This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/cQwjsCo9gkIA6iPJNtB7F11xkU0.roa File: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (raw, json) Hash identifier: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo= Subject key identifier: 71:0C:23:B0:2A:3D:82:42:00:EA:23:C9:36:D0:7B:17:5D:71:91:4D Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f Certificate serial: 019C32A188A0F5C0F44481274C0443513CE7 Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/cQwjsCo9gkIA6iPJNtB7F11xkU0.roa Signing time: Fri 06 Feb 2026 11:06:12 +0000 ROA not before: Fri 06 Feb 2026 11:06:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48266 IP address blocks: 2a09:5f40::/29 maxlen: 29 2a09:5f40::/32 maxlen: 32 2a09:5f41::/32 maxlen: 32 2a09:5f42::/32 maxlen: 32 2a09:5f43::/32 maxlen: 32 2a09:5f44::/32 maxlen: 32 2a09:5f45::/32 maxlen: 32 2a09:5f46::/32 maxlen: 32 2a09:5f47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:a1:88:a0:f5:c0:f4:44:81:27:4c:04:43:51:3c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f Validity Not Before: Feb 6 11:06:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=710c23b02a3d824200ea23c936d07b175d71914d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:f4:39:53:e7:ae:ec:46:b3:fa:a6:57:b4: 1f:77:2b:fb:e0:aa:8a:5e:e8:9f:87:b7:f5:71:d9: 35:d0:56:d0:c8:63:4c:8b:64:5c:62:40:ff:e0:a3: 1f:d5:4f:ec:59:05:c1:8d:43:96:be:84:59:c6:30: 7e:60:07:50:3a:37:e6:e3:ad:5b:e6:86:52:2d:af: 26:09:fe:c3:eb:31:42:bb:b9:c1:0a:67:dd:26:0c: 7f:55:98:17:a5:94:05:b7:de:94:de:d8:b3:98:ac: 03:24:db:f7:6e:ed:59:87:3c:fd:49:db:c8:41:d8: 76:dc:ae:32:ce:63:b2:7e:ab:fc:7c:e2:53:cb:c7: 65:85:65:7a:58:df:b6:6d:16:f7:23:8d:ac:01:37: 6c:8f:f8:98:31:12:db:22:4c:9f:91:d0:89:d8:36: 36:b9:3e:a5:48:c6:eb:34:58:5c:19:50:83:f4:12: 49:3f:00:e4:fb:33:3d:7d:a6:0f:9f:35:43:3f:46: 4f:b7:4f:2b:3b:55:4e:c8:e1:b4:06:e4:fd:4b:84: ae:33:20:dd:66:20:6c:c6:da:3a:fa:ff:4b:93:f7: de:84:7a:d6:6f:9c:ac:88:a1:f0:de:a3:8e:bb:20: 1f:10:8e:9c:66:7f:d2:64:da:16:62:48:6c:5d:80: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0C:23:B0:2A:3D:82:42:00:EA:23:C9:36:D0:7B:17:5D:71:91:4D X509v3 Authority Key Identifier: keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/cQwjsCo9gkIA6iPJNtB7F11xkU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:5f40::/29 Signature Algorithm: sha256WithRSAEncryption 50:ee:dc:4b:f7:c9:b1:b4:63:4b:23:f1:c3:5a:c1:b0:67:1b: 93:75:72:b9:fc:2c:5f:9c:01:10:53:4b:f4:b3:c0:17:ab:f4: 6d:76:7d:5c:fd:52:02:95:1f:02:fb:bf:bd:d6:42:7e:e6:a6: 09:ac:1f:49:3a:6b:d7:73:06:d1:2c:b6:42:80:69:5f:68:19: 01:02:da:24:3f:bf:78:6f:9c:da:8a:65:4e:21:81:41:a6:9f: ed:82:5b:60:14:5a:0e:7c:d2:8e:5f:fc:18:bf:a2:10:83:60: 84:c8:38:9a:04:f1:4d:b5:24:17:9f:dc:ad:02:1b:a7:a5:bf: 3f:7c:0d:b3:40:e1:89:62:02:f5:39:53:d6:5e:8a:50:d1:6e: da:d7:86:f2:06:49:9f:c9:91:7f:c1:1e:1e:d4:97:ab:89:ce: b1:da:76:ba:cf:ed:d6:1c:6a:cd:2d:72:69:a1:4d:3e:2e:33: bb:ff:6e:b7:77:8c:ba:eb:88:d3:18:12:ea:fa:03:5f:aa:fa: dd:09:9e:1e:e3:b8:41:c9:7e:df:53:a7:0b:4d:f6:17:a1:be: 67:1e:12:19:68:4e:94:ad:ad:12:5f:42:d6:a9:c9:d6:6b:c6: b1:2a:92:4a:38:4c:fe:69:77:d0:74:13:f7:18:e2:0b:75:37: ac:2e:f3:20 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZwyoYig9cD0RIEnTARDUTznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmZjYjg3YzIyNDZmYTM4OWM0MjhlMGYxNTNlZGYyNTll NTQ1MGYwHhcNMjYwMjA2MTEwNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTBjMjNiMDJhM2Q4MjQyMDBlYTIzYzkzNmQwN2IxNzVkNzE5MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3T0OVPnruxGs/qmV7Qfdyv74KqK Xuifh7f1cdk10FbQyGNMi2RcYkD/4KMf1U/sWQXBjUOWvoRZxjB+YAdQOjfm461b 5oZSLa8mCf7D6zFCu7nBCmfdJgx/VZgXpZQFt96U3tizmKwDJNv3bu1Zhzz9SdvI Qdh23K4yzmOyfqv8fOJTy8dlhWV6WN+2bRb3I42sATdsj/iYMRLbIkyfkdCJ2DY2 uT6lSMbrNFhcGVCD9BJJPwDk+zM9faYPnzVDP0ZPt08rO1VOyOG0BuT9S4SuMyDd ZiBsxto6+v9Lk/fehHrWb5ysiKHw3qOOuyAfEI6cZn/SZNoWYkhsXYDpmQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHEMI7AqPYJCAOojyTbQexddcZFNMB8GA1UdIwQY MBaAFG3/y4fCJG+jicQo4PFT7fJZ5UUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNjMzYTYtMjdiMi00MTc0LWE3YjAt NmFlZGYxMDQzYzczLzEvY1F3anNDbzlna0lBNmlQSk50QjdGMTF4a1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNjMzYTYtMjdiMi00MTc0LWE3YjAtNmFlZGYxMDQzYzcz LzEvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKglfQDAN BgkqhkiG9w0BAQsFAAOCAQEAUO7cS/fJsbRjSyPxw1rBsGcbk3VyufwsX5wBEFNL 9LPAF6v0bXZ9XP1SApUfAvu/vdZCfuamCawfSTpr13MG0Sy2QoBpX2gZAQLaJD+/ eG+c2oplTiGBQaaf7YJbYBRaDnzSjl/8GL+iEINghMg4mgTxTbUkF5/crQIbp6W/ P3wNs0DhiWIC9TlT1l6KUNFu2teG8gZJn8mRf8EeHtSXq4nOsdp2us/t1hxqzS1y aaFNPi4zu/9ut3eMuuuI0xgS6voDX6r63QmeHuO4Qcl+31OnC032F6G+Zx4SGWhO lK2tEl9C1qnJ1mvGsSqSSjhM/ml30HQT9xjiC3U3rC7zIA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:41 2026 by rpki-client