This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/w2VS6O1Fa2u7X7fNOtFhDoX_RV8.roa File: w2VS6O1Fa2u7X7fNOtFhDoX_RV8.roa (raw, json) Hash identifier: 9WLY+XSWvisF7e//wWcAPmekfE4wm5ifiUJtVovzeGI= Subject key identifier: C3:65:52:E8:ED:45:6B:6B:BB:5F:B7:CD:3A:D1:61:0E:85:FF:45:5F Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B8DBE4D3140F3F517A024234493F7EA22 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/w2VS6O1Fa2u7X7fNOtFhDoX_RV8.roa Signing time: Mon 05 Jan 2026 10:40:17 +0000 ROA not before: Mon 05 Jan 2026 10:40:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 2a06:b3c0::/29 maxlen: 29 2a06:b440::/32 maxlen: 32 2a11:1140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:be:4d:31:40:f3:f5:17:a0:24:23:44:93:f7:ea:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 5 10:40:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c36552e8ed456b6bbb5fb7cd3ad1610e85ff455f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:3d:29:b3:1f:da:a8:40:fb:3d:d6:bc:aa: 63:1c:af:35:07:6c:98:48:8d:89:a1:ee:9a:87:a0: f9:98:56:0b:8d:68:d0:0f:85:11:1f:d4:00:33:0b: 06:81:16:d5:9c:04:94:da:99:26:2b:f9:02:e9:33: de:28:e2:8c:ce:a8:9d:44:6c:8b:1f:06:86:04:46: bc:d5:70:0b:4b:d5:79:ed:2f:98:59:40:87:73:54: e5:46:d1:0d:66:34:ea:8a:2d:a6:07:75:b1:f6:6c: d8:ce:18:14:89:d9:df:e3:52:1f:14:fc:cc:7c:64: 14:af:11:79:eb:0b:d5:e5:4b:7d:1c:b8:6d:4a:0f: c0:2a:6c:52:6f:a9:bd:93:74:f1:17:3a:6c:ea:5b: c2:26:f2:26:f6:bb:29:7a:10:72:14:16:89:db:1a: b4:75:5d:2b:6c:7b:0a:63:05:ae:f7:18:c1:41:50: 94:06:b0:6f:b0:59:5e:b7:f3:d0:1b:48:c3:c0:a8: 37:51:90:f4:55:8a:18:ca:28:a7:42:74:bd:6f:0c: 42:34:dd:d1:80:bd:bd:17:08:9f:88:93:c0:54:33: f5:3d:72:66:c8:af:14:4b:7e:68:32:66:0f:18:47: 02:d8:09:f3:fc:7f:b3:2a:f9:57:de:fa:1a:9f:b6: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:65:52:E8:ED:45:6B:6B:BB:5F:B7:CD:3A:D1:61:0E:85:FF:45:5F X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/w2VS6O1Fa2u7X7fNOtFhDoX_RV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b3c0::/29 2a06:b440::/32 2a11:1140::/29 Signature Algorithm: sha256WithRSAEncryption 54:fd:7f:ca:2d:63:3f:0a:b8:e2:a1:41:c0:76:27:bc:91:02: a3:b6:4f:09:71:94:09:30:1d:b6:a2:3a:ba:02:62:a9:e9:37: d2:98:19:43:5a:27:4d:7b:09:16:cd:53:b0:c1:04:db:dd:84: 1c:30:7f:23:75:0d:21:9c:d7:b0:45:83:fc:a2:4a:f2:11:f9: ee:04:fd:27:77:4c:d1:fe:11:e9:3d:51:f9:d5:aa:14:41:b8: 6a:0e:ad:2c:e2:08:9b:c6:16:cf:56:8e:6a:a3:13:5f:f1:e4: 76:39:f3:27:c6:e6:7d:c5:b0:8a:32:e0:70:ad:78:71:70:59: 4e:4b:95:34:f9:b2:87:ff:6c:d2:77:af:5e:78:f9:43:12:f6: 85:57:61:b8:61:55:dd:15:31:0f:76:b3:72:5e:17:1c:dc:60: 58:05:90:3d:c2:a1:d5:c7:ed:5d:73:0a:1d:03:d5:f1:da:d6: 84:31:ad:70:bb:fc:6d:f9:ce:e4:a9:8c:92:bc:d3:89:e3:b5: ac:55:12:df:d6:52:3c:35:69:c6:08:c3:25:a5:b2:45:4d:b3: c3:ac:a0:70:b8:5f:ed:bd:ac:0f:90:5b:a9:ce:d3:0f:b9:a6: ba:57:aa:49:41:5e:cf:77:4b:38:b7:82:b3:f7:58:d7:e8:fb: 83:c5:54:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZuNvk0xQPP1F6AkI0ST9+oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTA1MTA0MDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzY1NTJlOGVkNDU2YjZiYmI1ZmI3Y2QzYWQxNjEwZTg1ZmY0NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRE9KbMf2qhA+z3WvKpjHK81B2yY SI2Joe6ah6D5mFYLjWjQD4URH9QAMwsGgRbVnASU2pkmK/kC6TPeKOKMzqidRGyL HwaGBEa81XALS9V57S+YWUCHc1TlRtENZjTqii2mB3Wx9mzYzhgUidnf41IfFPzM fGQUrxF56wvV5Ut9HLhtSg/AKmxSb6m9k3TxFzps6lvCJvIm9rspehByFBaJ2xq0 dV0rbHsKYwWu9xjBQVCUBrBvsFlet/PQG0jDwKg3UZD0VYoYyiinQnS9bwxCNN3R gL29FwifiJPAVDP1PXJmyK8US35oMmYPGEcC2Anz/H+zKvlX3voan7YFuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMNlUujtRWtru1+3zTrRYQ6F/0VfMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvdzJWUzZPMUZhMnU3WDdmTk90RmhEb1hfUlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgazwAMF ACoGtEADBQMqERFAMA0GCSqGSIb3DQEBCwUAA4IBAQBU/X/KLWM/CrjioUHAdie8 kQKjtk8JcZQJMB22ojq6AmKp6TfSmBlDWidNewkWzVOwwQTb3YQcMH8jdQ0hnNew RYP8okryEfnuBP0nd0zR/hHpPVH51aoUQbhqDq0s4gibxhbPVo5qoxNf8eR2OfMn xuZ9xbCKMuBwrXhxcFlOS5U0+bKH/2zSd69eePlDEvaFV2G4YVXdFTEPdrNyXhcc 3GBYBZA9wqHVx+1dcwodA9Xx2taEMa1wu/xt+c7kqYySvNOJ47WsVRLf1lI8NWnG CMMlpbJFTbPDrKBwuF/tvawPkFupztMPuaa6V6pJQV7Pd0s4t4Kz91jX6PuDxVRo -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:58 2026 by rpki-client