This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/F8BqFfZoIsv5x2t_rO_S_NuJemg.roa File: F8BqFfZoIsv5x2t_rO_S_NuJemg.roa (raw, json) Hash identifier: PB4J+IoKo4T7Q6QAGzoR44UFBrvbvOiTrydpAGnj8mc= Subject key identifier: 17:C0:6A:15:F6:68:22:CB:F9:C7:6B:7F:AC:EF:D2:FC:DB:89:7A:68 Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Certificate serial: 019B797F4743116046B73E4E618EE9C7C768 Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/F8BqFfZoIsv5x2t_rO_S_NuJemg.roa Signing time: Thu 01 Jan 2026 12:19:02 +0000 ROA not before: Thu 01 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3549 IP address blocks: 2a06:6540:2041::/48 maxlen: 48 2a06:6540:3002::/48 maxlen: 48 2a06:6540:3041::/48 maxlen: 48 2a06:6540:3081::/48 maxlen: 48 2a06:6540:30c1::/48 maxlen: 48 2a06:6540:3101::/48 maxlen: 48 2a06:6541:2041::/48 maxlen: 48 2a06:6541:3002::/48 maxlen: 48 2a06:6541:3041::/48 maxlen: 48 2a06:6541:3081::/48 maxlen: 48 2a06:6541:30c1::/48 maxlen: 48 2a06:6541:3101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:47:43:11:60:46:b7:3e:4e:61:8e:e9:c7:c7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17c06a15f66822cbf9c76b7facefd2fcdb897a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:a1:59:92:46:2f:f0:ad:b1:a2:d4:38:2c: 25:26:1b:12:2b:b2:33:a2:f7:e0:9b:11:59:09:ef: 0b:0b:71:f5:41:e0:f4:98:86:61:7e:4c:ec:c5:04: 92:a0:47:f3:fb:5c:91:9e:04:12:70:9e:8a:c8:12: 93:d1:95:a1:05:72:a7:5f:36:ba:78:78:29:bd:70: a7:41:6d:dc:f0:d8:cb:50:5c:57:6c:b0:0d:e8:9f: 02:e7:fc:5f:a3:39:1e:0f:98:8f:a2:27:48:bd:30: e0:29:ca:56:07:7e:2e:19:2c:88:22:29:6d:d5:29: 0e:84:01:3a:6c:51:5b:a3:5f:fb:22:42:88:79:df: 32:6e:a6:e5:32:40:00:6c:71:8a:d5:ab:8b:db:48: 49:8c:8a:5b:5a:5c:f6:83:87:ab:c1:f5:74:53:42: fb:cf:44:a6:07:46:b0:9b:13:20:83:09:2c:6d:c6: 02:94:f6:c2:8e:9d:27:c0:c5:f2:67:3a:89:46:97: 71:72:6e:d1:51:d6:e5:e7:d7:c4:dd:60:2a:64:99: 65:77:7a:92:c1:08:f1:83:96:83:aa:30:da:4d:f7: 6b:ca:27:e8:00:e6:2f:d2:e8:a4:2f:1c:9a:dd:29: 48:14:42:29:24:1b:31:93:8f:a3:eb:cb:86:16:92: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C0:6A:15:F6:68:22:CB:F9:C7:6B:7F:AC:EF:D2:FC:DB:89:7A:68 X509v3 Authority Key Identifier: keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/F8BqFfZoIsv5x2t_rO_S_NuJemg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:6540:2041::/48 2a06:6540:3002::/48 2a06:6540:3041::/48 2a06:6540:3081::/48 2a06:6540:30c1::/48 2a06:6540:3101::/48 2a06:6541:2041::/48 2a06:6541:3002::/48 2a06:6541:3041::/48 2a06:6541:3081::/48 2a06:6541:30c1::/48 2a06:6541:3101::/48 Signature Algorithm: sha256WithRSAEncryption 5e:07:c6:a7:1f:b3:81:c8:1d:d6:fa:bf:39:94:b2:be:c5:b1: a9:a0:84:76:0f:b6:b1:5b:ec:c3:e5:c9:12:69:11:ef:14:87: 59:23:d9:a4:c9:5c:bc:49:e8:e8:54:7f:59:01:d1:61:5f:f3: 75:b3:6b:a5:51:e4:14:9e:2c:52:fe:9f:2d:e1:9c:4d:da:67: 49:b8:ab:c6:5a:e3:ba:94:67:1a:3f:f5:a5:45:5d:4d:c0:f2: 69:5e:46:89:09:ed:88:62:2d:d1:ef:ff:4b:03:af:19:41:51: 44:8b:68:32:3b:b2:c0:52:6b:f7:ea:87:3d:63:3b:17:6c:6b: 55:ac:4f:24:d0:77:fe:54:a2:7c:9f:e8:a1:2f:b3:14:20:a4: d4:48:d5:b5:16:e5:d0:12:db:d6:8b:d5:40:48:ea:39:9e:3c: ef:86:79:6a:bd:18:9c:41:2d:7e:fe:6d:04:d3:a7:c3:05:36: 3a:89:e0:0c:4e:a0:94:84:e3:88:25:28:d8:c3:ad:0c:37:68: f4:1a:4a:db:2d:02:27:52:e8:de:0c:0c:09:60:ba:8a:4c:40: 06:0f:d1:d8:82:92:73:52:46:8e:5d:35:b3:6a:c5:65:d3:1e: 51:fa:ee:0d:fe:52:3a:3a:99:5e:85:e6:b4:c2:ae:8d:8b:18: fe:fd:60:26 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt5f0dDEWBGtz5OYY7px8doMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi MjI1NDcwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2MwNmExNWY2NjgyMmNiZjljNzZiN2ZhY2VmZDJmY2RiODk3YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL2hWZJGL/CtsaLUOCwlJhsSK7Iz ovfgmxFZCe8LC3H1QeD0mIZhfkzsxQSSoEfz+1yRngQScJ6KyBKT0ZWhBXKnXza6 eHgpvXCnQW3c8NjLUFxXbLAN6J8C5/xfozkeD5iPoidIvTDgKcpWB34uGSyIIilt 1SkOhAE6bFFbo1/7IkKIed8ybqblMkAAbHGK1auL20hJjIpbWlz2g4erwfV0U0L7 z0SmB0awmxMggwksbcYClPbCjp0nwMXyZzqJRpdxcm7RUdbl59fE3WAqZJlld3qS wQjxg5aDqjDaTfdryifoAOYv0uikLxya3SlIFEIpJBsxk4+j68uGFpICcQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFBfAahX2aCLL+cdrf6zv0vzbiXpoMB8GA1UdIwQY MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt OWFiZDFhYTY0YmUxLzEvRjhCcUZmWm9Jc3Y1eDJ0X3JPX1NfTnVKZW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAIwbAMHACoGZUAg QQMHACoGZUAwAgMHACoGZUAwQQMHACoGZUAwgQMHACoGZUAwwQMHACoGZUAxAQMH ACoGZUEgQQMHACoGZUEwAgMHACoGZUEwQQMHACoGZUEwgQMHACoGZUEwwQMHACoG ZUExATANBgkqhkiG9w0BAQsFAAOCAQEAXgfGpx+zgcgd1vq/OZSyvsWxqaCEdg+2 sVvsw+XJEmkR7xSHWSPZpMlcvEno6FR/WQHRYV/zdbNrpVHkFJ4sUv6fLeGcTdpn SbirxlrjupRnGj/1pUVdTcDyaV5GiQntiGIt0e//SwOvGUFRRItoMjuywFJr9+qH PWM7F2xrVaxPJNB3/lSifJ/ooS+zFCCk1EjVtRbl0BLb1ovVQEjqOZ4874Z5ar0Y nEEtfv5tBNOnwwU2OongDE6glITjiCUo2MOtDDdo9BpK2y0CJ1Lo3gwMCWC6ikxA Bg/R2IKSc1JGjl01s2rFZdMeUfruDf5SOjqZXoXmtMKujYsY/v1gJg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:43 2026 by rpki-client