This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa File: 1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa (raw, json) Hash identifier: tKUozaQ39ea73+P1a3NKi94lOX/X8IQKkspnuFoW9eg= Subject key identifier: FB:A0:30:92:05:F5:14:C2:B8:FC:AA:34:98:A1:5C:27:C7:9D:BE:6D Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13EC8CCB6104018E44F3CFB980323C Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa Signing time: Fri 02 Jan 2026 14:19:30 +0000 ROA not before: Fri 02 Jan 2026 14:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41754 IP address blocks: 2a02:2698:5c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ec:8c:cb:61:04:01:8e:44:f3:cf:b9:80:32:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba0309205f514c2b8fcaa3498a15c27c79dbe6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:03:80:ca:10:30:e1:52:90:cd:77:f9:30:f9: f7:d9:92:4d:03:a1:18:e1:39:d3:e3:72:36:1a:d6: 04:b8:be:c6:27:ab:b2:3d:15:cf:de:7b:c2:7e:7a: c4:b7:aa:8c:5b:a0:db:e4:c5:e3:aa:e2:5b:be:78: 7a:65:e8:59:c5:fa:8e:30:7f:10:5e:52:55:ec:dd: 4e:f1:da:d7:65:4a:8f:7b:aa:35:95:c8:1b:0b:c8: aa:25:7a:39:fb:73:9e:19:d4:3b:ac:6e:74:92:5b: 23:62:f4:7d:9c:4c:70:58:9e:20:42:0d:67:6a:a3: 32:f0:23:96:dd:7b:37:eb:97:d5:6f:3a:b5:19:74: 6b:e9:ce:29:b0:f6:8a:dd:2e:d8:33:23:a6:5e:57: a2:6c:51:be:e2:66:03:16:cb:dd:2f:1e:b4:7a:cc: f5:e5:bb:f2:ec:d0:17:d5:f8:35:d4:28:9e:20:5b: 81:16:69:36:ec:88:af:7d:da:3a:91:12:9a:8e:0e: ec:5e:11:e9:17:10:e4:60:49:ba:f2:ac:ce:b8:3f: f6:a3:8f:d6:c8:fd:a8:8a:27:81:ed:3a:1e:a0:a9: 1e:83:a8:d3:59:cd:91:ca:ac:e6:de:b0:4d:38:ba: 4d:d0:40:dc:b5:79:38:fd:35:72:8a:4f:6f:73:f4: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:30:92:05:F5:14:C2:B8:FC:AA:34:98:A1:5C:27:C7:9D:BE:6D X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:5c00::/38 Signature Algorithm: sha256WithRSAEncryption ac:4c:b7:5b:76:6b:fd:6e:3d:68:2b:84:b4:eb:6c:34:d0:76: 95:73:43:ec:4d:18:0d:fd:f3:63:50:90:10:99:d7:d7:f4:14: cb:35:b6:b3:98:01:d7:f4:d3:6b:51:4b:cd:76:87:80:13:3b: cc:75:95:0c:6e:65:83:5b:f0:a0:3d:a1:b7:44:c9:14:0d:ea: 3f:b5:40:0b:60:af:93:4d:2c:83:5d:3a:ff:57:e8:76:1c:b4: 55:aa:e7:1c:bb:00:b8:b4:dd:ee:fd:71:b6:4f:8c:d7:f2:42: d8:b2:36:26:6c:4b:88:5e:c0:d0:26:41:bf:36:f0:65:ec:d2: c0:dd:96:b4:9c:c0:49:1c:ab:e1:ae:bb:55:1a:0a:d2:67:89: f3:6c:6b:f4:ee:c3:a1:ee:cd:d2:9c:63:81:17:49:fa:a0:5a: f5:d8:af:d7:27:0b:db:58:31:2b:4d:59:ef:cf:5c:45:07:c1: 87:32:d0:a9:af:89:cb:e0:2d:e1:c8:c2:a0:ee:f1:32:52:3c: 6f:72:65:22:d6:c4:d6:26:2f:47:ff:3d:63:63:2d:53:4e:52: ab:2a:cc:a1:e4:18:81:70:b6:72:c6:64:4d:32:f6:b3:60:22: e4:47:1c:32:12:79:d3:50:96:62:38:2a:e4:4b:5a:8e:01:57: 56:0c:ac:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/E+yMy2EEAY5E88+5gDI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmEwMzA5MjA1ZjUxNGMyYjhmY2FhMzQ5OGExNWMyN2M3OWRiZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAOAyhAw4VKQzXf5MPn32ZJNA6EY 4TnT43I2GtYEuL7GJ6uyPRXP3nvCfnrEt6qMW6Db5MXjquJbvnh6ZehZxfqOMH8Q XlJV7N1O8drXZUqPe6o1lcgbC8iqJXo5+3OeGdQ7rG50klsjYvR9nExwWJ4gQg1n aqMy8COW3Xs365fVbzq1GXRr6c4psPaK3S7YMyOmXleibFG+4mYDFsvdLx60esz1 5bvy7NAX1fg11CieIFuBFmk27Iivfdo6kRKajg7sXhHpFxDkYEm68qzOuD/2o4/W yP2oiieB7ToeoKkeg6jTWc2Ryqzm3rBNOLpN0EDctXk4/TVyik9vc/SrRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPugMJIF9RTCuPyqNJihXCfHnb5tMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvMS02QXdrZ1gxRk1LNF9LbzBtS0ZjSjhlZHZtMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTQvMTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQy OC8xL0NBSzVYT1lqblZKc05hNTZqaXpyU0s2NEsxOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioCJphc MA0GCSqGSIb3DQEBCwUAA4IBAQCsTLdbdmv9bj1oK4S062w00HaVc0PsTRgN/fNj UJAQmdfX9BTLNbazmAHX9NNrUUvNdoeAEzvMdZUMbmWDW/CgPaG3RMkUDeo/tUAL YK+TTSyDXTr/V+h2HLRVquccuwC4tN3u/XG2T4zX8kLYsjYmbEuIXsDQJkG/NvBl 7NLA3Za0nMBJHKvhrrtVGgrSZ4nzbGv07sOh7s3SnGOBF0n6oFr12K/XJwvbWDEr TVnvz1xFB8GHMtCpr4nL4C3hyMKg7vEyUjxvcmUi1sTWJi9H/z1jYy1TTlKrKsyh 5BiBcLZyxmRNMvazYCLkRxwyEnnTUJZiOCrkS1qOAVdWDKxh -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:45 2026 by rpki-client