This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/6Y5llfgCrcnyXsTbl5CF-ntzRoI.roa File: 6Y5llfgCrcnyXsTbl5CF-ntzRoI.roa (raw, json) Hash identifier: zXiJlKfYT7g01NrM4Ww3cBaxJy+i+t9q/tb7dPqQwGc= Subject key identifier: E9:8E:65:95:F8:02:AD:C9:F2:5E:C4:DB:97:90:85:FA:7B:73:46:82 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802D20E2C239A5143417DDA06EBD37 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/6Y5llfgCrcnyXsTbl5CF-ntzRoI.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214714 IP address blocks: 2a0f:7803:fa50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2d:20:e2:c2:39:a5:14:34:17:dd:a0:6e:bd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e98e6595f802adc9f25ec4db979085fa7b734682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:7f:0f:e5:3b:fa:ef:e9:dd:40:5c:b6:2f: 9f:18:67:b1:ab:9a:0f:7c:b9:ff:72:e3:be:6f:53: 59:da:e0:c3:cb:ba:50:09:a8:70:33:9f:13:8a:0c: 21:52:20:39:b8:3c:6c:f7:4b:66:92:a1:f5:78:31: 38:83:71:d8:a4:93:63:49:41:33:b0:6a:bd:c7:1e: 4d:56:67:54:ac:b3:7e:3f:7e:22:88:91:41:5a:9b: 6e:63:7c:41:9c:97:69:56:07:46:ec:38:82:04:9d: 7b:14:03:3f:a6:ef:ca:8f:70:ac:07:70:85:0c:7f: d3:2b:fb:fa:7f:21:1c:89:55:d1:d9:6b:e5:2d:ba: ec:10:51:10:c2:1f:64:83:11:f3:a5:1c:9c:91:c2: e6:81:3f:82:5b:be:6b:35:04:5c:7a:0d:f3:1f:77: e9:49:56:28:dc:86:2d:68:24:3f:f4:f4:60:9c:d9: 91:ce:f4:8f:01:dd:6d:52:5e:b7:83:c8:7e:ca:8e: ba:4f:9a:d0:b5:86:ee:4f:d6:2a:1f:d0:2b:61:65: 4d:6c:12:f6:53:fd:1c:66:4f:3a:f5:5a:86:61:4f: fc:8b:f9:2a:51:c1:01:10:d4:43:f5:10:26:14:03: 36:37:b0:8b:f9:fe:86:95:15:75:f9:e2:5a:7d:bf: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8E:65:95:F8:02:AD:C9:F2:5E:C4:DB:97:90:85:FA:7B:73:46:82 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/6Y5llfgCrcnyXsTbl5CF-ntzRoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa50::/44 Signature Algorithm: sha256WithRSAEncryption 40:2c:5d:86:ee:a8:01:b1:0f:73:f8:f3:24:7e:1a:5f:8f:5a: 64:47:f6:66:82:a3:0e:3c:dc:23:c6:c7:88:ec:26:e4:42:9d: dc:98:c0:5e:bb:ac:aa:c4:04:4b:f5:89:ea:84:7a:68:e8:2e: be:f1:01:68:f8:b6:00:87:00:b9:54:96:65:9b:23:e2:13:4d: ce:61:31:6f:df:99:0d:4e:f5:59:49:27:69:a8:e9:a5:30:7c: 60:2a:97:61:63:f7:d3:0b:8a:fe:92:4f:ad:0d:2e:f4:59:b8: 2b:b4:8b:38:16:41:58:52:d8:23:c9:3f:57:13:a8:fc:48:78: 50:78:6c:fa:b3:24:ea:66:44:d6:9f:64:90:61:7a:9e:81:b4: dd:c8:3e:9f:4e:4e:c3:0f:39:99:a9:38:ec:86:1f:f3:d6:09: f6:13:56:91:7c:66:c2:91:ba:3a:70:c5:1f:cf:8d:a6:4e:61: b5:29:5d:e1:c1:78:54:39:ad:7a:15:8d:10:84:f1:30:83:a0: a4:fa:0f:27:8f:fe:1e:7b:d4:38:21:80:8c:af:ce:9b:1e:4e: 71:ef:85:3a:0b:a3:5f:b9:65:a9:16:c9:02:85:a4:e7:f3:01: d3:3c:c5:d4:fc:7a:fe:05:58:10:78:b6:ec:3f:85:13:54:06: 22:6d:9a:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gC0g4sI5pRQ0F92gbr03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOThlNjU5NWY4MDJhZGM5ZjI1ZWM0ZGI5NzkwODVmYTdiNzM0NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9p/D+U7+u/p3UBcti+fGGexq5oP fLn/cuO+b1NZ2uDDy7pQCahwM58TigwhUiA5uDxs90tmkqH1eDE4g3HYpJNjSUEz sGq9xx5NVmdUrLN+P34iiJFBWptuY3xBnJdpVgdG7DiCBJ17FAM/pu/Kj3CsB3CF DH/TK/v6fyEciVXR2WvlLbrsEFEQwh9kgxHzpRyckcLmgT+CW75rNQRceg3zH3fp SVYo3IYtaCQ/9PRgnNmRzvSPAd1tUl63g8h+yo66T5rQtYbuT9YqH9ArYWVNbBL2 U/0cZk869VqGYU/8i/kqUcEBENRD9RAmFAM2N7CL+f6GlRV1+eJafb+O/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOmOZZX4Aq3J8l7E25eQhfp7c0aCMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvNlk1bGxmZ0NyY255WHNUYmw1Q0YtbnR6Um9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/pQ MA0GCSqGSIb3DQEBCwUAA4IBAQBALF2G7qgBsQ9z+PMkfhpfj1pkR/ZmgqMOPNwj xseI7CbkQp3cmMBeu6yqxARL9YnqhHpo6C6+8QFo+LYAhwC5VJZlmyPiE03OYTFv 35kNTvVZSSdpqOmlMHxgKpdhY/fTC4r+kk+tDS70WbgrtIs4FkFYUtgjyT9XE6j8 SHhQeGz6syTqZkTWn2SQYXqegbTdyD6fTk7DDzmZqTjshh/z1gn2E1aRfGbCkbo6 cMUfz42mTmG1KV3hwXhUOa16FY0QhPEwg6Ck+g8nj/4ee9Q4IYCMr86bHk5x74U6 C6NfuWWpFskChaTn8wHTPMXU/Hr+BVgQeLbsP4UTVAYibZoq -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:07 2026 by rpki-client