This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/K6ii7zwpTXAnLxoEd2L2cebqqYg.roa File: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (raw, json) Hash identifier: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY= Subject key identifier: 2B:A8:A2:EF:3C:29:4D:70:27:2F:1A:04:77:62:F6:71:E6:EA:A9:88 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019B7DC93CEA2A81C369508FF1D46B75663E Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/K6ii7zwpTXAnLxoEd2L2cebqqYg.roa Signing time: Fri 02 Jan 2026 08:18:18 +0000 ROA not before: Fri 02 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13127 IP address blocks: 2a0c:9180::/48 maxlen: 48 2a0c:9180:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:3c:ea:2a:81:c3:69:50:8f:f1:d4:6b:75:66:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Jan 2 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ba8a2ef3c294d70272f1a047762f671e6eaa988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:cb:87:f2:d3:86:d8:e5:c0:22:77:70:b6: 6f:89:92:47:71:cf:a8:ca:1a:3c:24:ca:8f:7a:5f: 0b:f8:66:ec:45:57:f3:d6:35:49:e1:fb:af:16:bf: 06:6b:64:48:4c:9d:9a:fa:18:b9:b9:9d:0a:77:3f: 74:a5:7a:96:95:45:6a:b2:bd:96:91:11:6b:1b:f4: a9:75:90:ba:a0:77:60:04:dc:93:ee:62:e2:2b:86: f5:e9:d7:e2:6a:85:61:e9:cf:e0:a9:76:4d:b7:b3: ff:36:aa:50:77:73:c2:d1:c3:ce:d0:06:37:88:4c: 37:a9:91:b1:2b:44:76:2f:c7:25:bd:a0:89:44:da: 59:48:b5:e9:e5:b4:14:d9:44:0d:d5:d8:1c:23:d8: 0a:0a:cb:7f:92:5f:0b:7f:70:ff:f8:29:04:3e:58: a4:ac:6e:15:92:5b:73:67:17:fc:71:49:8f:72:24: d6:a5:5a:17:ef:4b:0a:c1:0d:22:8c:8e:ec:13:f0: b4:de:2e:5c:d5:a1:3d:c2:2c:df:83:c1:6f:26:45: ff:93:59:f9:27:88:05:a9:f0:84:a5:22:27:b0:9f: 69:cd:0e:41:8d:20:d7:3b:a4:00:ab:a4:1c:d2:76: 3a:8f:3c:99:f3:8d:d0:2c:7b:4f:8e:51:2f:92:cb: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A8:A2:EF:3C:29:4D:70:27:2F:1A:04:77:62:F6:71:E6:EA:A9:88 X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/K6ii7zwpTXAnLxoEd2L2cebqqYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9180::/47 Signature Algorithm: sha256WithRSAEncryption 56:e3:35:c1:05:3d:78:c6:4d:a1:0d:a5:1d:a8:23:c5:46:b3: a0:66:3f:f0:9d:73:be:23:86:70:74:3a:e4:d7:27:c1:74:2c: 59:80:e2:5b:a5:b9:42:7b:92:12:96:f5:9a:da:7d:19:63:85: 13:d2:e9:b5:57:9d:66:bd:37:4f:9a:17:51:13:0e:bd:d9:22: ac:eb:f2:1c:09:17:b0:bc:b7:00:b2:47:2e:de:8c:99:7e:76: b3:b9:53:da:42:88:ff:e0:88:4f:df:49:e1:d7:34:00:00:8a: 06:7d:0a:6b:8e:f1:8f:ef:88:96:9a:d2:39:31:74:41:b7:7c: 48:fd:f2:5a:25:17:c8:97:97:b8:97:c5:92:24:40:e1:3e:3c: 17:66:9c:6a:21:07:80:53:ae:05:d8:fb:aa:4f:e1:b1:00:48: ce:c7:6e:62:eb:e5:0c:26:07:5a:48:78:eb:0f:a6:09:11:34: a3:4e:1f:38:89:bb:70:43:db:61:a8:36:28:a6:7e:20:b3:98: ca:8c:ac:c2:2f:2e:09:85:03:34:a3:34:45:ad:71:05:88:06: 7a:75:a9:d4:e8:f7:81:5f:4c:dd:71:69:53:d5:19:47:6f:a6: 64:ed:b3:d3:a6:4f:f7:28:e1:1f:04:c3:fd:d9:e5:d2:7f:fb: 04:1e:b0:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yTzqKoHDaVCP8dRrdWY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjYwMTAyMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmE4YTJlZjNjMjk0ZDcwMjcyZjFhMDQ3NzYyZjY3MWU2ZWFhOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohvLh/LThtjlwCJ3cLZviZJHcc+o yho8JMqPel8L+GbsRVfz1jVJ4fuvFr8Ga2RITJ2a+hi5uZ0Kdz90pXqWlUVqsr2W kRFrG/SpdZC6oHdgBNyT7mLiK4b16dfiaoVh6c/gqXZNt7P/NqpQd3PC0cPO0AY3 iEw3qZGxK0R2L8clvaCJRNpZSLXp5bQU2UQN1dgcI9gKCst/kl8Lf3D/+CkEPlik rG4VkltzZxf8cUmPciTWpVoX70sKwQ0ijI7sE/C03i5c1aE9wizfg8FvJkX/k1n5 J4gFqfCEpSInsJ9pzQ5BjSDXO6QAq6Qc0nY6jzyZ843QLHtPjlEvkssyqwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCuoou88KU1wJy8aBHdi9nHm6qmIMB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvSzZpaTd6d3BUWEFuTHhvRWQyTDJjZWJxcVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgyRgAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBW4zXBBT14xk2hDaUdqCPFRrOgZj/wnXO+I4Zw dDrk1yfBdCxZgOJbpblCe5ISlvWa2n0ZY4UT0um1V51mvTdPmhdREw692SKs6/Ic CRewvLcAskcu3oyZfnazuVPaQoj/4IhP30nh1zQAAIoGfQprjvGP74iWmtI5MXRB t3xI/fJaJRfIl5e4l8WSJEDhPjwXZpxqIQeAU64F2PuqT+GxAEjOx25i6+UMJgda SHjrD6YJETSjTh84ibtwQ9thqDYopn4gs5jKjKzCLy4JhQM0ozRFrXEFiAZ6danU 6PeBX0zdcWlT1RlHb6Zk7bPTpk/3KOEfBMP92eXSf/sEHrDN -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:27 2026 by rpki-client