This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/h6YKC3XtERD2VCMyNiRftB7wCuk.roa File: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (raw, json) Hash identifier: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A= Subject key identifier: 87:A6:0A:0B:75:ED:11:10:F6:54:23:32:36:24:5F:B4:1E:F0:0A:E9 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019B7E386603754C83688D38A59C85B56306 Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/h6YKC3XtERD2VCMyNiRftB7wCuk.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213861 IP address blocks: 2a14:e601::/32 maxlen: 32 2a14:e605::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:66:03:75:4c:83:68:8d:38:a5:9c:85:b5:63:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87a60a0b75ed1110f654233236245fb41ef00ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:9d:b3:fe:d1:2a:66:96:11:ab:eb:4d:1a: 86:b5:a6:5e:cb:f6:c4:c1:fb:d0:9a:61:c0:c3:9c: a9:15:35:21:d2:9a:bc:47:18:99:46:41:06:d6:df: 82:39:37:0c:8a:d9:e4:b7:0a:b6:fd:b6:94:66:00: 70:3a:59:b1:f7:54:3c:89:c0:a6:0d:ac:64:9c:12: 1f:8f:55:2d:60:31:43:ef:09:55:7d:81:ef:5a:46: 00:5f:93:83:e5:7f:66:c2:b5:9d:91:10:22:3e:5e: d5:71:54:bb:d6:70:e4:a7:36:b7:25:98:44:dc:ca: 10:db:86:11:e4:93:53:9b:75:cc:1e:8e:2a:6e:79: d8:2b:72:d0:8e:45:07:e0:ea:de:38:3e:9b:0c:1a: df:33:c5:03:47:81:12:68:bc:e3:e5:e6:f8:f6:8e: 9e:47:c1:69:cd:a9:a2:65:38:ab:3e:df:3d:3b:f3: cf:2c:22:b9:8b:ab:50:6a:05:cb:4a:68:ca:65:2e: 9d:34:6b:f9:7c:53:86:c8:75:aa:c7:ee:52:54:10: 12:0e:5c:62:de:4c:9d:8d:7e:d2:5c:87:39:96:3f: e2:2c:f2:22:87:31:02:c6:32:07:3f:45:68:69:6c: 33:29:fa:3c:d2:44:36:ae:04:f3:9a:fe:ca:93:5a: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:0A:0B:75:ED:11:10:F6:54:23:32:36:24:5F:B4:1E:F0:0A:E9 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/h6YKC3XtERD2VCMyNiRftB7wCuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:e601::/32 2a14:e605::/32 Signature Algorithm: sha256WithRSAEncryption 57:db:4c:f5:53:68:18:8f:38:33:2b:3f:ce:ad:70:0c:ab:a6: 21:bc:43:32:0a:8a:87:73:0d:92:c2:80:52:bc:bf:d8:76:18: ff:30:2c:aa:5f:66:21:20:38:cb:af:a7:88:86:b0:6b:3e:38: 33:00:16:33:b2:e7:03:bd:79:c6:2d:5a:09:e3:85:46:5c:30: 85:ec:0c:2f:04:19:4a:c9:4b:bd:39:29:33:c3:d9:98:e2:09: d1:29:13:ed:50:2c:21:46:23:51:2a:ff:94:50:09:f1:b7:88: 28:3e:fe:ce:21:1d:68:b4:d1:5b:fb:fc:30:34:59:89:4c:fa: 0a:a9:fa:d3:1d:19:ad:a1:ff:de:de:e8:98:ec:08:fa:93:fc: 8d:3a:ad:de:7f:e6:25:89:f1:9b:26:27:5b:2e:2f:c5:a2:00: b9:46:07:d6:84:78:19:1f:f1:e6:23:7b:6c:c1:6c:e6:2a:fa: 6d:4e:7d:90:42:f6:fe:53:9a:0e:5f:93:e3:e5:7c:7f:ae:72: 45:22:c6:cf:b5:c1:33:df:82:f5:c3:33:94:dd:cd:1e:d3:1d: a5:bc:5d:d5:b3:34:39:2e:34:59:40:d7:a5:af:06:e3:70:09: b0:f0:d7:5f:15:5d:7f:ce:2e:2b:cb:a0:c9:c4:0f:ea:53:c7: c8:ab:d9:d3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OGYDdUyDaI04pZyFtWMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2E2MGEwYjc1ZWQxMTEwZjY1NDIzMzIzNjI0NWZiNDFlZjAwYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnOds/7RKmaWEavrTRqGtaZey/bE wfvQmmHAw5ypFTUh0pq8RxiZRkEG1t+COTcMitnktwq2/baUZgBwOlmx91Q8icCm DaxknBIfj1UtYDFD7wlVfYHvWkYAX5OD5X9mwrWdkRAiPl7VcVS71nDkpza3JZhE 3MoQ24YR5JNTm3XMHo4qbnnYK3LQjkUH4OreOD6bDBrfM8UDR4ESaLzj5eb49o6e R8FpzamiZTirPt89O/PPLCK5i6tQagXLSmjKZS6dNGv5fFOGyHWqx+5SVBASDlxi 3kydjX7SXIc5lj/iLPIihzECxjIHP0VoaWwzKfo80kQ2rgTzmv7Kk1pi+QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIemCgt17REQ9lQjMjYkX7Qe8ArpMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvaDZZS0MzWHRFUkQyVkNNeU5pUmZ0Qjd3Q3VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhTmAQMF ACoU5gUwDQYJKoZIhvcNAQELBQADggEBAFfbTPVTaBiPODMrP86tcAyrpiG8QzIK iodzDZLCgFK8v9h2GP8wLKpfZiEgOMuvp4iGsGs+ODMAFjOy5wO9ecYtWgnjhUZc MIXsDC8EGUrJS705KTPD2ZjiCdEpE+1QLCFGI1Eq/5RQCfG3iCg+/s4hHWi00Vv7 /DA0WYlM+gqp+tMdGa2h/97e6JjsCPqT/I06rd5/5iWJ8ZsmJ1suL8WiALlGB9aE eBkf8eYje2zBbOYq+m1OfZBC9v5Tmg5fk+PlfH+uckUixs+1wTPfgvXDM5TdzR7T HaW8XdWzNDkuNFlA16WvBuNwCbDw118VXX/OLivLoMnED+pTx8ir2dM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:24 2026 by rpki-client