This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/imiFSwewnn3eKlCdz9DBi55AbP4.roa File: imiFSwewnn3eKlCdz9DBi55AbP4.roa (raw, json) Hash identifier: gkW9o1cFmQilOBYv4BahCLyXi9azbfTOyovm/UvsWbo= Subject key identifier: 8A:68:85:4B:07:B0:9E:7D:DE:2A:50:9D:CF:D0:C1:8B:9E:40:6C:FE Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7 Certificate serial: 019B7C80406973F7AD297D7C25D7475B8207 Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/imiFSwewnn3eKlCdz9DBi55AbP4.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134521 IP address blocks: 2a05:e580:f900::/40 maxlen: 40 2a05:e580:fa00::/40 maxlen: 40 2a05:e580:fb00::/40 maxlen: 40 2a05:e580:fc00::/40 maxlen: 40 2a05:e580:fd00::/40 maxlen: 40 2a05:e580:fe00::/40 maxlen: 40 2a05:e580:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:40:69:73:f7:ad:29:7d:7c:25:d7:47:5b:82:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a68854b07b09e7dde2a509dcfd0c18b9e406cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:a3:17:aa:66:09:e3:b6:80:4a:d0:f4:96: cb:a8:0d:22:2c:33:03:32:5b:fb:b4:ad:ad:ab:54: 7e:cb:b8:27:a2:fc:bd:10:db:55:ec:93:08:eb:ad: 60:51:80:89:bf:ea:a2:6c:11:eb:ed:91:43:80:44: 9b:42:b3:fc:34:fc:eb:47:91:19:59:c4:cd:8c:da: 44:d7:92:88:61:9b:33:e8:17:d9:5c:4a:b4:e1:5d: 00:16:4c:3a:43:16:dc:3e:05:a8:98:a0:66:c6:b4: 63:3c:d9:c5:f1:e4:aa:83:ae:eb:ad:a2:58:46:5c: d6:6b:08:da:77:f3:ae:a4:e0:51:02:cc:30:ea:2c: f6:c3:1a:01:8b:c1:a4:5c:e9:77:e1:2d:60:7b:19: d6:9b:21:4b:55:3f:03:e2:14:98:b7:bf:27:3a:bb: ea:fc:3b:44:7e:2b:10:30:ff:59:20:fc:8a:62:4e: 4a:f3:24:93:34:18:52:b6:87:6a:13:7d:c2:75:50: a6:c2:8c:fc:4a:b2:3c:d1:b0:00:a5:9c:e9:b4:44: e5:0f:ea:b8:78:78:5e:66:20:60:df:b1:1e:0b:29: 9d:d7:2b:b7:7f:15:20:19:78:00:f3:3a:e6:01:29: 2b:1a:36:d9:0a:72:a1:fb:d7:06:c6:16:58:e1:4d: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:68:85:4B:07:B0:9E:7D:DE:2A:50:9D:CF:D0:C1:8B:9E:40:6C:FE X509v3 Authority Key Identifier: keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/imiFSwewnn3eKlCdz9DBi55AbP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:e580:f900::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ba:00:e0:17:0b:37:05:67:c7:ab:9b:9c:da:c4:3d:fa:64:1f: 16:15:b3:ed:c2:24:85:af:12:b9:35:6c:e8:6b:a7:48:bb:a4: ff:6c:81:ec:ec:9b:79:db:02:ee:42:2f:ff:fe:d0:94:85:b9: e5:ba:f2:8d:f8:00:1d:1b:79:80:fd:dd:ba:7e:ad:57:58:83: 72:97:f8:dd:23:43:7c:27:05:57:6b:32:32:0a:3c:a3:83:9b: 2f:a8:0e:8d:f2:2f:e2:1c:d7:81:22:26:47:69:3d:07:5f:32: a2:6d:76:60:83:45:46:6c:fe:65:9c:d2:8d:44:e2:16:50:30: e2:fc:8b:01:e7:93:af:6b:75:f3:b7:bf:64:0f:61:38:86:77: 81:23:15:69:00:8b:f6:4b:b5:c7:54:e9:20:58:84:1f:c6:c5: 61:69:be:d5:bb:83:f6:d3:36:85:c1:ea:85:b3:a6:92:cb:e8: 15:14:fa:ba:bf:2a:85:ad:55:3a:42:a7:3a:8f:44:c2:c1:ca: 63:c2:4b:d5:89:dc:a3:98:f7:92:87:e8:e0:ec:8e:a1:c8:2c: c8:2d:51:b8:d0:2a:e4:31:2e:48:ac:d3:44:84:c5:da:9f:7e: e0:5f:38:f4:e6:2d:27:51:08:56:1d:10:eb:a1:ed:3f:ce:ee: 4d:7c:e8:b0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8gEBpc/etKX18JddHW4IHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZmE4YzBmZTYyZWM1NGFjY2JkZTM1YzYwYmQ4YWQ0Yjkw MTRmZjcwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTY4ODU0YjA3YjA5ZTdkZGUyYTUwOWRjZmQwYzE4YjllNDA2Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+yjF6pmCeO2gErQ9JbLqA0iLDMD Mlv7tK2tq1R+y7gnovy9ENtV7JMI661gUYCJv+qibBHr7ZFDgESbQrP8NPzrR5EZ WcTNjNpE15KIYZsz6BfZXEq04V0AFkw6QxbcPgWomKBmxrRjPNnF8eSqg67rraJY RlzWawjad/OupOBRAsww6iz2wxoBi8GkXOl34S1gexnWmyFLVT8D4hSYt78nOrvq /DtEfisQMP9ZIPyKYk5K8ySTNBhStodqE33CdVCmwoz8SrI80bAApZzptETlD+q4 eHheZiBg37EeCymd1yu3fxUgGXgA8zrmASkrGjbZCnKh+9cGxhZY4U2ahwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFIpohUsHsJ593ipQnc/QwYueQGz+MB8GA1UdIwQY MBaAFG76jA/mLsVKzL3jXGC9itS5AU/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUt YTk5MTdjYzE1ZTBhLzEvaW1pRlN3ZXdubjNlS2xDZHo5REJpNTVBYlA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUtYTk5MTdjYzE1ZTBh LzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBgAqBeWA +QMFACoF5YAwDQYJKoZIhvcNAQELBQADggEBALoA4BcLNwVnx6ubnNrEPfpkHxYV s+3CJIWvErk1bOhrp0i7pP9sgezsm3nbAu5CL//+0JSFueW68o34AB0beYD93bp+ rVdYg3KX+N0jQ3wnBVdrMjIKPKODmy+oDo3yL+Ic14EiJkdpPQdfMqJtdmCDRUZs /mWc0o1E4hZQMOL8iwHnk69rdfO3v2QPYTiGd4EjFWkAi/ZLtcdU6SBYhB/GxWFp vtW7g/bTNoXB6oWzppLL6BUU+rq/KoWtVTpCpzqPRMLBymPCS9WJ3KOY95KH6ODs jqHILMgtUbjQKuQxLkis00SExdqffuBfOPTmLSdRCFYdEOuh7T/O7k186LA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:31 2026 by rpki-client