This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/awH60oe-svgud9tAzPtSBr2e0Is.roa File: awH60oe-svgud9tAzPtSBr2e0Is.roa (raw, json) Hash identifier: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI= Subject key identifier: 6B:01:FA:D2:87:BE:B2:F8:2E:77:DB:40:CC:FB:52:06:BD:9E:D0:8B Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Certificate serial: 019B7AC93BE93186849BC82A2222DB5FEA20 Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/awH60oe-svgud9tAzPtSBr2e0Is.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208265 IP address blocks: 2a0f:6a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3b:e9:31:86:84:9b:c8:2a:22:22:db:5f:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b01fad287beb2f82e77db40ccfb5206bd9ed08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f3:d3:49:be:fb:df:23:25:82:b8:c6:ef:c8: 3b:ee:ed:7a:c3:63:fa:6d:ab:fc:92:66:ef:6b:8e: 41:f8:f4:2f:9c:d5:52:3b:ef:b0:96:c9:3a:c8:6b: 42:32:1e:a4:17:e2:dc:a4:94:74:f9:2a:08:a7:5e: 98:aa:65:6f:a0:ed:86:8d:9b:fe:3a:60:3f:51:c1: 47:cd:c8:b0:aa:f5:ce:69:2d:2e:cf:a7:df:10:ca: c2:1d:09:bc:07:fb:ac:f1:05:8c:32:36:b3:ec:9b: c1:5b:86:5d:d7:f8:38:d9:c5:9a:0b:a4:6f:46:fd: c9:fb:30:e3:82:e5:73:29:fa:49:0b:2c:66:e7:19: 57:76:83:4d:55:68:29:03:1f:19:07:a5:e7:74:84: cf:b9:dc:8e:5e:a6:c2:1e:c7:f1:a6:a6:2b:db:35: 40:07:a0:bb:b8:77:2a:6f:24:11:ec:05:24:be:8c: 6d:19:15:82:00:5b:6c:b6:0a:01:61:7a:45:a8:2d: e9:90:ea:67:4c:37:c4:93:92:62:e6:d3:d2:a6:3e: 92:5e:86:46:bf:d5:7e:af:86:4f:b0:8f:b4:a2:b0: d2:4e:31:8e:40:c4:1b:66:a3:ad:38:93:fb:29:29: a4:80:51:91:77:f7:41:ac:60:05:57:cc:30:6f:0e: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:01:FA:D2:87:BE:B2:F8:2E:77:DB:40:CC:FB:52:06:BD:9E:D0:8B X509v3 Authority Key Identifier: keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/awH60oe-svgud9tAzPtSBr2e0Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6a00::/29 Signature Algorithm: sha256WithRSAEncryption 56:28:49:12:97:13:5e:a0:56:61:d6:51:7a:c8:d3:ee:68:13: 9e:1b:c9:06:c8:f8:7f:61:c3:7e:44:d1:5b:19:79:e3:59:75: b8:fd:28:5b:0b:81:6a:8d:9b:42:69:31:86:36:ec:37:ce:20: ce:e2:a6:e9:53:97:22:97:89:a8:64:9e:ee:47:0b:24:5c:e3: 01:27:e5:e6:4c:89:ec:64:ca:dd:e9:5d:9d:6d:d6:ea:ea:af: 0c:d1:4b:ca:6a:18:ee:83:27:33:7d:4f:fb:58:a1:88:50:14: 0a:cb:83:8c:f9:67:73:3b:64:95:cd:a6:cf:00:a2:7c:49:cf: bc:0c:12:33:47:60:f1:66:3c:26:30:91:c0:52:96:cf:8d:b7: 3f:c0:52:3b:77:4c:21:ac:fb:aa:e1:2a:6d:6a:f2:4d:a1:04: 7d:e1:be:2c:81:9a:b0:eb:58:75:59:e0:3b:29:38:b5:c3:0e: a1:77:58:c3:0b:de:18:b0:91:d8:fd:f7:d7:84:26:b2:a4:34: 55:d7:ae:10:48:52:28:8c:a6:91:3c:fd:8e:19:22:ee:a9:c0: 71:e8:c9:43:cb:36:d9:0e:16:36:21:6a:40:18:95:7b:b7:b0: ce:db:60:ac:8f:bf:b3:a3:75:01:88:a8:a5:44:c5:3b:45:78: 33:24:fc:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yTvpMYaEm8gqIiLbX+ogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMTA3ZTA3OTUyYzA2OTM1OGNkM2Y4MmFhZWNlYjRjNjk0 ODNjYTkwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjAxZmFkMjg3YmViMmY4MmU3N2RiNDBjY2ZiNTIwNmJkOWVkMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fPTSb773yMlgrjG78g77u16w2P6 bav8kmbva45B+PQvnNVSO++wlsk6yGtCMh6kF+LcpJR0+SoIp16YqmVvoO2GjZv+ OmA/UcFHzciwqvXOaS0uz6ffEMrCHQm8B/us8QWMMjaz7JvBW4Zd1/g42cWaC6Rv Rv3J+zDjguVzKfpJCyxm5xlXdoNNVWgpAx8ZB6XndITPudyOXqbCHsfxpqYr2zVA B6C7uHcqbyQR7AUkvoxtGRWCAFtstgoBYXpFqC3pkOpnTDfEk5Ji5tPSpj6SXoZG v9V+r4ZPsI+0orDSTjGOQMQbZqOtOJP7KSmkgFGRd/dBrGAFV8wwbw6WkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGsB+tKHvrL4LnfbQMz7Uga9ntCLMB8GA1UdIwQY MBaAFL8QfgeVLAaTWM0/gqrs60xpSDypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2It NDg2MzNkNzE4NTkwLzEvYXdINjBvZS1zdmd1ZDl0QXpQdFNCcjJlMElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2ItNDg2MzNkNzE4NTkw LzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9qADAN BgkqhkiG9w0BAQsFAAOCAQEAVihJEpcTXqBWYdZResjT7mgTnhvJBsj4f2HDfkTR Wxl541l1uP0oWwuBao2bQmkxhjbsN84gzuKm6VOXIpeJqGSe7kcLJFzjASfl5kyJ 7GTK3eldnW3W6uqvDNFLymoY7oMnM31P+1ihiFAUCsuDjPlncztklc2mzwCifEnP vAwSM0dg8WY8JjCRwFKWz423P8BSO3dMIaz7quEqbWryTaEEfeG+LIGasOtYdVng Oyk4tcMOoXdYwwveGLCR2P3314QmsqQ0VdeuEEhSKIymkTz9jhki7qnAcejJQ8s2 2Q4WNiFqQBiVe7ewzttgrI+/s6N1AYiopUTFO0V4MyT8YA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:04 2026 by rpki-client