This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa File: K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa (raw, json) Hash identifier: EVwo0E7SIOBx5iGAFKfj/k4qRw0//D9TaPWIiThqtao= Subject key identifier: 2B:A9:EF:14:3A:91:1A:1F:31:54:CE:C8:AC:5D:11:77:A4:5A:AA:6A Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29 Certificate serial: 019B7F1549E602BF98CDDA5CB6CB94C9DDF4 Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa Signing time: Fri 02 Jan 2026 14:21:00 +0000 ROA not before: Fri 02 Jan 2026 14:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205272 IP address blocks: 2a06:bcc0:6::/48 maxlen: 48 2a06:bcc0:7::/48 maxlen: 48 2a06:bcc0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:49:e6:02:bf:98:cd:da:5c:b6:cb:94:c9:dd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ba9ef143a911a1f3154cec8ac5d1177a45aaa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:3a:a4:8a:dc:a9:09:40:7a:7c:9d:96:ae: 7b:78:64:9c:53:aa:98:2a:ec:c9:de:85:bf:7d:2a: 7e:f3:d8:6d:3e:d2:a9:23:90:bc:29:dc:ef:41:be: 83:da:61:06:50:00:06:b8:4e:66:87:c7:f8:f4:b0: a5:0d:b2:4b:2a:11:88:c9:8b:4c:b7:45:5a:e1:19: d8:9f:a9:e5:e5:25:19:66:18:0f:b6:ba:72:c5:f3: 49:f2:7b:39:04:61:1d:be:6b:70:ba:97:e0:ef:f9: 6d:4d:b9:20:ff:11:c0:95:35:f7:82:0f:11:39:7d: 3b:13:ce:e9:62:7b:5c:4c:ab:f4:2b:75:c6:99:aa: a3:38:94:05:12:3d:85:74:6c:7b:eb:74:f7:49:72: c0:f4:21:f8:3d:e4:5c:64:d3:9c:84:05:14:d6:48: 79:00:6d:85:bf:39:a3:aa:87:fd:0c:34:ac:95:7e: c4:17:c6:fc:28:00:03:71:97:0a:d5:52:48:21:53: ae:a4:87:28:4e:7f:46:a5:4a:ba:fd:e4:68:86:29: 91:9e:88:9d:e5:c6:6d:e9:cf:99:4d:55:93:34:22: 18:35:47:d6:64:e9:d6:8b:4e:bc:8c:8b:4c:f3:79: 14:eb:97:db:37:9d:22:f8:b7:b4:a9:19:10:9a:b9: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A9:EF:14:3A:91:1A:1F:31:54:CE:C8:AC:5D:11:77:A4:5A:AA:6A X509v3 Authority Key Identifier: keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:bcc0:6::-2a06:bcc0:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6a:10:99:d4:73:7d:23:c0:c5:69:e9:40:7a:16:f6:4a:64:7f: f0:cb:c5:e8:3a:3f:1d:ec:3a:d1:65:7b:e6:9b:46:68:94:40: 83:6d:6d:a3:13:ee:62:ab:d2:4a:c9:92:bb:45:e1:23:6d:22: ff:33:8a:8e:53:a9:cb:8e:22:09:ca:96:55:71:af:f8:6c:4e: d1:55:eb:45:f5:71:44:d6:39:57:10:ba:7c:0c:e4:55:74:f1: c9:8a:c7:c8:a5:eb:da:86:7d:ca:ea:e2:10:ee:34:7f:b3:d3: 66:f0:7e:18:f0:ef:76:ac:0c:2a:17:99:e9:81:43:47:6f:d6: 1f:db:2f:00:5b:e2:48:b1:93:ce:96:4c:0a:a2:5c:88:4f:f9: 7f:27:7f:7a:91:b6:a2:3a:47:b8:e5:9b:5a:23:d0:ee:16:8e: 5c:f5:72:65:c0:cc:cd:67:c6:01:a3:26:40:e3:e9:b6:5b:29: 49:f8:ca:e7:2d:34:d4:7f:93:11:c7:b4:2e:46:19:d9:85:ad: 02:f6:95:ee:d6:a7:76:1a:a0:5b:ac:a1:26:04:ba:f5:d3:1e: 4f:ac:33:27:08:fd:cf:1d:f4:6d:84:0f:84:5c:37:47:23:a9: 88:d8:08:bc:37:53:2e:37:98:76:f5:55:13:12:17:62:03:2c: a4:5b:99:b6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/FUnmAr+YzdpctsuUyd30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZmJkNTg3NjYxM2VkYzU2ZTBmNWRlNDY4Y2NlNWViMjg4 NWZmMjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmE5ZWYxNDNhOTExYTFmMzE1NGNlYzhhYzVkMTE3N2E0NWFhYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz86pIrcqQlAenydlq57eGScU6qY KuzJ3oW/fSp+89htPtKpI5C8KdzvQb6D2mEGUAAGuE5mh8f49LClDbJLKhGIyYtM t0Va4RnYn6nl5SUZZhgPtrpyxfNJ8ns5BGEdvmtwupfg7/ltTbkg/xHAlTX3gg8R OX07E87pYntcTKv0K3XGmaqjOJQFEj2FdGx763T3SXLA9CH4PeRcZNOchAUU1kh5 AG2Fvzmjqof9DDSslX7EF8b8KAADcZcK1VJIIVOupIcoTn9GpUq6/eRohimRnoid 5cZt6c+ZTVWTNCIYNUfWZOnWi068jItM83kU65fbN50i+Le0qRkQmrmKsQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCup7xQ6kRofMVTOyKxdEXekWqpqMB8GA1UdIwQY MBaAFMD71YdmE+3Fbg9d5GjM5esohf8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzIt YTNiNmJlNGE5ZTliLzEvSzZudkZEcVJHaDh4Vk03SXJGMFJkNlJhcW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzItYTNiNmJlNGE5ZTli LzEvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEqBrzA AAYDBwAqBrzAAAgwDQYJKoZIhvcNAQELBQADggEBAGoQmdRzfSPAxWnpQHoW9kpk f/DLxeg6Px3sOtFle+abRmiUQINtbaMT7mKr0krJkrtF4SNtIv8zio5TqcuOIgnK llVxr/hsTtFV60X1cUTWOVcQunwM5FV08cmKx8il69qGfcrq4hDuNH+z02bwfhjw 73asDCoXmemBQ0dv1h/bLwBb4kixk86WTAqiXIhP+X8nf3qRtqI6R7jlm1oj0O4W jlz1cmXAzM1nxgGjJkDj6bZbKUn4yuctNNR/kxHHtC5GGdmFrQL2le7Wp3YaoFus oSYEuvXTHk+sMycI/c8d9G2ED4RcN0cjqYjYCLw3Uy43mHb1VRMSF2IDLKRbmbY= -----END CERTIFICATE-----Generated at Sun Jan 11 14:55:19 2026 by rpki-client