This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/KgnrOtEGwdz3AN8vVnHamahzCg0.roa File: KgnrOtEGwdz3AN8vVnHamahzCg0.roa (raw, json) Hash identifier: 8164cX6EYD3ydYl7+QzRhp1FVmbvdz51hIvLrGx4NUk= Subject key identifier: 2A:09:EB:3A:D1:06:C1:DC:F7:00:DF:2F:56:71:DA:99:A8:73:0A:0D Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B3889235DBCEF52B739FC36259303C4E9 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/KgnrOtEGwdz3AN8vVnHamahzCg0.roa Signing time: Fri 19 Dec 2025 21:34:30 +0000 ROA not before: Fri 19 Dec 2025 21:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202758 IP address blocks: 2a0f:b240:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:89:23:5d:bc:ef:52:b7:39:fc:36:25:93:03:c4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 19 21:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a09eb3ad106c1dcf700df2f5671da99a8730a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:06:64:a0:c9:2e:10:8f:47:ee:38:f1:dd: fb:45:50:c2:1f:3c:96:7d:41:28:65:49:80:6a:f6: 8d:c7:d4:39:aa:1a:4c:5a:84:e6:b8:a3:d5:ad:f2: b3:dc:7f:cc:49:17:db:14:f0:28:46:92:77:d5:23: 07:c1:ea:bb:2e:7c:c8:8a:e7:73:51:17:8a:08:e2: 3f:c5:53:49:ad:b9:f3:37:f1:8c:9b:e6:a9:39:fe: 10:31:6b:8d:5e:a0:89:6f:27:98:6c:77:b6:4b:04: 20:be:cb:a8:3b:21:72:68:c5:c8:11:a2:31:40:ad: 00:57:4d:fc:9b:a0:65:48:03:f1:29:92:e3:29:7c: 04:c7:a9:00:4d:5e:6d:9b:5a:15:54:1e:17:a2:b8: de:02:5e:02:11:38:55:e7:be:d5:75:73:78:5a:0c: 65:8c:c1:1b:8e:af:4e:c0:38:1b:46:5b:f3:24:32: a2:d9:0f:0a:18:96:6d:f2:25:34:8c:79:d7:fe:b9: 8a:8b:77:dd:34:db:b0:d3:bb:81:bc:45:7e:d5:ad: 0c:4c:28:a2:08:81:57:8d:a4:e6:b9:cf:2c:da:80: e2:b9:d3:a3:0a:2f:c9:52:9c:da:2e:6d:e3:17:10: 09:dd:08:5b:f7:43:14:94:26:9d:a4:c6:47:97:44: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:EB:3A:D1:06:C1:DC:F7:00:DF:2F:56:71:DA:99:A8:73:0A:0D X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/KgnrOtEGwdz3AN8vVnHamahzCg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:100::/40 Signature Algorithm: sha256WithRSAEncryption 1d:19:cb:ee:00:fa:2f:03:65:90:57:e0:fb:cd:df:7d:74:0a: c4:6b:b6:5f:64:87:43:66:86:ae:ae:2a:e6:05:77:20:4f:b4: 5e:43:18:31:5f:e1:ad:35:fc:ad:12:2c:fe:f5:ff:20:04:53: 6f:7c:13:c0:11:e2:5c:c4:9d:fd:1e:fc:4d:73:ab:d2:59:c7: ec:f2:be:48:84:70:29:71:a5:f6:3c:10:e7:18:ad:ee:d9:f1: f4:c0:a3:32:6b:ae:a4:1b:2d:ee:42:34:28:6f:27:6f:b4:e6: 70:91:e2:96:8e:76:c8:c5:c0:6a:77:2a:cf:b2:dd:09:0b:6a: 6a:c8:fe:68:2b:0f:cd:44:00:1c:28:1f:a6:e5:c7:27:0b:7e: 2c:80:8e:92:ba:a0:bf:96:cc:40:6b:da:dd:d5:b6:89:4d:bc: 81:e9:36:55:13:8e:11:a8:f1:af:5e:8b:fa:88:98:25:7c:02: 16:79:a1:7d:01:15:23:50:24:eb:51:5b:d9:b5:49:5b:fb:18: 14:6b:9b:a5:40:3f:42:0b:b6:bd:cf:0b:e4:fc:57:29:ba:77: b4:70:d1:85:91:95:cc:9a:e9:89:2f:77:e6:14:72:b9:57:50: 87:a0:b5:8b:77:07:a8:f3:62:de:05:61:3a:57:f9:14:59:e5: a4:7d:73:95 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZs4iSNdvO9Stzn8NiWTA8TpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjE5MjEzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTA5ZWIzYWQxMDZjMWRjZjcwMGRmMmY1NjcxZGE5OWE4NzMwYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspsGZKDJLhCPR+448d37RVDCHzyW fUEoZUmAavaNx9Q5qhpMWoTmuKPVrfKz3H/MSRfbFPAoRpJ31SMHweq7LnzIiudz UReKCOI/xVNJrbnzN/GMm+apOf4QMWuNXqCJbyeYbHe2SwQgvsuoOyFyaMXIEaIx QK0AV038m6BlSAPxKZLjKXwEx6kATV5tm1oVVB4XorjeAl4CEThV577VdXN4Wgxl jMEbjq9OwDgbRlvzJDKi2Q8KGJZt8iU0jHnX/rmKi3fdNNuw07uBvEV+1a0MTCii CIFXjaTmuc8s2oDiudOjCi/JUpzaLm3jFxAJ3Qhb90MUlCadpMZHl0RpZQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCoJ6zrRBsHc9wDfL1Zx2pmocwoNMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvS2duck90RUd3ZHozQU44dlZuSGFtYWh6Q2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAEw DQYJKoZIhvcNAQELBQADggEBAB0Zy+4A+i8DZZBX4PvN3310CsRrtl9kh0Nmhq6u KuYFdyBPtF5DGDFf4a01/K0SLP71/yAEU298E8AR4lzEnf0e/E1zq9JZx+zyvkiE cClxpfY8EOcYre7Z8fTAozJrrqQbLe5CNChvJ2+05nCR4paOdsjFwGp3Ks+y3QkL amrI/mgrD81EABwoH6blxycLfiyAjpK6oL+WzEBr2t3VtolNvIHpNlUTjhGo8a9e i/qImCV8AhZ5oX0BFSNQJOtRW9m1SVv7GBRrm6VAP0ILtr3PC+T8Vym6d7Rw0YWR lcya6Ykvd+YUcrlXUIegtYt3B6jzYt4FYTpX+RRZ5aR9c5U= -----END CERTIFICATE-----Generated at Sat Dec 20 12:13:00 2025 by rpki-client