This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa File: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (raw, json) Hash identifier: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo= Subject key identifier: E8:F9:DB:F6:ED:BE:73:57:8C:84:01:A2:47:00:42:79:04:D3:E2:BA Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B77589B14D78B994AB6F5D661A82A1651 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213613 IP address blocks: 2a0f:ca82:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9b:14:d7:8b:99:4a:b6:f5:d6:61:a8:2a:16:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f9dbf6edbe73578c8401a24700427904d3e2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:97:ed:c0:5a:03:19:55:83:4e:af:a8:0c: 35:35:55:8c:9b:49:9a:77:48:83:e5:d2:c4:2b:16: b1:77:90:c6:6c:26:75:8b:b5:10:53:e2:f2:f2:d4: 30:2c:47:b5:76:52:ca:6a:03:18:64:21:ed:83:24: 48:e9:52:d6:5d:89:4b:e1:ce:6a:d3:d3:bd:44:26: 7e:a5:ba:4e:f8:0b:e1:78:f8:e5:ca:c5:c0:30:7c: 5f:30:84:40:f2:ff:68:16:56:62:8b:21:3d:17:b1: b8:97:0d:bc:79:3a:cb:d1:6b:45:ad:5c:c7:bf:83: c4:36:1f:6a:50:ba:25:e6:5e:45:7c:e3:4c:88:7f: 1c:35:7c:55:7d:b0:d4:24:04:7d:f3:26:6d:82:f9: a0:89:d1:25:5c:1b:e7:41:4c:20:ad:23:7c:1a:fc: dc:21:b5:7e:46:d9:8b:ee:a4:b9:6c:f4:27:e4:a1: 6e:d2:a7:75:39:c8:03:15:68:3b:fc:b4:fd:bf:e0: 88:64:a9:c9:4d:3c:3e:23:aa:fc:67:87:33:99:c3: 63:7a:92:c4:36:81:16:d9:44:5f:df:65:21:d3:9f: 57:18:fe:df:fa:40:10:c9:01:38:56:f8:e1:a4:77: 36:bb:bc:c3:2d:11:14:46:f7:65:1b:17:81:0f:75: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:DB:F6:ED:BE:73:57:8C:84:01:A2:47:00:42:79:04:D3:E2:BA X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca82:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 5f:34:ac:fa:b0:93:0b:ba:66:a4:99:f7:09:af:08:6e:88:ef: 1a:b6:52:4b:77:aa:01:82:aa:b2:f2:d8:03:16:4d:fb:d1:26: 46:5f:c9:c2:db:0d:fe:04:49:0f:02:cb:73:9d:23:3e:6d:d0: 1f:df:ba:e6:04:59:09:a7:ca:35:f9:e0:92:cd:32:a7:5a:f4: 40:3b:e5:6b:00:f7:f2:0f:c0:93:ab:20:94:79:25:91:c1:52: 10:de:e5:55:f4:e5:4a:c2:18:18:c0:6a:8f:59:a4:86:23:9e: a8:22:f6:ee:15:cf:b2:e3:5b:cc:0c:0c:27:25:81:e3:7e:6e: 25:ee:b0:83:ad:75:d3:e9:f0:28:13:fa:07:2c:e7:9e:c1:31: 51:cf:04:ca:ab:3f:b2:44:b2:ff:df:60:93:3b:05:34:5f:cb: 47:c0:ce:e9:b9:90:77:39:d7:66:df:7e:9f:9f:6a:61:56:7e: 5f:46:00:ef:bd:61:c8:58:68:6e:ee:b3:3e:0c:95:7a:12:d4: 29:12:ce:86:88:9d:b9:17:97:57:44:c7:86:a0:8f:37:26:92: 7c:42:2c:0f:3b:22:c3:7c:5e:f3:0f:ac:67:cc:80:7c:15:1b: c1:e4:83:19:28:a9:e3:e4:45:15:1d:a9:9f:5b:b9:d5:6f:42: 50:a4:dc:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WJsU14uZSrb11mGoKhZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGY5ZGJmNmVkYmU3MzU3OGM4NDAxYTI0NzAwNDI3OTA0ZDNlMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIqX7cBaAxlVg06vqAw1NVWMm0ma d0iD5dLEKxaxd5DGbCZ1i7UQU+Ly8tQwLEe1dlLKagMYZCHtgyRI6VLWXYlL4c5q 09O9RCZ+pbpO+AvhePjlysXAMHxfMIRA8v9oFlZiiyE9F7G4lw28eTrL0WtFrVzH v4PENh9qULol5l5FfONMiH8cNXxVfbDUJAR98yZtgvmgidElXBvnQUwgrSN8Gvzc IbV+RtmL7qS5bPQn5KFu0qd1OcgDFWg7/LT9v+CIZKnJTTw+I6r8Z4czmcNjepLE NoEW2URf32Uh059XGP7f+kAQyQE4VvjhpHc2u7zDLREURvdlGxeBD3XRfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOj52/btvnNXjIQBokcAQnkE0+K6MB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvNlBuYjl1Mi1jMWVNaEFHaVJ3QkNlUVRUNHJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/KgrAL MA0GCSqGSIb3DQEBCwUAA4IBAQBfNKz6sJMLumakmfcJrwhuiO8atlJLd6oBgqqy 8tgDFk370SZGX8nC2w3+BEkPAstznSM+bdAf37rmBFkJp8o1+eCSzTKnWvRAO+Vr APfyD8CTqyCUeSWRwVIQ3uVV9OVKwhgYwGqPWaSGI56oIvbuFc+y41vMDAwnJYHj fm4l7rCDrXXT6fAoE/oHLOeewTFRzwTKqz+yRLL/32CTOwU0X8tHwM7puZB3Oddm 336fn2phVn5fRgDvvWHIWGhu7rM+DJV6EtQpEs6GiJ25F5dXRMeGoI83JpJ8QiwP OyLDfF7zD6xnzIB8FRvB5IMZKKnj5EUVHamfW7nVb0JQpNza -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:39 2026 by rpki-client