This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/2V6XsfRamSPZfXogwVvMnoXo6tg.roa File: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (raw, json) Hash identifier: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII= Subject key identifier: D9:5E:97:B1:F4:5A:99:23:D9:7D:7A:20:C1:5B:CC:9E:85:E8:EA:D8 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B7BA5232AB1491507A090AA87ED258A2F Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/2V6XsfRamSPZfXogwVvMnoXo6tg.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212390 IP address blocks: 2a04:2b00:14dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:2a:b1:49:15:07:a0:90:aa:87:ed:25:8a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d95e97b1f45a9923d97d7a20c15bcc9e85e8ead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:bc:22:83:75:72:55:89:e6:d9:98:b4:da: 9c:7d:4d:e3:6b:4e:8c:8d:e9:85:26:49:06:ce:b6: 47:c7:17:7f:11:97:d2:d2:55:5e:ee:58:63:d1:7a: 70:a6:02:35:5a:56:f7:fa:26:1b:c4:c9:cf:86:bd: d0:bd:5a:76:8c:21:99:20:9c:9d:47:43:f5:60:ba: 13:45:6f:30:0a:f9:62:34:e3:e6:a6:aa:5e:b4:af: 0c:ce:7f:1c:b7:be:13:03:f5:29:16:dc:89:b7:1f: 62:23:bf:2a:46:dd:62:8a:a7:34:0f:b4:0f:8c:43: 24:72:54:a7:64:25:41:15:0a:3f:00:c8:2f:5f:c3: 57:b5:a3:8b:fe:5a:9c:bd:f4:27:fd:5b:8b:bb:be: 86:54:d2:13:a6:0d:3f:77:7a:21:70:01:d6:a8:8d: 40:46:59:d1:72:a2:1a:95:fc:65:95:70:b9:ee:71: e7:f3:5b:51:52:c7:b7:4b:68:64:cd:fc:0c:22:aa: 2a:fb:fd:b2:3c:04:25:64:48:03:84:f3:fb:25:51: 99:ec:7c:50:52:d6:fb:fc:b5:51:37:dd:8b:0d:f9: cb:8a:da:c3:7e:57:0d:72:04:c7:78:d1:44:17:57: 92:83:ef:72:94:09:92:3b:48:0b:d6:d4:d2:f5:23: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5E:97:B1:F4:5A:99:23:D9:7D:7A:20:C1:5B:CC:9E:85:E8:EA:D8 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/2V6XsfRamSPZfXogwVvMnoXo6tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:2b00:14dd::/48 Signature Algorithm: sha256WithRSAEncryption 91:ec:62:d2:3a:60:fb:23:99:f1:61:61:8b:8a:84:1e:3f:8f: 31:a4:80:51:f2:ac:5b:3a:87:4e:df:66:c4:bf:d1:08:25:90: 6c:9f:27:ce:ea:78:4f:04:6f:69:2b:58:f5:9d:2a:eb:23:eb: 11:f3:a2:98:6d:92:47:60:20:bd:b0:6c:ce:54:cd:25:90:97: 50:63:2b:b0:47:01:86:a7:6f:74:7b:96:77:23:44:52:ed:83: dc:c4:5d:9e:1f:87:cb:04:3b:fb:99:d8:82:17:01:d8:37:cd: 1c:94:97:43:9e:6d:1c:cb:d0:83:e9:b6:e9:a5:02:73:b9:f3: 02:ef:01:32:bc:a5:ed:0f:c7:5e:20:e1:dd:35:18:e3:39:82: fc:a3:f3:5a:27:f4:e1:15:c4:67:a5:ba:08:78:d1:97:41:58: 2d:d8:39:db:a2:ca:77:b2:44:c6:3f:4c:be:27:2d:f3:37:38: 78:03:ba:62:25:9f:46:30:6c:f8:d6:c0:6f:6a:21:1b:d3:ec: 1c:55:2d:c1:a4:97:15:af:e9:36:03:56:ed:ab:21:6f:e0:18: f9:15:39:da:43:91:6c:4c:e4:c1:33:35:33:e4:42:51:ae:73: e0:72:ae:fc:34:82:9a:03:ca:37:72:54:d9:88:d1:aa:c5:31: 7c:55:24:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pSMqsUkVB6CQqoftJYovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTVlOTdiMWY0NWE5OTIzZDk3ZDdhMjBjMTViY2M5ZTg1ZThlYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuC8IoN1clWJ5tmYtNqcfU3ja06M jemFJkkGzrZHxxd/EZfS0lVe7lhj0XpwpgI1Wlb3+iYbxMnPhr3QvVp2jCGZIJyd R0P1YLoTRW8wCvliNOPmpqpetK8Mzn8ct74TA/UpFtyJtx9iI78qRt1iiqc0D7QP jEMkclSnZCVBFQo/AMgvX8NXtaOL/lqcvfQn/VuLu76GVNITpg0/d3ohcAHWqI1A RlnRcqIalfxllXC57nHn81tRUse3S2hkzfwMIqoq+/2yPAQlZEgDhPP7JVGZ7HxQ Utb7/LVRN92LDfnLitrDflcNcgTHeNFEF1eSg+9ylAmSO0gL1tTS9SOR6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNlel7H0Wpkj2X16IMFbzJ6F6OrYMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvMlY2WHNmUmFtU1BaZlhvZ3dWdk1ub1hvNnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgQrABTd MA0GCSqGSIb3DQEBCwUAA4IBAQCR7GLSOmD7I5nxYWGLioQeP48xpIBR8qxbOodO 32bEv9EIJZBsnyfO6nhPBG9pK1j1nSrrI+sR86KYbZJHYCC9sGzOVM0lkJdQYyuw RwGGp290e5Z3I0RS7YPcxF2eH4fLBDv7mdiCFwHYN80clJdDnm0cy9CD6bbppQJz ufMC7wEyvKXtD8deIOHdNRjjOYL8o/NaJ/ThFcRnpboIeNGXQVgt2Dnbosp3skTG P0y+Jy3zNzh4A7piJZ9GMGz41sBvaiEb0+wcVS3BpJcVr+k2A1btqyFv4Bj5FTna Q5FsTOTBMzUz5EJRrnPgcq78NIKaA8o3clTZiNGqxTF8VST8 -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:39 2026 by rpki-client