This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa File: KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa (raw, json) Hash identifier: xUB/m7Q6H3DaFEVeyIG7vRKsPq1kqSbSavs4m7VW+5g= Subject key identifier: 2A:30:A4:CD:4B:D9:29:83:56:79:07:F6:CE:2F:4D:9B:E2:6F:A9:24 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019A7194A25F7F1C92A930390BD12572C222 Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa Signing time: Tue 11 Nov 2025 06:22:37 +0000 ROA not before: Tue 11 Nov 2025 06:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39164 IP address blocks: 2a10:8180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:94:a2:5f:7f:1c:92:a9:30:39:0b:d1:25:72:c2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Nov 11 06:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a30a4cd4bd92983567907f6ce2f4d9be26fa924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:3e:30:c8:f9:e0:31:17:c9:25:74:46:de: 4e:0b:35:bb:9e:d0:00:fd:0d:25:7f:86:65:13:82: 6a:c7:e2:96:bc:4d:4a:cc:56:b8:c8:0c:93:23:ac: 0a:e1:68:45:a2:01:20:43:28:2f:42:0e:0f:a8:6d: 28:fb:c5:f6:3c:44:f8:2c:63:10:06:8b:41:b7:44: c5:fa:2c:ec:17:32:d0:48:6f:56:e5:fe:cf:c7:1f: 70:ec:5c:55:45:ec:fb:f9:94:62:5b:48:1d:cf:e7: 30:47:c3:88:24:ae:89:83:f2:be:aa:50:a3:7a:25: 56:8e:98:82:6d:85:48:b5:03:85:be:a7:65:68:14: cc:9b:a7:26:08:1b:89:94:4c:aa:78:20:11:87:20: ad:55:a9:e0:b2:0f:e0:e5:51:6d:3d:0a:72:1d:4b: db:27:b7:e7:74:eb:46:02:97:ad:68:54:09:14:af: d7:ff:0e:8c:3a:74:b8:98:18:dc:e9:fc:18:e5:dd: 31:16:52:6c:bf:22:0c:b1:18:93:82:88:19:df:1c: cc:db:6a:db:f8:30:63:ac:dc:bd:09:86:31:56:5f: 1f:94:37:38:1f:20:e6:11:48:d8:55:35:fd:6c:89: 75:44:e4:62:49:ea:30:2c:db:51:b8:8e:bb:2b:5c: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:A4:CD:4B:D9:29:83:56:79:07:F6:CE:2F:4D:9B:E2:6F:A9:24 X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:8180::/29 Signature Algorithm: sha256WithRSAEncryption 0c:ee:35:5f:d5:d5:67:8e:e9:df:99:ab:7b:e2:d1:da:98:61: 68:27:70:de:e0:05:1f:18:8d:29:e7:6f:fa:4d:cd:43:39:db: c4:0b:99:b4:8b:93:9c:df:1a:c2:2d:0c:29:0e:c1:11:50:f1: c6:66:53:4d:ae:cf:05:2e:ec:15:38:19:04:d3:5c:f6:94:71: a7:c1:62:06:5b:ab:a7:e3:1d:a4:84:04:e4:25:a0:7b:96:6b: 20:58:60:5f:77:7c:72:23:c9:9d:12:0a:8e:f9:62:a4:bf:d7: 9c:d3:69:2a:c2:b9:02:c3:3b:87:2a:ee:c5:63:ee:c9:d7:68: ef:3a:aa:7b:2f:2b:ab:a2:9a:5a:c2:e4:71:18:19:aa:29:43: f6:09:85:82:42:01:46:7b:09:23:9a:72:a4:55:02:87:05:af: c5:a2:9f:2a:b3:3f:18:e8:db:7a:b2:3f:1d:2a:b0:40:fa:f2: c3:75:0f:01:d2:28:13:19:bd:47:5a:0c:9b:d1:a2:cb:21:6e: 43:1c:5c:88:a4:b4:bb:b2:1b:f6:42:31:3d:f1:14:c5:84:99: 53:84:89:d1:45:f3:cd:d4:3c:ae:32:fe:5e:1b:20:84:e5:df: 83:50:9b:a8:6f:4d:75:d2:42:2c:1e:5b:6c:23:2e:9d:f5:98: ef:df:d4:54 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpxlKJffxySqTA5C9ElcsIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjUxMTExMDYyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTMwYTRjZDRiZDkyOTgzNTY3OTA3ZjZjZTJmNGQ5YmUyNmZhOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwys+MMj54DEXySV0Rt5OCzW7ntAA /Q0lf4ZlE4Jqx+KWvE1KzFa4yAyTI6wK4WhFogEgQygvQg4PqG0o+8X2PET4LGMQ BotBt0TF+izsFzLQSG9W5f7Pxx9w7FxVRez7+ZRiW0gdz+cwR8OIJK6Jg/K+qlCj eiVWjpiCbYVItQOFvqdlaBTMm6cmCBuJlEyqeCARhyCtVangsg/g5VFtPQpyHUvb J7fndOtGApetaFQJFK/X/w6MOnS4mBjc6fwY5d0xFlJsvyIMsRiTgogZ3xzM22rb +DBjrNy9CYYxVl8flDc4HyDmEUjYVTX9bIl1RORiSeowLNtRuI67K1zFBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCowpM1L2SmDVnkH9s4vTZvib6kkMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvS2pDa3pVdlpLWU5XZVFmMnppOU5tLUp2cVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhCBgDAN BgkqhkiG9w0BAQsFAAOCAQEADO41X9XVZ47p35mre+LR2phhaCdw3uAFHxiNKedv +k3NQznbxAuZtIuTnN8awi0MKQ7BEVDxxmZTTa7PBS7sFTgZBNNc9pRxp8FiBlur p+MdpIQE5CWge5ZrIFhgX3d8ciPJnRIKjvlipL/XnNNpKsK5AsM7hyruxWPuyddo 7zqqey8rq6KaWsLkcRgZqilD9gmFgkIBRnsJI5pypFUChwWvxaKfKrM/GOjberI/ HSqwQPryw3UPAdIoExm9R1oMm9GiyyFuQxxciKS0u7Ib9kIxPfEUxYSZU4SJ0UXz zdQ8rjL+XhsghOXfg1CbqG9NddJCLB5bbCMunfWY79/UVA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:34 2025 by rpki-client