This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa File: OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa (raw, json) Hash identifier: HQ35g8yBDULlIp8ua3XKzN1vR0rEMHW47KubxInNm2g= Subject key identifier: 3A:23:E9:0A:30:2E:E6:31:E2:FC:62:E4:2E:CD:C2:EC:C9:15:2D:62 Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Certificate serial: 019B797F47A1C230E3C7FFB3455C804FD26C Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 2a06:6540:1000::/36 maxlen: 36 2a06:6540:1001::/48 maxlen: 48 2a06:6540:104b::/48 maxlen: 48 2a06:6540:11c1::/48 maxlen: 48 2a06:6540:1201::/48 maxlen: 48 2a06:6540:1241::/48 maxlen: 48 2a06:6540:1281::/48 maxlen: 48 2a06:6540:12c1::/48 maxlen: 48 2a06:6540:1301::/48 maxlen: 48 2a06:6540:1341::/48 maxlen: 48 2a06:6540:1381::/48 maxlen: 48 2a06:6540:1382::/48 maxlen: 48 2a06:6540:13c1::/48 maxlen: 48 2a06:6540:1440::/48 maxlen: 48 2a06:6540:4101::/48 maxlen: 48 2a06:6540:4181::/48 maxlen: 48 2a06:6541:1000::/36 maxlen: 36 2a06:6541:1001::/48 maxlen: 48 2a06:6541:104b::/48 maxlen: 48 2a06:6541:11c1::/48 maxlen: 48 2a06:6541:1201::/48 maxlen: 48 2a06:6541:1241::/48 maxlen: 48 2a06:6541:1281::/48 maxlen: 48 2a06:6541:12c1::/48 maxlen: 48 2a06:6541:1301::/48 maxlen: 48 2a06:6541:1341::/48 maxlen: 48 2a06:6541:1381::/48 maxlen: 48 2a06:6541:1382::/48 maxlen: 48 2a06:6541:13c1::/48 maxlen: 48 2a06:6541:1440::/48 maxlen: 48 2a06:6541:4101::/48 maxlen: 48 2a06:6541:4181::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:47:a1:c2:30:e3:c7:ff:b3:45:5c:80:4f:d2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a23e90a302ee631e2fc62e42ecdc2ecc9152d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:5a:2d:e1:1d:ef:7a:da:d8:1d:b1:80:b4: b8:7a:5d:d8:df:fb:ef:fe:96:cf:0e:4c:63:b1:46: 7d:9a:59:08:93:f2:08:3d:83:65:55:43:a3:35:28: a8:79:8d:6b:81:02:72:6f:fa:39:c1:7e:da:48:00: b1:43:83:89:75:3d:b0:5a:bf:41:fa:4d:60:ea:5c: e1:f6:ce:6d:43:d4:75:6c:89:13:61:8e:e7:db:3f: 56:75:2e:01:ad:2e:d5:dc:b9:a3:1a:21:cc:33:16: 90:8e:7b:79:c5:cb:d0:aa:ba:53:83:87:a5:d3:3b: 92:2e:30:8e:34:99:ae:ec:7a:c1:9a:fd:c6:14:d9: 5e:b5:70:f7:e4:5b:67:69:e8:d2:b6:45:73:72:98: 6d:82:a1:6c:bd:9a:45:17:97:c2:76:43:b5:f1:ab: a7:87:c5:31:0c:c5:44:1b:25:de:ab:8e:48:d1:75: 86:b3:b4:1d:10:5e:64:2f:32:19:11:74:08:63:09: 07:f5:bf:a3:c3:c8:24:2e:aa:04:46:05:dd:4d:89: a0:58:bd:89:84:ca:64:ad:9a:be:a5:5d:d0:87:f8: 21:15:ab:a3:25:ab:f2:72:3e:d3:d1:ee:79:75:cf: 7b:3e:42:e5:d8:4a:4e:05:64:b7:8f:f1:40:b4:7e: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:E9:0A:30:2E:E6:31:E2:FC:62:E4:2E:CD:C2:EC:C9:15:2D:62 X509v3 Authority Key Identifier: keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:6540:1000::/36 2a06:6540:4101::/48 2a06:6540:4181::/48 2a06:6541:1000::/36 2a06:6541:4101::/48 2a06:6541:4181::/48 Signature Algorithm: sha256WithRSAEncryption 71:c5:31:33:d2:d3:d8:2a:0d:56:ae:2d:2d:d6:0c:f6:35:85: cc:8b:67:b6:00:38:6e:24:3b:99:7e:f7:35:71:c5:22:c5:fc: 4e:1c:27:76:fd:75:d8:63:2b:71:5b:33:9c:47:c4:12:37:c1: f0:38:e3:6b:c7:64:28:2a:e6:b5:3b:e9:bc:a5:37:e9:2b:10: d4:2e:e4:4f:b3:aa:e8:6d:8b:76:5a:3c:b0:50:1e:97:d7:88: d4:99:e1:36:a0:71:f1:11:3c:cd:ee:d3:5c:b3:66:c3:18:1a: 6f:52:1a:07:86:69:f8:91:a2:1a:2e:78:63:32:11:84:00:6e: f2:0c:76:8b:8c:e4:34:3b:6c:68:f3:a6:d9:2f:fb:b9:cc:c0: 9f:64:07:dd:88:6e:d5:42:08:3b:3c:26:24:9a:59:3f:b0:9d: 68:c3:57:df:79:91:f3:e1:d4:39:75:66:96:e7:85:8f:f8:06: 5a:ff:a2:ff:26:e0:b7:61:5d:bd:c5:c4:08:39:08:69:fb:86: 72:9b:ff:40:3b:5f:73:7f:c2:02:86:3c:70:54:35:ce:26:40: 3f:25:de:0a:92:9e:54:65:69:e6:2b:4a:08:21:e5:bb:30:a6: 9f:18:e8:51:be:09:35:e9:da:99:5a:e7:34:2d:2b:fd:ff:44: b8:f2:d4:0d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt5f0ehwjDjx/+zRVyAT9JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi MjI1NDcwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTIzZTkwYTMwMmVlNjMxZTJmYzYyZTQyZWNkYzJlY2M5MTUyZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymtaLeEd73ra2B2xgLS4el3Y3/vv /pbPDkxjsUZ9mlkIk/IIPYNlVUOjNSioeY1rgQJyb/o5wX7aSACxQ4OJdT2wWr9B +k1g6lzh9s5tQ9R1bIkTYY7n2z9WdS4BrS7V3LmjGiHMMxaQjnt5xcvQqrpTg4el 0zuSLjCONJmu7HrBmv3GFNletXD35FtnaejStkVzcphtgqFsvZpFF5fCdkO18aun h8UxDMVEGyXeq45I0XWGs7QdEF5kLzIZEXQIYwkH9b+jw8gkLqoERgXdTYmgWL2J hMpkrZq+pV3Qh/ghFaujJavycj7T0e55dc97PkLl2EpOBWS3j/FAtH7hLwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFDoj6QowLuYx4vxi5C7NwuzJFS1iMB8GA1UdIwQY MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt OWFiZDFhYTY0YmUxLzEvT2lQcENqQXU1akhpX0dMa0xzM0M3TWtWTFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAAjA0AwYEKgZlQBAD BwAqBmVAQQEDBwAqBmVAQYEDBgQqBmVBEAMHACoGZUFBAQMHACoGZUFBgTANBgkq hkiG9w0BAQsFAAOCAQEAccUxM9LT2CoNVq4tLdYM9jWFzItntgA4biQ7mX73NXHF IsX8Thwndv112GMrcVsznEfEEjfB8Djja8dkKCrmtTvpvKU36SsQ1C7kT7Oq6G2L dlo8sFAel9eI1JnhNqBx8RE8ze7TXLNmwxgab1IaB4Zp+JGiGi54YzIRhABu8gx2 i4zkNDtsaPOm2S/7uczAn2QH3Yhu1UIIOzwmJJpZP7CdaMNX33mR8+HUOXVmlueF j/gGWv+i/ybgt2FdvcXECDkIafuGcpv/QDtfc3/CAoY8cFQ1ziZAPyXeCpKeVGVp 5itKCCHluzCmnxjoUb4JNenamVrnNC0r/f9EuPLUDQ== -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:53 2026 by rpki-client