This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bQz5M6S58E1JWTn0s5vsp2g1QGE.roa File: bQz5M6S58E1JWTn0s5vsp2g1QGE.roa (raw, json) Hash identifier: 7bq6iGBiZnxLAjj1/UediKuzEofqPUcMpCqEQqJD4Sg= Subject key identifier: 6D:0C:F9:33:A4:B9:F0:4D:49:59:39:F4:B3:9B:EC:A7:68:35:40:61 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED6A0305D04967D834F65388C80EF Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bQz5M6S58E1JWTn0s5vsp2g1QGE.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205503 IP address blocks: 2a02:660:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:a0:30:5d:04:96:7d:83:4f:65:38:8c:80:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d0cf933a4b9f04d495939f4b39beca768354061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:b0:d5:ec:ce:c4:87:fa:a0:a7:2b:f0:7d: 20:c3:9e:02:1d:cd:7d:e1:ce:19:2c:cc:ba:55:79: 63:51:91:cf:96:59:b2:a4:80:8a:f5:4b:a5:a9:b7: 2e:48:f5:dc:9a:f5:c1:f0:5b:23:5e:fe:b7:0d:4b: 0b:71:50:18:7f:c3:ae:2a:8e:a7:66:89:d3:7b:78: 17:22:14:3d:f4:d6:d8:b4:97:79:73:53:b8:04:d1: fc:6f:c2:16:da:af:45:e1:38:32:1b:0d:d2:f2:ba: 27:16:ff:e1:7b:a9:ac:94:da:d4:62:58:f3:05:d8: b5:a1:b2:88:87:b3:e9:9c:9a:d8:a7:e0:d1:d6:cf: 4d:f3:99:4f:2a:59:c7:70:13:a3:38:87:89:11:dd: 50:d3:0e:ee:78:b5:01:23:42:6a:6a:2c:77:b0:c2: 12:b6:96:97:ab:75:4a:d8:f8:7b:86:fa:0b:d0:04: 88:e2:30:02:07:eb:3a:19:a2:eb:7f:22:0e:ab:7c: 4f:b7:db:c5:c7:0a:19:8c:4d:fd:16:ea:5d:96:c7: b1:86:d1:3e:ad:13:11:9e:79:e0:9e:69:c6:91:1b: 6f:38:8c:d1:05:91:58:cb:29:c2:f9:0e:d1:35:5d: f9:c5:f6:a8:04:92:7e:06:21:b7:b3:3a:89:c9:f6: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0C:F9:33:A4:B9:F0:4D:49:59:39:F4:B3:9B:EC:A7:68:35:40:61 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bQz5M6S58E1JWTn0s5vsp2g1QGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:660:a::/48 Signature Algorithm: sha256WithRSAEncryption 43:98:eb:4d:fa:d4:ce:69:b2:ed:6b:23:7c:43:b3:79:fd:f7: f4:02:4e:bb:cb:6a:32:aa:f6:69:3c:d7:cf:de:80:56:df:2f: f7:f1:74:51:58:ec:7c:65:f8:49:c7:7b:a7:73:23:34:f0:76: 1e:92:25:7a:f8:8d:2c:e9:37:cd:8f:97:ff:e5:85:27:36:c0: e5:d1:eb:d1:b6:b2:68:18:05:1f:d3:08:63:3b:f5:e6:93:bf: 96:b0:f3:87:cc:5d:7b:1e:0a:66:94:b7:5d:de:3a:af:24:36: 9a:c4:a0:c3:86:99:8c:86:3f:52:32:cd:49:f8:f0:a0:fd:ed: f2:f0:d3:26:10:0d:68:ec:de:9d:fb:a8:5c:7b:1d:f7:f3:85: 35:fc:26:56:65:5b:45:08:e5:8b:ef:08:79:35:51:9c:18:bd: 1b:df:c2:60:ed:c4:ff:3a:4c:c7:c3:5f:96:23:ab:92:f0:12: b5:3a:dc:3b:73:2e:d9:44:50:f3:80:a9:07:a5:52:eb:75:bf: 3f:0c:88:29:73:6a:e1:da:97:15:21:23:92:41:37:7d:18:c3: d7:79:1f:8a:ff:1d:eb:00:98:23:24:41:d3:8b:92:72:dc:57: b4:75:b6:ea:a2:a8:c3:ae:c9:c3:cc:8d:d8:2d:ad:32:f5:b2: 5b:25:44:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ftagMF0Eln2DT2U4jIDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDBjZjkzM2E0YjlmMDRkNDk1OTM5ZjRiMzliZWNhNzY4MzU0MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme6w1ezOxIf6oKcr8H0gw54CHc19 4c4ZLMy6VXljUZHPllmypICK9UulqbcuSPXcmvXB8FsjXv63DUsLcVAYf8OuKo6n ZonTe3gXIhQ99NbYtJd5c1O4BNH8b8IW2q9F4TgyGw3S8ronFv/he6mslNrUYljz Bdi1obKIh7PpnJrYp+DR1s9N85lPKlnHcBOjOIeJEd1Q0w7ueLUBI0Jqaix3sMIS tpaXq3VK2Ph7hvoL0ASI4jACB+s6GaLrfyIOq3xPt9vFxwoZjE39FupdlsexhtE+ rRMRnnngnmnGkRtvOIzRBZFYyynC+Q7RNV35xfaoBJJ+BiG3szqJyfYlCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG0M+TOkufBNSVk59LOb7KdoNUBhMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYlF6NU02UzU4RTFKV1RuMHM1dnNwMmcxUUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIGYAAK MA0GCSqGSIb3DQEBCwUAA4IBAQBDmOtN+tTOabLtayN8Q7N5/ff0Ak67y2oyqvZp PNfP3oBW3y/38XRRWOx8ZfhJx3uncyM08HYekiV6+I0s6TfNj5f/5YUnNsDl0evR trJoGAUf0whjO/Xmk7+WsPOHzF17HgpmlLdd3jqvJDaaxKDDhpmMhj9SMs1J+PCg /e3y8NMmEA1o7N6d+6hcex3384U1/CZWZVtFCOWL7wh5NVGcGL0b38Jg7cT/OkzH w1+WI6uS8BK1Otw7cy7ZRFDzgKkHpVLrdb8/DIgpc2rh2pcVISOSQTd9GMPXeR+K /x3rAJgjJEHTi5Jy3Fe0dbbqoqjDrsnDzI3YLa0y9bJbJUTR -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:16 2026 by rpki-client