This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa File: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (raw, json) Hash identifier: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o= Subject key identifier: EA:8B:32:04:4C:8F:D0:77:12:33:43:50:C8:11:C8:BD:19:F5:16:19 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B7BA33AB1D47BB821249297DD9AA90FB5 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209557 IP address blocks: 2a09:9340:1807::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:b1:d4:7b:b8:21:24:92:97:dd:9a:a9:0f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea8b32044c8fd07712334350c811c8bd19f51619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:b1:30:27:e2:6e:ab:0f:3a:33:9b:e8:7f: 1c:b8:cc:8b:da:04:88:81:6c:5b:e0:cb:40:60:3c: 50:a3:87:01:9a:be:80:da:2d:c1:82:53:a8:c7:2f: d3:d4:20:54:e9:60:78:78:68:d8:3f:de:d4:e4:2a: ce:80:2e:1d:4a:ba:aa:ff:57:37:e9:41:e5:f7:15: a1:4b:fc:50:a2:9e:73:02:e8:66:e0:a1:7f:f3:80: ff:4c:fe:4a:42:7d:dc:f7:74:6b:42:90:03:82:68: 7f:54:c6:1f:46:24:e1:32:a4:d0:63:d8:8c:f6:65: f0:d3:c0:89:bf:6a:8e:2e:79:0f:c8:50:8d:44:6b: 9b:ee:65:a3:a2:2a:55:64:00:03:51:78:77:5f:92: d8:e4:94:83:4e:98:b4:88:10:a0:d7:8e:77:37:4a: 39:21:d1:2a:3f:0c:25:61:07:ee:b4:ca:ef:99:6b: 77:dd:b0:eb:b4:a1:88:bc:5e:00:9c:e2:61:c7:7c: f0:80:45:0f:e3:b0:8a:c3:d7:2f:03:6d:a9:87:e8: 35:25:e8:43:52:74:39:f5:27:b9:dc:12:04:5c:4c: 52:1a:15:ad:e9:df:28:27:b0:a0:bf:1c:8a:d3:cc: ba:c8:73:bf:a5:ba:2a:ed:23:2d:6b:5e:a2:e8:b1: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8B:32:04:4C:8F:D0:77:12:33:43:50:C8:11:C8:BD:19:F5:16:19 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1807::/48 Signature Algorithm: sha256WithRSAEncryption 0c:6b:72:d1:a3:2d:57:7e:b7:55:a0:ab:b6:48:50:3e:a3:01: b2:13:53:fd:9e:a7:6c:87:00:17:4a:7a:b4:c2:28:73:e1:9e: 82:b8:c7:2c:57:a2:a2:4e:59:fb:ff:43:db:42:f6:0d:b8:fe: fd:29:ce:ad:eb:4b:57:ea:a6:a8:7f:65:eb:85:83:0d:28:a8: a5:03:ed:c2:98:a6:f5:18:b2:11:04:2a:f7:0e:9b:a6:7c:da: 58:3f:84:3a:8b:d0:b4:5b:d7:eb:00:7d:58:e7:a1:f0:8a:be: 40:91:70:38:42:9e:44:fb:37:9b:7d:e7:f8:f0:1a:68:4d:f3: 60:64:4e:26:06:b9:46:ea:75:cb:a9:1b:65:16:10:d5:75:78: f5:1e:db:09:76:4b:ec:4a:5e:8f:bd:23:5c:03:d2:45:64:a4: 59:da:cd:b4:e2:02:38:25:2a:47:75:5d:81:06:cb:c5:9f:88: a3:64:ac:58:09:fd:8d:58:f5:68:41:d1:ea:73:31:f8:c5:77: 83:ad:49:af:c3:fc:46:de:96:c8:08:a9:77:bf:ff:95:70:12: af:d8:93:67:f0:98:9b:87:ba:a9:72:51:5f:4f:34:fb:b6:ea: f2:89:d2:3a:c2:87:9e:53:25:59:f4:20:a5:c3:be:21:95:c5: 20:b2:66:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7ozqx1Hu4ISSSl92aqQ+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYThiMzIwNDRjOGZkMDc3MTIzMzQzNTBjODExYzhiZDE5ZjUxNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9qxMCfibqsPOjOb6H8cuMyL2gSI gWxb4MtAYDxQo4cBmr6A2i3BglOoxy/T1CBU6WB4eGjYP97U5CrOgC4dSrqq/1c3 6UHl9xWhS/xQop5zAuhm4KF/84D/TP5KQn3c93RrQpADgmh/VMYfRiThMqTQY9iM 9mXw08CJv2qOLnkPyFCNRGub7mWjoipVZAADUXh3X5LY5JSDTpi0iBCg1453N0o5 IdEqPwwlYQfutMrvmWt33bDrtKGIvF4AnOJhx3zwgEUP47CKw9cvA22ph+g1JehD UnQ59Se53BIEXExSGhWt6d8oJ7CgvxyK08y6yHO/pboq7SMta16i6LHgkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOqLMgRMj9B3EjNDUMgRyL0Z9RYZMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvNm9zeUJFeVAwSGNTTTBOUXlCSEl2Um4xRmhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgmTQBgH MA0GCSqGSIb3DQEBCwUAA4IBAQAMa3LRoy1XfrdVoKu2SFA+owGyE1P9nqdshwAX Snq0wihz4Z6CuMcsV6KiTln7/0PbQvYNuP79Kc6t60tX6qaof2XrhYMNKKilA+3C mKb1GLIRBCr3DpumfNpYP4Q6i9C0W9frAH1Y56Hwir5AkXA4Qp5E+zebfef48Bpo TfNgZE4mBrlG6nXLqRtlFhDVdXj1HtsJdkvsSl6PvSNcA9JFZKRZ2s204gI4JSpH dV2BBsvFn4ijZKxYCf2NWPVoQdHqczH4xXeDrUmvw/xG3pbICKl3v/+VcBKv2JNn 8Jibh7qpclFfTzT7turyidI6woeeUyVZ9CClw74hlcUgsmbt -----END CERTIFICATE-----Generated at Fri Jan 2 19:42:51 2026 by rpki-client