This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/v6jE1I_1KnawMolAIIFEXyMcQs0.roa File: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (raw, json) Hash identifier: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg= Subject key identifier: BF:A8:C4:D4:8F:F5:2A:76:B0:32:89:40:20:81:44:5F:23:1C:42:CD Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019B7A5B48F1E0C526DA4A0144FD21661C3F Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/v6jE1I_1KnawMolAIIFEXyMcQs0.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202590 IP address blocks: 2a04:5d00:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:48:f1:e0:c5:26:da:4a:01:44:fd:21:66:1c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfa8c4d48ff52a76b03289402081445f231c42cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:fb:81:b4:c8:30:59:10:97:c0:b4:30:71: ef:0b:07:9a:ff:dd:01:a7:93:7a:cc:fa:98:eb:fb: 33:62:b2:a0:7a:46:49:3b:1f:7f:87:bd:61:94:df: 1a:92:2d:34:a3:0c:c3:b1:7b:f5:14:a1:88:bf:6d: bb:24:d2:f9:75:13:a9:a6:3d:e4:ce:fc:5d:31:19: aa:6e:25:3a:6b:c0:41:ad:ed:cc:9f:13:6e:af:e1: 94:e1:7e:58:bb:29:65:f7:b6:b4:bb:33:f0:cf:c6: 27:2b:11:e3:ca:22:ea:ce:56:81:93:81:a7:34:01: 1f:be:d7:34:57:0e:ab:10:1d:6d:d9:94:34:af:a5: 0f:36:24:8f:9a:0c:aa:89:96:40:c7:4f:e5:fc:b4: 65:6d:7b:a8:20:6b:2e:31:f0:63:70:a7:ea:a4:36: 5b:ff:de:d8:e0:6f:4a:df:45:71:b3:78:e4:a5:55: 8f:7a:a4:ef:23:68:1e:b6:51:fb:28:f9:67:e2:6d: 50:c9:b7:a6:53:2b:65:2b:c1:8f:53:1a:f7:98:f7: 26:60:12:59:2c:e2:1f:7b:7f:41:05:84:88:dc:93: cf:96:83:f6:d9:99:89:51:fc:f0:cb:44:0b:b4:41: dd:75:50:5e:14:79:8d:1a:29:2a:96:6b:6f:81:6f: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A8:C4:D4:8F:F5:2A:76:B0:32:89:40:20:81:44:5F:23:1C:42:CD X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/v6jE1I_1KnawMolAIIFEXyMcQs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5d00:70::/48 Signature Algorithm: sha256WithRSAEncryption 77:11:bf:5e:e3:78:bd:30:8e:c8:09:dc:6e:90:17:06:1c:82: 61:0a:7f:86:dc:26:15:7a:f2:33:19:85:c8:d3:84:8b:aa:8d: 58:7f:da:68:21:46:09:80:b0:62:ba:22:04:40:72:dd:95:bb: c2:dc:e2:14:fa:f7:f4:d7:b0:da:8a:cd:6a:73:d6:eb:27:b7: 92:fa:20:f4:ed:56:2a:61:80:db:6b:16:cb:c6:d0:e8:a3:f7: d5:b2:a5:7b:75:3c:2e:b1:dd:d1:3f:68:b4:b5:1d:c2:82:ec: 61:40:f0:82:97:67:38:37:ed:9e:b8:8d:c2:09:10:d5:90:9c: b4:71:33:5e:b9:ce:28:81:ac:86:3f:ab:a4:99:6f:76:5b:ca: 8e:0d:13:6b:f8:20:e1:00:ec:1b:6c:48:f8:bd:f5:44:e0:1e: 40:53:5d:81:9f:70:8c:ce:f0:d3:c1:43:9f:a3:bb:04:d5:8b: e4:6a:32:53:34:23:f3:fc:b7:da:b2:71:71:cf:92:2c:5f:3a: 46:c1:a7:75:60:50:59:78:b0:8f:1f:96:42:48:03:15:b5:08: b7:8a:cf:dc:81:d1:c9:1b:a2:3e:91:65:c2:2d:b0:65:54:b2: 64:24:4a:c3:7a:4b:04:bd:bd:a8:d2:25:a9:d0:10:84:a7:8b: 15:de:12:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W0jx4MUm2koBRP0hZhw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmE4YzRkNDhmZjUyYTc2YjAzMjg5NDAyMDgxNDQ1ZjIzMWM0MmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ77gbTIMFkQl8C0MHHvCwea/90B p5N6zPqY6/szYrKgekZJOx9/h71hlN8aki00owzDsXv1FKGIv227JNL5dROppj3k zvxdMRmqbiU6a8BBre3MnxNur+GU4X5Yuyll97a0uzPwz8YnKxHjyiLqzlaBk4Gn NAEfvtc0Vw6rEB1t2ZQ0r6UPNiSPmgyqiZZAx0/l/LRlbXuoIGsuMfBjcKfqpDZb /97Y4G9K30Vxs3jkpVWPeqTvI2getlH7KPln4m1QybemUytlK8GPUxr3mPcmYBJZ LOIfe39BBYSI3JPPloP22ZmJUfzwy0QLtEHddVBeFHmNGikqlmtvgW8MSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL+oxNSP9Sp2sDKJQCCBRF8jHELNMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvdjZqRTFJXzFLbmF3TW9sQUlJRkVYeU1jUXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRdAABw MA0GCSqGSIb3DQEBCwUAA4IBAQB3Eb9e43i9MI7ICdxukBcGHIJhCn+G3CYVevIz GYXI04SLqo1Yf9poIUYJgLBiuiIEQHLdlbvC3OIU+vf017Dais1qc9brJ7eS+iD0 7VYqYYDbaxbLxtDoo/fVsqV7dTwusd3RP2i0tR3CguxhQPCCl2c4N+2euI3CCRDV kJy0cTNeuc4ogayGP6ukmW92W8qODRNr+CDhAOwbbEj4vfVE4B5AU12Bn3CMzvDT wUOfo7sE1YvkajJTNCPz/LfasnFxz5IsXzpGwad1YFBZeLCPH5ZCSAMVtQi3is/c gdHJG6I+kWXCLbBlVLJkJErDeksEvb2o0iWp0BCEp4sV3hL/ -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:50 2026 by rpki-client