This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/n6eR2WfCXImcpQbWii3OXMfT1io.roa File: n6eR2WfCXImcpQbWii3OXMfT1io.roa (raw, json) Hash identifier: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE= Subject key identifier: 9F:A7:91:D9:67:C2:5C:89:9C:A5:06:D6:8A:2D:CE:5C:C7:D3:D6:2A Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC935451F49120C9469B273266CC20A Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/n6eR2WfCXImcpQbWii3OXMfT1io.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64105 IP address blocks: 2a02:9b0:1e::/48 maxlen: 48 2a02:9b0:1f::/48 maxlen: 48 2a02:9b0:20::/48 maxlen: 48 2a02:9b0:21::/48 maxlen: 48 2a02:9b0:22::/48 maxlen: 48 2a02:9b0:23::/48 maxlen: 48 2a02:9b0:24::/48 maxlen: 48 2a02:9b0:25::/48 maxlen: 48 2a02:9b0:26::/48 maxlen: 48 2a02:9b0:27::/48 maxlen: 48 2a02:9b0:5c::/48 maxlen: 48 2a02:9b0:5d::/48 maxlen: 48 2a02:9b0:5e::/48 maxlen: 48 2a02:9b0:5f::/48 maxlen: 48 2a02:9b0:60::/48 maxlen: 48 2a02:9b0:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:35:45:1f:49:12:0c:94:69:b2:73:26:6c:c2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fa791d967c25c899ca506d68a2dce5cc7d3d62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:7e:c9:56:34:84:1c:fe:22:64:a2:a7:fc: 53:b7:56:aa:25:ec:8d:84:23:ed:67:23:fa:20:a7: c7:0b:4e:30:22:9d:82:fd:f2:82:42:8c:b5:89:82: 36:1d:a2:2a:ac:35:e4:69:66:c5:a6:04:23:60:53: 00:74:42:60:b8:0e:3e:24:0a:25:b1:46:47:c4:ea: 56:26:fa:1d:c3:d8:27:fb:dc:74:5f:7e:54:94:bd: 42:a7:d2:56:e0:a8:7c:0f:ed:59:d0:83:60:5a:f1: 84:04:71:a3:4c:07:52:9c:7c:a3:58:f4:4a:ce:01: 62:6b:93:dd:55:e2:d0:0f:4b:1f:45:ba:d3:05:62: dc:b1:6a:d1:e6:59:41:74:24:f7:2f:97:b9:49:31: 30:06:cc:ff:36:e1:e7:1e:8d:d5:cf:45:58:6d:42: dd:48:80:6a:5d:9d:0a:fe:12:6e:4d:1e:a6:39:90: 07:57:1f:ce:2b:6b:8d:02:5e:03:20:4c:54:27:0a: 73:cc:cf:fa:af:50:20:52:56:79:9b:40:ed:ee:32: 61:ce:c0:f7:55:ed:2e:0e:5d:1e:58:a6:41:32:fa: 5a:66:0c:6b:6e:6b:f3:2e:bb:91:9f:a8:bc:bd:32: 2f:98:d2:2f:10:54:cc:60:4b:96:6e:3a:65:2a:f1: a9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A7:91:D9:67:C2:5C:89:9C:A5:06:D6:8A:2D:CE:5C:C7:D3:D6:2A X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/n6eR2WfCXImcpQbWii3OXMfT1io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:9b0:1e::-2a02:9b0:27:ffff:ffff:ffff:ffff:ffff 2a02:9b0:5c::-2a02:9b0:61:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0b:c7:57:6b:82:e2:ea:27:e7:bc:fa:b7:b3:4e:16:69:d2:f7: 40:82:0d:4b:67:14:45:64:45:39:43:1a:bf:26:0b:cd:60:7a: 6e:02:29:54:b7:ec:de:4e:3f:70:45:d2:96:ca:4d:9a:3b:47: 2a:e1:bf:c8:94:08:21:61:21:3a:44:61:a1:9e:72:d7:02:52: 0d:57:d6:85:f4:d2:76:1a:c4:74:ad:f0:c8:48:6a:33:98:c8: 4d:86:a7:d4:6f:f8:ee:bd:97:39:b5:3d:42:e6:3f:89:3d:44: d7:df:f9:06:b0:4c:ec:48:0a:b9:13:83:ce:b6:02:96:4e:d9: 4a:03:c8:f7:d7:03:27:76:37:8b:6d:7e:62:69:d0:a7:a1:a4: 0a:97:4f:36:bf:f8:a0:47:d2:7a:a0:a3:01:cf:5d:79:66:61: 60:8b:8c:09:fb:b4:a9:fc:33:dd:05:93:eb:0d:55:42:b9:fe: 61:85:5d:aa:f4:3f:a9:af:2b:70:ac:93:52:06:f5:22:ca:d4: 3f:0b:69:34:b5:9c:30:a1:de:f5:78:f3:f7:00:13:74:56:be: 46:7a:ab:81:96:c5:ad:bf:f1:1f:1f:58:c2:7f:2d:4b:16:0a: ae:73:f0:c1:3a:e5:7e:9c:88:92:39:77:93:96:4a:ab:71:94: a3:2c:c7:cf -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt6yTVFH0kSDJRpsnMmbMIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmE3OTFkOTY3YzI1Yzg5OWNhNTA2ZDY4YTJkY2U1Y2M3ZDNkNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYp+yVY0hBz+ImSip/xTt1aqJeyN hCPtZyP6IKfHC04wIp2C/fKCQoy1iYI2HaIqrDXkaWbFpgQjYFMAdEJguA4+JAol sUZHxOpWJvodw9gn+9x0X35UlL1Cp9JW4Kh8D+1Z0INgWvGEBHGjTAdSnHyjWPRK zgFia5PdVeLQD0sfRbrTBWLcsWrR5llBdCT3L5e5STEwBsz/NuHnHo3Vz0VYbULd SIBqXZ0K/hJuTR6mOZAHVx/OK2uNAl4DIExUJwpzzM/6r1AgUlZ5m0Dt7jJhzsD3 Ve0uDl0eWKZBMvpaZgxrbmvzLruRn6i8vTIvmNIvEFTMYEuWbjplKvGp4QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJ+nkdlnwlyJnKUG1ootzlzH09YqMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvbjZlUjJXZkNYSW1jcFFiV2lpM09YTWZUMWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoMBIDBwEqAgmw AB4DBwMqAgmwACAwEgMHAioCCbAAXAMHASoCCbAAYDANBgkqhkiG9w0BAQsFAAOC AQEAC8dXa4Li6ifnvPq3s04WadL3QIINS2cURWRFOUMavyYLzWB6bgIpVLfs3k4/ cEXSlspNmjtHKuG/yJQIIWEhOkRhoZ5y1wJSDVfWhfTSdhrEdK3wyEhqM5jITYan 1G/47r2XObU9QuY/iT1E19/5BrBM7EgKuRODzrYClk7ZSgPI99cDJ3Y3i21+YmnQ p6GkCpdPNr/4oEfSeqCjAc9deWZhYIuMCfu0qfwz3QWT6w1VQrn+YYVdqvQ/qa8r cKyTUgb1IsrUPwtpNLWcMKHe9Xjz9wATdFa+RnqrgZbFrb/xHx9Ywn8tSxYKrnPw wTrlfpyIkjl3k5ZKq3GUoyzHzw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:20 2026 by rpki-client