This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa File: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (raw, json) Hash identifier: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE= Subject key identifier: AF:A6:CB:98:66:11:5C:90:3A:19:47:C2:66:71:F8:79:B0:9B:5D:85 Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34 Certificate serial: 019B791050C935B4B017971F1E677CFDB4D5 Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197430 IP address blocks: 2a10:dd02:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:50:c9:35:b4:b0:17:97:1f:1e:67:7c:fd:b4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afa6cb9866115c903a1947c26671f879b09b5d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:1b:90:88:bb:ec:bd:84:fa:ac:0f:78:38: f2:6b:1f:b5:cd:1e:32:ff:75:46:ee:3c:15:5a:13: b5:79:fa:de:60:d5:c6:8f:36:a5:4b:bf:6f:f4:42: 7f:f1:c7:03:4c:ed:91:5a:2c:92:fd:14:4c:59:97: 54:e6:9c:c1:05:61:02:48:cc:0d:1c:6b:12:07:c4: 1f:36:4b:cc:2c:c9:d8:d6:39:de:01:3f:ba:38:e5: bd:de:da:32:0c:d6:49:72:c1:06:8c:0e:5f:b1:a5: ac:83:4b:f6:81:64:9c:27:54:e0:18:71:9a:6b:f2: 28:9c:3c:4a:bd:df:bf:76:3b:3b:31:2c:6e:3b:33: 95:79:80:9f:28:7d:32:e3:b1:47:ff:fa:83:da:d6: ea:bd:97:ae:ff:2d:28:c3:0c:7a:e3:6e:3b:46:9c: 38:c3:a8:e9:4d:42:21:b9:c7:7e:c3:33:f3:ab:7c: af:7a:c6:de:c9:4e:8a:4f:79:26:8a:bf:bf:61:f2: 3f:6c:6d:61:e5:4a:85:0e:30:70:30:ea:fd:a1:42: 3c:ac:87:dd:83:bc:f6:9f:56:99:7f:5e:22:c9:43: c7:1a:32:5b:c5:51:4d:c4:8d:bb:d7:ae:49:95:cb: a9:74:75:70:ca:02:bd:fc:70:16:47:55:1b:75:99: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A6:CB:98:66:11:5C:90:3A:19:47:C2:66:71:F8:79:B0:9B:5D:85 X509v3 Authority Key Identifier: keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:dd02:b00b::/48 Signature Algorithm: sha256WithRSAEncryption b2:58:a8:69:2a:12:8f:5d:93:10:56:c6:22:00:bc:4b:45:f8: 4a:7c:3d:18:b9:04:fc:fe:33:ef:b1:67:ff:dc:51:61:ce:6e: 0a:bd:54:6b:4f:39:30:6b:57:78:58:e2:c1:1f:79:45:54:a6: 3c:cd:ca:ad:d3:0c:cf:51:08:d5:1d:85:db:14:7d:20:03:ad: 46:91:af:56:7a:2c:6e:d9:73:0f:8f:0d:17:24:54:88:80:30: 87:68:bc:7a:04:b5:ca:36:08:25:2b:20:ab:55:2e:cf:19:c3: 2f:d2:b5:61:1e:d5:42:f6:3a:6f:ad:c9:59:7e:62:9a:f7:f0: e4:8f:5a:a8:20:6a:47:6b:af:e3:a5:b6:dd:bd:5f:b0:4f:3e: 26:8d:c7:85:35:e6:b5:5a:7e:10:c4:31:fd:d5:1d:f8:3f:7f: 9e:9c:fc:f4:e5:84:1d:43:30:2a:99:3a:b0:14:90:c3:5c:0f: 25:51:ce:ad:96:51:12:09:34:a7:47:9b:d9:80:33:6e:2c:fd: 6a:c6:e7:0e:7d:e5:d8:c6:19:7b:ca:28:83:17:a5:94:ba:1a: 38:f5:ff:d2:b7:5b:be:10:38:70:e3:63:b0:aa:a4:35:a5:e3: 00:d6:31:6d:08:f5:bc:1f:72:72:f3:e4:95:e3:fe:65:45:65: 19:22:d8:55 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EFDJNbSwF5cfHmd8/bTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx YzhkMzQwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmE2Y2I5ODY2MTE1YzkwM2ExOTQ3YzI2NjcxZjg3OWIwOWI1ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvYbkIi77L2E+qwPeDjyax+1zR4y /3VG7jwVWhO1efreYNXGjzalS79v9EJ/8ccDTO2RWiyS/RRMWZdU5pzBBWECSMwN HGsSB8QfNkvMLMnY1jneAT+6OOW93toyDNZJcsEGjA5fsaWsg0v2gWScJ1TgGHGa a/IonDxKvd+/djs7MSxuOzOVeYCfKH0y47FH//qD2tbqvZeu/y0owwx64247Rpw4 w6jpTUIhucd+wzPzq3yvesbeyU6KT3kmir+/YfI/bG1h5UqFDjBwMOr9oUI8rIfd g7z2n1aZf14iyUPHGjJbxVFNxI27165JlcupdHVwygK9/HAWR1UbdZnhSwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK+my5hmEVyQOhlHwmZx+Hmwm12FMB8GA1UdIwQY MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt YTdlYjM4ZDQ4Yzc4LzEvcjZiTG1HWVJYSkE2R1VmQ1puSDRlYkNiWFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4 LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDdArAL MA0GCSqGSIb3DQEBCwUAA4IBAQCyWKhpKhKPXZMQVsYiALxLRfhKfD0YuQT8/jPv sWf/3FFhzm4KvVRrTzkwa1d4WOLBH3lFVKY8zcqt0wzPUQjVHYXbFH0gA61Gka9W eixu2XMPjw0XJFSIgDCHaLx6BLXKNgglKyCrVS7PGcMv0rVhHtVC9jpvrclZfmKa 9/Dkj1qoIGpHa6/jpbbdvV+wTz4mjceFNea1Wn4QxDH91R34P3+enPz05YQdQzAq mTqwFJDDXA8lUc6tllESCTSnR5vZgDNuLP1qxucOfeXYxhl7yiiDF6WUuho49f/S t1u+EDhw42OwqqQ1peMA1jFtCPW8H3Jy8+SV4/5lRWUZIthV -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:53 2026 by rpki-client