This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa File: q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa (raw, json) Hash identifier: W+o+neEd5lLOipfuBZ07SXEXSqZC2MoxbUXZ+XALuTI= Subject key identifier: AB:AF:A0:39:1D:C2:85:56:BB:04:57:F3:6E:F6:61:23:CF:0D:D0:7C Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844344463F7B0DB5DE8F3301899F01 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 2a0c:fe02::/32 maxlen: 32 2a0c:fe04::/32 maxlen: 32 2a0c:fe05::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:43:44:46:3f:7b:0d:b5:de:8f:33:01:89:9f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abafa0391dc28556bb0457f36ef66123cf0dd07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:ad:ad:59:74:17:e3:2f:7f:bf:25:e3:71: 2f:98:a9:39:27:66:1b:eb:fe:db:2c:ea:17:cf:89: 30:85:5b:03:99:d9:ed:a5:11:72:f2:78:a6:46:46: 1a:c2:95:e7:6e:c9:cb:0c:4c:62:e2:bd:09:3d:4a: b8:49:c3:b0:9c:12:2c:e8:33:71:bc:2e:ec:d7:82: ea:94:01:ee:a5:45:6d:d0:d6:71:75:f2:01:c2:e0: 99:3a:74:89:c7:b6:0b:23:86:48:ee:a6:b6:fd:aa: fd:b1:0e:2a:84:c3:4b:cf:74:d3:79:e9:eb:dd:8b: d4:83:cb:d7:1d:41:ba:ff:30:cd:e1:a2:12:a2:46: 90:59:8d:6c:85:d9:9a:4f:e5:3c:03:c3:84:4a:c2: 12:ba:ed:32:04:e6:97:66:b3:15:4b:5d:13:1f:b9: 2e:fc:bc:b3:41:d8:40:c3:54:56:e6:32:f1:9e:8f: f2:e1:0f:73:54:61:2f:aa:99:fc:28:70:f6:93:a0: 4b:d7:b6:ce:de:ed:c7:73:cf:39:58:54:53:65:5e: aa:ee:f4:99:12:b3:a5:ee:bd:97:bc:82:8d:d5:a0: f6:1e:ce:b5:15:3b:5c:a4:4f:12:ea:f0:30:51:7d: 0a:29:e1:46:cf:85:f9:72:c9:41:10:02:9a:4e:c8: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AF:A0:39:1D:C2:85:56:BB:04:57:F3:6E:F6:61:23:CF:0D:D0:7C X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:fe02::/32 2a0c:fe04::/31 Signature Algorithm: sha256WithRSAEncryption b1:6a:27:eb:96:d9:f3:71:d7:95:ba:8f:db:5b:1a:bc:48:1a: 12:18:6b:91:5f:a4:73:ef:64:b5:5c:0b:cd:48:7c:d6:7e:7d: 8d:2a:13:e7:b3:39:e8:fe:a5:69:f7:e5:39:c3:88:b6:f8:5d: 60:a0:4d:b4:82:50:79:ed:17:b4:85:5d:c3:56:69:0f:11:98: a8:7d:11:95:1a:9b:66:c8:e1:f3:f1:5e:ce:1a:21:eb:ac:99: 87:ba:06:fe:c1:32:f6:2c:55:ee:b7:c2:c2:0e:88:27:75:59: 77:1f:ce:b9:ef:e0:38:c5:44:33:4c:b4:e4:63:1e:80:45:fb: 4d:89:57:4f:21:b6:88:d6:1e:cf:75:9e:76:ce:27:1f:c1:2b: 01:dc:9f:30:12:5c:75:d9:05:f4:48:17:a4:37:ae:30:32:a6: 24:9f:a7:b2:ca:ee:95:84:6a:0c:a2:a9:cc:f4:2b:f5:19:09: 5d:1e:9e:80:27:5c:36:a8:c1:e7:c8:3d:fa:4f:bc:0a:77:ee: 97:92:70:d0:f5:6b:e2:f3:00:38:dd:27:f0:e0:08:2c:f0:e9: 14:fe:25:d8:23:7e:ed:2a:45:45:97:9f:9c:d0:99:66:d8:43: 05:25:fa:84:f0:a7:5e:d2:5a:97:a6:b4:cd:de:82:f2:2f:04: 76:04:53:cd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hENERj97DbXejzMBiZ8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmFmYTAzOTFkYzI4NTU2YmIwNDU3ZjM2ZWY2NjEyM2NmMGRkMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3WtrVl0F+Mvf78l43EvmKk5J2Yb 6/7bLOoXz4kwhVsDmdntpRFy8nimRkYawpXnbsnLDExi4r0JPUq4ScOwnBIs6DNx vC7s14LqlAHupUVt0NZxdfIBwuCZOnSJx7YLI4ZI7qa2/ar9sQ4qhMNLz3TTeenr 3YvUg8vXHUG6/zDN4aISokaQWY1shdmaT+U8A8OESsISuu0yBOaXZrMVS10TH7ku /LyzQdhAw1RW5jLxno/y4Q9zVGEvqpn8KHD2k6BL17bO3u3Hc885WFRTZV6q7vSZ ErOl7r2XvIKN1aD2Hs61FTtcpE8S6vAwUX0KKeFGz4X5cslBEAKaTsh8sQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKuvoDkdwoVWuwRX8272YSPPDdB8MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvcTYtZ09SM0NoVmE3QkZmemJ2WmhJODhOMEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgz+AgMF ASoM/gQwDQYJKoZIhvcNAQELBQADggEBALFqJ+uW2fNx15W6j9tbGrxIGhIYa5Ff pHPvZLVcC81IfNZ+fY0qE+ezOej+pWn35TnDiLb4XWCgTbSCUHntF7SFXcNWaQ8R mKh9EZUam2bI4fPxXs4aIeusmYe6Bv7BMvYsVe63wsIOiCd1WXcfzrnv4DjFRDNM tORjHoBF+02JV08htojWHs91nnbOJx/BKwHcnzASXHXZBfRIF6Q3rjAypiSfp7LK 7pWEagyiqcz0K/UZCV0enoAnXDaowefIPfpPvAp37peScND1a+LzADjdJ/DgCCzw 6RT+Jdgjfu0qRUWXn5zQmWbYQwUl+oTwp17SWpemtM3egvIvBHYEU80= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:25 2026 by rpki-client