This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/woWrtfbpVBQC0d9nYGwEpRD6cSA.roa File: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (raw, json) Hash identifier: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU= Subject key identifier: C2:85:AB:B5:F6:E9:54:14:02:D1:DF:67:60:6C:04:A5:10:FA:71:20 Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Certificate serial: 019B7D5B6336D81FDAAE6685C3ABC86B13EA Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/woWrtfbpVBQC0d9nYGwEpRD6cSA.roa Signing time: Fri 02 Jan 2026 06:18:19 +0000 ROA not before: Fri 02 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30614 IP address blocks: 2a01:6f40:e010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:63:36:d8:1f:da:ae:66:85:c3:ab:c8:6b:13:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Validity Not Before: Jan 2 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c285abb5f6e9541402d1df67606c04a510fa7120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7e:75:c6:1b:00:83:b5:55:c0:09:5a:ce:9a: 56:a0:23:82:a4:96:b1:9c:79:82:3a:45:45:3c:52: 25:23:ba:a3:62:8d:d7:d8:09:41:f6:6c:09:7a:a1: 0f:91:ad:4f:97:13:cd:47:46:2e:5c:c6:be:e9:f9: 02:96:9a:99:7a:a3:bd:7e:1b:e5:d7:e2:1b:7d:54: db:ad:61:f9:e7:66:44:0d:0e:1a:1b:bc:df:47:ba: b2:cb:f4:ce:a9:27:22:4d:e8:21:cc:0a:43:40:a6: 33:5d:4e:5a:1a:5c:a5:cf:42:65:0a:2c:ac:1a:bf: 78:b9:3c:dc:87:7a:7c:ae:9f:45:d4:80:49:4a:d9: a3:8e:45:28:cf:cd:ff:af:1a:0d:df:c6:7d:c9:31: 45:da:bd:63:c5:83:aa:6c:37:1d:2e:cd:7b:84:c9: b3:4c:d0:5d:c3:9a:8b:af:06:47:41:51:0f:76:f5: a2:b4:3a:d9:34:43:e1:f8:c1:e2:d9:36:64:98:e5: 04:05:9e:ec:ae:fe:71:1c:50:9e:f7:2e:bb:8c:06: fd:21:32:0e:39:5a:39:cc:5f:02:ec:2f:c0:4a:07: f4:65:3e:5e:65:19:fa:3d:4d:d4:89:d2:8f:50:b0: b2:1a:d8:c8:ff:31:f4:01:cd:b5:e3:94:4e:9f:de: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:85:AB:B5:F6:E9:54:14:02:D1:DF:67:60:6C:04:A5:10:FA:71:20 X509v3 Authority Key Identifier: keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/woWrtfbpVBQC0d9nYGwEpRD6cSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:6f40:e010::/48 Signature Algorithm: sha256WithRSAEncryption 75:19:fa:8b:68:9e:ac:be:a3:5e:76:ce:65:19:b4:bd:fe:37: 4f:75:7c:4c:f0:54:33:c3:3a:e4:ec:b3:2a:1c:d9:4d:b8:32: 3e:72:95:2e:1f:d4:45:72:64:84:40:6a:7a:43:e1:69:9c:bf: cb:67:01:a0:4d:34:ac:a0:3b:26:6d:dc:db:6a:48:16:43:1f: 2a:01:2c:48:ad:2b:7a:7c:38:b7:a1:f3:e2:cd:ef:0b:31:30: da:9f:83:61:79:f9:da:e1:68:f8:06:2f:e0:6b:59:8e:2b:2a: 9c:eb:93:7f:ec:77:ee:40:30:bf:77:1a:c6:3d:e6:98:8c:79: 2a:19:02:0b:d6:ae:d4:a0:32:ac:66:c5:a1:55:20:e2:52:6b: 18:48:c7:22:82:0b:bf:ef:db:be:cf:3a:e6:e5:81:69:e9:bc: 4b:c6:f7:bc:61:f5:05:d9:b6:cf:78:b7:a7:6b:0e:c9:26:1e: da:be:0d:b2:fe:b4:c4:ea:b0:12:4e:0f:43:77:b1:f9:8f:22: 48:34:1c:38:44:28:08:bd:61:77:3d:4d:98:db:fa:bd:f9:95: ff:4e:af:16:03:43:11:b2:00:89:d9:88:27:7f:78:e8:e9:f3: 5d:a7:f6:b5:d6:dd:c5:83:a5:18:3b:02:41:14:5b:9e:37:2c: 03:58:00:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W2M22B/armaFw6vIaxPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOWE3NDA1YTYwODVjOWFiYWNmMDgzZGM5MGE0OTVmY2Qy NjhjZjgwHhcNMjYwMTAyMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjg1YWJiNWY2ZTk1NDE0MDJkMWRmNjc2MDZjMDRhNTEwZmE3MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8351xhsAg7VVwAlazppWoCOCpJax nHmCOkVFPFIlI7qjYo3X2AlB9mwJeqEPka1PlxPNR0YuXMa+6fkClpqZeqO9fhvl 1+IbfVTbrWH552ZEDQ4aG7zfR7qyy/TOqSciTeghzApDQKYzXU5aGlylz0JlCiys Gr94uTzch3p8rp9F1IBJStmjjkUoz83/rxoN38Z9yTFF2r1jxYOqbDcdLs17hMmz TNBdw5qLrwZHQVEPdvWitDrZNEPh+MHi2TZkmOUEBZ7srv5xHFCe9y67jAb9ITIO OVo5zF8C7C/ASgf0ZT5eZRn6PU3UidKPULCyGtjI/zH0Ac2145ROn97+SQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMKFq7X26VQUAtHfZ2BsBKUQ+nEgMB8GA1UdIwQY MBaAFGuadAWmCFyaus8IPckKSV/NJoz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMt MmUxZWU5NDcxZWVjLzEvd29XcnRmYnBWQlFDMGQ5bllHd0VwUkQ2Y1NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMtMmUxZWU5NDcxZWVj LzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFvQOAQ MA0GCSqGSIb3DQEBCwUAA4IBAQB1GfqLaJ6svqNeds5lGbS9/jdPdXxM8FQzwzrk 7LMqHNlNuDI+cpUuH9RFcmSEQGp6Q+FpnL/LZwGgTTSsoDsmbdzbakgWQx8qASxI rSt6fDi3ofPize8LMTDan4Nhefna4Wj4Bi/ga1mOKyqc65N/7HfuQDC/dxrGPeaY jHkqGQIL1q7UoDKsZsWhVSDiUmsYSMciggu/79u+zzrm5YFp6bxLxve8YfUF2bbP eLenaw7JJh7avg2y/rTE6rASTg9Dd7H5jyJINBw4RCgIvWF3PU2Y2/q9+ZX/Tq8W A0MRsgCJ2Ygnf3jo6fNdp/a11t3Fg6UYOwJBFFueNywDWABC -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:05 2026 by rpki-client