This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/NzKx6KcOHXw58MEojB9ud-uaBro.roa File: NzKx6KcOHXw58MEojB9ud-uaBro.roa (raw, json) Hash identifier: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U= Subject key identifier: 37:32:B1:E8:A7:0E:1D:7C:39:F0:C1:28:8C:1F:6E:77:EB:9A:06:BA Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b Certificate serial: 019B76EB8AE429797DB2DFC18DA2875E55C1 Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/NzKx6KcOHXw58MEojB9ud-uaBro.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42 IP address blocks: 2001:678:94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8a:e4:29:79:7d:b2:df:c1:8d:a2:87:5e:55:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3732b1e8a70e1d7c39f0c1288c1f6e77eb9a06ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:6e:b9:40:13:e6:8b:a7:c8:eb:86:a6:db: 92:d5:73:f4:14:91:e8:91:b6:82:4c:a0:9c:7a:c8: 22:43:67:f7:aa:fd:44:09:f2:d2:50:dc:32:e5:11: e5:e8:e4:1b:39:ed:13:b6:bb:20:44:52:90:9c:25: 1b:43:c5:44:e2:9b:1e:fe:b0:05:fb:39:14:ef:e4: 24:bd:d2:36:32:1d:60:00:47:a9:b4:12:b7:c6:d2: d5:36:1a:11:7b:50:07:d5:9e:af:af:a5:33:bf:e8: f8:a4:95:8d:bb:2f:2e:4b:40:a5:f1:dd:10:11:30: 57:35:ff:0c:88:57:c6:8d:74:8d:60:f3:8e:22:e6: d0:bb:7a:50:2b:2d:df:33:d7:67:1e:5a:08:7f:76: f9:01:64:91:9b:02:8d:6b:88:81:4b:4b:37:fa:87: 25:d4:44:72:8e:6f:37:f8:61:ab:32:cb:4a:b1:c1: 8b:df:27:b3:d0:e6:0b:04:8d:ff:a0:87:33:4b:e7: 13:b5:f9:16:a7:6b:d9:d2:68:ab:4b:30:90:39:a6: 82:e0:ed:cb:66:6d:31:ff:f9:59:60:93:a7:b5:8a: 7f:47:31:aa:eb:4d:b6:51:a4:73:d8:e0:51:c9:68: 88:6f:c8:f5:a1:1f:ba:c2:73:9f:10:f5:f0:c2:91: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:32:B1:E8:A7:0E:1D:7C:39:F0:C1:28:8C:1F:6E:77:EB:9A:06:BA X509v3 Authority Key Identifier: keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/NzKx6KcOHXw58MEojB9ud-uaBro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:94::/48 Signature Algorithm: sha256WithRSAEncryption b3:9e:c7:ef:e8:68:e8:3b:4e:32:5d:b7:c9:12:20:67:30:e2: a0:bb:56:25:51:0d:ca:a8:3b:4c:59:52:48:84:e0:99:e3:4c: a3:b0:57:73:8b:94:8c:4e:b0:b5:aa:52:84:47:fd:9e:20:15: a1:77:e8:ff:78:31:7d:84:a6:5c:bc:26:b6:21:0f:0c:94:f3: 7e:9c:39:9c:99:77:97:c7:ec:46:65:8d:3b:6f:a4:aa:8c:3a: fe:5d:b1:0d:aa:2b:5f:31:55:14:25:bb:59:56:5d:e4:df:48: aa:89:78:62:21:ef:bc:88:7e:c2:4d:4c:fc:59:6e:69:95:5f: 51:3e:ed:96:39:13:53:95:50:93:8b:02:42:23:88:98:99:59: e7:5d:48:e0:03:06:44:d5:70:28:64:8e:10:fe:42:77:af:36: 92:1d:a9:d2:7d:f0:1d:04:66:db:a0:6a:d1:9e:5a:d7:20:82: 62:e6:22:5d:dc:78:b7:cb:50:13:1e:be:5a:52:38:63:9f:dc: 84:a7:90:aa:05:84:8f:66:36:65:88:d5:63:7c:37:5c:71:6a: 6f:da:1d:4f:36:2f:9e:db:8f:b7:40:68:a1:b3:7b:40:4f:35: f4:74:d2:a6:d6:c7:fd:f0:76:50:4d:6e:71:a2:4e:4d:d1:8c: 10:20:15:26 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264rkKXl9st/BjaKHXlXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDAzZTU4M2JkYjI1MTFmZjU3YWI3YTMyZmNlNzQxMzM0 YjM0M2IwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzMyYjFlOGE3MGUxZDdjMzlmMGMxMjg4YzFmNmU3N2ViOWEwNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNRuuUAT5ounyOuGptuS1XP0FJHo kbaCTKCcesgiQ2f3qv1ECfLSUNwy5RHl6OQbOe0TtrsgRFKQnCUbQ8VE4pse/rAF +zkU7+QkvdI2Mh1gAEeptBK3xtLVNhoRe1AH1Z6vr6Uzv+j4pJWNuy8uS0Cl8d0Q ETBXNf8MiFfGjXSNYPOOIubQu3pQKy3fM9dnHloIf3b5AWSRmwKNa4iBS0s3+ocl 1ERyjm83+GGrMstKscGL3yez0OYLBI3/oIczS+cTtfkWp2vZ0mirSzCQOaaC4O3L Zm0x//lZYJOntYp/RzGq6022UaRz2OBRyWiIb8j1oR+6wnOfEPXwwpFqiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDcyseinDh18OfDBKIwfbnfrmga6MB8GA1UdIwQY MBaAFCsAPlg72yUR/1erejL850EzSzQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEt MDU4YmJmOWQ1ZTI3LzEvTnpLeDZLY09IWHc1OE1Fb2pCOXVkLXVhQnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEtMDU4YmJmOWQ1ZTI3 LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeACU MA0GCSqGSIb3DQEBCwUAA4IBAQCznsfv6GjoO04yXbfJEiBnMOKgu1YlUQ3KqDtM WVJIhOCZ40yjsFdzi5SMTrC1qlKER/2eIBWhd+j/eDF9hKZcvCa2IQ8MlPN+nDmc mXeXx+xGZY07b6SqjDr+XbENqitfMVUUJbtZVl3k30iqiXhiIe+8iH7CTUz8WW5p lV9RPu2WORNTlVCTiwJCI4iYmVnnXUjgAwZE1XAoZI4Q/kJ3rzaSHanSffAdBGbb oGrRnlrXIIJi5iJd3Hi3y1ATHr5aUjhjn9yEp5CqBYSPZjZliNVjfDdccWpv2h1P Ni+e24+3QGihs3tATzX0dNKm1sf98HZQTW5xok5N0YwQIBUm -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:49 2026 by rpki-client