This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/RVqYqDFmLejp9z4p1E-tMkToPRs.roa File: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (raw, json) Hash identifier: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A= Subject key identifier: 45:5A:98:A8:31:66:2D:E8:E9:F7:3E:29:D4:4F:AD:32:44:E8:3D:1B Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019B7835547E5734E063195FA480DBA07D87 Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/RVqYqDFmLejp9z4p1E-tMkToPRs.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214603 IP address blocks: 2a13:ccc6:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:7e:57:34:e0:63:19:5f:a4:80:db:a0:7d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=455a98a831662de8e9f73e29d44fad3244e83d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:03:ff:8e:a1:d8:f9:4b:45:7c:97:2e:42: 68:cc:9c:19:fb:18:a4:b6:39:6d:e2:ec:68:cb:8d: 0e:f3:06:78:ed:94:4e:d3:51:34:8b:a5:e4:87:d5: c6:1e:13:87:e6:df:96:46:e0:eb:5c:b5:c6:d2:a1: 5e:ea:68:5d:03:47:91:b0:f2:df:82:78:4b:dc:37: b9:02:bb:74:ed:4a:bc:3d:8e:37:ff:32:71:29:93: 8f:1f:5c:c6:8f:8d:c2:6b:60:27:a4:14:f0:8c:90: dd:f5:52:24:b9:5e:9b:8d:a4:37:5e:51:2a:2e:5a: db:eb:b2:c2:84:de:1a:5b:d0:5f:da:a4:a9:85:89: 93:6c:96:46:81:e4:43:2d:3c:62:1e:8b:b8:81:cc: 5f:0e:29:34:7b:ea:50:fd:6c:04:08:79:38:e2:01: 07:15:a3:6d:5f:cf:43:97:ca:4d:56:aa:18:23:fc: d4:ae:09:6b:27:5a:f8:e2:cd:dd:97:09:55:46:c5: ab:31:04:e7:ae:a8:98:9e:bc:5d:aa:51:ad:8a:7a: 26:6d:27:23:c0:44:7f:8f:86:de:d9:b2:c3:06:21: c3:0e:ea:f5:fa:c0:c0:c7:e3:5a:f1:40:c3:f7:a9: 8d:92:65:66:96:b8:68:72:f6:60:57:af:a6:b9:e3: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5A:98:A8:31:66:2D:E8:E9:F7:3E:29:D4:4F:AD:32:44:E8:3D:1B X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/RVqYqDFmLejp9z4p1E-tMkToPRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ccc6:10::/44 Signature Algorithm: sha256WithRSAEncryption 69:23:21:f7:ac:d3:67:12:a5:aa:60:56:1c:39:af:60:ea:04: 92:20:42:1a:44:33:89:92:3d:a1:84:fe:3c:e7:ca:69:a4:f7: e7:74:92:10:90:65:83:4a:2e:3c:83:13:95:d9:f8:41:d0:37: d2:91:79:ec:5c:99:cc:88:a6:85:ba:68:91:6a:f6:8e:fd:92: f0:81:e7:de:8b:85:95:4e:8c:dd:9d:51:fb:42:1a:bf:25:03: 8d:57:11:f7:42:8b:8f:68:93:45:e1:db:d9:9c:04:27:12:de: 36:d4:e9:a7:4c:12:27:72:59:4a:6f:6f:c7:5d:80:c9:83:15: 71:0d:1b:87:e7:eb:17:3d:59:f8:8e:8b:b4:77:c2:b4:cd:96: 0d:74:a5:de:5f:46:f1:c8:e3:76:1e:c3:6d:8c:70:e0:0a:a9: 01:58:59:0e:6b:15:9e:43:43:7f:1e:8d:91:51:79:9f:10:9c: b8:c8:74:23:2c:05:9d:0b:1e:09:47:0d:03:fb:1c:b2:f4:a1: 2b:7d:2f:f7:18:10:8b:11:a8:b4:59:36:3c:7f:e7:98:52:87: 63:32:5a:0d:b5:75:76:41:e0:b2:f5:75:b9:6c:8b:90:70:ae: 66:63:40:4a:4a:e8:b9:6d:04:07:07:f4:fb:fc:3a:10:3c:46: 85:69:b6:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NVR+VzTgYxlfpIDboH2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTVhOThhODMxNjYyZGU4ZTlmNzNlMjlkNDRmYWQzMjQ0ZTgzZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD0D/46h2PlLRXyXLkJozJwZ+xik tjlt4uxoy40O8wZ47ZRO01E0i6Xkh9XGHhOH5t+WRuDrXLXG0qFe6mhdA0eRsPLf gnhL3De5Art07Uq8PY43/zJxKZOPH1zGj43Ca2AnpBTwjJDd9VIkuV6bjaQ3XlEq Llrb67LChN4aW9Bf2qSphYmTbJZGgeRDLTxiHou4gcxfDik0e+pQ/WwECHk44gEH FaNtX89Dl8pNVqoYI/zUrglrJ1r44s3dlwlVRsWrMQTnrqiYnrxdqlGtinombScj wER/j4be2bLDBiHDDur1+sDAx+Na8UDD96mNkmVmlrhocvZgV6+muePv7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEVamKgxZi3o6fc+KdRPrTJE6D0bMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEvUlZxWXFERm1MZWpwOXo0cDFFLXRNa1RvUFJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhPMxgAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBpIyH3rNNnEqWqYFYcOa9g6gSSIEIaRDOJkj2h hP4858pppPfndJIQkGWDSi48gxOV2fhB0DfSkXnsXJnMiKaFumiRavaO/ZLwgefe i4WVTozdnVH7Qhq/JQONVxH3QouPaJNF4dvZnAQnEt421OmnTBIncllKb2/HXYDJ gxVxDRuH5+sXPVn4jou0d8K0zZYNdKXeX0bxyON2HsNtjHDgCqkBWFkOaxWeQ0N/ Ho2RUXmfEJy4yHQjLAWdCx4JRw0D+xyy9KErfS/3GBCLEai0WTY8f+eYUodjMloN tXV2QeCy9XW5bIuQcK5mY0BKSui5bQQHB/T7/DoQPEaFabZn -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:36 2026 by rpki-client