This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa File: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (raw, json) Hash identifier: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao= Subject key identifier: C5:9C:BD:C8:6D:78:96:D2:58:C9:37:61:57:C1:0A:87:E4:2F:D9:3C Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Certificate serial: 019B7CEE399813806DDBE71B8A71D6C6AADF Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199130 IP address blocks: 2a13:de80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:39:98:13:80:6d:db:e7:1b:8a:71:d6:c6:aa:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c59cbdc86d7896d258c9376157c10a87e42fd93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:b5:87:2d:15:e6:fe:bb:9e:ff:ba:4e:a2: d3:99:a5:83:4b:ab:2d:84:f6:a5:8e:73:ac:79:99: de:a7:2b:21:ff:85:d0:a5:84:bc:bd:77:35:b4:7a: b5:cc:c3:95:a2:c5:79:a0:5b:e6:f5:71:03:d0:8a: b3:30:b2:19:88:a8:8f:5a:c4:9b:27:51:26:31:80: 43:88:78:2b:7c:10:f8:d8:03:b0:80:6f:a9:35:67: d7:9e:b8:1b:da:15:cb:e2:dd:53:15:dc:64:75:8c: 9c:bc:7e:d7:42:44:8a:c9:0a:ba:32:40:da:7e:6d: db:86:2b:d8:9f:63:0c:20:5d:1e:85:e5:51:39:fb: b5:45:ae:8b:ed:ea:a4:66:a0:55:66:22:03:0e:73: f8:c0:8c:ce:3c:dd:7b:1b:f8:e1:75:db:ac:7b:d3: 3a:4f:fc:93:52:d3:af:83:39:49:bc:5a:41:7d:29: 2f:0d:33:9a:14:c0:e2:47:35:4c:10:83:a8:0b:42: 80:41:48:69:5d:31:ea:c5:21:88:c1:a8:d4:45:a2: 90:bf:cb:f7:60:38:27:8b:8d:4d:27:54:20:9d:c8: 11:c9:5c:2d:42:00:56:67:56:92:f5:e0:d2:ae:e6: b7:02:c1:d0:2b:eb:c0:f5:3d:a2:39:ac:27:3b:45: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:BD:C8:6D:78:96:D2:58:C9:37:61:57:C1:0A:87:E4:2F:D9:3C X509v3 Authority Key Identifier: keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:de80::/29 Signature Algorithm: sha256WithRSAEncryption 8f:c0:70:e6:85:3f:07:74:47:de:9a:b7:24:76:f5:67:9c:33: c5:40:d3:d2:f9:e4:c9:43:3f:af:50:04:21:77:a5:a6:4d:6a: c3:59:6d:1e:a6:52:63:c2:43:9c:f9:27:d5:46:68:12:28:c7: f6:d3:0d:0a:6f:e0:53:62:af:eb:9e:4d:04:53:db:b1:76:a4: 1a:44:d6:dc:43:1c:72:a1:2f:d4:aa:35:b5:b9:0e:28:82:45: 00:06:c1:a2:7c:09:93:29:98:b4:a6:76:92:a1:a6:55:8a:b8: 22:35:0a:0b:80:9d:e8:ba:6d:04:87:e8:26:e7:a0:eb:32:fd: 2e:bc:28:6a:da:e0:df:a0:51:7d:37:16:33:35:b1:a8:81:82: 3a:6b:d5:a7:f3:96:14:1d:f1:5b:3c:99:b1:a8:d0:e4:08:8c: 8c:bd:11:64:e5:49:69:c0:7b:9e:7b:b0:fa:f9:b1:f5:f0:b3: 4c:00:46:49:41:df:cb:bc:73:87:3a:12:85:04:c1:d0:24:25: d3:ea:56:4a:5e:dc:15:fa:cb:16:27:3f:6a:b5:ee:04:f6:1b: ca:4a:96:9e:eb:11:f7:67:d9:3d:c9:c4:95:d7:ab:d6:0f:31: 6b:31:db:e2:70:be:68:64:dc:3c:e3:6c:cb:04:49:2f:fd:09: 88:8b:2c:5b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87jmYE4Bt2+cbinHWxqrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi ZmE1NTMwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTljYmRjODZkNzg5NmQyNThjOTM3NjE1N2MxMGE4N2U0MmZkOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsde1hy0V5v67nv+6TqLTmaWDS6st hPaljnOseZnepysh/4XQpYS8vXc1tHq1zMOVosV5oFvm9XED0IqzMLIZiKiPWsSb J1EmMYBDiHgrfBD42AOwgG+pNWfXnrgb2hXL4t1TFdxkdYycvH7XQkSKyQq6MkDa fm3bhivYn2MMIF0eheVROfu1Ra6L7eqkZqBVZiIDDnP4wIzOPN17G/jhdduse9M6 T/yTUtOvgzlJvFpBfSkvDTOaFMDiRzVMEIOoC0KAQUhpXTHqxSGIwajURaKQv8v3 YDgni41NJ1QgncgRyVwtQgBWZ1aS9eDSrua3AsHQK+vA9T2iOawnO0VThwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMWcvchteJbSWMk3YVfBCofkL9k8MB8GA1UdIwQY MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt NjFkZTIxZjUxNDM0LzEveFp5OXlHMTRsdEpZeVRkaFY4RUtoLVF2MlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0 LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPegDAN BgkqhkiG9w0BAQsFAAOCAQEAj8Bw5oU/B3RH3pq3JHb1Z5wzxUDT0vnkyUM/r1AE IXelpk1qw1ltHqZSY8JDnPkn1UZoEijH9tMNCm/gU2Kv655NBFPbsXakGkTW3EMc cqEv1Ko1tbkOKIJFAAbBonwJkymYtKZ2kqGmVYq4IjUKC4Cd6LptBIfoJueg6zL9 Lrwoatrg36BRfTcWMzWxqIGCOmvVp/OWFB3xWzyZsajQ5AiMjL0RZOVJacB7nnuw +vmx9fCzTABGSUHfy7xzhzoShQTB0CQl0+pWSl7cFfrLFic/arXuBPYbykqWnusR 92fZPcnElder1g8xazHb4nC+aGTcPONsywRJL/0JiIssWw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:03 2026 by rpki-client