This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa File: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (raw, json) Hash identifier: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU= Subject key identifier: 87:A4:10:E7:6F:19:EE:CE:EC:D4:64:89:D6:A8:6B:15:BF:58:83:5F Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0647BD2C6C515BE870D7A93C915B Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 2a05:9080:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:06:47:bd:2c:6c:51:5b:e8:70:d7:a9:3c:91:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87a410e76f19eeceecd46489d6a86b15bf58835f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:d6:c3:ab:c6:09:bc:69:b2:34:48:18:9d: 24:70:44:f4:86:82:18:48:0a:cf:6e:db:35:8d:07: 51:ee:cb:b3:d7:c9:98:a2:15:48:e5:1e:c7:8d:35: e3:d3:a1:c3:dd:cf:73:5e:9a:24:bc:95:7a:a6:58: 6e:08:27:08:c4:f6:1d:f7:d6:5a:bf:37:f9:77:62: fd:d2:25:48:68:82:36:42:b1:5e:3b:11:06:6f:a8: 31:d2:dd:99:fa:61:10:df:e3:89:99:02:a5:0c:41: ed:00:34:3a:69:70:84:84:7f:81:e3:39:70:87:01: c8:80:de:49:28:3e:55:b2:12:25:12:36:0c:3f:c1: e3:9a:ae:66:ad:5a:be:74:5a:25:c9:11:30:36:fd: f4:b8:6e:7f:3a:52:e1:5e:90:a7:25:4c:51:e3:2c: 0c:59:3c:3f:07:20:d9:2a:cc:9b:7b:13:14:a1:31: 47:4e:d9:d8:b6:0f:1a:a6:52:76:f9:b3:c3:70:87: f9:bf:31:4c:3f:d1:01:8f:61:e6:66:33:dc:5a:1d: 22:0c:0a:7d:28:fc:10:af:30:d6:a9:6b:64:87:99: 75:d4:83:cc:a2:06:81:e0:ce:f9:77:bf:bc:12:2b: 1f:6a:a7:ee:d9:56:01:59:89:31:12:57:59:ab:f7: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A4:10:E7:6F:19:EE:CE:EC:D4:64:89:D6:A8:6B:15:BF:58:83:5F X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9080:13::/48 Signature Algorithm: sha256WithRSAEncryption 3f:fa:3f:28:d9:42:ae:63:07:08:3a:6c:89:df:38:2d:97:ee: 77:4b:42:52:9f:10:77:08:d4:9b:3f:5f:13:09:76:a2:a3:ad: b0:21:76:e1:b6:22:b3:7d:d4:1d:64:7a:70:5d:56:82:a8:31: aa:94:9f:0a:a4:76:d0:ea:9b:35:5e:d4:25:e4:59:33:15:20: 36:ed:f0:2d:69:62:f5:9b:43:b9:0e:69:14:78:93:f6:8e:89: d1:9d:bb:57:fb:52:c8:11:08:2a:a5:1e:bf:56:d8:de:1d:e0: a4:e9:39:5f:a3:ec:27:b3:33:4f:4e:94:c0:5c:8f:c4:1e:94: d0:9c:84:b7:da:88:c8:13:0f:b1:ef:a7:bd:f4:e4:79:b3:38: 96:2b:8e:6a:d5:58:8b:0f:25:01:0e:0e:33:d8:9a:30:ad:05: 54:78:7d:50:05:cd:56:2f:a3:2f:b3:26:82:c6:78:e0:c8:e5: 99:c9:a7:d2:85:8e:83:ad:8e:65:b9:61:49:b5:79:12:04:88: d5:0a:2c:b4:3b:f6:28:08:5c:06:7a:fb:5a:cc:7e:e4:d1:eb: 01:d3:54:68:3d:1a:b2:6d:80:38:8d:1a:b4:85:ec:e9:bb:10: ab:74:7f:f7:c5:bc:83:a1:b3:a4:78:c9:a9:f6:4c:e4:44:c4: 0c:36:c7:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WwZHvSxsUVvocNepPJFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2E0MTBlNzZmMTllZWNlZWNkNDY0ODlkNmE4NmIxNWJmNTg4MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KPWw6vGCbxpsjRIGJ0kcET0hoIY SArPbts1jQdR7suz18mYohVI5R7HjTXj06HD3c9zXpokvJV6plhuCCcIxPYd99Za vzf5d2L90iVIaII2QrFeOxEGb6gx0t2Z+mEQ3+OJmQKlDEHtADQ6aXCEhH+B4zlw hwHIgN5JKD5VshIlEjYMP8Hjmq5mrVq+dFolyREwNv30uG5/OlLhXpCnJUxR4ywM WTw/ByDZKsybexMUoTFHTtnYtg8aplJ2+bPDcIf5vzFMP9EBj2HmZjPcWh0iDAp9 KPwQrzDWqWtkh5l11IPMogaB4M75d7+8Eisfaqfu2VYBWYkxEldZq/erSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIekEOdvGe7O7NRkidaoaxW/WINfMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvaDZRUTUyOFo3czdzMUdTSjFxaHJGYjlZZzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWQgAAT MA0GCSqGSIb3DQEBCwUAA4IBAQA/+j8o2UKuYwcIOmyJ3zgtl+53S0JSnxB3CNSb P18TCXaio62wIXbhtiKzfdQdZHpwXVaCqDGqlJ8KpHbQ6ps1XtQl5FkzFSA27fAt aWL1m0O5DmkUeJP2jonRnbtX+1LIEQgqpR6/VtjeHeCk6Tlfo+wnszNPTpTAXI/E HpTQnIS32ojIEw+x76e99OR5sziWK45q1ViLDyUBDg4z2JowrQVUeH1QBc1WL6Mv syaCxnjgyOWZyafShY6DrY5luWFJtXkSBIjVCiy0O/YoCFwGevtazH7k0esB01Ro PRqybYA4jRq0hezpuxCrdH/3xbyDobOkeMmp9kzkRMQMNser -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:15 2026 by rpki-client