This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/b6SuzOvpNSx_q_QgBfyyvm2MBJM.roa File: b6SuzOvpNSx_q_QgBfyyvm2MBJM.roa (raw, json) Hash identifier: 2Grx/PZmLL5VE4oVErNYlPPfDLRXOSVMVI6Rqb4VOZ4= Subject key identifier: 6F:A4:AE:CC:EB:E9:35:2C:7F:AB:F4:20:05:FC:B2:BE:6D:8C:04:93 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80187F622B5EDEC3D62B29C43FC220 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/b6SuzOvpNSx_q_QgBfyyvm2MBJM.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23764 IP address blocks: 2a0f:7806:fff1::/48 maxlen: 48 2a0f:7806:fffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:18:7f:62:2b:5e:de:c3:d6:2b:29:c4:3f:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa4aeccebe9352c7fabf42005fcb2be6d8c0493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:1c:73:94:a6:d8:5a:18:7d:ce:04:3a:1f: 90:f2:39:a3:f6:57:f1:39:1b:72:fa:d2:55:ee:78: d2:f7:81:a5:12:c0:b9:63:21:2d:31:6d:ef:65:11: 63:b9:42:b8:78:6b:34:a4:28:6a:68:7c:be:82:97: f1:9c:fc:db:d8:cc:c7:61:a5:70:32:d0:4d:bf:de: ae:4c:cd:33:89:54:ad:25:14:93:1f:0b:2c:82:df: 39:68:2a:cd:2f:3f:9d:15:22:d0:bc:95:d7:df:2d: 4b:c3:0f:34:b8:c1:21:40:65:cb:85:ef:35:42:de: 1e:09:e8:8a:85:02:6b:c5:26:2f:57:c3:7f:0b:91: b1:94:ec:26:4a:e6:2b:ea:a0:fb:71:2b:97:71:89: 8b:88:ed:c5:5f:2d:85:b4:f2:39:e2:06:7f:f2:2c: 18:29:fb:c6:43:01:16:3a:99:97:78:18:ba:b3:ac: 5d:79:53:99:24:f1:66:d2:f2:49:e5:4b:08:e8:2e: b0:14:60:7d:b7:8b:75:99:21:e2:7a:d3:9c:54:cf: 92:d0:93:0a:6b:96:52:52:f7:f6:ae:0c:88:89:68: 71:0c:10:20:12:c2:75:c6:bb:41:22:d5:b8:fa:2c: 87:11:df:28:5c:a7:a5:05:26:6a:20:a5:95:b9:89: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A4:AE:CC:EB:E9:35:2C:7F:AB:F4:20:05:FC:B2:BE:6D:8C:04:93 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/b6SuzOvpNSx_q_QgBfyyvm2MBJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7806:fff1::/48 2a0f:7806:fffc::/48 Signature Algorithm: sha256WithRSAEncryption 72:b8:3d:31:5b:82:1e:51:3e:76:94:f4:ae:a1:46:6b:4f:51: 61:66:6a:d3:cb:2f:92:55:d9:9f:63:88:f9:cc:92:06:51:84: d9:8c:b8:41:a9:5d:c1:87:d8:c7:2d:6e:9c:89:f7:8c:27:ee: 07:a7:21:09:cc:bd:5f:47:f7:76:b9:c9:67:ff:f6:ce:8e:2f: dd:b1:05:52:cf:a2:aa:ae:aa:f7:17:c3:26:70:4c:b9:67:7b: d7:96:35:7a:65:d2:a5:d5:a0:2d:cf:eb:5e:4b:01:e0:7f:cc: c6:59:46:80:72:40:09:e7:b7:09:62:bb:d8:42:25:81:08:6a: 87:ac:9d:66:14:96:92:73:a9:46:c4:09:f4:2b:75:d7:e0:07: c3:26:87:59:87:da:dd:00:35:0f:2b:20:a0:c9:97:f2:68:99: 42:51:42:66:c9:ee:4a:cf:cf:6b:b2:2e:fe:ac:26:cf:14:d0: 75:0c:0c:9e:31:ff:08:d1:17:bf:6d:c4:31:7b:a5:a4:31:fb: ad:55:a7:6a:a6:10:d5:c7:e4:f2:59:82:0c:15:6b:91:a1:43: 2a:4c:c1:e9:4e:5f:83:54:f9:27:e3:2e:1c:e1:bb:e5:a5:91: 07:ca:9c:95:e8:d8:d3:9a:bd:ed:87:8c:b2:42:45:1b:fa:aa: 29:3c:44:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gBh/Yite3sPWKynEP8IgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmE0YWVjY2ViZTkzNTJjN2ZhYmY0MjAwNWZjYjJiZTZkOGMwNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kscc5Sm2FoYfc4EOh+Q8jmj9lfx ORty+tJV7njS94GlEsC5YyEtMW3vZRFjuUK4eGs0pChqaHy+gpfxnPzb2MzHYaVw MtBNv96uTM0ziVStJRSTHwssgt85aCrNLz+dFSLQvJXX3y1Lww80uMEhQGXLhe81 Qt4eCeiKhQJrxSYvV8N/C5GxlOwmSuYr6qD7cSuXcYmLiO3FXy2FtPI54gZ/8iwY KfvGQwEWOpmXeBi6s6xdeVOZJPFm0vJJ5UsI6C6wFGB9t4t1mSHietOcVM+S0JMK a5ZSUvf2rgyIiWhxDBAgEsJ1xrtBItW4+iyHEd8oXKelBSZqIKWVuYkzDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG+krszr6TUsf6v0IAX8sr5tjASTMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvYjZTdXpPdnBOU3hfcV9RZ0JmeXl2bTJNQkpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg94Bv/x AwcAKg94Bv/8MA0GCSqGSIb3DQEBCwUAA4IBAQByuD0xW4IeUT52lPSuoUZrT1Fh ZmrTyy+SVdmfY4j5zJIGUYTZjLhBqV3Bh9jHLW6cifeMJ+4HpyEJzL1fR/d2ucln //bOji/dsQVSz6Kqrqr3F8MmcEy5Z3vXljV6ZdKl1aAtz+teSwHgf8zGWUaAckAJ 57cJYrvYQiWBCGqHrJ1mFJaSc6lGxAn0K3XX4AfDJodZh9rdADUPKyCgyZfyaJlC UUJmye5Kz89rsi7+rCbPFNB1DAyeMf8I0Re/bcQxe6WkMfutVadqphDVx+TyWYIM FWuRoUMqTMHpTl+DVPkn4y4c4bvlpZEHypyV6NjTmr3th4yyQkUb+qopPES/ -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:01 2026 by rpki-client