This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Vx6pnsO2lcOefNH8zmvKQNScCn8.roa File: Vx6pnsO2lcOefNH8zmvKQNScCn8.roa (raw, json) Hash identifier: sdDr/xQ96SJt22jvuG7iFPgpXCE0EE2x/RWdF8rKMwg= Subject key identifier: 57:1E:A9:9E:C3:B6:95:C3:9E:7C:D1:FC:CE:6B:CA:40:D4:9C:0A:7F Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DE8EB3C26956CDACCF59B3675FC7 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Vx6pnsO2lcOefNH8zmvKQNScCn8.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51087 IP address blocks: 2a0f:5707:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:8e:b3:c2:69:56:cd:ac:cf:59:b3:67:5f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571ea99ec3b695c39e7cd1fcce6bca40d49c0a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:08:7d:ff:a3:11:c9:b1:3e:70:69:a8:d0: 0f:fe:50:0f:44:c0:5c:09:68:c4:6b:15:07:17:7c: f1:d9:bc:16:35:93:bc:6f:df:a8:45:7c:04:d2:e2: ed:eb:1b:2b:25:f3:32:0a:cb:e2:bf:a9:fb:90:2f: ef:60:25:d4:55:05:1f:7d:07:73:1a:0d:4e:30:19: cd:b1:92:46:e7:3b:15:cf:8a:5f:d4:89:5b:83:5d: 03:42:6d:b5:81:3e:c5:47:55:79:9d:08:9e:c4:b8: e3:4a:7d:fb:3b:68:dd:48:a6:34:ce:1b:d3:2b:94: ad:33:85:a6:57:7f:f5:b0:f1:02:42:e5:4b:f6:3e: 99:c6:e0:c9:ec:5b:1d:6f:85:81:c4:3c:a2:19:99: c6:37:c1:1f:d2:52:8a:93:40:e7:4b:01:4e:86:13: 71:c8:e8:88:64:86:76:3c:b7:1c:25:09:0a:6e:c7: 4f:1c:3d:ea:b9:e2:8f:a6:9f:1f:7e:0b:87:d9:49: ad:b3:b3:bc:a5:c9:aa:e0:2d:a8:e7:1a:4d:59:60: 88:a7:20:07:aa:82:9e:e7:6b:32:63:46:75:09:71: 45:c1:1a:b7:ad:46:85:b1:f8:f3:b3:fb:ac:0f:55: 2e:6c:be:0a:72:4e:3e:4a:f4:bd:ca:f8:c5:7d:f5: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1E:A9:9E:C3:B6:95:C3:9E:7C:D1:FC:CE:6B:CA:40:D4:9C:0A:7F X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Vx6pnsO2lcOefNH8zmvKQNScCn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 83:a1:4e:fb:60:38:f2:17:e5:e5:31:e7:77:2b:a1:04:c6:fb: 42:72:d2:9d:93:a3:c2:32:d9:00:77:9d:ac:b6:17:66:f3:4a: af:0e:a6:99:b0:25:7b:01:da:e4:c0:d5:d8:61:c3:c8:79:2d: 73:47:42:5c:57:22:39:28:4f:87:5a:1e:63:8e:28:ff:ae:e4: ad:ae:48:2e:bd:6d:74:42:33:77:83:80:af:b2:32:fb:cf:0c: 26:79:27:fb:1a:21:2d:db:ee:12:bd:ae:9a:33:56:0f:8b:c9: 49:23:25:55:c8:b2:05:2d:4a:da:6d:fd:76:a5:56:ba:ee:49: d3:be:ae:ae:52:be:e9:0d:1b:3c:12:a8:5f:74:6c:13:7d:61: 09:22:59:25:fe:6c:ad:b5:36:e5:1f:55:ce:1f:74:ca:87:0c: 92:98:9b:9d:74:f9:84:e0:e3:91:46:ca:df:f0:47:49:2c:f0: 1e:0f:67:97:96:a4:93:cb:0d:10:2d:88:0c:02:3e:a9:b4:6a: f0:5a:4e:4b:cd:84:71:5a:e0:7d:0f:67:1b:80:38:59:31:ec: 0d:04:3b:be:0d:28:c2:d8:d4:66:86:15:b1:bc:8e:32:a2:f5: 24:11:cc:37:43:44:7e:90:36:12:53:f6:50:f9:05:79:31:94: 6e:e1:e9:07 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WN6Os8JpVs2sz1mzZ1/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFlYTk5ZWMzYjY5NWMzOWU3Y2QxZmNjZTZiY2E0MGQ0OWMwYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyAIff+jEcmxPnBpqNAP/lAPRMBc CWjEaxUHF3zx2bwWNZO8b9+oRXwE0uLt6xsrJfMyCsviv6n7kC/vYCXUVQUffQdz Gg1OMBnNsZJG5zsVz4pf1Ilbg10DQm21gT7FR1V5nQiexLjjSn37O2jdSKY0zhvT K5StM4WmV3/1sPECQuVL9j6ZxuDJ7Fsdb4WBxDyiGZnGN8Ef0lKKk0DnSwFOhhNx yOiIZIZ2PLccJQkKbsdPHD3queKPpp8ffguH2Umts7O8pcmq4C2o5xpNWWCIpyAH qoKe52syY0Z1CXFFwRq3rUaFsfjzs/usD1UubL4Kck4+SvS9yvjFffVXnwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFceqZ7DtpXDnnzR/M5rykDUnAp/MB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvVng2cG5zTzJsY09lZk5IOHptdktRTlNjQ244LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg9XB/ow DQYJKoZIhvcNAQELBQADggEBAIOhTvtgOPIX5eUx53croQTG+0Jy0p2To8Iy2QB3 nay2F2bzSq8OppmwJXsB2uTA1dhhw8h5LXNHQlxXIjkoT4daHmOOKP+u5K2uSC69 bXRCM3eDgK+yMvvPDCZ5J/saIS3b7hK9rpozVg+LyUkjJVXIsgUtStpt/XalVrru SdO+rq5SvukNGzwSqF90bBN9YQkiWSX+bK21NuUfVc4fdMqHDJKYm510+YTg45FG yt/wR0ks8B4PZ5eWpJPLDRAtiAwCPqm0avBaTkvNhHFa4H0PZxuAOFkx7A0EO74N KMLY1GaGFbG8jjKi9SQRzDdDRH6QNhJT9lD5BXkxlG7h6Qc= -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:12 2026 by rpki-client