This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6Sh6RePky4B9WeJ8pUA2UK-FcRg.roa File: 6Sh6RePky4B9WeJ8pUA2UK-FcRg.roa (raw, json) Hash identifier: 0GxBR11BtBJUj3Bvl4MC1f1JSTOv69tSzTJU94X1mpc= Subject key identifier: E9:28:7A:45:E3:E4:CB:80:7D:59:E2:7C:A5:40:36:50:AF:85:71:18 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E9A2AF686B155B8F24140768B1A4 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6Sh6RePky4B9WeJ8pUA2UK-FcRg.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204982 IP address blocks: 2a0e:46c3:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e9:a2:af:68:6b:15:5b:8f:24:14:07:68:b1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9287a45e3e4cb807d59e27ca5403650af857118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:4f:d9:16:f8:22:2a:01:1f:fa:13:4a:a9: 88:4e:6e:e4:7a:0f:07:b1:5a:8e:d0:e3:fb:3e:e9: e4:5a:69:59:53:9b:e7:7b:5f:11:a4:0a:65:75:7c: c6:f7:d1:bf:a0:c9:65:6e:ef:07:fd:7b:83:a0:0e: 32:05:3b:6c:8a:ad:a9:7b:b1:ab:b7:0c:1f:81:40: 1c:09:39:4f:1f:d6:4f:db:d4:e4:b5:30:66:e4:31: 08:f7:ab:b3:48:94:f1:59:5e:c4:91:09:15:95:c3: 09:4c:57:93:c0:28:aa:27:76:fb:ea:05:c9:db:97: 5d:03:43:2e:74:8a:36:18:34:c8:f5:53:1e:d6:1d: 28:83:8f:19:5c:84:28:28:c4:a5:ad:1a:d0:1d:eb: 2f:30:13:49:0c:28:8f:45:7f:cb:5d:d5:26:5c:7c: 62:f4:a7:b1:50:ef:0f:90:db:61:aa:f1:3f:03:33: f8:d4:fe:b5:8d:f2:ad:0a:06:9f:bf:35:24:23:da: 1f:ab:4b:b4:34:c3:0e:8d:ae:9b:97:51:17:50:8a: 40:ab:4d:94:4b:24:1e:69:3b:6b:91:2b:70:db:ce: aa:c2:6b:3b:37:71:2d:7a:e1:e8:76:d4:bd:3a:c6: bc:ad:a4:85:18:4e:0d:ab:1e:b9:ee:5b:fb:bc:6a: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:28:7A:45:E3:E4:CB:80:7D:59:E2:7C:A5:40:36:50:AF:85:71:18 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6Sh6RePky4B9WeJ8pUA2UK-FcRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:46c3:100::/40 Signature Algorithm: sha256WithRSAEncryption 12:fc:2c:1b:f9:ed:27:27:e2:10:32:f8:3a:6c:89:fd:65:01: 85:05:7c:09:46:56:98:2b:66:83:88:ad:73:be:82:a4:1f:06: 7f:a8:4c:8c:53:f3:49:5c:86:5a:ab:c1:40:de:4a:9a:da:c1: c8:85:fc:21:99:24:da:b4:3d:21:22:6c:8c:15:66:19:1d:15: f8:d0:cf:c9:03:e9:e2:68:92:94:5d:be:ab:df:67:47:e9:d6: 81:88:16:25:11:5b:e6:81:50:9d:1f:be:b7:9f:9f:74:6a:ef: 98:db:e2:71:f1:db:e3:91:3c:f6:51:05:ff:ea:c1:a4:7c:e5: ea:7f:c5:9e:2e:d7:fb:2d:04:96:6e:ce:88:8d:80:a1:e4:0a: aa:0b:f9:2e:d8:c1:91:27:d3:cc:b1:4b:df:00:8f:00:95:be: 41:82:68:ab:73:58:50:36:f9:98:06:98:bd:cb:24:98:c1:84: 04:a3:3d:94:f5:77:5e:5a:ef:59:97:85:2c:ad:9f:14:fd:37: d8:7a:e8:3f:f0:39:0f:e7:cf:9e:68:b5:6c:8c:58:12:35:3a: 4d:dd:ed:9c:69:68:29:07:66:ab:c4:a0:61:c9:2d:25:4d:43: f1:93:70:0f:65:b2:a4:23:70:61:1d:71:e7:c2:70:da:64:64: ef:79:3a:2a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pumir2hrFVuPJBQHaLGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTI4N2E0NWUzZTRjYjgwN2Q1OWUyN2NhNTQwMzY1MGFmODU3MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTlP2Rb4IioBH/oTSqmITm7keg8H sVqO0OP7PunkWmlZU5vne18RpApldXzG99G/oMllbu8H/XuDoA4yBTtsiq2pe7Gr twwfgUAcCTlPH9ZP29TktTBm5DEI96uzSJTxWV7EkQkVlcMJTFeTwCiqJ3b76gXJ 25ddA0MudIo2GDTI9VMe1h0og48ZXIQoKMSlrRrQHesvMBNJDCiPRX/LXdUmXHxi 9KexUO8PkNthqvE/AzP41P61jfKtCgafvzUkI9ofq0u0NMMOja6bl1EXUIpAq02U SyQeaTtrkStw286qwms7N3EteuHodtS9Osa8raSFGE4Nqx657lv7vGqShQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOkoekXj5MuAfVnifKVANlCvhXEYMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNlNoNlJlUGt5NEI5V2VKOHBVQTJVSy1GY1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5GwwEw DQYJKoZIhvcNAQELBQADggEBABL8LBv57Scn4hAy+Dpsif1lAYUFfAlGVpgrZoOI rXO+gqQfBn+oTIxT80lchlqrwUDeSprawciF/CGZJNq0PSEibIwVZhkdFfjQz8kD 6eJokpRdvqvfZ0fp1oGIFiURW+aBUJ0fvrefn3Rq75jb4nHx2+ORPPZRBf/qwaR8 5ep/xZ4u1/stBJZuzoiNgKHkCqoL+S7YwZEn08yxS98AjwCVvkGCaKtzWFA2+ZgG mL3LJJjBhASjPZT1d15a71mXhSytnxT9N9h66D/wOQ/nz55otWyMWBI1Ok3d7Zxp aCkHZqvEoGHJLSVNQ/GTcA9lsqQjcGEdcefCcNpkZO95Oio= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:34 2026 by rpki-client