This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/Kj0HsXicjlUn-679OFq2n6YXriA.roa File: Kj0HsXicjlUn-679OFq2n6YXriA.roa (raw, json) Hash identifier: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ= Subject key identifier: 2A:3D:07:B1:78:9C:8E:55:27:FB:AE:FD:38:5A:B6:9F:A6:17:AE:20 Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc Certificate serial: 019B7D5D1338ED42DDB0B30ABE25AC13BA15 Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/Kj0HsXicjlUn-679OFq2n6YXriA.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200533 IP address blocks: 2001:67c:21bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:13:38:ed:42:dd:b0:b3:0a:be:25:ac:13:ba:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a3d07b1789c8e5527fbaefd385ab69fa617ae20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:96:37:70:b4:51:f8:af:31:68:98:fe:f4:04: 5f:fa:cf:e2:74:8c:cd:fd:78:f8:72:52:8a:42:99: 6b:d8:13:3e:30:0b:b1:8b:b4:df:a9:d5:52:e1:3b: d8:0c:9a:95:33:63:41:d8:a6:35:1d:a9:34:ad:bf: 04:23:c1:a1:73:af:b5:73:fd:55:c7:21:67:90:d3: 85:b4:63:1a:67:ce:0f:6a:fe:15:c6:76:bf:f8:59: 91:91:e2:70:6e:40:8c:00:d9:88:35:e6:57:bd:8d: ac:ef:b8:c2:80:a6:a7:11:63:eb:90:eb:ee:8d:b3: 29:f9:19:c1:7c:6d:2f:8c:fe:77:5f:3e:c6:90:b6: 1f:65:ba:12:b6:df:0c:29:da:80:67:11:b4:42:61: fa:4a:63:56:88:16:df:90:e7:4c:ef:90:ab:47:e0: 1a:1d:2b:bd:38:80:9a:3b:48:93:92:ec:f9:58:24: 4a:aa:98:2a:a7:1b:fd:3a:e5:f2:af:5b:b7:01:c4: 03:5e:aa:a6:2f:6a:5f:0d:11:73:9b:94:8d:3e:63: 55:19:fa:79:d6:cf:e1:86:1a:30:11:0a:b6:f6:c4: fe:ae:66:d3:46:b3:94:45:33:5f:27:f0:37:db:3a: 19:87:25:1c:06:a9:e2:4c:0c:b4:7e:6e:73:ab:cc: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:07:B1:78:9C:8E:55:27:FB:AE:FD:38:5A:B6:9F:A6:17:AE:20 X509v3 Authority Key Identifier: keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/Kj0HsXicjlUn-679OFq2n6YXriA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21bc::/48 Signature Algorithm: sha256WithRSAEncryption 31:b8:8f:89:7f:34:37:2b:f7:85:9d:75:df:07:0d:73:14:2e: 75:db:55:6d:2f:45:ab:3b:31:33:5c:64:63:89:53:63:54:dd: 08:3c:3b:7a:33:90:35:f4:d0:42:47:60:de:70:10:17:37:09: 49:df:24:b7:c6:82:a7:31:92:29:d8:6a:36:a0:60:db:7a:9d: 1b:d1:cd:ef:db:f3:39:53:5a:5d:f2:13:9a:25:d8:a7:8f:7d: f3:eb:a6:c6:34:f4:38:21:96:f6:ea:3a:ec:69:16:ec:fe:c6: 9c:16:3e:ef:f3:e0:26:46:5e:9f:83:d9:1d:53:28:b1:ac:36: cf:8b:ad:98:cd:b5:63:c8:3a:83:46:a0:b0:3a:9e:dd:3c:03: bf:f0:00:48:e5:e8:6f:df:56:90:d3:7c:02:09:e6:f1:e4:6b: 2f:fa:e4:60:78:d6:01:04:9a:2a:ac:80:07:f4:46:36:50:6b: d2:70:19:a0:56:9d:4c:79:2e:7a:70:ac:4a:3f:aa:3e:1e:1e: fc:98:f2:12:d0:de:cd:7f:f9:88:c9:55:e3:2b:3e:d9:d6:c8: b4:83:c0:dd:48:96:8a:0e:a5:52:92:6b:78:ed:29:21:7d:25: 84:26:8d:06:c9:04:2f:7c:b8:b3:55:6f:e3:32:91:29:93:ea: 02:12:50:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRM47ULdsLMKviWsE7oVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NTA1OTdhNjA2NGM4ODJhZTJhZjNmYTU3NTlmMTNmOGJk MWRkZmMwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTNkMDdiMTc4OWM4ZTU1MjdmYmFlZmQzODVhYjY5ZmE2MTdhZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pY3cLRR+K8xaJj+9ARf+s/idIzN /Xj4clKKQplr2BM+MAuxi7TfqdVS4TvYDJqVM2NB2KY1Hak0rb8EI8Ghc6+1c/1V xyFnkNOFtGMaZ84Pav4Vxna/+FmRkeJwbkCMANmINeZXvY2s77jCgKanEWPrkOvu jbMp+RnBfG0vjP53Xz7GkLYfZboStt8MKdqAZxG0QmH6SmNWiBbfkOdM75CrR+Aa HSu9OICaO0iTkuz5WCRKqpgqpxv9OuXyr1u3AcQDXqqmL2pfDRFzm5SNPmNVGfp5 1s/hhhowEQq29sT+rmbTRrOURTNfJ/A32zoZhyUcBqniTAy0fm5zq8y9ZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCo9B7F4nI5VJ/uu/Thatp+mF64gMB8GA1UdIwQY MBaAFIVQWXpgZMiCrirz+ldZ8T+L0d38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMt MjVjNWYwNWFlYjVmLzEvS2owSHNYaWNqbFVuLTY3OU9GcTJuNllYcmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMtMjVjNWYwNWFlYjVm LzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCG8 MA0GCSqGSIb3DQEBCwUAA4IBAQAxuI+JfzQ3K/eFnXXfBw1zFC5121VtL0WrOzEz XGRjiVNjVN0IPDt6M5A19NBCR2DecBAXNwlJ3yS3xoKnMZIp2Go2oGDbep0b0c3v 2/M5U1pd8hOaJdinj33z66bGNPQ4IZb26jrsaRbs/sacFj7v8+AmRl6fg9kdUyix rDbPi62YzbVjyDqDRqCwOp7dPAO/8ABI5ehv31aQ03wCCebx5Gsv+uRgeNYBBJoq rIAH9EY2UGvScBmgVp1MeS56cKxKP6o+Hh78mPIS0N7Nf/mIyVXjKz7Z1si0g8Dd SJaKDqVSkmt47SkhfSWEJo0GyQQvfLizVW/jMpEpk+oCElBM -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:25 2026 by rpki-client