This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6oygq9jhKxjFYaenIGOILiyJQvM.roa File: 6oygq9jhKxjFYaenIGOILiyJQvM.roa (raw, json) Hash identifier: OFadi9yluQyZ3qbsJLrUlYLZtzgoeYpkg0fpFuWCKT4= Subject key identifier: EA:8C:A0:AB:D8:E1:2B:18:C5:61:A7:A7:20:63:88:2E:2C:89:42:F3 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019ABF9EEFBDA67EB18FDE2D2BCA72D0B92D Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6oygq9jhKxjFYaenIGOILiyJQvM.roa Signing time: Wed 26 Nov 2025 10:04:15 +0000 ROA not before: Wed 26 Nov 2025 10:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29226 IP address blocks: 2a11:4b42::/32 maxlen: 32 2a13:93c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:9e:ef:bd:a6:7e:b1:8f:de:2d:2b:ca:72:d0:b9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Nov 26 10:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea8ca0abd8e12b18c561a7a72063882e2c8942f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:0d:c8:89:81:6e:34:44:b3:01:d3:55:6a: 2b:9c:42:43:b0:0c:4b:73:34:6e:7c:bd:15:1b:97: 90:af:3a:d6:79:84:ba:92:1e:29:6a:1e:8e:63:2a: 06:e5:07:e9:c2:c7:29:fd:b3:76:06:f0:97:ab:e5: 6c:7f:26:ab:89:c2:37:58:60:63:46:33:80:3d:68: 89:e6:9e:01:b4:b5:59:bc:38:1d:d4:5c:f7:37:52: dc:30:07:6c:c6:54:1b:94:fc:c1:46:e7:f8:0f:5c: ce:55:16:86:d4:5d:be:b6:1f:9e:4f:0d:f4:27:a5: de:05:c0:da:b7:d3:f7:c3:d0:7f:6d:fd:34:31:da: c1:b7:63:e5:de:9e:d1:c6:71:33:ea:a5:ec:7d:67: a4:7a:e8:f8:81:b4:bd:1b:0b:56:2d:fc:54:e3:95: c0:48:21:14:6f:42:1e:6a:f6:7f:ba:0b:58:ca:c5: a7:ab:19:42:ea:65:cc:3d:e1:6f:a5:42:36:99:02: 92:d4:76:0e:2a:eb:83:32:6d:dc:65:05:df:a8:7a: 20:4b:5d:36:f4:7c:f1:9f:df:bd:82:30:b6:cc:70: 0c:d7:60:f6:97:e3:bc:c5:61:b5:bc:1c:20:94:63: 57:dc:1e:04:bd:f2:4f:7b:5c:f0:42:69:94:eb:88: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8C:A0:AB:D8:E1:2B:18:C5:61:A7:A7:20:63:88:2E:2C:89:42:F3 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6oygq9jhKxjFYaenIGOILiyJQvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4b42::/32 2a13:93c5::/32 Signature Algorithm: sha256WithRSAEncryption 2f:9f:69:a7:98:46:cf:22:36:f7:23:1b:ab:6e:3e:3d:56:4b: e7:e7:a1:f5:81:1d:7d:0c:7f:81:cb:f8:e3:4d:66:77:1e:a8: c4:ae:c1:bd:71:bb:22:22:c3:6c:50:6b:de:a1:3f:15:9f:7c: be:c0:c9:75:af:0c:cf:a1:8a:8f:af:55:1a:25:9e:12:ac:c4: d8:0b:2c:e8:18:08:7f:1e:65:fc:25:98:06:c1:3e:11:7d:74: d9:29:fc:a1:a8:17:e3:2e:42:93:9e:bc:6a:a6:84:fd:e0:b0: 33:d6:95:bd:cf:1f:9d:80:13:1f:c0:f9:9d:fc:55:22:d7:70: 05:5c:0f:56:6e:5f:23:e7:51:be:3f:94:a8:d7:97:97:1d:73: 11:ae:cb:16:6d:84:70:a1:cf:1c:15:b3:76:d5:6c:13:db:bc: fd:72:fe:66:a3:f3:36:03:52:46:fa:74:8d:cf:77:bf:fc:4d: 8b:e2:b3:eb:d3:2c:98:20:05:8f:35:ef:d7:8d:4e:98:ba:f7: 91:1c:af:26:fa:59:a9:e8:9f:75:4c:18:28:ec:88:4e:e3:63: ec:14:3e:d3:68:24:0b:28:5d:e7:12:a1:86:7d:16:eb:bf:bb: 97:d5:08:c2:d2:db:59:43:cc:3a:28:a6:7a:0a:de:76:58:bb: 28:36:07:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZq/nu+9pn6xj94tK8py0LktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMTI2MTAwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYThjYTBhYmQ4ZTEyYjE4YzU2MWE3YTcyMDYzODgyZTJjODk0MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TgNyImBbjREswHTVWornEJDsAxL czRufL0VG5eQrzrWeYS6kh4pah6OYyoG5Qfpwscp/bN2BvCXq+VsfyaricI3WGBj RjOAPWiJ5p4BtLVZvDgd1Fz3N1LcMAdsxlQblPzBRuf4D1zOVRaG1F2+th+eTw30 J6XeBcDat9P3w9B/bf00MdrBt2Pl3p7RxnEz6qXsfWekeuj4gbS9GwtWLfxU45XA SCEUb0IeavZ/ugtYysWnqxlC6mXMPeFvpUI2mQKS1HYOKuuDMm3cZQXfqHogS102 9Hzxn9+9gjC2zHAM12D2l+O8xWG1vBwglGNX3B4EvfJPe1zwQmmU64i1hQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOqMoKvY4SsYxWGnpyBjiC4siULzMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvNm95Z3E5amhLeGpGWWFlbklHT0lMaXlKUXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhFLQgMF ACoTk8UwDQYJKoZIhvcNAQELBQADggEBAC+faaeYRs8iNvcjG6tuPj1WS+fnofWB HX0Mf4HL+ONNZnceqMSuwb1xuyIiw2xQa96hPxWffL7AyXWvDM+hio+vVRolnhKs xNgLLOgYCH8eZfwlmAbBPhF9dNkp/KGoF+MuQpOevGqmhP3gsDPWlb3PH52AEx/A +Z38VSLXcAVcD1ZuXyPnUb4/lKjXl5cdcxGuyxZthHChzxwVs3bVbBPbvP1y/maj 8zYDUkb6dI3Pd7/8TYvis+vTLJggBY8179eNTpi695Ecryb6Wanon3VMGCjsiE7j Y+wUPtNoJAsoXecSoYZ9Fuu/u5fVCMLS21lDzDoopnoK3nZYuyg2B4I= -----END CERTIFICATE-----Generated at Fri Dec 5 08:36:45 2025 by rpki-client