This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa File: 6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa (raw, json) Hash identifier: bgN/Wif1RDjqgtzhUIXOtx86/S164vOmljhvPEsaCa4= Subject key identifier: E9:6D:CF:15:26:2A:5E:EB:B7:0D:5A:4B:AC:E4:D5:66:0B:99:D8:DD Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DD1C68DA56B2958D0CAEB98642AB Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 192.40.69.0/24 maxlen: 24 2a14:6780:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dd:1c:68:da:56:b2:95:8d:0c:ae:b9:86:42:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e96dcf15262a5eebb70d5a4bace4d5660b99d8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:ff:a9:10:40:c5:10:cc:a0:9f:ab:ba:0c: f7:94:69:2e:25:be:3e:38:92:9c:22:5a:41:da:ca: 97:a2:ee:42:6a:4a:c1:12:06:0e:7b:34:90:01:da: c9:ce:4a:a6:91:69:40:ba:54:19:f1:b3:ea:f6:da: f2:da:f4:27:06:b4:b1:48:c6:eb:36:e0:e4:d0:0b: d4:f6:e1:1f:d3:15:8a:2c:45:59:d7:60:df:77:f1: 29:b8:10:84:92:3b:b8:e7:71:d2:eb:52:7e:67:ab: 5e:41:63:0f:fa:21:9c:62:31:4e:67:8b:51:9b:7d: bc:22:56:9a:87:d3:f3:de:6c:a3:9d:f9:8c:7c:84: d7:90:3a:3d:a8:a6:e6:fb:90:e4:be:75:c7:86:41: 60:30:b2:f0:1d:97:4a:62:e5:a3:6b:c1:b5:b6:70: 25:ea:79:ae:5f:13:4f:70:00:e2:09:23:48:e9:e3: 27:f0:c0:c8:4c:85:79:75:f7:f7:a0:0b:b8:9c:a0: 44:93:2a:54:a8:7d:bc:b3:1c:ec:bd:b7:44:e7:3f: 19:ad:60:90:19:ce:a9:4d:9d:33:5c:31:56:22:ba: f6:f6:7d:80:bf:fb:f1:f8:55:c6:b9:67:5c:50:31: 9b:89:0a:a8:f5:be:c9:45:0d:61:ca:33:55:38:41: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:CF:15:26:2A:5E:EB:B7:0D:5A:4B:AC:E4:D5:66:0B:99:D8:DD X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.40.69.0/24 IPv6: 2a14:6780:4::/48 Signature Algorithm: sha256WithRSAEncryption 44:5a:77:ee:1a:b2:47:69:7d:84:3a:a5:41:d9:15:1f:2a:7a: bd:60:4e:75:6b:eb:3a:97:5d:28:95:58:3e:49:de:06:f1:dc: 62:b9:47:15:f6:37:e0:ee:cc:92:c2:f2:76:9a:16:67:84:61: c1:5e:49:ee:eb:32:dd:7f:80:33:8d:c9:94:74:0a:1a:c9:23: 8e:18:be:4a:78:fb:b3:02:29:ac:42:16:61:73:ab:85:06:b3: b3:97:7c:1d:b3:35:ed:1e:12:4b:f0:91:49:cf:79:88:f2:c8: 0b:18:5b:4a:21:a2:eb:8e:8a:fe:ce:2c:26:f1:a4:8d:d8:21: 9e:6b:e1:82:2c:3e:94:6e:2b:d0:ac:77:f1:3b:58:68:b6:77: df:ac:29:38:5d:d0:74:1e:e6:60:e5:95:78:09:d5:23:55:96: ea:8b:bf:7e:26:0d:42:08:7e:e5:b6:0e:70:ca:e0:60:9c:e6: 99:6f:64:46:5d:a2:24:cd:66:c9:67:a1:31:37:45:6a:7d:31: ee:76:fc:73:11:39:d5:62:00:b6:40:78:20:17:e6:52:f0:9f: a4:32:c2:68:12:28:9f:97:4b:4b:43:d7:99:9d:69:4d:d1:86: 24:2c:aa:34:4f:46:db:92:4a:00:51:c8:01:c8:93:46:f0:9d: f5:42:30:87 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N90caNpWspWNDK65hkKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTZkY2YxNTI2MmE1ZWViYjcwZDVhNGJhY2U0ZDU2NjBiOTlkOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK3/qRBAxRDMoJ+rugz3lGkuJb4+ OJKcIlpB2sqXou5CakrBEgYOezSQAdrJzkqmkWlAulQZ8bPq9try2vQnBrSxSMbr NuDk0AvU9uEf0xWKLEVZ12Dfd/EpuBCEkju453HS61J+Z6teQWMP+iGcYjFOZ4tR m328Ilaah9Pz3myjnfmMfITXkDo9qKbm+5DkvnXHhkFgMLLwHZdKYuWja8G1tnAl 6nmuXxNPcADiCSNI6eMn8MDITIV5dff3oAu4nKBEkypUqH28sxzsvbdE5z8ZrWCQ Gc6pTZ0zXDFWIrr29n2Av/vx+FXGuWdcUDGbiQqo9b7JRQ1hyjNVOEEoiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOltzxUmKl7rtw1aS6zk1WYLmdjdMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvNlczUEZTWXFYdXUzRFZwTHJPVFZaZ3VaMk4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwChFMA8E AgACMAkDBwAqFGeAAAQwDQYJKoZIhvcNAQELBQADggEBAERad+4askdpfYQ6pUHZ FR8qer1gTnVr6zqXXSiVWD5J3gbx3GK5RxX2N+DuzJLC8naaFmeEYcFeSe7rMt1/ gDONyZR0ChrJI44Yvkp4+7MCKaxCFmFzq4UGs7OXfB2zNe0eEkvwkUnPeYjyyAsY W0ohouuOiv7OLCbxpI3YIZ5r4YIsPpRuK9Csd/E7WGi2d9+sKThd0HQe5mDllXgJ 1SNVluqLv34mDUIIfuW2DnDK4GCc5plvZEZdoiTNZslnoTE3RWp9Me52/HMROdVi ALZAeCAX5lLwn6QywmgSKJ+XS0tD15mdaU3RhiQsqjRPRtuSSgBRyAHIk0bwnfVC MIc= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:50 2026 by rpki-client