This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/kvIzttk50ypIvqgfMfZSFIXct9U.roa File: kvIzttk50ypIvqgfMfZSFIXct9U.roa (raw, json) Hash identifier: CPJdiTd4yiPmDnbfp5PHDpiZmVQZeyBl1ypSYm3eBYc= Subject key identifier: 92:F2:33:B6:D9:39:D3:2A:48:BE:A8:1F:31:F6:52:14:85:DC:B7:D5 Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb Certificate serial: 019B78A35C23BF88BB154C0DDDB182EE1BE3 Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/kvIzttk50ypIvqgfMfZSFIXct9U.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214342 IP address blocks: 2a09:be87::/38 maxlen: 38 2a09:be87:400::/38 maxlen: 38 2a09:be87:800::/38 maxlen: 38 2a09:be87:c00::/38 maxlen: 38 2a09:be87:1000::/38 maxlen: 38 2a09:be87:1400::/38 maxlen: 38 2a09:be87:1800::/38 maxlen: 38 2a09:be87:1c00::/38 maxlen: 38 2a09:be87:2000::/38 maxlen: 38 2a09:be87:2400::/38 maxlen: 38 2a09:be87:2800::/38 maxlen: 38 2a09:be87:2c00::/38 maxlen: 38 2a09:be87:3000::/38 maxlen: 38 2a09:be87:3400::/38 maxlen: 38 2a09:be87:3800::/38 maxlen: 38 2a09:be87:3c00::/38 maxlen: 38 2a09:be87:4000::/38 maxlen: 38 2a09:be87:4400::/38 maxlen: 38 2a09:be87:4800::/38 maxlen: 38 2a09:be87:4c00::/38 maxlen: 38 2a09:be87:5000::/41 maxlen: 41 2a09:be87:5080::/41 maxlen: 41 2a09:be87:5100::/41 maxlen: 41 2a09:be87:5180::/41 maxlen: 41 2a09:be87:5200::/41 maxlen: 41 2a09:be87:5280::/41 maxlen: 41 2a09:be87:5300::/41 maxlen: 41 2a09:be87:5380::/41 maxlen: 41 2a09:be87:5400::/41 maxlen: 41 2a09:be87:5480::/41 maxlen: 41 2a09:be87:5500::/41 maxlen: 41 2a09:be87:5580::/41 maxlen: 41 2a09:be87:5600::/41 maxlen: 41 2a09:be87:5680::/41 maxlen: 41 2a09:be87:5700::/41 maxlen: 41 2a09:be87:5780::/41 maxlen: 41 2a09:be87:5800::/41 maxlen: 41 2a09:be87:5880::/41 maxlen: 41 2a09:be87:5900::/41 maxlen: 41 2a09:be87:5980::/41 maxlen: 41 2a09:be87:5a00::/41 maxlen: 41 2a09:be87:5a80::/41 maxlen: 41 2a09:be87:5b00::/41 maxlen: 41 2a09:be87:5b80::/41 maxlen: 41 2a09:be87:5c00::/41 maxlen: 41 2a09:be87:5c80::/41 maxlen: 41 2a09:be87:5d00::/41 maxlen: 41 2a09:be87:5d80::/41 maxlen: 41 2a09:be87:5e00::/41 maxlen: 41 2a09:be87:5e80::/41 maxlen: 41 2a09:be87:5f00::/41 maxlen: 41 2a09:be87:5f80::/41 maxlen: 41 2a09:be87:6000::/38 maxlen: 38 2a09:be87:6400::/38 maxlen: 38 2a09:be87:6800::/38 maxlen: 38 2a09:be87:6c00::/38 maxlen: 38 2a09:be87:7000::/38 maxlen: 38 2a09:be87:7400::/38 maxlen: 38 2a09:be87:7800::/38 maxlen: 38 2a09:be87:7c00::/38 maxlen: 38 2a09:be87:8000::/38 maxlen: 38 2a09:be87:8400::/38 maxlen: 38 2a09:be87:8800::/38 maxlen: 38 2a09:be87:8c00::/38 maxlen: 38 2a09:be87:9000::/38 maxlen: 38 2a09:be87:9400::/38 maxlen: 38 2a09:be87:9800::/38 maxlen: 38 2a09:be87:9c00::/38 maxlen: 38 2a09:be87:a000::/38 maxlen: 38 2a09:be87:a400::/38 maxlen: 38 2a09:be87:a800::/38 maxlen: 38 2a09:be87:ac00::/38 maxlen: 38 2a09:be87:b000::/38 maxlen: 38 2a09:be87:b400::/38 maxlen: 38 2a09:be87:b800::/38 maxlen: 38 2a09:be87:bc00::/38 maxlen: 38 2a09:be87:c000::/38 maxlen: 38 2a09:be87:c400::/38 maxlen: 38 2a09:be87:c800::/38 maxlen: 38 2a09:be87:cc00::/38 maxlen: 38 2a09:be87:d000::/38 maxlen: 38 2a09:be87:d400::/38 maxlen: 38 2a09:be87:d800::/38 maxlen: 38 2a09:be87:dc00::/38 maxlen: 38 2a09:be87:e000::/41 maxlen: 41 2a09:be87:e080::/41 maxlen: 41 2a09:be87:e100::/41 maxlen: 41 2a09:be87:e180::/41 maxlen: 41 2a09:be87:e200::/41 maxlen: 41 2a09:be87:e280::/41 maxlen: 41 2a09:be87:e300::/41 maxlen: 41 2a09:be87:e380::/41 maxlen: 41 2a09:be87:e400::/41 maxlen: 41 2a09:be87:e480::/41 maxlen: 41 2a09:be87:e500::/41 maxlen: 41 2a09:be87:e580::/41 maxlen: 41 2a09:be87:e600::/41 maxlen: 41 2a09:be87:e680::/41 maxlen: 41 2a09:be87:e700::/41 maxlen: 41 2a09:be87:e780::/41 maxlen: 41 2a09:be87:e800::/41 maxlen: 41 2a09:be87:e880::/41 maxlen: 41 2a09:be87:e900::/41 maxlen: 41 2a09:be87:e980::/41 maxlen: 41 2a09:be87:ea00::/41 maxlen: 41 2a09:be87:ea80::/41 maxlen: 41 2a09:be87:eb00::/41 maxlen: 41 2a09:be87:eb80::/41 maxlen: 41 2a09:be87:ec00::/41 maxlen: 41 2a09:be87:ec80::/41 maxlen: 41 2a09:be87:ed00::/41 maxlen: 41 2a09:be87:ed80::/41 maxlen: 41 2a09:be87:ee00::/41 maxlen: 41 2a09:be87:ee80::/41 maxlen: 41 2a09:be87:ef00::/41 maxlen: 41 2a09:be87:ef80::/41 maxlen: 41 2a09:be87:f000::/38 maxlen: 38 2a09:be87:f400::/38 maxlen: 38 2a09:be87:f800::/38 maxlen: 38 2a09:be87:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:23:bf:88:bb:15:4c:0d:dd:b1:82:ee:1b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f233b6d939d32a48bea81f31f6521485dcb7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:a8:e3:a3:87:e5:dd:3b:4c:74:d0:fe:91: 16:65:b5:26:1c:8a:c5:9e:4f:17:28:e8:4f:60:13: 2e:e7:a6:3f:03:ec:86:a5:48:42:0f:45:70:45:e8: fb:86:b7:39:b4:9c:ef:3e:e0:12:da:16:59:68:b0: bd:5d:78:87:0e:0a:92:e2:90:08:40:d8:36:a0:05: e0:c9:2b:e5:dc:ac:4e:77:76:55:65:b4:85:67:88: 63:2e:d7:5b:d8:97:59:54:d6:d4:2c:5c:67:33:f3: e7:70:3a:24:ae:a3:c2:43:39:1a:06:a6:1e:58:31: c7:88:7a:1a:6d:f3:19:45:7b:86:48:c3:e3:fc:ed: 09:cf:26:0b:3b:13:82:14:8c:7a:79:97:9b:da:00: db:8b:52:70:dc:0f:fa:c4:68:52:23:fb:dc:b4:8a: 44:83:24:40:2a:bd:96:55:2e:27:57:7e:cf:18:4b: 63:d7:24:14:b8:b4:67:3a:09:83:b9:a2:15:0f:91: 3e:73:2c:b7:7f:1b:a2:78:82:07:08:40:bc:4a:f7: 59:e9:ee:5e:f1:0e:5f:da:27:9f:7c:ab:1b:fd:6b: 5b:1e:19:e6:ee:15:10:3f:d2:3a:df:1a:da:2c:4f: 6a:27:2b:1e:16:64:a7:65:25:90:11:82:62:71:b9: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F2:33:B6:D9:39:D3:2A:48:BE:A8:1F:31:F6:52:14:85:DC:B7:D5 X509v3 Authority Key Identifier: keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/kvIzttk50ypIvqgfMfZSFIXct9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:be87::/32 Signature Algorithm: sha256WithRSAEncryption 3a:d7:f6:fe:89:9b:a5:63:62:5b:23:84:e9:cc:7a:5f:4e:c5: 5f:69:5e:aa:73:c5:84:e0:d7:aa:ff:82:ac:7c:ad:05:d3:d7: 00:ff:fb:7f:81:23:2a:5d:55:d5:74:05:ea:f2:76:be:f3:e0: 0b:a9:f0:b5:3c:c0:a9:49:6b:cf:a5:b9:be:13:d8:13:b0:ed: 9b:aa:97:87:f0:9f:50:9e:1d:79:fe:ce:b2:63:7e:ab:de:62: 66:38:5b:b3:84:dd:1d:ef:f8:12:96:ca:97:3a:1f:e6:7c:0f: 11:40:0a:ba:2a:a6:b6:b0:1a:b1:1a:24:0f:57:08:51:93:0d: 6f:8e:9a:9c:af:10:fe:09:c5:ae:7b:34:f0:15:e9:d1:fd:30: 83:1e:a4:45:5d:17:ea:5f:ce:fc:eb:96:01:62:a9:3a:8b:f2: 50:a1:28:1c:78:a8:84:0b:e4:76:49:b6:d4:82:24:d7:18:91: 8c:53:a3:04:a0:c2:ab:75:74:08:18:57:5d:ad:d8:44:86:f8: 2d:30:ca:db:3b:f5:a6:f6:49:97:a3:6f:59:8b:29:44:98:85: d0:43:a8:7c:32:de:bb:b0:f7:5f:ed:26:13:c2:e5:2d:2a:38: 8c:cc:d3:a4:7c:7e:ad:05:95:a7:d9:66:c0:2e:92:ee:3e:3a: 6a:3c:98:5e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o1wjv4i7FUwN3bGC7hvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0 ZTc4ZmIwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmYyMzNiNmQ5MzlkMzJhNDhiZWE4MWYzMWY2NTIxNDg1ZGNiN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiKo46OH5d07THTQ/pEWZbUmHIrF nk8XKOhPYBMu56Y/A+yGpUhCD0VwRej7hrc5tJzvPuAS2hZZaLC9XXiHDgqS4pAI QNg2oAXgySvl3KxOd3ZVZbSFZ4hjLtdb2JdZVNbULFxnM/PncDokrqPCQzkaBqYe WDHHiHoabfMZRXuGSMPj/O0JzyYLOxOCFIx6eZeb2gDbi1Jw3A/6xGhSI/vctIpE gyRAKr2WVS4nV37PGEtj1yQUuLRnOgmDuaIVD5E+cyy3fxuieIIHCEC8SvdZ6e5e 8Q5f2ieffKsb/WtbHhnm7hUQP9I63xraLE9qJyseFmSnZSWQEYJicblAzQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJLyM7bZOdMqSL6oHzH2UhSF3LfVMB8GA1UdIwQY MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt ZDMyZTI3ZmI3ZTU5LzEva3ZJenR0azUweXBJdnFnZk1mWlNGSVhjdDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5 LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgm+hzAN BgkqhkiG9w0BAQsFAAOCAQEAOtf2/ombpWNiWyOE6cx6X07FX2leqnPFhODXqv+C rHytBdPXAP/7f4EjKl1V1XQF6vJ2vvPgC6nwtTzAqUlrz6W5vhPYE7Dtm6qXh/Cf UJ4def7OsmN+q95iZjhbs4TdHe/4EpbKlzof5nwPEUAKuiqmtrAasRokD1cIUZMN b46anK8Q/gnFrns08BXp0f0wgx6kRV0X6l/O/OuWAWKpOovyUKEoHHiohAvkdkm2 1IIk1xiRjFOjBKDCq3V0CBhXXa3YRIb4LTDK2zv1pvZJl6NvWYspRJiF0EOofDLe u7D3X+0mE8LlLSo4jMzTpHx+rQWVp9lmwC6S7j46ajyYXg== -----END CERTIFICATE-----Generated at Mon Jan 12 09:54:38 2026 by rpki-client