This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/v6oU70HSaZm7ChbHXC90OpUzQj0.roa File: v6oU70HSaZm7ChbHXC90OpUzQj0.roa (raw, json) Hash identifier: HL9qGgjJL2Z4Y+PfPmBcCOMraQco69+rsL+jpgTAVns= Subject key identifier: BF:AA:14:EF:41:D2:69:99:BB:0A:16:C7:5C:2F:74:3A:95:33:42:3D Certificate issuer: /CN=699a760792851e1e77e5887c6d03e7c011a0e142 Certificate serial: 019B9E9B4C825EDB8E2BD4B1B4469EDF2AF7 Authority key identifier: 69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/v6oU70HSaZm7ChbHXC90OpUzQj0.roa Signing time: Thu 08 Jan 2026 17:15:36 +0000 ROA not before: Thu 08 Jan 2026 17:15:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203374 IP address blocks: 2001:67c:2e4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:9b:4c:82:5e:db:8e:2b:d4:b1:b4:46:9e:df:2a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699a760792851e1e77e5887c6d03e7c011a0e142 Validity Not Before: Jan 8 17:15:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfaa14ef41d26999bb0a16c75c2f743a9533423d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:b1:16:74:2d:da:e7:60:c6:0a:2d:72:cb: 40:af:49:b5:1c:a8:69:24:2b:d9:87:a0:a9:da:e8: 88:ba:ad:72:df:16:12:71:24:d8:60:ec:1b:33:78: 0a:f3:0a:ab:8b:f4:8b:67:d0:66:0f:f0:ce:e1:50: 95:e7:79:36:07:27:94:d3:18:69:b9:e9:5f:e7:9a: 96:e7:0d:0c:9b:51:45:ec:9e:54:7d:a7:84:04:79: 55:d5:88:5f:c1:9f:79:6d:15:72:0a:a0:f1:c7:f7: fc:d2:08:dd:38:be:7c:96:59:ac:10:a2:be:29:b4: 32:84:95:dd:85:7f:b5:10:4b:b8:14:c5:0d:7c:84: 0b:87:a9:05:a0:51:ab:d1:34:4d:8c:c6:fa:bc:db: 5b:91:14:83:98:26:98:b5:cb:dc:e1:95:61:6c:08: da:31:72:27:2d:44:3d:4c:1f:be:97:02:98:68:73: 7b:2b:d2:56:20:68:ec:2c:72:74:49:28:1c:c4:ea: 8b:49:97:b4:e8:55:6d:b9:50:9c:dd:79:5b:35:07: 08:99:41:7e:55:ec:2e:6a:56:2f:eb:fe:ca:04:e6: 0d:34:c1:e7:b4:c7:65:ca:ff:da:d0:21:44:ae:12: 09:c0:81:d8:eb:aa:ed:2e:b9:dc:44:3b:be:01:29: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:14:EF:41:D2:69:99:BB:0A:16:C7:5C:2F:74:3A:95:33:42:3D X509v3 Authority Key Identifier: keyid:69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/v6oU70HSaZm7ChbHXC90OpUzQj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2e4c::/48 Signature Algorithm: sha256WithRSAEncryption 18:4d:7e:70:cc:a1:db:1c:84:4f:2b:f0:d7:55:ab:ee:5a:b5: c8:de:70:ea:27:86:b1:d2:cc:47:9b:fd:d7:e8:c4:e5:1d:93: 0c:71:19:f3:7e:f0:62:12:8a:0e:21:22:29:54:95:8c:aa:82: 7a:30:87:f8:a0:73:cd:e6:a5:75:37:68:16:79:5d:62:17:e8: 13:7f:eb:4d:7e:08:92:f1:75:db:3a:01:aa:58:d0:30:0d:38: 9c:65:c0:9d:8f:0f:0b:14:16:a3:ae:87:b7:25:ea:ae:d0:44: b7:25:7d:be:3f:95:7d:87:fb:ee:aa:fc:d6:72:1d:c4:24:ea: 0d:b4:84:b3:86:aa:ae:6c:58:83:a9:c4:58:1f:81:9a:88:08: 49:29:85:c6:c5:28:c3:03:46:13:c8:4d:32:34:db:35:7f:bb: 3f:1f:f5:30:48:7a:f7:d3:be:dd:48:34:c6:99:19:e5:66:67: 89:2e:83:77:63:02:4a:1d:e0:55:62:70:34:fe:2c:d9:0c:af: 7c:47:43:78:b0:28:e7:9d:d4:d0:c0:2a:5b:3d:59:7b:95:7f: 0d:33:a0:5e:3a:a8:03:ad:5d:c6:5d:05:18:ce:05:78:1d:fa: c5:cc:1c:e2:4e:06:1e:a3:73:de:e5:08:c5:f0:7e:01:f4:a6: 20:e5:9e:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuem0yCXtuOK9SxtEae3yr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWE3NjA3OTI4NTFlMWU3N2U1ODg3YzZkMDNlN2MwMTFh MGUxNDIwHhcNMjYwMTA4MTcxNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmFhMTRlZjQxZDI2OTk5YmIwYTE2Yzc1YzJmNzQzYTk1MzM0MjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe2xFnQt2udgxgotcstAr0m1HKhp JCvZh6Cp2uiIuq1y3xYScSTYYOwbM3gK8wqri/SLZ9BmD/DO4VCV53k2ByeU0xhp uelf55qW5w0Mm1FF7J5UfaeEBHlV1YhfwZ95bRVyCqDxx/f80gjdOL58llmsEKK+ KbQyhJXdhX+1EEu4FMUNfIQLh6kFoFGr0TRNjMb6vNtbkRSDmCaYtcvc4ZVhbAja MXInLUQ9TB++lwKYaHN7K9JWIGjsLHJ0SSgcxOqLSZe06FVtuVCc3XlbNQcImUF+ VewualYv6/7KBOYNNMHntMdlyv/a0CFErhIJwIHY66rtLrncRDu+ASk2tQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL+qFO9B0mmZuwoWx1wvdDqVM0I9MB8GA1UdIwQY MBaAFGmadgeShR4ed+WIfG0D58ARoOFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpwMkI1S0ZIaDUzNVloOGJRUG53QkdnNFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iZWQ5OWMtNmMyMi00NDk3LWE0ZDct Y2UwOTYyYjI2YjhhLzEvdjZvVTcwSFNhWm03Q2hiSFhDOTBPcFV6UWowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iZWQ5OWMtNmMyMi00NDk3LWE0ZDctY2UwOTYyYjI2Yjhh LzEvYVpwMkI1S0ZIaDUzNVloOGJRUG53QkdnNFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC5M MA0GCSqGSIb3DQEBCwUAA4IBAQAYTX5wzKHbHIRPK/DXVavuWrXI3nDqJ4ax0sxH m/3X6MTlHZMMcRnzfvBiEooOISIpVJWMqoJ6MIf4oHPN5qV1N2gWeV1iF+gTf+tN fgiS8XXbOgGqWNAwDTicZcCdjw8LFBajroe3Jequ0ES3JX2+P5V9h/vuqvzWch3E JOoNtISzhqqubFiDqcRYH4GaiAhJKYXGxSjDA0YTyE0yNNs1f7s/H/UwSHr3077d SDTGmRnlZmeJLoN3YwJKHeBVYnA0/izZDK98R0N4sCjnndTQwCpbPVl7lX8NM6Be OqgDrV3GXQUYzgV4HfrFzBziTgYeo3Pe5QjF8H4B9KYg5Z6w -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:36 2026 by rpki-client