This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/6CYJFLYzJsCzzHIAogKVImiilqU.roa File: 6CYJFLYzJsCzzHIAogKVImiilqU.roa (raw, json) Hash identifier: hXxIZWK3P8ePeRytCGeiJCZHrXxQPMFWaAZ+75i/4qM= Subject key identifier: E8:26:09:14:B6:33:26:C0:B3:CC:72:00:A2:02:95:22:68:A2:96:A5 Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C1330A9F97E97856D1DE49B6404485C Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/6CYJFLYzJsCzzHIAogKVImiilqU.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42655 IP address blocks: 2a03:1240:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:30:a9:f9:7e:97:85:6d:1d:e4:9b:64:04:48:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8260914b63326c0b3cc7200a202952268a296a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:f3:3b:0f:51:4d:4e:0d:79:97:a0:b8:a5: c7:46:6c:14:13:46:6b:56:57:3d:80:c8:a1:93:a7: f7:92:1e:4a:f6:87:e8:f3:28:ca:57:78:bd:71:0a: bf:ee:74:9f:6d:a6:4b:7f:c5:c5:51:1c:58:8f:a7: 1b:56:91:ab:71:91:70:92:b1:40:26:a1:43:19:51: 12:8a:66:d0:86:d9:2b:d0:d4:22:77:9c:44:6e:91: 93:ad:a0:bc:be:11:86:37:77:64:c2:12:19:5d:8c: 6f:97:bb:d9:a1:3b:4e:7a:3b:c8:e3:73:1a:c4:a5: 6d:f0:2d:dd:ca:93:35:9b:11:28:a4:32:57:88:a0: 53:a4:eb:a8:d0:a4:fa:f2:61:3e:9b:4c:90:30:33: 94:fd:a7:be:8f:ed:e8:70:0e:e4:6d:ae:bd:4c:85: 90:8b:8e:46:75:c9:d5:4f:05:ef:65:30:c5:84:24: 38:bd:4e:19:f9:ac:a1:a6:67:39:b9:bb:ee:55:9f: f4:30:68:91:ae:c7:dd:c6:f0:cf:76:b9:30:42:68: b2:2f:35:64:07:cc:b8:73:c6:db:7c:e3:97:4c:dd: a9:73:08:3e:92:26:45:2f:db:01:98:64:35:bb:71: af:91:3b:ae:86:be:26:95:50:fb:23:bf:39:31:db: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:26:09:14:B6:33:26:C0:B3:CC:72:00:A2:02:95:22:68:A2:96:A5 X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/6CYJFLYzJsCzzHIAogKVImiilqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:1240:1::/48 Signature Algorithm: sha256WithRSAEncryption 69:26:e1:9a:ce:df:ac:5b:c0:58:ac:c5:1c:19:08:cc:9b:78: 0a:65:68:ee:ad:1f:6c:09:a2:6d:50:79:c0:b7:72:c8:bb:6d: d1:49:82:2a:f4:c9:9c:08:bf:de:b0:55:2f:4b:3a:90:38:0a: ed:59:4e:fa:05:3e:bd:25:78:c0:39:e4:d8:c7:86:c8:9f:ca: 84:f6:72:f9:8a:86:bb:03:05:38:f0:60:12:4e:e2:d5:3a:98: 0e:ea:42:91:99:20:55:3b:1e:53:47:da:00:44:0f:71:cb:24: d8:70:fe:81:a6:17:2a:85:64:ce:51:03:c9:73:08:4e:db:27: 80:a3:b4:00:41:2e:3e:68:46:ad:5c:47:c2:44:6b:51:e2:36: 31:7e:a2:29:98:ea:a2:dc:ea:cb:39:31:f5:36:cc:f5:63:fe: 5c:c4:e4:97:3d:a4:ac:2b:3a:fb:d7:97:59:ee:09:0c:ce:74: 59:98:d5:6f:47:c5:28:2e:9d:12:97:6a:3e:b8:6a:f5:12:cb: 2d:7b:0d:65:66:fd:e2:b7:af:fe:26:43:1d:9e:df:9a:21:f4: 41:59:fc:10:3e:19:81:88:b6:71:ff:20:24:1a:44:18:61:c9: cf:4a:57:4d:e0:fc:ec:19:7c:5e:7d:5c:15:e4:ef:f5:9c:40: e1:f0:f6:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EzCp+X6XhW0d5JtkBEhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODI2MDkxNGI2MzMyNmMwYjNjYzcyMDBhMjAyOTUyMjY4YTI5NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLvzOw9RTU4NeZeguKXHRmwUE0Zr Vlc9gMihk6f3kh5K9ofo8yjKV3i9cQq/7nSfbaZLf8XFURxYj6cbVpGrcZFwkrFA JqFDGVESimbQhtkr0NQid5xEbpGTraC8vhGGN3dkwhIZXYxvl7vZoTtOejvI43Ma xKVt8C3dypM1mxEopDJXiKBTpOuo0KT68mE+m0yQMDOU/ae+j+3ocA7kba69TIWQ i45GdcnVTwXvZTDFhCQ4vU4Z+ayhpmc5ubvuVZ/0MGiRrsfdxvDPdrkwQmiyLzVk B8y4c8bbfOOXTN2pcwg+kiZFL9sBmGQ1u3GvkTuuhr4mlVD7I785Mdv9vQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOgmCRS2MybAs8xyAKIClSJoopalMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvNkNZSkZMWXpKc0N6ekhJQW9nS1ZJbWlpbHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMSQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQBpJuGazt+sW8BYrMUcGQjMm3gKZWjurR9sCaJt UHnAt3LIu23RSYIq9MmcCL/esFUvSzqQOArtWU76BT69JXjAOeTYx4bIn8qE9nL5 ioa7AwU48GASTuLVOpgO6kKRmSBVOx5TR9oARA9xyyTYcP6BphcqhWTOUQPJcwhO 2yeAo7QAQS4+aEatXEfCRGtR4jYxfqIpmOqi3OrLOTH1Nsz1Y/5cxOSXPaSsKzr7 15dZ7gkMznRZmNVvR8UoLp0Sl2o+uGr1Esstew1lZv3it6/+JkMdnt+aIfRBWfwQ PhmBiLZx/yAkGkQYYcnPSldN4PzsGXxefVwV5O/1nEDh8PY7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:28 2026 by rpki-client