This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6eKab2kflyL4tNk99FpKf5TcNMs.roa File: 6eKab2kflyL4tNk99FpKf5TcNMs.roa (raw, json) Hash identifier: SpmTaDJREyrGP8XjvgTo0ahNNN3vtRO66ma2WbzXFtQ= Subject key identifier: E9:E2:9A:6F:69:1F:97:22:F8:B4:D9:3D:F4:5A:4A:7F:94:DC:34:CB Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3969CA96D42FB52D3D56BFFB8ED383 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6eKab2kflyL4tNk99FpKf5TcNMs.roa Signing time: Fri 02 Jan 2026 10:20:50 +0000 ROA not before: Fri 02 Jan 2026 10:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214279 IP address blocks: 2a0c:b641:ce0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:69:ca:96:d4:2f:b5:2d:3d:56:bf:fb:8e:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9e29a6f691f9722f8b4d93df45a4a7f94dc34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:e0:45:62:69:2b:ce:5d:fd:64:75:58:dd: ad:f7:33:20:3f:91:bb:9e:04:87:e4:e6:8f:f9:5f: e8:c7:49:0b:f0:d6:4d:f0:90:48:d8:39:b5:0f:44: 05:11:86:23:e9:bf:b1:5b:16:60:0c:93:1b:da:7f: ad:55:ed:99:03:d8:5d:b7:79:3c:c6:d2:ce:a9:d3: 3f:f9:d8:a5:4e:00:16:06:2f:b9:34:9d:14:73:91: e5:46:1b:c4:38:d8:df:23:70:b1:b4:db:8c:d1:04: 9c:e1:2c:0d:4b:7b:26:87:de:ae:be:ee:c8:e1:d0: 69:50:f0:46:94:70:c7:e7:c8:a9:d5:2b:ad:35:87: b6:11:2b:97:ae:19:f5:b5:b9:a7:69:ff:32:f4:c7: 56:41:fc:57:25:93:58:9a:42:35:aa:eb:6e:cb:1b: 26:49:45:52:64:0a:4e:76:18:77:ce:36:9c:47:de: b6:9c:f1:7e:02:88:de:78:d2:96:18:66:f6:f7:28: 92:72:88:3e:65:f9:f5:89:f6:b9:66:e5:06:97:f1: 2e:95:6e:26:f2:97:99:ff:06:40:d9:40:00:43:00: bf:0b:3c:c4:cd:ac:33:44:2b:28:03:65:c2:c3:cd: 8c:51:16:22:cb:00:92:76:55:90:3e:19:34:b7:c1: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:9A:6F:69:1F:97:22:F8:B4:D9:3D:F4:5A:4A:7F:94:DC:34:CB X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6eKab2kflyL4tNk99FpKf5TcNMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:ce0::/44 Signature Algorithm: sha256WithRSAEncryption 23:b7:7c:c5:07:ee:b5:4b:ea:62:ea:0b:2a:d2:da:b4:b5:d1: 96:ed:08:c1:9e:51:b2:11:59:53:f4:fc:39:b9:25:e5:e6:47: 80:c7:17:92:52:91:62:58:ad:09:bd:d8:79:24:d9:ae:ef:28: 4c:e0:73:75:71:0b:5a:8f:62:46:46:90:d7:74:cc:85:32:99: 1f:83:92:17:55:a1:40:50:6a:31:51:21:4d:f2:62:5c:07:cf: 08:25:d6:b2:f1:f6:7c:d8:95:f9:f0:81:e1:f7:69:c1:32:b9: 97:d4:6e:d5:77:5a:eb:ce:a3:73:f6:08:a2:08:26:72:89:17: 76:60:ac:bd:54:c3:1c:81:3a:e4:be:12:d0:bd:c3:77:48:f5: da:01:3d:ca:89:32:30:f5:fe:34:7b:cf:e5:17:c5:eb:de:b3: 36:94:93:78:e4:55:fb:ab:d6:36:a1:5c:78:99:22:78:41:f7: d5:a9:fb:59:1d:e1:b3:3c:65:bd:88:68:8a:93:0a:74:d0:52: f3:6b:bf:01:2c:b3:13:b4:67:48:c2:54:c5:9f:8d:b9:90:fa: e3:d0:8d:56:78:9c:9e:46:43:8c:e2:40:9e:ce:90:3f:bc:ee: 76:f2:54:d0:a2:d0:1f:6b:ee:12:84:90:02:39:40:fe:bb:db: c5:9f:15:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWnKltQvtS09Vr/7jtODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWUyOWE2ZjY5MWY5NzIyZjhiNGQ5M2RmNDVhNGE3Zjk0ZGMzNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWPgRWJpK85d/WR1WN2t9zMgP5G7 ngSH5OaP+V/ox0kL8NZN8JBI2Dm1D0QFEYYj6b+xWxZgDJMb2n+tVe2ZA9hdt3k8 xtLOqdM/+dilTgAWBi+5NJ0Uc5HlRhvEONjfI3CxtNuM0QSc4SwNS3smh96uvu7I 4dBpUPBGlHDH58ip1SutNYe2ESuXrhn1tbmnaf8y9MdWQfxXJZNYmkI1qutuyxsm SUVSZApOdhh3zjacR962nPF+AojeeNKWGGb29yiScog+Zfn1ifa5ZuUGl/EulW4m 8peZ/wZA2UAAQwC/CzzEzawzRCsoA2XCw82MURYiywCSdlWQPhk0t8GbvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOnimm9pH5ci+LTZPfRaSn+U3DTLMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvNmVLYWIya2ZseUw0dE5rOTlGcEtmNVRjTk1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQzg MA0GCSqGSIb3DQEBCwUAA4IBAQAjt3zFB+61S+pi6gsq0tq0tdGW7QjBnlGyEVlT 9Pw5uSXl5keAxxeSUpFiWK0Jvdh5JNmu7yhM4HN1cQtaj2JGRpDXdMyFMpkfg5IX VaFAUGoxUSFN8mJcB88IJday8fZ82JX58IHh92nBMrmX1G7Vd1rrzqNz9giiCCZy iRd2YKy9VMMcgTrkvhLQvcN3SPXaAT3KiTIw9f40e8/lF8Xr3rM2lJN45FX7q9Y2 oVx4mSJ4QffVqftZHeGzPGW9iGiKkwp00FLza78BLLMTtGdIwlTFn425kPrj0I1W eJyeRkOM4kCezpA/vO528lTQotAfa+4ShJACOUD+u9vFnxWD -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:56 2026 by rpki-client