This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/R6vEKMp8XV0nRsp07cf4y7I04qo.roa File: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (raw, json) Hash identifier: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM= Subject key identifier: 47:AB:C4:28:CA:7C:5D:5D:27:46:CA:74:ED:C7:F8:CB:B2:34:E2:AA Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B7BA464F4D16380D20303805A9DD8D913 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/R6vEKMp8XV0nRsp07cf4y7I04qo.roa Signing time: Thu 01 Jan 2026 22:18:49 +0000 ROA not before: Thu 01 Jan 2026 22:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201217 IP address blocks: 2a12:3fc2:ab74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:64:f4:d1:63:80:d2:03:03:80:5a:9d:d8:d9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 1 22:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47abc428ca7c5d5d2746ca74edc7f8cbb234e2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:a8:f5:08:ec:5c:4a:11:14:40:73:de:fc: bf:1b:8c:dd:63:51:d9:60:71:45:4f:f9:94:19:82: 72:87:61:b7:b4:d9:1e:f4:3d:bd:15:3d:23:cb:d6: 2d:ec:5f:b6:90:a6:17:6e:c9:e3:16:14:39:b4:b3: 5b:bb:8a:41:c7:3d:48:34:38:02:60:22:b5:82:f1: bd:fa:83:18:ef:ef:15:23:8b:10:66:bd:8c:e7:64: a3:e3:9b:ef:28:0b:58:ef:4f:69:10:ad:48:b6:77: 77:5b:cc:d1:62:66:ce:92:c4:79:c5:ea:46:b0:95: 98:f2:11:46:45:77:a3:cc:45:f8:c7:b3:11:c0:ed: c6:38:37:66:a9:39:04:00:af:5c:f0:60:fa:d5:d3: 6a:cc:d6:fc:c3:95:f5:63:84:89:25:d6:58:78:b0: 37:ec:f4:e3:7c:15:87:a2:d0:6f:6b:39:00:7c:a0: 8f:21:e8:1f:88:bb:76:66:2a:26:7d:38:f8:7d:2b: 22:a9:b2:29:15:c0:8b:2a:3a:a2:08:c3:ed:8d:9f: ac:c6:17:4c:65:f3:02:d6:f5:1b:c9:bd:36:ca:e0: 26:3a:30:8a:3b:c3:ed:d9:c8:1c:b0:ad:c0:ee:16: ea:e6:c6:4e:a1:b1:1d:1a:29:f4:5f:76:a5:97:51: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:C4:28:CA:7C:5D:5D:27:46:CA:74:ED:C7:F8:CB:B2:34:E2:AA X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/R6vEKMp8XV0nRsp07cf4y7I04qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3fc2:ab74::/48 Signature Algorithm: sha256WithRSAEncryption 5e:f1:d3:9e:78:ac:a5:52:ea:a3:5f:63:f1:74:99:ae:3a:99: d4:53:11:9f:7e:ca:d1:c3:ff:28:37:d2:c9:02:4b:64:18:f2: a0:37:37:a6:9e:c7:12:f9:91:80:5d:9f:00:f9:94:78:43:74: 09:ef:23:3e:2b:fd:f7:0a:6a:4a:74:79:34:85:dd:b4:42:79: ca:2e:46:36:16:58:25:e4:93:76:4e:1f:18:75:f9:7f:c7:97: fe:2b:90:92:b7:22:ea:1e:2a:fd:18:fd:ad:75:32:ce:5a:78: 97:74:67:87:87:e5:ad:36:1d:cc:96:f7:d8:a7:76:7e:42:ee: 95:b6:79:10:35:81:75:de:dc:48:43:45:d3:c2:cb:53:83:ad: 06:43:79:fe:64:cf:87:a5:39:9e:98:97:d9:13:38:e7:e0:50: 36:56:e7:9f:38:6d:b3:aa:04:fd:a0:fe:90:2e:39:f1:9b:0d: 65:14:af:3b:25:6b:73:11:f8:63:ba:d3:3d:7b:b3:de:4a:54: 7c:bd:92:b5:8e:3f:45:cf:30:0d:ed:f9:5b:f6:d1:86:4e:9f: 44:3e:c4:27:4e:8e:df:33:aa:c0:5f:e2:56:99:d0:ea:60:11: c7:17:19:cf:42:2e:c3:9f:b4:19:cc:42:c6:4d:0f:76:27:69: 1c:d5:23:3f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pGT00WOA0gMDgFqd2NkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTAxMjIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2FiYzQyOGNhN2M1ZDVkMjc0NmNhNzRlZGM3ZjhjYmIyMzRlMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/eo9QjsXEoRFEBz3vy/G4zdY1HZ YHFFT/mUGYJyh2G3tNke9D29FT0jy9Yt7F+2kKYXbsnjFhQ5tLNbu4pBxz1INDgC YCK1gvG9+oMY7+8VI4sQZr2M52Sj45vvKAtY709pEK1Itnd3W8zRYmbOksR5xepG sJWY8hFGRXejzEX4x7MRwO3GODdmqTkEAK9c8GD61dNqzNb8w5X1Y4SJJdZYeLA3 7PTjfBWHotBvazkAfKCPIegfiLt2ZiomfTj4fSsiqbIpFcCLKjqiCMPtjZ+sxhdM ZfMC1vUbyb02yuAmOjCKO8Pt2cgcsK3A7hbq5sZOobEdGin0X3all1EaeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEerxCjKfF1dJ0bKdO3H+MuyNOKqMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvUjZ2RUtNcDhYVjBuUnNwMDdjZjR5N0kwNHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhI/wqt0 MA0GCSqGSIb3DQEBCwUAA4IBAQBe8dOeeKylUuqjX2PxdJmuOpnUUxGffsrRw/8o N9LJAktkGPKgNzemnscS+ZGAXZ8A+ZR4Q3QJ7yM+K/33CmpKdHk0hd20QnnKLkY2 Flgl5JN2Th8Ydfl/x5f+K5CStyLqHir9GP2tdTLOWniXdGeHh+WtNh3MlvfYp3Z+ Qu6VtnkQNYF13txIQ0XTwstTg60GQ3n+ZM+HpTmemJfZEzjn4FA2VuefOG2zqgT9 oP6QLjnxmw1lFK87JWtzEfhjutM9e7PeSlR8vZK1jj9FzzAN7flb9tGGTp9EPsQn To7fM6rAX+JWmdDqYBHHFxnPQi7Dn7QZzELGTQ92J2kc1SM/ -----END CERTIFICATE-----Generated at Wed Jan 21 21:09:08 2026 by rpki-client