This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/kG9o92WtxtdlslnK36VPn0SNf1M.roa File: kG9o92WtxtdlslnK36VPn0SNf1M.roa (raw, json) Hash identifier: OXeUCoUsqDWHvih8GRMeRQbUwh35avks5fVUQM/vjSE= Subject key identifier: 90:6F:68:F7:65:AD:C6:D7:65:B2:59:CA:DF:A5:4F:9F:44:8D:7F:53 Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Certificate serial: 019B7EA57BF19F5896C98B7E1C22D4C041B5 Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/kG9o92WtxtdlslnK36VPn0SNf1M.roa Signing time: Fri 02 Jan 2026 12:18:52 +0000 ROA not before: Fri 02 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8893 IP address blocks: 2001:1490:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7b:f1:9f:58:96:c9:8b:7e:1c:22:d4:c0:41:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=906f68f765adc6d765b259cadfa54f9f448d7f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:92:4d:2f:45:80:9f:94:05:e2:ea:8e:72: 29:a5:c9:c4:ab:ae:f6:67:b6:87:e7:65:6c:74:08: aa:31:3a:52:9c:96:fe:bb:ab:94:74:e9:dd:ad:2e: 15:70:49:ca:82:df:a1:8a:a1:aa:a3:28:0f:ce:a5: d1:ed:86:d0:59:1b:88:fc:37:67:f3:20:3a:28:47: 36:ec:f1:7b:da:0f:a1:2f:ad:70:e0:fd:5d:b6:95: 9d:82:e7:ed:c6:46:69:d8:45:75:74:59:3a:74:45: 0a:cb:b8:26:5c:2f:50:63:5a:c2:75:a2:99:fe:e8: 53:0c:2b:eb:5b:1e:c0:3a:32:a2:07:9b:fc:5f:94: d8:08:e2:a3:56:1a:ec:1b:f8:1f:a4:26:e7:15:d7: 64:2f:e4:c1:06:32:5d:66:b7:b9:c2:9a:59:37:29: af:8b:83:24:be:7b:7e:f8:a1:12:4e:0a:0f:52:9b: 0e:05:db:24:13:b4:67:69:50:2f:f5:5e:28:53:08: a3:8c:15:b8:6d:f4:c1:aa:b5:4f:68:55:01:0b:f1: 26:b9:4d:3b:9d:dc:f6:7a:66:ba:74:b5:f4:36:60: 5b:bb:32:20:12:5b:65:90:df:8b:da:ff:90:4a:39: 56:03:6d:9e:e4:e3:b4:f4:04:f3:b3:43:33:2f:0d: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6F:68:F7:65:AD:C6:D7:65:B2:59:CA:DF:A5:4F:9F:44:8D:7F:53 X509v3 Authority Key Identifier: keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/kG9o92WtxtdlslnK36VPn0SNf1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1490:101::/48 Signature Algorithm: sha256WithRSAEncryption 87:ca:f2:4f:69:72:f4:0e:38:33:03:3a:c0:68:47:97:b1:13: 02:58:4c:80:23:17:f7:fd:8c:01:62:ea:dd:af:bd:d8:69:b8: 4a:6f:d0:2c:90:cf:35:41:fc:17:57:69:0a:13:2f:a3:d3:b5: 94:44:84:d5:3d:da:d7:d7:e0:2e:89:7c:04:de:7c:a5:69:11: 48:c2:5b:fd:9e:4a:4b:ea:e0:6a:82:e6:c2:13:d2:ff:17:64: fa:74:6e:61:b2:f9:69:be:97:ee:93:e5:b3:e9:f5:32:79:12: e1:87:ad:34:ee:ac:cb:44:86:f5:bf:e2:70:cf:c8:95:67:16: c8:ee:69:9b:ad:0d:19:90:a6:c3:e8:ce:fa:9e:df:db:33:1f: e6:54:62:ec:7e:9c:a8:ed:04:f9:32:55:79:f2:66:8e:39:8f: b2:85:44:34:f3:7f:8a:db:58:17:b8:8e:b4:a7:51:ac:8a:5b: f3:07:73:1c:f5:9a:77:46:dc:ee:ce:64:22:35:53:e6:98:d6: 7b:ee:f7:8f:c5:66:5c:25:ac:2f:92:4b:a6:6b:bf:db:61:6d: 07:82:18:6b:35:b2:29:b8:a1:54:f0:39:72:7a:e4:a9:85:6a: a0:c1:33:24:ee:80:2e:6a:52:1a:85:b1:e4:0b:9e:3b:24:a2: db:45:43:7f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pXvxn1iWyYt+HCLUwEG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2 NzA3ZjcwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDZmNjhmNzY1YWRjNmQ3NjViMjU5Y2FkZmE1NGY5ZjQ0OGQ3ZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdSSTS9FgJ+UBeLqjnIppcnEq672 Z7aH52VsdAiqMTpSnJb+u6uUdOndrS4VcEnKgt+hiqGqoygPzqXR7YbQWRuI/Ddn 8yA6KEc27PF72g+hL61w4P1dtpWdguftxkZp2EV1dFk6dEUKy7gmXC9QY1rCdaKZ /uhTDCvrWx7AOjKiB5v8X5TYCOKjVhrsG/gfpCbnFddkL+TBBjJdZre5wppZNymv i4Mkvnt++KESTgoPUpsOBdskE7RnaVAv9V4oUwijjBW4bfTBqrVPaFUBC/EmuU07 ndz2ema6dLX0NmBbuzIgEltlkN+L2v+QSjlWA22e5OO09ATzs0MzLw2SYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJBvaPdlrcbXZbJZyt+lT59EjX9TMB8GA1UdIwQY MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt OTRjMmZkYTM5ZWFkLzEva0c5bzkyV3R4dGRsc2xuSzM2VlBuMFNOZjFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEUkAEB MA0GCSqGSIb3DQEBCwUAA4IBAQCHyvJPaXL0DjgzAzrAaEeXsRMCWEyAIxf3/YwB Yurdr73YabhKb9AskM81QfwXV2kKEy+j07WURITVPdrX1+AuiXwE3nylaRFIwlv9 nkpL6uBqgubCE9L/F2T6dG5hsvlpvpfuk+Wz6fUyeRLhh6007qzLRIb1v+Jwz8iV ZxbI7mmbrQ0ZkKbD6M76nt/bMx/mVGLsfpyo7QT5MlV58maOOY+yhUQ083+K21gX uI60p1GsilvzB3Mc9Zp3RtzuzmQiNVPmmNZ77vePxWZcJawvkkuma7/bYW0Hghhr NbIpuKFU8DlyeuSphWqgwTMk7oAualIahbHkC547JKLbRUN/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:22 2026 by rpki-client