This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bJFJLBxHrkIaDBeFH6kdGSg_GU.roa File: 6bJFJLBxHrkIaDBeFH6kdGSg_GU.roa (raw, json) Hash identifier: s3MnMxu9d55GRh+sys/N7gbnKBS3JSrBmWqAyc5Qlh0= Subject key identifier: E9:B2:45:24:B0:71:1E:B9:08:68:30:5E:14:7E:A4:74:64:A0:FC:65 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA45DA19DCDCDD752B6C03CD4DC74 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bJFJLBxHrkIaDBeFH6kdGSg_GU.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24239 IP address blocks: 2a0e:b107:740::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a4:5d:a1:9d:cd:cd:d7:52:b6:c0:3c:d4:dc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9b24524b0711eb90868305e147ea47464a0fc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:c0:19:fd:d5:02:0e:7b:c2:b0:ba:52:21: 2a:a4:c5:98:c8:74:4d:bb:da:7e:e4:16:31:be:63: 3e:21:9e:83:96:be:83:97:02:de:8c:38:c7:f8:8d: c2:45:a1:e6:c0:25:28:dc:05:83:14:d6:ba:78:8a: 34:4b:81:a0:77:41:f4:a7:38:9d:ec:2f:00:0e:b6: ad:87:70:54:93:09:82:77:f4:c2:fe:18:ee:e9:4a: f8:d8:91:42:e6:e2:2b:59:5d:92:cf:22:39:7a:5e: 73:a0:4e:ec:73:d6:d6:f5:e3:f9:2a:93:32:41:01: 5d:b7:96:2a:fe:80:27:ba:0a:bd:c6:e5:c0:56:e6: 69:bc:fc:d6:1c:95:15:2e:d6:05:1b:77:50:99:2f: 61:57:77:cc:dd:c6:c1:54:ce:d9:f8:43:4b:b6:87: d4:8e:78:16:99:95:1f:9c:c3:c1:2c:f3:fb:3f:a0: 42:7c:d4:c8:fa:8b:4f:89:17:d7:37:e5:63:74:17: 12:48:e0:7a:11:c4:5f:c1:b0:6c:95:da:ab:31:f4: 1c:cf:5f:f2:e4:43:f5:ef:ef:fb:6e:be:e7:eb:40: 60:6b:a8:43:66:e7:20:29:c0:59:8e:ba:4c:bc:bb: be:c5:bc:ca:b0:d7:b9:b5:60:ce:b9:c1:7e:de:4c: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B2:45:24:B0:71:1E:B9:08:68:30:5E:14:7E:A4:74:64:A0:FC:65 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bJFJLBxHrkIaDBeFH6kdGSg_GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:740::/44 Signature Algorithm: sha256WithRSAEncryption 59:74:12:fa:24:b6:e3:3a:8e:73:1c:93:65:ef:6e:95:4d:0a: 71:fb:85:21:e2:30:25:62:dc:da:f3:78:70:ff:56:57:69:a2: e6:dd:4b:a9:b3:bd:85:4a:48:9f:49:31:be:c1:4b:c5:d1:e8: 38:ef:02:10:a0:52:6d:4e:df:74:be:2f:2e:10:f9:37:28:7d: 3a:46:6b:fd:4f:45:f7:61:7a:0f:f8:d6:e5:37:63:58:35:13: d7:11:44:85:d9:a1:bb:6c:dd:ac:de:5e:35:28:11:19:da:f2: 97:28:db:0f:51:ec:24:6b:47:01:9e:7b:f7:65:cf:c8:88:94: e8:88:f8:8b:13:67:fd:32:21:ee:27:7e:0f:1c:3e:79:51:91: dd:ec:46:bc:36:f6:51:53:77:2d:a0:32:f7:e1:59:01:c8:88: bb:bd:3a:3a:f1:84:86:88:87:27:28:49:b5:75:b0:8e:dd:1f: 2e:fe:b6:04:ac:2c:e0:1f:18:1b:2d:ad:c4:bd:c3:45:f3:83: 55:4c:c6:21:94:44:1a:32:81:48:48:d6:b8:fe:36:ce:80:2a: 6a:d2:69:4a:ad:72:df:b9:3e:e9:a4:83:aa:ff:10:9a:04:9e: ee:88:5f:10:e6:a0:82:11:05:c8:7c:1f:9c:7a:01:db:ca:bb: cb:de:80:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XKRdoZ3NzddStsA81Nx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWIyNDUyNGIwNzExZWI5MDg2ODMwNWUxNDdlYTQ3NDY0YTBmYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh3AGf3VAg57wrC6UiEqpMWYyHRN u9p+5BYxvmM+IZ6Dlr6DlwLejDjH+I3CRaHmwCUo3AWDFNa6eIo0S4Ggd0H0pzid 7C8ADrath3BUkwmCd/TC/hju6Ur42JFC5uIrWV2SzyI5el5zoE7sc9bW9eP5KpMy QQFdt5Yq/oAnugq9xuXAVuZpvPzWHJUVLtYFG3dQmS9hV3fM3cbBVM7Z+ENLtofU jngWmZUfnMPBLPP7P6BCfNTI+otPiRfXN+VjdBcSSOB6EcRfwbBsldqrMfQcz1/y 5EP17+/7br7n60Bga6hDZucgKcBZjrpMvLu+xbzKsNe5tWDOucF+3kye7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOmyRSSwcR65CGgwXhR+pHRkoPxlMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNmJKRkpMQnhIcmtJYURCZUZINmtkR1NnX0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwdA MA0GCSqGSIb3DQEBCwUAA4IBAQBZdBL6JLbjOo5zHJNl726VTQpx+4Uh4jAlYtza 83hw/1ZXaaLm3Uups72FSkifSTG+wUvF0eg47wIQoFJtTt90vi8uEPk3KH06Rmv9 T0X3YXoP+NblN2NYNRPXEUSF2aG7bN2s3l41KBEZ2vKXKNsPUewka0cBnnv3Zc/I iJToiPiLE2f9MiHuJ34PHD55UZHd7Ea8NvZRU3ctoDL34VkByIi7vTo68YSGiIcn KEm1dbCO3R8u/rYErCzgHxgbLa3EvcNF84NVTMYhlEQaMoFISNa4/jbOgCpq0mlK rXLfuT7ppIOq/xCaBJ7uiF8Q5qCCEQXIfB+cegHbyrvL3oCq -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:22 2026 by rpki-client