This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/6W_lqqr4XCqtlozx6jZa_HwcvJE.roa File: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (raw, json) Hash identifier: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw= Subject key identifier: E9:6F:E5:AA:AA:F8:5C:2A:AD:96:8C:F1:EA:36:5A:FC:7C:1C:BC:91 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE1155A8E079C79CDC8E3DCC63343 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/6W_lqqr4XCqtlozx6jZa_HwcvJE.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25016 IP address blocks: 2a02:20c8:9880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e1:15:5a:8e:07:9c:79:cd:c8:e3:dc:c6:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e96fe5aaaaf85c2aad968cf1ea365afc7c1cbc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:b0:d7:20:1d:04:ec:0d:3a:09:13:ee:e1: 63:ec:8b:ad:f5:88:d9:27:60:2a:99:b2:07:51:45: a5:65:f8:ab:00:ec:be:88:32:6e:42:2f:f1:00:8d: 8d:e0:0b:6b:ff:17:c4:17:de:8a:c7:9b:44:07:ec: 13:bb:10:3d:09:06:1e:a2:ae:17:d2:cc:98:bc:56: c4:e7:61:ad:14:74:5f:39:d4:01:c2:f3:e0:97:79: f7:95:b3:dd:47:8c:f6:f4:0e:1a:25:45:0c:6e:51: 26:8e:03:d9:0f:a3:7d:a7:67:6c:08:2e:d0:df:bd: 8d:64:f1:dd:50:de:0a:52:75:22:20:e3:06:8e:fe: 9c:0f:50:9b:24:d8:67:09:08:bf:71:85:68:d3:f2: d2:1b:d3:98:7d:e6:06:1f:0f:a7:00:ab:35:5c:d3: 70:eb:3f:59:6b:15:3b:07:56:33:cb:9f:5b:a7:c6: a0:4d:48:70:a6:62:bd:1d:a3:da:74:92:06:9d:32: b0:65:47:cb:cb:f7:de:34:b4:c3:c9:84:9c:2c:50: d1:dd:3b:b2:64:f0:b0:6f:ae:a0:20:39:a7:c4:cb: 5a:35:d7:b5:3a:7b:92:e5:1b:90:eb:2d:d5:7d:29: c3:ee:84:0c:35:e8:3e:aa:d6:07:af:11:df:15:16: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:E5:AA:AA:F8:5C:2A:AD:96:8C:F1:EA:36:5A:FC:7C:1C:BC:91 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/6W_lqqr4XCqtlozx6jZa_HwcvJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:20c8:9880::/48 Signature Algorithm: sha256WithRSAEncryption 3c:b9:ad:1d:cf:ac:d5:dd:0e:35:85:24:fb:44:23:bc:5c:74: 95:2f:84:a6:8b:05:64:5e:a2:e2:43:e5:f5:90:e3:55:39:8d: 97:51:67:56:d7:e0:e8:dc:84:e1:03:b0:90:30:6f:6a:c9:9b: c3:ec:08:d1:d8:a9:dc:6d:a0:80:ed:9b:04:64:18:11:c9:59: ef:a5:43:8a:cd:f2:87:2b:31:38:b8:35:38:6a:1b:ee:15:26: 58:62:9d:e9:05:9d:24:8d:ec:d8:a2:2c:6f:45:96:68:e5:c3: a1:cb:c1:8a:ff:d8:77:b4:89:4b:bb:ee:ae:20:e0:36:73:1c: 32:3f:0d:c5:01:16:92:9b:f1:f6:81:d2:c7:2b:c1:83:eb:78: 6c:b0:8e:22:0f:14:7b:04:34:3c:28:bd:e7:6e:36:26:26:bd: 66:be:c6:09:4b:82:7c:8e:e3:4c:4d:df:30:7f:fb:0c:be:bc: 3d:c7:56:cb:11:fa:29:8a:de:45:6d:87:3c:7a:25:72:b2:20: 12:1a:4e:09:82:e9:86:4b:b5:f9:93:e7:8e:92:94:92:04:51: 5f:4e:6b:99:0b:92:d6:f2:91:27:81:8c:95:62:cd:fc:3b:a2: 15:7b:fa:29:4f:8f:4c:d8:27:77:88:aa:0e:7d:e8:90:af:c9: fc:a1:10:e8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87OEVWo4HnHnNyOPcxjNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTZmZTVhYWFhZjg1YzJhYWQ5NjhjZjFlYTM2NWFmYzdjMWNiYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVSw1yAdBOwNOgkT7uFj7Iut9YjZ J2AqmbIHUUWlZfirAOy+iDJuQi/xAI2N4Atr/xfEF96Kx5tEB+wTuxA9CQYeoq4X 0syYvFbE52GtFHRfOdQBwvPgl3n3lbPdR4z29A4aJUUMblEmjgPZD6N9p2dsCC7Q 372NZPHdUN4KUnUiIOMGjv6cD1CbJNhnCQi/cYVo0/LSG9OYfeYGHw+nAKs1XNNw 6z9ZaxU7B1Yzy59bp8agTUhwpmK9HaPadJIGnTKwZUfLy/feNLTDyYScLFDR3Tuy ZPCwb66gIDmnxMtaNde1OnuS5RuQ6y3VfSnD7oQMNeg+qtYHrxHfFRaDfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOlv5aqq+FwqrZaM8eo2Wvx8HLyRMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvNldfbHFxcjRYQ3F0bG96eDZqWmFfSHdjdkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgyJiA MA0GCSqGSIb3DQEBCwUAA4IBAQA8ua0dz6zV3Q41hST7RCO8XHSVL4SmiwVkXqLi Q+X1kONVOY2XUWdW1+Do3IThA7CQMG9qyZvD7AjR2KncbaCA7ZsEZBgRyVnvpUOK zfKHKzE4uDU4ahvuFSZYYp3pBZ0kjezYoixvRZZo5cOhy8GK/9h3tIlLu+6uIOA2 cxwyPw3FARaSm/H2gdLHK8GD63hssI4iDxR7BDQ8KL3nbjYmJr1mvsYJS4J8juNM Td8wf/sMvrw9x1bLEfopit5FbYc8eiVysiASGk4JgumGS7X5k+eOkpSSBFFfTmuZ C5LW8pEngYyVYs38O6IVe/opT49M2Cd3iKoOfeiQr8n8oRDo -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:57 2026 by rpki-client