This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/m86oxA_k3vw-M6KhPPiDUZnBVgA.roa File: m86oxA_k3vw-M6KhPPiDUZnBVgA.roa (raw, json) Hash identifier: 1GePjxZamSe3/wMfx0CTdKkbwHo9MTWnsxySOK90U8k= Subject key identifier: 9B:CE:A8:C4:0F:E4:DE:FC:3E:33:A2:A1:3C:F8:83:51:99:C1:56:00 Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256 Certificate serial: 019B7758C0F7CC188AC372D72F6372F2C0EF Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/m86oxA_k3vw-M6KhPPiDUZnBVgA.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 2001:67c:c60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c0:f7:cc:18:8a:c3:72:d7:2f:63:72:f2:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256 Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bcea8c40fe4defc3e33a2a13cf8835199c15600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:0a:50:b5:1c:03:95:34:15:ba:33:5d:02: a6:e3:b6:ec:fb:bd:02:75:43:1c:a7:bf:ee:7b:e2: c0:6b:3b:d9:3c:f3:15:41:20:39:83:d3:a2:7f:3e: 5e:32:7c:29:27:d2:fa:6a:57:1a:5e:9e:17:c4:dc: 96:1c:be:25:99:c8:d3:df:a9:1f:b9:db:1f:f1:7d: c3:5b:d9:b5:8d:ad:bc:a0:14:d0:5b:9d:9f:41:7b: a6:03:8d:4d:7c:25:b1:b4:50:d9:52:89:fa:57:18: 3c:d6:61:c0:37:d3:30:25:29:cc:25:22:12:04:dd: 79:19:ac:13:d9:45:f5:d0:f2:0a:aa:f2:17:bb:c2: 04:fd:78:d4:64:cb:4d:b0:92:ad:c9:62:36:49:eb: 2d:91:d7:a5:14:13:be:a4:a6:14:80:5b:82:26:79: 94:92:48:ad:75:75:e2:fb:b4:2e:c1:0e:f3:0a:bd: 3c:50:87:9f:20:41:a3:8a:3c:0a:a4:a3:3d:28:8c: 8c:70:0c:08:70:c1:ca:13:e6:4a:f3:03:7b:ab:8b: 02:dd:97:4c:f1:62:b4:ac:92:67:66:37:e3:3b:f4: eb:8d:7d:4e:fe:e9:af:db:b0:96:f1:76:09:65:c6: e6:08:c7:9c:26:a5:ad:2f:b1:ad:78:46:01:dc:c2: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:A8:C4:0F:E4:DE:FC:3E:33:A2:A1:3C:F8:83:51:99:C1:56:00 X509v3 Authority Key Identifier: keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/m86oxA_k3vw-M6KhPPiDUZnBVgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c60::/48 Signature Algorithm: sha256WithRSAEncryption 94:b9:6d:04:0e:3a:7a:20:97:82:7a:11:b0:89:82:e2:2d:6e: 5b:bd:5e:ab:ff:66:8b:78:8d:43:bc:ce:44:6a:2c:ed:d6:9a: b6:bf:b6:63:41:5d:30:8b:44:0d:f1:3b:3a:aa:42:2c:92:ec: 5c:ed:1a:9a:91:b0:8a:a3:c2:2c:20:9b:0e:02:64:ba:be:c5: 7d:f1:71:dc:3d:6f:e4:9a:7f:e3:f0:d3:16:29:95:4f:19:6f: 2f:55:9a:fa:29:93:8b:29:f4:a4:76:f9:30:3c:54:e8:9f:09: 06:1d:4b:fb:7f:49:a6:83:a4:c9:66:4c:a8:a3:48:47:62:c0: f4:f9:97:05:29:56:3c:47:50:dd:2d:94:3e:5d:b0:59:d4:04: 3e:68:cb:99:bd:26:0f:ef:68:39:1f:12:dc:93:af:df:43:e4: 4d:31:bc:21:33:1e:c8:d8:dd:0c:43:44:db:39:04:79:a2:d9: a3:bc:03:f3:94:43:5d:10:3f:73:28:3a:99:4d:9c:96:a3:b1: 5d:e3:6c:58:b8:42:9a:7d:9f:7c:c5:a8:3e:9e:65:9e:45:ce: 0e:ed:6b:04:83:98:02:d9:2c:df:ee:00:d7:94:80:74:06:27: 4e:14:39:d8:aa:4c:d6:cc:04:d4:4f:eb:37:1e:9a:45:2c:ec: 35:04:f6:e6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WMD3zBiKw3LXL2Ny8sDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOTA3YWUxOTc3YzIzNTI3YWFkNjY1NmExNDhjNzAzNzJl OWIyNTYwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmNlYThjNDBmZTRkZWZjM2UzM2EyYTEzY2Y4ODM1MTk5YzE1NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nIKULUcA5U0FbozXQKm47bs+70C dUMcp7/ue+LAazvZPPMVQSA5g9Oifz5eMnwpJ9L6alcaXp4XxNyWHL4lmcjT36kf udsf8X3DW9m1ja28oBTQW52fQXumA41NfCWxtFDZUon6Vxg81mHAN9MwJSnMJSIS BN15GawT2UX10PIKqvIXu8IE/XjUZMtNsJKtyWI2SestkdelFBO+pKYUgFuCJnmU kkitdXXi+7QuwQ7zCr08UIefIEGjijwKpKM9KIyMcAwIcMHKE+ZK8wN7q4sC3ZdM 8WK0rJJnZjfjO/TrjX1O/umv27CW8XYJZcbmCMecJqWtL7GteEYB3MLP6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJvOqMQP5N78PjOioTz4g1GZwVYAMB8GA1UdIwQY MBaAFKqQeuGXfCNSeq1mVqFIxwNy6bJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2It OGY1ZjcxM2IzN2FhLzEvbTg2b3hBX2szdnctTTZLaFBQaURVWm5CVmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2ItOGY1ZjcxM2IzN2Fh LzEvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxg MA0GCSqGSIb3DQEBCwUAA4IBAQCUuW0EDjp6IJeCehGwiYLiLW5bvV6r/2aLeI1D vM5Eaizt1pq2v7ZjQV0wi0QN8Ts6qkIskuxc7RqakbCKo8IsIJsOAmS6vsV98XHc PW/kmn/j8NMWKZVPGW8vVZr6KZOLKfSkdvkwPFTonwkGHUv7f0mmg6TJZkyoo0hH YsD0+ZcFKVY8R1DdLZQ+XbBZ1AQ+aMuZvSYP72g5HxLck6/fQ+RNMbwhMx7I2N0M Q0TbOQR5otmjvAPzlENdED9zKDqZTZyWo7Fd42xYuEKafZ98xag+nmWeRc4O7WsE g5gC2Szf7gDXlIB0BidOFDnYqkzWzATUT+s3HppFLOw1BPbm -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:27 2026 by rpki-client