This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa File: k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa (raw, json) Hash identifier: F4dOSuK6+r+jv3VvsH55u1uhJuPtq3hth/malk/i538= Subject key identifier: 93:AB:E6:7A:AE:88:6D:5E:33:CB:35:6B:17:4C:DE:41:79:69:73:A7 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BC4649FD0B944DBAE0CF5F27AC3E Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213856 IP address blocks: 2a13:a5c3:d600::/40 maxlen: 48 2a13:a5c5::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bc:46:49:fd:0b:94:4d:ba:e0:cf:5f:27:ac:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93abe67aae886d5e33cb356b174cde41796973a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:73:d2:41:1b:1f:c7:4c:ca:34:5e:26:a5: d3:25:ea:2b:87:97:ae:e9:f2:45:6f:9b:18:45:e9: ca:fd:08:45:89:58:b2:88:d5:13:f6:9f:34:87:67: 87:80:99:03:b6:61:c2:fa:e5:64:21:d0:d4:85:7a: bf:52:a8:2a:98:5a:45:fd:1f:ae:38:3b:7e:9d:82: 05:1a:9f:3b:80:d8:8e:d1:4d:dd:a5:13:81:4e:64: 97:54:52:76:7d:9f:9e:c5:77:06:b3:55:92:36:cf: 1b:dc:d3:78:e8:b3:46:05:a0:8e:50:ea:4f:d0:c5: 8a:e7:20:2f:7a:6d:1e:a3:a1:19:b8:d1:61:a8:8b: 6d:58:de:6d:8c:cd:3a:e2:b1:e1:39:f3:37:3e:14: 02:40:00:b6:ac:41:e9:8d:7b:d7:48:97:4f:f3:ec: 13:1b:0a:e3:09:14:c8:c5:10:ad:12:c0:af:38:aa: c0:f4:2e:13:4a:17:06:c4:c8:65:4b:91:97:eb:ad: cb:9c:b3:b8:9e:ff:54:f6:ca:ef:3f:0a:95:f4:bc: 22:67:78:9f:56:fe:71:1f:12:af:50:98:6b:6d:35: e4:86:99:02:11:47:ab:95:da:8d:a2:35:07:f5:18: 1c:f7:83:f9:6d:cd:a7:f2:c6:60:11:99:f0:15:e5: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AB:E6:7A:AE:88:6D:5E:33:CB:35:6B:17:4C:DE:41:79:69:73:A7 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3:d600::/40 2a13:a5c5::/32 Signature Algorithm: sha256WithRSAEncryption 23:56:02:d8:77:81:b7:f7:02:10:f9:0a:7a:cc:1f:6d:80:4c: 8c:7c:25:30:78:2d:23:7f:d5:d0:4c:3a:75:b5:81:21:15:6a: 0f:37:bc:6d:50:9c:36:bb:04:db:91:43:1f:81:52:da:c7:16: 48:fe:2c:a7:b5:7f:4a:c1:30:af:19:22:aa:31:73:84:ad:27: 2e:c4:14:74:07:e9:11:b6:44:71:90:d1:1e:5a:8d:4b:d0:18: bb:43:05:46:3b:4f:6a:2d:47:05:49:d2:e1:a0:85:30:f2:16: 09:d0:34:13:7f:2f:7f:72:fd:73:a0:85:af:7b:82:93:cb:41: ae:ec:a7:6e:98:4c:50:81:f9:86:c8:0a:fb:05:6a:7f:f0:d6: 90:5c:c5:20:d1:66:82:64:97:6a:8f:9c:79:c5:a5:69:ab:f1: 82:83:f8:3c:09:52:fb:92:8e:7c:54:b7:cb:d5:4f:ff:f5:c3: 12:fd:ee:64:94:a0:46:0d:64:7f:7c:06:51:e1:19:30:22:3a: 12:78:d3:14:f8:9a:95:b7:68:0e:a0:3c:a7:b5:91:9c:79:64: d4:21:45:df:c0:4c:e8:3c:38:93:ef:40:5c:46:31:34:2c:88: 75:39:2b:d1:17:6a:76:e7:21:8c:07:fe:24:1e:3f:97:28:fc: 60:25:50:df -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt+OLxGSf0LlE264M9fJ6w+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2FiZTY3YWFlODg2ZDVlMzNjYjM1NmIxNzRjZGU0MTc5Njk3M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonpz0kEbH8dMyjReJqXTJeorh5eu 6fJFb5sYRenK/QhFiViyiNUT9p80h2eHgJkDtmHC+uVkIdDUhXq/UqgqmFpF/R+u ODt+nYIFGp87gNiO0U3dpROBTmSXVFJ2fZ+exXcGs1WSNs8b3NN46LNGBaCOUOpP 0MWK5yAvem0eo6EZuNFhqIttWN5tjM064rHhOfM3PhQCQAC2rEHpjXvXSJdP8+wT GwrjCRTIxRCtEsCvOKrA9C4TShcGxMhlS5GX663LnLO4nv9U9srvPwqV9LwiZ3if Vv5xHxKvUJhrbTXkhpkCEUerldqNojUH9Rgc94P5bc2n8sZgEZnwFeX5sQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFJOr5nquiG1eM8s1axdM3kF5aXOnMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvazZ2bWVxNkliVjR6eXpWckYwemVRWGxwYzZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwYAKhOlw9YD BQAqE6XFMA0GCSqGSIb3DQEBCwUAA4IBAQAjVgLYd4G39wIQ+Qp6zB9tgEyMfCUw eC0jf9XQTDp1tYEhFWoPN7xtUJw2uwTbkUMfgVLaxxZI/iyntX9KwTCvGSKqMXOE rScuxBR0B+kRtkRxkNEeWo1L0Bi7QwVGO09qLUcFSdLhoIUw8hYJ0DQTfy9/cv1z oIWve4KTy0Gu7KdumExQgfmGyAr7BWp/8NaQXMUg0WaCZJdqj5x5xaVpq/GCg/g8 CVL7ko58VLfL1U//9cMS/e5klKBGDWR/fAZR4RkwIjoSeNMU+JqVt2gOoDyntZGc eWTUIUXfwEzoPDiT70BcRjE0LIh1OSvRF2p25yGMB/4kHj+XKPxgJVDf -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:21 2026 by rpki-client