This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6VLg9SYmlLPVwvADNl7h7RS-brY.roa File: 6VLg9SYmlLPVwvADNl7h7RS-brY.roa (raw, json) Hash identifier: Fv/44CJTvLQDCwQyUbZJcoAu6PAQijea/IYCGhOq4rw= Subject key identifier: E9:52:E0:F5:26:26:94:B3:D5:C2:F0:03:36:5E:E1:ED:14:BE:6E:B6 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E30EC9090C18A785E8BFA6D45B8F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6VLg9SYmlLPVwvADNl7h7RS-brY.roa Signing time: Fri 02 Jan 2026 12:20:24 +0000 ROA not before: Fri 02 Jan 2026 12:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203062 IP address blocks: 2a0c:9a40:9100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e3:0e:c9:09:0c:18:a7:85:e8:bf:a6:d4:5b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e952e0f5262694b3d5c2f003365ee1ed14be6eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:3f:84:c6:e3:05:e9:7b:27:d8:2e:4b:00: ff:e6:e3:da:6f:fc:12:fa:d8:60:fa:d0:09:a0:ee: a2:91:ca:bb:83:02:35:d0:54:2e:44:ff:cd:fd:72: 5c:e8:ee:cc:33:a5:9c:d0:ed:73:8f:6d:63:69:5d: 78:dc:32:ac:82:dd:c2:77:02:ce:54:85:fb:f0:5b: b4:47:17:e2:5e:2c:05:37:5f:32:bb:3f:34:a2:1b: 03:9e:cd:b8:5b:9a:29:11:9a:a3:14:40:fb:d8:79: f4:5f:cb:9d:ed:a8:8c:98:ab:b4:a2:54:fc:c0:e9: c4:23:b4:d7:eb:99:e6:79:8f:14:0b:18:06:df:63: f1:1b:06:38:53:3e:e5:4b:1e:de:40:b8:e9:69:e5: 5c:23:83:84:f9:e0:e1:c9:dc:2a:18:c7:9a:0c:19: cd:19:e1:f9:7f:bd:94:5c:65:ae:59:92:59:ea:98: 1c:ad:c1:22:29:01:a1:48:1e:c2:dc:8e:18:ef:26: 01:e8:be:ec:a9:65:1d:a6:50:9d:e9:f7:3c:eb:88: 25:02:35:f7:df:08:81:e2:73:1e:79:c5:ee:92:0d: 69:b5:45:2f:43:7f:d3:44:63:0e:67:7a:bc:f6:86: 2b:84:a4:11:9e:41:4b:ce:2d:37:ca:d3:da:2e:08: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:52:E0:F5:26:26:94:B3:D5:C2:F0:03:36:5E:E1:ED:14:BE:6E:B6 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6VLg9SYmlLPVwvADNl7h7RS-brY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:9100::/40 Signature Algorithm: sha256WithRSAEncryption c1:c7:3a:ee:34:5a:a1:c2:4f:aa:fe:47:11:9c:56:c0:9c:a3: e7:7b:d8:82:3f:e8:3b:5c:40:23:2a:69:ba:12:58:ed:4e:b8: 9f:fb:50:6a:9c:1e:65:83:90:05:8d:8e:56:6a:8b:d1:f1:c3: 40:7d:a0:70:68:ac:df:bf:a6:a3:81:30:d1:64:1e:50:99:84: 57:8c:c9:9b:06:7a:c9:aa:ac:77:91:7c:72:fc:97:fa:a8:4c: b3:99:87:37:a3:ce:ec:15:7d:b3:98:a3:52:4e:d5:89:2f:89: fb:d7:6d:3d:47:10:e9:f7:de:5f:9a:ca:4e:fe:16:70:0f:d3: 2d:f6:45:44:5b:6a:70:48:12:87:3c:2b:9e:32:78:68:aa:ea: 48:11:64:5a:84:55:be:92:f3:f1:c7:7d:36:b4:21:42:7d:d5: 8c:98:15:74:bb:89:d3:84:0e:06:ff:96:c9:9d:05:a0:44:5b: eb:18:79:92:7d:f0:7c:f6:e5:36:9c:08:f6:5d:81:34:f8:b8: 71:8a:31:54:1e:d7:9c:84:ef:4d:70:fb:0a:a5:07:df:ee:5d: d9:eb:37:47:a9:3d:93:29:f8:c2:06:6d:c6:e1:fe:8d:d5:34: 70:ba:30:61:83:45:ad:c8:91:f3:cf:9f:4d:06:12:59:f2:76: 15:85:20:47 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+puMOyQkMGKeF6L+m1FuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTUyZTBmNTI2MjY5NGIzZDVjMmYwMDMzNjVlZTFlZDE0YmU2ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLY/hMbjBel7J9guSwD/5uPab/wS +thg+tAJoO6ikcq7gwI10FQuRP/N/XJc6O7MM6Wc0O1zj21jaV143DKsgt3CdwLO VIX78Fu0RxfiXiwFN18yuz80ohsDns24W5opEZqjFED72Hn0X8ud7aiMmKu0olT8 wOnEI7TX65nmeY8UCxgG32PxGwY4Uz7lSx7eQLjpaeVcI4OE+eDhydwqGMeaDBnN GeH5f72UXGWuWZJZ6pgcrcEiKQGhSB7C3I4Y7yYB6L7sqWUdplCd6fc864glAjX3 3wiB4nMeecXukg1ptUUvQ3/TRGMOZ3q89oYrhKQRnkFLzi03ytPaLggofQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOlS4PUmJpSz1cLwAzZe4e0Uvm62MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNlZMZzlTWW1sTFBWd3ZBRE5sN2g3UlMtYnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQJEw DQYJKoZIhvcNAQELBQADggEBAMHHOu40WqHCT6r+RxGcVsCco+d72II/6DtcQCMq aboSWO1OuJ/7UGqcHmWDkAWNjlZqi9Hxw0B9oHBorN+/pqOBMNFkHlCZhFeMyZsG esmqrHeRfHL8l/qoTLOZhzejzuwVfbOYo1JO1YkvifvXbT1HEOn33l+ayk7+FnAP 0y32RURbanBIEoc8K54yeGiq6kgRZFqEVb6S8/HHfTa0IUJ91YyYFXS7idOEDgb/ lsmdBaBEW+sYeZJ98Hz25TacCPZdgTT4uHGKMVQe15yE701w+wqlB9/uXdnrN0ep PZMp+MIGbcbh/o3VNHC6MGGDRa3IkfPPn00GElnydhWFIEc= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:39 2026 by rpki-client