This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa File: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (raw, json) Hash identifier: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk= Subject key identifier: 0A:BD:11:41:12:B3:80:6E:2A:14:D2:7F:64:74:7D:2C:0A:4E:B7:BB Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Certificate serial: 019B7D5B7942C3658C343B0E79F1E1FD90BB Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa Signing time: Fri 02 Jan 2026 06:18:25 +0000 ROA not before: Fri 02 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215568 IP address blocks: 2a10:6e44::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:79:42:c3:65:8c:34:3b:0e:79:f1:e1:fd:90:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0abd114112b3806e2a14d27f64747d2c0a4eb7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:7e:5e:9f:a2:a7:c8:7b:03:ef:12:85:2a: 35:46:13:e6:17:3a:36:e5:5a:48:e5:d5:6f:61:e8: b0:fb:d9:e1:90:d2:02:07:30:0c:3c:51:c2:c6:58: 20:66:6b:0f:68:2a:9a:4f:88:65:48:92:71:74:98: 7b:83:f5:00:83:5a:f8:0c:0f:16:43:45:eb:f7:dc: f0:a1:c2:29:db:3a:95:d5:3e:ea:6a:3e:4b:73:f8: 05:bb:db:3d:62:3c:e1:fc:4d:d0:c0:ab:28:97:d6: e5:f0:25:21:e0:34:95:ef:7f:e1:ca:6a:6d:46:2c: 9a:bc:e6:89:0b:38:df:54:57:ad:79:fa:43:f6:3b: 77:6d:38:66:87:8d:74:67:a0:85:4a:e4:5c:63:8c: b3:17:dc:86:a0:25:ac:c4:45:b4:9b:03:37:18:40: a2:5e:46:57:67:b8:66:10:46:37:9e:7c:ae:96:e0: 5a:41:15:83:d5:de:ad:71:4e:e6:6a:ee:17:68:f7: 61:b2:ca:83:5e:84:3b:d6:56:a8:31:78:cf:15:35: 52:c6:76:52:11:73:58:42:fb:73:4d:51:45:aa:a1: ee:5f:40:7c:c7:8a:16:a4:0e:2e:47:f9:61:91:77: 80:f1:df:10:18:a0:86:13:03:39:45:4d:49:bb:b2: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:11:41:12:B3:80:6E:2A:14:D2:7F:64:74:7D:2C:0A:4E:B7:BB X509v3 Authority Key Identifier: keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:6e44::/30 Signature Algorithm: sha256WithRSAEncryption 82:65:91:0c:62:fd:ea:55:3b:89:b0:e3:5c:fa:99:56:f0:07: 14:90:00:9c:aa:75:38:41:07:cc:61:cb:fc:f6:0b:5a:52:b0: 77:10:54:d5:20:7c:a7:07:a0:00:6c:55:e4:f8:16:9e:cb:20: bf:6d:2f:5f:92:d4:59:44:81:2b:67:fa:17:d0:9e:38:1a:96: 14:be:97:85:80:27:ee:14:bf:37:83:06:52:e3:e4:48:2e:30: bc:b8:74:9f:96:e4:49:24:9d:44:fe:97:e2:b1:31:34:4f:3a: af:5a:cb:57:19:b1:71:9f:3c:8d:5b:88:c8:22:50:6f:36:af: 00:c7:3e:ad:40:d5:f6:46:23:28:b3:23:c1:e0:17:c3:3a:e3: 62:79:2a:f7:9a:be:b3:10:19:91:0f:04:ca:0a:b4:96:f3:ca: b7:b3:51:be:e7:d7:da:11:de:d5:b2:9f:b7:8c:0c:39:32:48: f3:d1:92:94:06:a7:41:e5:cb:95:cc:9b:30:eb:4c:48:58:11: 43:6c:1b:e4:80:17:e0:c8:64:ef:84:f4:21:22:9e:a2:11:09: 81:61:31:b3:cf:1e:b6:2d:fd:49:90:d1:ce:b6:ce:e3:06:a7: 83:3c:30:33:07:81:7d:9d:ca:90:80:63:04:57:2b:3d:5e:38: 77:cd:a0:a7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W3lCw2WMNDsOefHh/ZC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0 M2YxNzQwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWJkMTE0MTEyYjM4MDZlMmExNGQyN2Y2NDc0N2QyYzBhNGViN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruF+Xp+ip8h7A+8ShSo1RhPmFzo2 5VpI5dVvYeiw+9nhkNICBzAMPFHCxlggZmsPaCqaT4hlSJJxdJh7g/UAg1r4DA8W Q0Xr99zwocIp2zqV1T7qaj5Lc/gFu9s9Yjzh/E3QwKsol9bl8CUh4DSV73/hympt RiyavOaJCzjfVFetefpD9jt3bThmh410Z6CFSuRcY4yzF9yGoCWsxEW0mwM3GECi XkZXZ7hmEEY3nnyuluBaQRWD1d6tcU7mau4XaPdhssqDXoQ71laoMXjPFTVSxnZS EXNYQvtzTVFFqqHuX0B8x4oWpA4uR/lhkXeA8d8QGKCGEwM5RU1Ju7LYgQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAq9EUESs4BuKhTSf2R0fSwKTre7MB8GA1UdIwQY MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt ZmI0YzU0YjY3MzNhLzEvQ3IwUlFSS3pnRzRxRk5KX1pIUjlMQXBPdDdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhBuRDAN BgkqhkiG9w0BAQsFAAOCAQEAgmWRDGL96lU7ibDjXPqZVvAHFJAAnKp1OEEHzGHL /PYLWlKwdxBU1SB8pwegAGxV5PgWnssgv20vX5LUWUSBK2f6F9CeOBqWFL6XhYAn 7hS/N4MGUuPkSC4wvLh0n5bkSSSdRP6X4rExNE86r1rLVxmxcZ88jVuIyCJQbzav AMc+rUDV9kYjKLMjweAXwzrjYnkq95q+sxAZkQ8Eygq0lvPKt7NRvufX2hHe1bKf t4wMOTJI89GSlAanQeXLlcybMOtMSFgRQ2wb5IAX4Mhk74T0ISKeohEJgWExs88e ti39SZDRzrbO4wangzwwMweBfZ3KkIBjBFcrPV44d82gpw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:58 2026 by rpki-client