This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa File: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (raw, json) Hash identifier: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho= Subject key identifier: E8:09:35:02:0B:53:0E:60:35:53:67:99:81:57:A9:8C:23:54:B9:39 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A36F5B1977B2F43BEB4F3D9DAF39AB Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34305 IP address blocks: 2a03:f85:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6f:5b:19:77:b2:f4:3b:eb:4f:3d:9d:af:39:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e80935020b530e60355367998157a98c2354b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:a1:70:b4:be:2a:82:09:f7:be:de:e9:69: 2e:21:38:6f:63:aa:c3:3f:52:38:be:6a:8f:aa:7c: 7c:eb:15:c6:0a:6d:87:b0:70:5b:52:ad:05:e3:68: 89:00:c7:46:15:58:71:fb:9e:f4:54:09:c2:62:eb: 89:c3:f7:cb:61:2f:44:14:d5:54:ef:95:a4:cc:f4: e2:7e:2e:8a:ef:2d:84:1c:0c:a5:c0:77:94:62:73: 04:b9:ff:e3:77:02:48:cc:f4:f6:02:45:7d:84:3b: 98:c7:f4:a9:b3:e5:bc:d6:33:1e:97:de:32:8a:88: 63:b5:10:65:61:d2:bb:61:34:80:2b:c3:97:0b:dd: c9:23:f0:55:f9:26:40:a6:a4:c4:fc:aa:d7:6c:f0: 76:f8:ae:94:5b:f6:62:84:11:7d:2a:eb:05:c9:08: 68:fe:83:1c:d7:54:a8:60:a1:d6:bf:4f:1d:89:88: 67:c1:a0:2e:2f:d8:74:0c:ef:d2:f1:ca:81:6a:e1: f6:4d:a4:4d:1d:0f:89:ac:54:37:50:10:ef:8c:5a: 72:9c:3b:34:49:59:1a:e0:24:39:ff:8d:1c:3a:8f: b2:93:a8:38:9f:27:6f:35:50:4f:a7:84:70:17:07: 86:f5:78:9b:c2:e1:a3:a4:3a:8b:1e:03:cf:51:21: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:35:02:0B:53:0E:60:35:53:67:99:81:57:A9:8C:23:54:B9:39 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f85:1::/48 Signature Algorithm: sha256WithRSAEncryption 72:08:48:cc:9c:69:3a:40:3d:d1:b2:8d:0d:e9:4e:e8:39:fc: df:1f:a5:fe:a2:c3:29:44:7c:6d:6c:91:2a:0d:ef:f2:2b:20: 1f:85:13:d6:3f:39:e8:32:97:2d:26:10:d7:39:8f:4f:57:aa: a2:9b:53:dd:05:99:02:44:e7:00:b1:03:7c:dd:4f:65:ed:8b: 7d:b2:29:47:df:09:2b:cb:30:68:6e:9d:e1:41:87:e9:69:fe: 48:37:74:da:f6:22:dd:db:24:5d:d4:d9:53:36:d1:cc:a9:86: 88:2a:27:45:c4:38:5a:ef:21:68:9c:e4:d9:cc:55:18:34:47: ba:22:4c:b2:18:1d:a6:c9:ce:17:ce:f5:36:a3:9d:05:0b:29: 8a:38:6b:59:10:73:1b:d8:e6:90:7d:29:c3:73:44:6a:bf:46: 0f:a8:76:eb:e4:14:46:94:a3:c5:cf:45:29:93:5e:5c:51:aa: f0:de:86:33:f1:22:b9:b7:cb:46:44:cf:bf:17:52:59:98:ea: 77:84:e1:c9:5d:18:f0:b8:46:03:87:f9:96:1a:3e:78:92:da: a7:32:3a:95:37:7f:52:d1:1c:63:5e:fe:b8:a7:de:7d:0b:0d: 5a:72:3b:d6:8a:f1:9b:00:30:b4:5e:b7:23:b9:be:13:3b:df: be:11:3a:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o29bGXey9DvrTz2drzmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODA5MzUwMjBiNTMwZTYwMzU1MzY3OTk4MTU3YTk4YzIzNTRiOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwmhcLS+KoIJ977e6WkuIThvY6rD P1I4vmqPqnx86xXGCm2HsHBbUq0F42iJAMdGFVhx+570VAnCYuuJw/fLYS9EFNVU 75WkzPTifi6K7y2EHAylwHeUYnMEuf/jdwJIzPT2AkV9hDuYx/Sps+W81jMel94y iohjtRBlYdK7YTSAK8OXC93JI/BV+SZApqTE/KrXbPB2+K6UW/ZihBF9KusFyQho /oMc11SoYKHWv08diYhnwaAuL9h0DO/S8cqBauH2TaRNHQ+JrFQ3UBDvjFpynDs0 SVka4CQ5/40cOo+yk6g4nydvNVBPp4RwFweG9XibwuGjpDqLHgPPUSHQ1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOgJNQILUw5gNVNnmYFXqYwjVLk5MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvNkFrMUFndFREbUExVTJlWmdWZXBqQ05VdVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPhQAB MA0GCSqGSIb3DQEBCwUAA4IBAQByCEjMnGk6QD3Rso0N6U7oOfzfH6X+osMpRHxt bJEqDe/yKyAfhRPWPznoMpctJhDXOY9PV6qim1PdBZkCROcAsQN83U9l7Yt9silH 3wkryzBobp3hQYfpaf5IN3Ta9iLd2yRd1NlTNtHMqYaIKidFxDha7yFonOTZzFUY NEe6IkyyGB2myc4XzvU2o50FCymKOGtZEHMb2OaQfSnDc0Rqv0YPqHbr5BRGlKPF z0Upk15cUarw3oYz8SK5t8tGRM+/F1JZmOp3hOHJXRjwuEYDh/mWGj54ktqnMjqV N39S0RxjXv64p959Cw1acjvWivGbADC0Xrcjub4TO9++ETrJ -----END CERTIFICATE-----Generated at Sun Jan 11 22:26:33 2026 by rpki-client