This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l06-i08qQb4ybWZ4Z4uJPHJwDRo.roa File: l06-i08qQb4ybWZ4Z4uJPHJwDRo.roa (raw, json) Hash identifier: dE5J+afUi0AsLUtO/nv/8W0f/kzVUqMpBA4NZZmMWOM= Subject key identifier: 97:4E:BE:8B:4F:2A:41:BE:32:6D:66:78:67:8B:89:3C:72:70:0D:1A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70269EF33D9039E437AB27AF0BC73 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l06-i08qQb4ybWZ4Z4uJPHJwDRo.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213234 IP address blocks: 2a0c:9a40:8a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:02:69:ef:33:d9:03:9e:43:7a:b2:7a:f0:bc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=974ebe8b4f2a41be326d6678678b893c72700d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:11:f1:c6:a4:a0:4b:2b:b0:70:ff:30:67:e4: a0:b7:9f:d7:0a:8b:05:e3:f9:49:29:8b:34:a3:8b: 5e:68:1f:6b:e4:76:dc:30:1b:37:e5:6f:cd:06:31: af:f0:a6:09:ee:19:15:f6:e6:dc:00:40:d5:76:68: 2b:38:c6:f1:8b:4b:0d:c1:75:4e:7a:de:86:0c:de: 8b:8b:1b:ac:d1:57:17:5c:66:9b:29:af:57:ef:60: 35:9b:29:37:27:0e:5e:dd:b4:4d:57:9e:3d:98:71: ef:a0:1d:0e:d5:fa:33:59:a3:7d:c4:1b:c7:5f:e5: 4b:9f:8e:07:48:e7:d5:7b:89:cd:25:52:72:f3:7e: 09:dd:49:db:66:66:2e:9c:88:de:22:13:00:56:69: 59:18:91:74:57:67:0b:35:6c:8a:04:25:8a:55:41: af:a4:54:e9:b3:22:13:eb:f0:2b:43:b5:52:ee:cc: 6f:4f:ca:b3:34:8d:e7:24:ed:86:59:31:4a:01:e6: 51:15:7f:75:46:f7:e2:a4:c5:6c:81:3b:9b:b7:46: 39:9b:da:64:00:07:b5:58:9b:2c:54:e9:d2:d6:49: ba:28:f6:f8:4e:e9:f2:a8:3f:3d:74:0c:d9:bc:4e: aa:b7:9f:03:ab:2f:0e:8c:fa:81:7b:7c:5d:3d:88: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:BE:8B:4F:2A:41:BE:32:6D:66:78:67:8B:89:3C:72:70:0D:1A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l06-i08qQb4ybWZ4Z4uJPHJwDRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a00::/48 Signature Algorithm: sha256WithRSAEncryption 20:2e:49:a7:42:1e:db:af:b5:14:97:5b:e5:e9:f4:f0:d9:28: e3:68:8c:7b:18:e9:3f:7f:cb:be:26:c4:db:41:31:7f:f2:1f: 66:7d:0b:92:14:6d:bc:20:2e:e2:d5:4d:3d:da:94:8a:a0:9c: bf:7d:60:dd:e5:97:21:4d:b3:9e:67:70:50:0a:2f:a9:ed:80: 02:b2:cc:58:ff:e2:f6:7a:33:10:6e:63:4e:c4:5d:85:9d:b6: 9e:22:39:a1:de:c2:79:b9:83:00:8d:0d:25:e5:86:09:30:a8: 5d:44:e4:67:b7:c9:12:98:1f:2b:03:78:3a:21:95:06:e2:09: 45:18:c0:0b:aa:08:9d:75:0a:8b:a8:1c:35:90:fc:60:3a:ea: 5f:34:01:d6:b9:68:1c:e8:95:c9:fc:af:0c:dc:06:1e:71:a6: 28:3f:52:0f:1e:2c:e3:15:e1:e0:2f:23:0d:c9:13:a2:2a:10: 41:c2:48:79:d4:f4:2d:1a:da:d2:bb:4c:cc:16:bd:8b:f3:36: bf:d0:26:6d:03:84:1a:b5:2e:d2:de:b8:84:84:1a:ea:6d:57: 68:28:d1:fb:5d:6d:fa:b4:91:bd:33:df:20:0c:11:81:b9:b6: b8:04:e1:fc:41:2a:42:48:1f:1c:11:33:26:10:7b:8c:8c:6d: 5b:f3:13:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwJp7zPZA55DerJ68LxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzRlYmU4YjRmMmE0MWJlMzI2ZDY2Nzg2NzhiODkzYzcyNzAwZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RHxxqSgSyuwcP8wZ+Sgt5/XCosF 4/lJKYs0o4teaB9r5HbcMBs35W/NBjGv8KYJ7hkV9ubcAEDVdmgrOMbxi0sNwXVO et6GDN6Lixus0VcXXGabKa9X72A1myk3Jw5e3bRNV549mHHvoB0O1fozWaN9xBvH X+VLn44HSOfVe4nNJVJy834J3UnbZmYunIjeIhMAVmlZGJF0V2cLNWyKBCWKVUGv pFTpsyIT6/ArQ7VS7sxvT8qzNI3nJO2GWTFKAeZRFX91RvfipMVsgTubt0Y5m9pk AAe1WJssVOnS1km6KPb4TunyqD89dAzZvE6qt58Dqy8OjPqBe3xdPYjEuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJdOvotPKkG+Mm1meGeLiTxycA0aMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbDA2LWkwOHFRYjR5YldaNFo0dUpQSEp3RFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIoA MA0GCSqGSIb3DQEBCwUAA4IBAQAgLkmnQh7br7UUl1vl6fTw2SjjaIx7GOk/f8u+ JsTbQTF/8h9mfQuSFG28IC7i1U092pSKoJy/fWDd5ZchTbOeZ3BQCi+p7YACssxY /+L2ejMQbmNOxF2FnbaeIjmh3sJ5uYMAjQ0l5YYJMKhdRORnt8kSmB8rA3g6IZUG 4glFGMALqgiddQqLqBw1kPxgOupfNAHWuWgc6JXJ/K8M3AYecaYoP1IPHizjFeHg LyMNyROiKhBBwkh51PQtGtrSu0zMFr2L8za/0CZtA4QatS7S3riEhBrqbVdoKNH7 XW36tJG9M98gDBGBuba4BOH8QSpCSB8cETMmEHuMjG1b8xPj -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:17 2026 by rpki-client