This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/94_6VQI2I2lo1u38qt6hn9A7wgw.roa File: 94_6VQI2I2lo1u38qt6hn9A7wgw.roa (raw, json) Hash identifier: NobqK3i7W7bFpKNzurxj01gS8em3bf9sK5Lxekb+0hU= Subject key identifier: F7:8F:FA:55:02:36:23:69:68:D6:ED:FC:AA:DE:A1:9F:D0:3B:C2:0C Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c Certificate serial: 019B7BA4BC34C730788D67692491962ABB13 Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/94_6VQI2I2lo1u38qt6hn9A7wgw.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5482 IP address blocks: 2a0b:5f00::/29 maxlen: 48 2a0b:5f04::/39 maxlen: 39 2a0b:5f04:1000::/39 maxlen: 39 2a0b:5f04:4000::/39 maxlen: 39 2a0b:5f04:5000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bc:34:c7:30:78:8d:67:69:24:91:96:2a:bb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f78ffa550236236968d6edfcaadea19fd03bc20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:7a:a2:f3:46:aa:9c:f2:ff:77:e0:45:01: b7:e1:dd:4b:8f:85:f4:4a:cf:a0:5c:83:7b:d3:c7: e8:45:7d:25:99:e9:ed:08:77:d5:e2:1d:78:dc:e4: 9f:96:e7:34:e5:ed:ce:69:b5:03:85:e1:1f:17:eb: b5:10:4d:fb:2a:16:91:1b:de:96:16:7f:27:7e:99: 86:69:cb:f7:03:59:28:2d:b7:75:4d:23:fa:c4:a0: 4b:d4:0a:d0:01:22:d4:a6:58:aa:fe:7e:f4:fe:24: 4b:ca:1c:54:3b:7e:66:5f:c2:ba:98:f2:09:cf:e4: 53:b5:2b:eb:c7:4d:ee:ca:ad:f1:70:21:91:fe:5e: 11:0f:0c:75:5d:38:fe:8a:35:5d:41:eb:86:b7:ba: 21:b0:e7:1f:57:a3:ac:1e:6f:6e:fd:57:cf:5c:47: 98:50:78:9d:72:d3:46:75:09:9b:57:6f:06:e6:7b: e9:7f:8d:28:e3:cc:3e:78:22:3b:13:9b:09:a9:a3: 4b:0b:60:15:50:52:e8:3f:99:93:47:05:bd:6d:d8: 2d:92:40:7c:e0:1c:e6:e6:a5:e9:ee:d0:19:ad:ad: a3:45:bd:d8:a0:36:b8:57:3e:ba:99:8e:d6:20:a2: da:b4:b3:69:4d:09:59:e1:12:62:2a:c6:38:d6:ba: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8F:FA:55:02:36:23:69:68:D6:ED:FC:AA:DE:A1:9F:D0:3B:C2:0C X509v3 Authority Key Identifier: keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/94_6VQI2I2lo1u38qt6hn9A7wgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:5f00::/29 Signature Algorithm: sha256WithRSAEncryption 5a:6b:3c:b6:f9:5a:02:c9:12:50:53:7a:a9:70:00:b7:55:6e: 56:a4:a4:e5:55:2d:9f:7d:03:80:f0:4c:35:aa:b2:b2:2a:cf: 53:75:0b:1a:aa:7b:90:7e:4c:12:0a:5d:3c:3b:ab:87:f8:6d: 40:e4:62:00:22:ec:03:77:83:2b:7a:c3:d4:ea:1b:8f:87:36: 9b:29:72:48:9f:14:17:14:ca:a3:6a:0c:ee:86:a5:8d:8e:6b: 8d:59:1b:18:08:45:1a:6f:6b:12:75:8c:d3:62:19:b2:10:ac: 18:30:79:7d:77:bc:41:5a:23:68:65:64:fd:b7:d8:c7:2c:b9: 63:f0:81:1a:9f:78:90:8e:b1:9f:79:19:48:32:e8:3d:44:8a: c6:f7:d3:f9:68:5b:7f:5d:88:5c:b1:5d:c2:38:cc:0b:5f:03: 32:6f:dd:7d:f5:d3:e4:34:27:d6:98:d4:b9:02:4a:aa:09:77: 09:1f:8f:ef:ff:d0:cb:7e:7f:24:f7:10:d7:44:4e:86:a2:18: 0f:95:55:86:22:9f:f2:26:d9:40:c9:f5:67:63:f4:8f:fc:ef: c4:f1:ea:c6:5c:7c:1b:78:e4:99:e3:48:cc:cd:57:59:a8:7a: 09:e8:b2:a1:80:61:d3:8f:d4:0c:b9:92:20:d3:9a:15:c8:77: 35:57:03:39 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pLw0xzB4jWdpJJGWKrsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNWZlMDU2Zjc2NzdlNDNhNmVmMWFhMWEwYTA1YzA3YzRi NGI2NWMwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzhmZmE1NTAyMzYyMzY5NjhkNmVkZmNhYWRlYTE5ZmQwM2JjMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yR6ovNGqpzy/3fgRQG34d1Lj4X0 Ss+gXIN708foRX0lmentCHfV4h143OSfluc05e3OabUDheEfF+u1EE37KhaRG96W Fn8nfpmGacv3A1koLbd1TSP6xKBL1ArQASLUpliq/n70/iRLyhxUO35mX8K6mPIJ z+RTtSvrx03uyq3xcCGR/l4RDwx1XTj+ijVdQeuGt7ohsOcfV6OsHm9u/VfPXEeY UHidctNGdQmbV28G5nvpf40o48w+eCI7E5sJqaNLC2AVUFLoP5mTRwW9bdgtkkB8 4Bzm5qXp7tAZra2jRb3YoDa4Vz66mY7WIKLatLNpTQlZ4RJiKsY41rpj/QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPeP+lUCNiNpaNbt/KreoZ/QO8IMMB8GA1UdIwQY MBaAFC1f4Fb3Z35Dpu8aoaCgXAfEtLZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjIt ZDIwNjBkM2E0MzMyLzEvOTRfNlZRSTJJMmxvMXUzOHF0NmhuOUE3d2d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjItZDIwNjBkM2E0MzMy LzEvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtfADAN BgkqhkiG9w0BAQsFAAOCAQEAWms8tvlaAskSUFN6qXAAt1VuVqSk5VUtn30DgPBM NaqysirPU3ULGqp7kH5MEgpdPDurh/htQORiACLsA3eDK3rD1Oobj4c2mylySJ8U FxTKo2oM7oaljY5rjVkbGAhFGm9rEnWM02IZshCsGDB5fXe8QVojaGVk/bfYxyy5 Y/CBGp94kI6xn3kZSDLoPUSKxvfT+Whbf12IXLFdwjjMC18DMm/dffXT5DQn1pjU uQJKqgl3CR+P7//Qy35/JPcQ10ROhqIYD5VVhiKf8ibZQMn1Z2P0j/zvxPHqxlx8 G3jkmeNIzM1XWah6CeiyoYBh04/UDLmSINOaFch3NVcDOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:53 2026 by rpki-client