bb:b5:4b:6e:a5:97:78:23:21:01:5a:39:3f: 48:4c:8b:ab:cb:ae:de:35:cf:36:b0:7a:13:69:0d: 72:f6:82:01:74:e4:ad:2e:02:fc:e1:84:37:cf:c0: 6f:bf:8e:a5:5f:a6:19:80:bc:c2:b9:d0:a3:0c:f2: b6:9d:14:41:33:c6:ce:ff:d9:e2:0e:16:1f:62:33: 3a:a0:49:98:b3:26:25:54:97:da:ff:17:0a:a5:72: f4:db:e6:b3:6b:5e:56:b3:83:03:2d:1e:46:91:88: 21:b6:ca:6b:47:45:9d:79:16:7c:89:f7:f5:58:b4: 07:fb:80:64:35:81:7f:a5:07:7a:24:c1:28:71:37: f7:2c:08:b2:ab:83:cc:94:8e:a0:cb:37:d4:b2:24: 76:17:55:3b:5a:b2:42:1a:b7:a3:b1:76:e1:30:6d: 2d:e2:57:b2:0e:ad:01:6c:9b:72:d7:1f:24:ab:2e: 41:61:11:18:10:de:29:19:f3:d1:5f:01:6d:57:aa: 32:3d:41:30:b9:fd:9a:7e:4d:71:ff:93:a8:04:03: aa:c5:42:60:a9:04:6f:7d:fe:08:f7:45:6a:46:a3: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:1B:6D:88:7A:CD:ED:BA:9D:A9:3F:1F:FB:FE:30:3D:30:49:26 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/kIUbbYh6ze26nak_H_v-MD0wSSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:f407:1034::/48 Signature Algorithm: sha256WithRSAEncryption 07:2d:69:85:dc:2e:3e:08:d2:23:8f:d2:6c:92:45:ed:fa:8a: a8:9a:c8:8a:5d:42:ae:10:6e:03:1d:de:52:16:e7:3a:f5:30: 92:20:34:3f:c9:18:e9:b2:7e:a8:60:53:b0:13:40:8e:b4:57: c2:28:ee:45:87:a0:75:54:b0:09:a5:98:58:dd:6e:70:0a:6a: d4:fe:1f:d3:05:e9:b4:69:64:a4:53:b1:4d:89:aa:14:44:18: e2:93:92:65:61:ee:90:05:bc:cd:fd:a0:86:2d:2a:df:08:83: ec:ce:89:66:9c:b1:a4:c0:b7:1b:5e:db:d5:fb:6b:f3:4e:7b: aa:ae:f3:c0:2c:08:99:2c:f9:57:7d:35:1e:b5:41:cd:de:3e: 69:e3:76:bc:cb:bc:5c:4e:a1:0c:55:a3:ac:24:8f:20:65:93: de:e4:e3:e2:00:e3:43:b7:b6:ed:36:86:23:31:77:08:95:d4: f5:70:e0:9a:41:4f:33:92:fd:0e:25:03:d2:b1:1b:dc:8e:87: db:26:15:66:9c:11:b5:52:76:13:f2:56:17:25:a7:b2:16:3f: 8b:bf:2f:c8:7f:5d:be:da:7b:c7:e1:9a:30:5e:6d:3e:76:4e: cf:4c:64:b9:57:d9:e5:ed:87:ea:b7:8c:aa:a1:77:0a:eb:c4: fb:f2:79:df -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EO1mgivhGJ3TrO40IP/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDg1MWI2ZDg4N2FjZGVkYmE5ZGE5M2YxZmZiZmUzMDNkMzA0OTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3X2qj+kxknPDrXeItUAFuZd5GzS 2dgZryVzwywelLu1S26ll3gjIQFaOT9ITIury67eNc82sHoTaQ1y9oIBdOStLgL8 4YQ3z8Bvv46lX6YZgLzCudCjDPK2nRRBM8bO/9niDhYfYjM6oEmYsyYlVJfa/xcK pXL02+aza15Ws4MDLR5GkYghtsprR0WdeRZ8iff1WLQH+4BkNYF/pQd6JMEocTf3 LAiyq4PMlI6gyzfUsiR2F1U7WrJCGrejsXbhMG0t4leyDq0BbJty1x8kqy5BYREY EN4pGfPRXwFtV6oyPUEwuf2afk1x/5OoBAOqxUJgqQRvff4I90VqRqNJMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJCFG22Ies3tup2pPx/7/jA9MEkmMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEva0lVYmJZaDZ6ZTI2bmFrX0hfdi1NRDB3U1NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg30BxA0 MA0GCSqGSIb3DQEBCwUAA4IBAQAHLWmF3C4+CNIjj9JskkXt+oqomsiKXUKuEG4D Hd5SFuc69TCSIDQ/yRjpsn6oYFOwE0COtFfCKO5Fh6B1VLAJpZhY3W5wCmrU/h/T Bem0aWSkU7FNiaoURBjik5JlYe6QBbzN/aCGLSrfCIPszolmnLGkwLcbXtvV+2vz TnuqrvPALAiZLPlXfTUetUHN3j5p43a8y7xcTqEMVaOsJI8gZZPe5OPiAONDt7bt NoYjMXcIldT1cOCaQU8zkv0OJQPSsRvcjofbJhVmnBG1UnYT8lYXJaeyFj+Lvy/I f12+2nvH4ZowXm0+dk7PTGS5V9nl7Yfqt4yqoXcK68T78nnf -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:56 2026 by rpki-client