This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/CfaW0dz4EssFT4uPeycU_-E5pBA.roa File: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (raw, json) Hash identifier: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM= Subject key identifier: 09:F6:96:D1:DC:F8:12:CB:05:4F:8B:8F:7B:27:14:FF:E1:39:A4:10 Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912 Certificate serial: 019B76EBA419B83F7EBB20BBB6A4348E93A4 Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/CfaW0dz4EssFT4uPeycU_-E5pBA.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 171.32.0.0/16 maxlen: 24 2001:67c:2384::/48 maxlen: 48 2a14:1480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:19:b8:3f:7e:bb:20:bb:b6:a4:34:8e:93:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09f696d1dcf812cb054f8b8f7b2714ffe139a410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:bc:06:6d:19:7d:93:56:d4:0f:0b:69:68: 28:39:29:1c:fa:b4:3c:ec:86:33:8e:f6:c1:84:d9: 58:2e:6c:20:96:66:27:c5:2c:a1:b6:f5:06:02:2c: ae:86:fa:b6:d6:f1:79:4b:20:8c:08:98:2a:31:f9: 0a:62:e5:d1:d9:43:1c:27:fa:8d:30:51:8d:b7:0d: 79:7e:6f:1a:c0:95:2b:20:6d:6d:d2:4e:19:78:ce: 0a:ef:9d:16:7e:1a:0d:a3:49:21:17:d3:d4:14:ab: b0:a9:16:1e:bc:db:d4:a4:49:16:73:e1:c1:c5:15: 74:fe:da:90:50:b1:59:3f:9c:af:c5:7c:ba:c5:b4: 63:bc:ee:35:67:19:e8:5a:64:13:22:53:c6:56:2b: 25:69:16:5f:1e:f5:ff:90:68:e7:d6:00:b8:b1:25: b7:a7:fe:95:0e:f2:8c:4a:92:35:33:b2:67:6c:ea: f0:de:67:99:7f:d4:cf:43:90:09:f7:41:18:27:08: 79:1e:d7:2c:ad:66:75:b9:6b:3c:b3:df:a0:5f:4d: 28:36:42:ae:0d:63:db:82:5a:f1:98:5b:c7:2f:db: a7:41:7f:41:8b:f4:cb:31:7e:32:4b:23:ab:50:26: 03:0c:99:09:35:5c:5f:d5:34:04:b6:83:61:9b:ee: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F6:96:D1:DC:F8:12:CB:05:4F:8B:8F:7B:27:14:FF:E1:39:A4:10 X509v3 Authority Key Identifier: keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/CfaW0dz4EssFT4uPeycU_-E5pBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.32.0.0/16 IPv6: 2001:67c:2384::/48 2a14:1480::/32 Signature Algorithm: sha256WithRSAEncryption 06:99:2d:d8:c1:27:d5:c7:09:b3:ed:dc:9e:6d:b9:e1:19:6d: d3:c5:56:7e:e3:3f:15:a4:b1:80:8e:1d:32:34:0f:a4:41:56: 9f:7c:da:7a:28:b4:20:e6:95:79:a1:e4:23:4a:49:a1:9b:82: 98:de:7a:4b:8e:10:ff:ab:5b:77:50:36:f8:e3:2c:77:1a:07: d2:38:de:e7:3a:a9:c2:90:b5:3e:64:32:00:65:c6:e0:31:89: fe:47:bf:d0:e4:54:02:8a:f3:67:29:0e:09:29:67:22:e8:88: 63:0b:f0:f8:8d:49:cf:99:81:4e:05:ad:92:d4:f8:3b:d6:0a: 94:5f:9c:d4:0f:77:6d:27:2b:77:ee:e6:23:27:97:02:67:ad: 5e:cb:96:cf:25:d5:46:de:f1:4e:ea:b2:8d:76:0d:c7:67:b1: dc:ad:fe:ac:42:a3:a1:e3:ea:42:77:70:cd:9c:eb:04:e2:23: d6:0e:30:33:95:05:55:f0:5b:e1:d6:16:cc:3a:9d:e4:51:10: 51:91:4a:b1:5e:7b:56:78:0d:f8:d7:86:fe:bd:18:b2:8b:6e: 45:02:78:85:9c:17:84:15:ff:cf:1e:50:e2:bd:39:c7:54:1e: ce:ce:71:96:f0:28:85:92:d3:21:0e:60:90:ea:e0:86:85:ab: 8d:33:8d:ff -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt266QZuD9+uyC7tqQ0jpOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmU3YjIxYjYyMTgzZDVlM2Q0YWUxYjkzZmYwMDkwOTI4 MmM5MTIwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWY2OTZkMWRjZjgxMmNiMDU0ZjhiOGY3YjI3MTRmZmUxMzlhNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40G8Bm0ZfZNW1A8LaWgoOSkc+rQ8 7IYzjvbBhNlYLmwglmYnxSyhtvUGAiyuhvq21vF5SyCMCJgqMfkKYuXR2UMcJ/qN MFGNtw15fm8awJUrIG1t0k4ZeM4K750WfhoNo0khF9PUFKuwqRYevNvUpEkWc+HB xRV0/tqQULFZP5yvxXy6xbRjvO41ZxnoWmQTIlPGVislaRZfHvX/kGjn1gC4sSW3 p/6VDvKMSpI1M7JnbOrw3meZf9TPQ5AJ90EYJwh5HtcsrWZ1uWs8s9+gX00oNkKu DWPbglrxmFvHL9unQX9Bi/TLMX4ySyOrUCYDDJkJNVxf1TQEtoNhm+7nUwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAn2ltHc+BLLBU+Lj3snFP/hOaQQMB8GA1UdIwQY MBaAFG/+eyG2IYPV49SuG5P/AJCSgskSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2Et YTRiYmIxYmM5OGM2LzEvQ2ZhVzBkejRFc3NGVDR1UGV5Y1VfLUU1cEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2EtYTRiYmIxYmM5OGM2 LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTALBAIAATAFAwMAqyAwFgQC AAIwEAMHACABBnwjhAMFACoUFIAwDQYJKoZIhvcNAQELBQADggEBAAaZLdjBJ9XH CbPt3J5tueEZbdPFVn7jPxWksYCOHTI0D6RBVp982nootCDmlXmh5CNKSaGbgpje ekuOEP+rW3dQNvjjLHcaB9I43uc6qcKQtT5kMgBlxuAxif5Hv9DkVAKK82cpDgkp ZyLoiGML8PiNSc+ZgU4FrZLU+DvWCpRfnNQPd20nK3fu5iMnlwJnrV7Lls8l1Ube 8U7qso12Dcdnsdyt/qxCo6Hj6kJ3cM2c6wTiI9YOMDOVBVXwW+HWFsw6neRREFGR SrFee1Z4DfjXhv69GLKLbkUCeIWcF4QV/88eUOK9OcdUHs7OcZbwKIWS0yEOYJDq 4IaFq40zjf8= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:49 2026 by rpki-client