This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/6N3xoZPe2eQVbNsjIZFngGfa3VM.roa File: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (raw, json) Hash identifier: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo= Subject key identifier: E8:DD:F1:A1:93:DE:D9:E4:15:6C:DB:23:21:91:67:80:67:DA:DD:53 Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Certificate serial: 019B7FF24DFB6322A8DA91A5793EC185361C Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/6N3xoZPe2eQVbNsjIZFngGfa3VM.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149428 IP address blocks: 2a02:e9c0::/32 maxlen: 32 2a13:6cc2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4d:fb:63:22:a8:da:91:a5:79:3e:c1:85:36:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ddf1a193ded9e4156cdb232191678067dadd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:ab:a3:7c:e4:34:bf:ce:98:2b:eb:4d:f3: 5c:f5:53:5e:c5:86:a0:f7:40:61:75:40:54:4a:c8: cb:34:62:27:1c:3b:34:92:01:a5:b9:2a:22:e6:a1: 03:d3:00:31:99:90:50:c6:dc:cb:22:de:8d:42:bc: 65:08:9e:d2:96:fd:59:83:db:1b:d2:c8:fb:22:0a: 88:09:8b:c7:df:be:e6:1e:30:97:04:f8:a6:b3:04: 1e:c1:7e:3f:53:bd:7c:61:d5:28:30:8a:2f:0d:4b: 0f:c7:66:c2:ff:0d:40:06:1d:58:8c:7c:7d:0e:f2: 8c:2f:88:34:ed:db:c7:d0:1a:f5:ac:3f:ef:c6:36: 9c:37:29:55:f5:77:38:d3:09:c6:6f:42:2b:f4:a1: 81:5f:dc:1c:b8:65:75:15:b9:a0:9b:88:fd:41:6e: f4:76:05:0e:f1:e3:8d:df:69:22:89:1b:58:49:b9: 09:d2:8e:5f:d9:ba:36:b8:46:71:78:47:20:70:5a: 4a:f8:4e:8d:c2:95:b2:14:5c:bc:c6:dd:fd:06:73: c5:7c:84:54:c3:2f:ee:9a:65:3f:a4:f3:cf:76:30: 71:dc:4f:bc:16:92:4b:94:89:95:27:7d:0b:6e:52: df:65:f4:cb:8f:76:b5:52:86:46:f0:14:f5:37:70: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DD:F1:A1:93:DE:D9:E4:15:6C:DB:23:21:91:67:80:67:DA:DD:53 X509v3 Authority Key Identifier: keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/6N3xoZPe2eQVbNsjIZFngGfa3VM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e9c0::/32 2a13:6cc2::/32 Signature Algorithm: sha256WithRSAEncryption 98:66:ac:d2:c4:eb:d0:64:2c:5f:8a:97:f6:6c:2b:53:94:4d: f5:25:af:34:23:3d:24:98:89:ff:4b:45:3d:25:a7:9e:f8:24: 71:c7:9d:0e:8c:5f:03:48:6d:42:21:ce:a5:e0:9f:2e:02:e8: 24:ab:77:57:9d:94:51:1e:4b:ad:63:da:32:29:8a:f8:06:9a: 40:46:2e:17:a9:8f:f6:ab:c0:8b:c7:08:72:80:16:7f:24:5b: 28:ee:a6:8a:f3:d5:ff:40:75:35:38:1e:eb:d8:06:7b:5b:b9: 02:08:49:87:1b:0f:e8:55:ce:63:67:da:04:7c:56:00:9c:ca: e5:ed:c4:a0:6a:0c:50:bc:1d:58:d2:a1:3a:cd:25:c9:4e:5b: 10:8b:aa:b7:c6:b2:16:69:00:63:63:12:ec:df:8a:fe:fb:46: 6f:45:ef:90:a3:71:22:7c:b1:e3:69:02:1e:52:56:58:37:f9: 77:52:29:9c:1e:85:59:a9:46:65:5d:88:18:58:d2:36:c5:5e: 1b:d6:0f:33:a5:53:8c:63:2a:24:7a:49:95:de:9a:19:89:6e: e2:78:8b:01:be:be:3c:60:6e:59:7f:57:f8:a2:ad:f2:cf:6a: 1e:41:bc:23:b7:48:d8:5c:5b:4a:d8:95:58:27:7b:e6:c1:56: 40:c2:ac:66 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8k37YyKo2pGleT7BhTYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw ZTY5MWQwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGRkZjFhMTkzZGVkOWU0MTU2Y2RiMjMyMTkxNjc4MDY3ZGFkZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLGro3zkNL/OmCvrTfNc9VNexYag 90BhdUBUSsjLNGInHDs0kgGluSoi5qED0wAxmZBQxtzLIt6NQrxlCJ7Slv1Zg9sb 0sj7IgqICYvH377mHjCXBPimswQewX4/U718YdUoMIovDUsPx2bC/w1ABh1YjHx9 DvKML4g07dvH0Br1rD/vxjacNylV9Xc40wnGb0Ir9KGBX9wcuGV1Fbmgm4j9QW70 dgUO8eON32kiiRtYSbkJ0o5f2bo2uEZxeEcgcFpK+E6NwpWyFFy8xt39BnPFfIRU wy/ummU/pPPPdjBx3E+8FpJLlImVJ30LblLfZfTLj3a1UoZG8BT1N3ArCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOjd8aGT3tnkFWzbIyGRZ4Bn2t1TMB8GA1UdIwQY MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt MTk3NjlmNTc4ZWZkLzEvNk4zeG9aUGUyZVFWYk5zaklaRm5nR2ZhM1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgLpwAMF ACoTbMIwDQYJKoZIhvcNAQELBQADggEBAJhmrNLE69BkLF+Kl/ZsK1OUTfUlrzQj PSSYif9LRT0lp574JHHHnQ6MXwNIbUIhzqXgny4C6CSrd1edlFEeS61j2jIpivgG mkBGLhepj/arwIvHCHKAFn8kWyjuporz1f9AdTU4HuvYBntbuQIISYcbD+hVzmNn 2gR8VgCcyuXtxKBqDFC8HVjSoTrNJclOWxCLqrfGshZpAGNjEuzfiv77Rm9F75Cj cSJ8seNpAh5SVlg3+XdSKZwehVmpRmVdiBhY0jbFXhvWDzOlU4xjKiR6SZXemhmJ buJ4iwG+vjxgbll/V/iirfLPah5BvCO3SNhcW0rYlVgne+bBVkDCrGY= -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:26 2026 by rpki-client