This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/1rtm6clJRoFMDJXV0c-2GG9fL6M.roa File: 1rtm6clJRoFMDJXV0c-2GG9fL6M.roa (raw, json) Hash identifier: l/ABnM7DEhxzUDVTB+rSvrItThNbMS8KnR0WYgF+RF4= Subject key identifier: D6:BB:66:E9:C9:49:46:81:4C:0C:95:D5:D1:CF:B6:18:6F:5F:2F:A3 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758EB4BF4157E1A9419DC8668E7902A Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/1rtm6clJRoFMDJXV0c-2GG9fL6M.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210522 IP address blocks: 2a0f:5707:abe0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:eb:4b:f4:15:7e:1a:94:19:dc:86:68:e7:90:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6bb66e9c94946814c0c95d5d1cfb6186f5f2fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:6d:7d:cc:92:69:03:8d:43:35:51:d3:7c: c6:31:93:8f:01:ff:88:d5:d8:fd:f0:08:bf:25:fe: 54:c0:73:fc:14:5e:93:ac:43:fa:12:cc:90:d3:d9: 8f:1b:d6:4f:97:e0:74:7a:7a:1f:8e:9b:eb:02:2b: 71:ff:a1:aa:a7:b3:28:39:0a:0a:f3:81:a7:fe:76: d7:f3:05:d5:5e:8e:f9:85:29:2d:ac:d3:2f:f5:89: a8:c7:79:1b:df:02:d9:7d:63:a9:6d:ab:9a:61:a1: e2:36:e2:78:bf:39:a1:3c:c6:cd:d4:d3:ad:1d:d3: 6d:9d:ee:95:6d:0c:2d:b3:8b:55:b6:f0:2c:80:7f: 23:3c:ea:c1:0f:bc:21:7a:0f:c8:e5:13:b0:4f:0a: c0:57:d2:b6:13:b6:85:e0:8a:62:63:f6:26:ad:51: d4:21:2f:a9:f3:92:fa:94:6d:fa:0e:91:6f:43:32: 14:69:88:d8:3b:14:5a:c6:fe:59:6f:14:73:13:28: ee:57:40:6f:51:a8:70:cd:1c:06:ec:6d:69:d5:ae: f4:3b:9c:4c:69:be:c5:7a:1e:69:43:7f:ed:8f:c0: b6:ab:91:35:a7:a8:e2:8b:1d:8d:a6:cb:93:18:2b: 3c:39:41:9f:7f:22:92:89:5f:24:e3:90:ad:c6:61: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BB:66:E9:C9:49:46:81:4C:0C:95:D5:D1:CF:B6:18:6F:5F:2F:A3 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/1rtm6clJRoFMDJXV0c-2GG9fL6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:abe0::/44 Signature Algorithm: sha256WithRSAEncryption 45:72:22:0b:08:18:7b:5c:09:d0:1f:53:d3:a2:fe:6a:ca:3c: 77:01:cd:97:94:8d:73:8f:34:b3:1f:bb:70:b2:96:ca:ab:be: e0:f4:65:43:8f:fe:15:c5:0c:95:71:a3:74:83:5a:a8:8b:fe: ef:8a:92:4c:91:c6:b8:cb:dc:d5:54:8b:fc:65:30:c8:cf:37: 29:bd:69:8a:f1:d6:88:3b:b2:27:76:90:f1:fb:8b:a6:7f:70: 1b:e7:0a:ca:b0:45:24:87:f1:b9:74:ff:da:a3:e3:e3:ae:23: ff:c9:12:25:8c:8a:6b:71:b7:e4:16:e8:82:fb:31:36:2b:0d: ae:0c:97:15:d4:78:18:99:df:42:1a:ad:49:b0:e1:c5:aa:2b: 57:85:87:d1:43:9a:c7:09:9b:f5:46:42:12:2c:ba:ea:10:cf: ec:55:99:8b:02:8d:d8:de:18:74:f6:44:4d:ea:90:87:9d:e6: 2a:11:90:c2:f9:8c:a9:c7:35:3c:53:a0:f3:52:25:54:29:c6: 1e:09:88:65:1f:49:d6:f5:67:72:c3:e8:f7:aa:56:47:a9:37: e5:6c:14:cf:61:6e:a8:80:39:13:77:01:9d:02:a2:85:58:37: d1:ca:71:91:ae:f0:7c:a1:33:e9:2e:7a:55:3c:e0:24:44:c6: 40:d7:42:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOtL9BV+GpQZ3IZo55AqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmJiNjZlOWM5NDk0NjgxNGMwYzk1ZDVkMWNmYjYxODZmNWYyZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRhtfcySaQONQzVR03zGMZOPAf+I 1dj98Ai/Jf5UwHP8FF6TrEP6EsyQ09mPG9ZPl+B0enofjpvrAitx/6Gqp7MoOQoK 84Gn/nbX8wXVXo75hSktrNMv9Ymox3kb3wLZfWOpbauaYaHiNuJ4vzmhPMbN1NOt HdNtne6VbQwts4tVtvAsgH8jPOrBD7wheg/I5ROwTwrAV9K2E7aF4IpiY/YmrVHU IS+p85L6lG36DpFvQzIUaYjYOxRaxv5ZbxRzEyjuV0BvUahwzRwG7G1p1a70O5xM ab7Feh5pQ3/tj8C2q5E1p6jiix2NpsuTGCs8OUGffyKSiV8k45CtxmGSbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNa7ZunJSUaBTAyV1dHPthhvXy+jMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvMXJ0bTZjbEpSb0ZNREpYVjBjLTJHRzlmTDZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6vg MA0GCSqGSIb3DQEBCwUAA4IBAQBFciILCBh7XAnQH1PTov5qyjx3Ac2XlI1zjzSz H7twspbKq77g9GVDj/4VxQyVcaN0g1qoi/7vipJMkca4y9zVVIv8ZTDIzzcpvWmK 8daIO7IndpDx+4umf3Ab5wrKsEUkh/G5dP/ao+PjriP/yRIljIprcbfkFuiC+zE2 Kw2uDJcV1HgYmd9CGq1JsOHFqitXhYfRQ5rHCZv1RkISLLrqEM/sVZmLAo3Y3hh0 9kRN6pCHneYqEZDC+YypxzU8U6DzUiVUKcYeCYhlH0nW9Wdyw+j3qlZHqTflbBTP YW6ogDkTdwGdAqKFWDfRynGRrvB8oTPpLnpVPOAkRMZA10Jy -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:37 2026 by rpki-client