This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/r6WgsUq6jiFumRINyEG5GV6II-U.roa File: r6WgsUq6jiFumRINyEG5GV6II-U.roa (raw, json) Hash identifier: NWG/33AP1v+nUP2w6gJBO4n+5g2mG5UrFdSFRba11Mo= Subject key identifier: AF:A5:A0:B1:4A:BA:8E:21:6E:99:12:0D:C8:41:B9:19:5E:88:23:E5 Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019B7C121C7FF049526D716B3C5583671B8B Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/r6WgsUq6jiFumRINyEG5GV6II-U.roa Signing time: Fri 02 Jan 2026 00:18:40 +0000 ROA not before: Fri 02 Jan 2026 00:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 2a01:e5c0::/36 maxlen: 36 2a01:e5c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1c:7f:f0:49:52:6d:71:6b:3c:55:83:67:1b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Jan 2 00:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afa5a0b14aba8e216e99120dc841b9195e8823e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:62:46:ce:f6:6e:70:ec:9b:7b:fc:94:28: 71:99:1e:54:4a:cb:6d:fc:15:f4:a1:ff:24:1f:f8: 71:e3:f0:94:f1:61:4c:9c:68:c2:8a:6f:51:d2:16: 15:d1:a6:a9:1f:aa:4c:c0:6f:e5:92:01:2c:cd:93: d9:29:d4:f5:2c:83:7d:c5:55:28:65:b6:cc:43:c1: 20:37:2b:4f:b8:bc:fe:23:78:24:96:26:af:33:e0: 35:38:5a:68:f1:f2:af:de:9f:f7:41:09:ca:e1:46: 98:07:78:64:b7:88:70:16:c6:44:ac:9d:39:13:70: 2c:38:e8:0e:21:9f:b7:de:f8:e5:4c:ec:1b:d8:54: 99:c0:80:9a:e3:c5:5b:ca:b8:4d:1b:dc:10:0d:1c: ef:e2:b2:94:c4:06:60:46:6b:f6:26:7c:86:8d:d3: 1a:3b:ca:60:70:6f:0b:08:eb:98:46:ea:cb:78:06: f2:95:f2:fa:ee:e3:ea:43:c8:3e:38:ab:1a:af:b5: 91:4f:68:8e:9d:5f:c5:07:1b:4f:a3:35:c4:a3:e3: 29:65:4e:d4:36:5c:1b:c7:15:a3:70:5c:d3:54:c5: 1b:71:e3:98:d3:b3:39:58:be:06:b7:40:ec:49:d1: a4:ee:66:f3:43:10:f3:13:81:e9:ef:4a:31:1e:5f: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:A0:B1:4A:BA:8E:21:6E:99:12:0D:C8:41:B9:19:5E:88:23:E5 X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/r6WgsUq6jiFumRINyEG5GV6II-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e5c0::/35 Signature Algorithm: sha256WithRSAEncryption 92:6c:2a:3d:23:0a:bf:45:8d:36:09:45:a3:df:18:c9:49:e3: 03:76:4f:b4:59:ee:56:9e:95:dc:dc:5e:89:ef:96:54:1b:7e: 67:40:bd:ac:a6:4c:1a:4b:4c:b9:12:40:bb:ae:8b:3a:c1:7d: 0e:ff:f8:63:e2:85:b4:68:7e:2e:19:58:a1:97:42:5d:6b:05: c6:93:5d:bd:32:41:8e:50:3e:ad:60:f3:65:73:4f:4a:af:02: 1e:3c:9d:ec:38:c3:dc:31:fd:36:01:0f:f8:45:1b:e7:96:50: 77:a7:89:f1:56:72:5c:2b:b9:75:18:3c:fd:3c:28:ff:1f:56: 33:d9:0c:a8:b4:5a:f6:e2:26:ee:44:9f:e8:12:7a:19:26:31: a3:77:33:93:40:15:9d:c9:d2:49:c0:f9:10:a9:31:3e:a8:5b: c0:99:22:7f:d7:d6:50:d0:ff:4c:42:42:f2:59:d2:26:ae:26: 6f:d8:ca:9e:bd:dd:77:fe:6b:c6:9f:d2:59:f1:35:67:09:28: e8:f2:ee:5c:20:22:e7:4c:7b:7e:09:95:7c:90:b5:70:58:ab: 88:43:d9:19:52:af:fc:88:27:ab:db:db:17:cd:4c:ae:f2:19: 1f:17:e8:79:65:85:66:1f:58:25:cb:af:59:e3:5c:1f:0c:db: f1:77:1e:1a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8Ehx/8ElSbXFrPFWDZxuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjYwMTAyMDAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmE1YTBiMTRhYmE4ZTIxNmU5OTEyMGRjODQxYjkxOTVlODgyM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm5iRs72bnDsm3v8lChxmR5USstt /BX0of8kH/hx4/CU8WFMnGjCim9R0hYV0aapH6pMwG/lkgEszZPZKdT1LIN9xVUo ZbbMQ8EgNytPuLz+I3gkliavM+A1OFpo8fKv3p/3QQnK4UaYB3hkt4hwFsZErJ05 E3AsOOgOIZ+33vjlTOwb2FSZwICa48VbyrhNG9wQDRzv4rKUxAZgRmv2JnyGjdMa O8pgcG8LCOuYRurLeAbylfL67uPqQ8g+OKsar7WRT2iOnV/FBxtPozXEo+MpZU7U NlwbxxWjcFzTVMUbceOY07M5WL4Gt0DsSdGk7mbzQxDzE4Hp70oxHl9wIwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFK+loLFKuo4hbpkSDchBuRleiCPlMB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvcjZXZ3NVcTZqaUZ1bVJJTnlFRzVHVjZJSS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKgHlwAAw DQYJKoZIhvcNAQELBQADggEBAJJsKj0jCr9FjTYJRaPfGMlJ4wN2T7RZ7laeldzc XonvllQbfmdAvaymTBpLTLkSQLuuizrBfQ7/+GPihbRofi4ZWKGXQl1rBcaTXb0y QY5QPq1g82VzT0qvAh48new4w9wx/TYBD/hFG+eWUHenifFWclwruXUYPP08KP8f VjPZDKi0WvbiJu5En+gSehkmMaN3M5NAFZ3J0knA+RCpMT6oW8CZIn/X1lDQ/0xC QvJZ0iauJm/Yyp693Xf+a8af0lnxNWcJKOjy7lwgIudMe34JlXyQtXBYq4hD2RlS r/yIJ6vb2xfNTK7yGR8X6HllhWYfWCXLr1njXB8M2/F3Hho= -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:18 2026 by rpki-client