This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/6WiXlh5QhCuw_MVwaut0x2jiEEs.roa File: 6WiXlh5QhCuw_MVwaut0x2jiEEs.roa (raw, json) Hash identifier: qUA6n5/TXrCPUvcsaToKEYv6wtNRYISXJDQml29JrEs= Subject key identifier: E9:68:97:96:1E:50:84:2B:B0:FC:C5:70:6A:EB:74:C7:68:E2:10:4B Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c Certificate serial: 019B7BA4BBDD103381BA8CF376D5B0CCD9A9 Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/6WiXlh5QhCuw_MVwaut0x2jiEEs.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 2a0b:5f00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bb:dd:10:33:81:ba:8c:f3:76:d5:b0:cc:d9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e96897961e50842bb0fcc5706aeb74c768e2104b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:0b:9a:00:47:8f:97:dd:31:6a:ea:e9:5b: c6:39:ce:67:e0:13:33:4a:8f:49:0f:94:74:36:2b: 79:d0:2c:bf:79:2d:b4:98:16:91:be:10:4c:fa:d5: 7e:b2:ef:0f:ed:67:23:e3:c9:52:65:39:b5:c1:dc: 9f:8b:81:21:19:e1:b0:43:2f:3c:a7:b3:ce:73:3f: cc:6f:47:42:e3:f2:3f:79:c0:c4:c7:ce:90:07:86: 6f:36:74:61:3a:6d:1d:14:3a:f1:fe:f3:da:c3:fa: c2:e1:a0:d8:51:20:16:b9:fc:d4:35:ce:09:7c:1e: 53:96:ea:95:5f:e8:93:22:db:4a:c5:df:4f:5b:2d: 0d:1e:4f:e7:9b:5d:73:a8:64:58:ba:f1:92:cc:ce: 72:3c:83:5a:61:c0:e0:ab:65:16:7b:47:3b:07:74: 3a:14:b3:1a:c2:13:db:6a:38:f9:ee:6f:6b:28:2e: 2a:b4:f7:14:9a:1b:78:db:d0:16:d9:0f:76:83:00: 98:a8:52:0d:e8:43:f0:4f:12:73:df:47:55:33:33: c9:73:e7:31:04:db:43:40:3e:c2:f8:72:58:c7:c0: 2f:8c:73:74:38:39:99:de:fc:77:3f:d2:54:a7:f6: 40:73:19:e2:e9:14:da:da:c7:5b:2a:ab:3c:0b:26: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:68:97:96:1E:50:84:2B:B0:FC:C5:70:6A:EB:74:C7:68:E2:10:4B X509v3 Authority Key Identifier: keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/6WiXlh5QhCuw_MVwaut0x2jiEEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:5f00::/29 Signature Algorithm: sha256WithRSAEncryption 37:f8:18:1e:b7:b2:05:da:73:6b:e0:7a:2c:95:31:f8:cc:36: 58:5b:e1:4f:79:2b:31:79:08:d3:89:4f:d8:e6:04:f5:55:8a: b9:4a:7b:75:af:88:3f:f8:ee:04:21:e7:5c:1e:66:72:87:b6: e1:3c:d1:95:db:2e:ec:a9:fa:37:c4:14:b3:b6:f9:c1:49:7b: da:3e:66:52:6f:72:d6:b3:2b:d5:39:d8:b8:84:0f:3c:d6:c1: d9:35:33:0e:4b:ce:0e:7a:89:91:a4:25:b9:f1:03:6e:24:db: 7e:df:89:f4:de:1e:13:3d:62:bb:5c:2e:d5:85:63:0d:e5:ab: c2:97:c0:2d:50:f0:36:54:1f:de:c6:af:68:a2:18:54:21:c1: ca:a9:83:06:21:88:27:1f:7a:e2:e3:fd:18:0d:ee:14:7c:0d: b9:2f:67:9c:a7:31:5e:1c:e2:d7:86:e2:0a:a2:3f:c2:b5:0f: 52:96:2d:a0:89:f1:78:cc:3e:8b:6d:08:f2:88:43:ab:d9:8b: 9b:70:60:9b:3c:4f:b8:59:43:25:55:22:b5:64:ba:ef:6a:af: f7:b4:70:69:b2:86:f1:33:a2:b5:1b:c1:c3:9f:4a:6d:be:ca: c1:63:b2:13:0f:dd:fb:93:55:be:38:82:6d:26:cb:17:c6:8a: dc:2f:fa:d2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pLvdEDOBuozzdtWwzNmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNWZlMDU2Zjc2NzdlNDNhNmVmMWFhMWEwYTA1YzA3YzRi NGI2NWMwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTY4OTc5NjFlNTA4NDJiYjBmY2M1NzA2YWViNzRjNzY4ZTIxMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUALmgBHj5fdMWrq6VvGOc5n4BMz So9JD5R0Nit50Cy/eS20mBaRvhBM+tV+su8P7Wcj48lSZTm1wdyfi4EhGeGwQy88 p7POcz/Mb0dC4/I/ecDEx86QB4ZvNnRhOm0dFDrx/vPaw/rC4aDYUSAWufzUNc4J fB5TluqVX+iTIttKxd9PWy0NHk/nm11zqGRYuvGSzM5yPINaYcDgq2UWe0c7B3Q6 FLMawhPbajj57m9rKC4qtPcUmht429AW2Q92gwCYqFIN6EPwTxJz30dVMzPJc+cx BNtDQD7C+HJYx8AvjHN0ODmZ3vx3P9JUp/ZAcxni6RTa2sdbKqs8CyaelwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOlol5YeUIQrsPzFcGrrdMdo4hBLMB8GA1UdIwQY MBaAFC1f4Fb3Z35Dpu8aoaCgXAfEtLZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjIt ZDIwNjBkM2E0MzMyLzEvNldpWGxoNVFoQ3V3X01Wd2F1dDB4MmppRUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjItZDIwNjBkM2E0MzMy LzEvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtfADAN BgkqhkiG9w0BAQsFAAOCAQEAN/gYHreyBdpza+B6LJUx+Mw2WFvhT3krMXkI04lP 2OYE9VWKuUp7da+IP/juBCHnXB5mcoe24TzRldsu7Kn6N8QUs7b5wUl72j5mUm9y 1rMr1TnYuIQPPNbB2TUzDkvODnqJkaQlufEDbiTbft+J9N4eEz1iu1wu1YVjDeWr wpfALVDwNlQf3savaKIYVCHByqmDBiGIJx964uP9GA3uFHwNuS9nnKcxXhzi14bi CqI/wrUPUpYtoInxeMw+i20I8ohDq9mLm3BgmzxPuFlDJVUitWS672qv97RwabKG 8TOitRvBw59Kbb7KwWOyEw/d+5NVvjiCbSbLF8aK3C/60g== -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:30 2026 by rpki-client