This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6jYCS_OJvprUCtvdSoi7YS1XZl0.roa File: 6jYCS_OJvprUCtvdSoi7YS1XZl0.roa (raw, json) Hash identifier: ZS9qBY16eO2jGjeK+Dz1uD1EbfumuJOF+tyYE9ZoOHw= Subject key identifier: EA:36:02:4B:F3:89:BE:9A:D4:0A:DB:DD:4A:88:BB:61:2D:57:66:5D Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B509C4990EDD0D6CFCF7F10ECE420191C Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6jYCS_OJvprUCtvdSoi7YS1XZl0.roa Signing time: Wed 24 Dec 2025 13:46:18 +0000 ROA not before: Wed 24 Dec 2025 13:46:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212529 IP address blocks: 2a0c:9a40:8900::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:9c:49:90:ed:d0:d6:cf:cf:7f:10:ec:e4:20:19:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 24 13:46:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea36024bf389be9ad40adbdd4a88bb612d57665d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:2b:50:7a:8f:e3:75:dc:50:e8:19:3f:ca: 24:ca:99:a1:fd:4c:1c:d4:d3:8f:53:b6:3a:63:39: d8:a0:34:25:d4:89:90:ae:65:e4:ea:ee:85:fa:6a: 10:b6:71:54:cd:46:49:cd:65:08:f2:6e:85:dd:b1: 36:db:d9:f5:4b:e6:e4:e5:d7:aa:62:ee:db:ba:e9: 5d:59:e9:35:ad:fd:e0:aa:f5:63:87:ff:ef:b0:77: e4:17:6e:3d:15:d6:78:81:16:4c:ae:19:bf:1e:66: 07:21:6e:64:6e:05:43:dd:d5:8b:c8:72:71:2e:d8: 3d:d1:61:cb:53:67:a1:e5:e4:2d:82:dc:7a:1c:a9: c0:b2:6a:43:6c:99:bb:62:69:c7:ec:1e:d0:d4:54: 36:2f:47:ba:48:52:e0:a1:44:f8:cd:8b:8b:ae:65: e5:0a:b1:13:5e:e4:33:15:04:3d:4c:50:ef:b2:8d: 84:d8:af:01:c3:60:c4:ed:f4:37:7f:6c:76:30:5a: c0:36:e2:e1:26:59:78:dc:c8:77:cd:19:61:5d:e1: 73:aa:4d:11:5f:b6:86:c6:c4:7f:e6:5c:87:ea:01: 6a:d6:d7:16:fa:2f:7b:98:df:83:84:15:0d:6e:83: 55:9c:a2:ba:c3:9f:e3:5a:8f:fa:cd:f8:0f:1c:c3: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:36:02:4B:F3:89:BE:9A:D4:0A:DB:DD:4A:88:BB:61:2D:57:66:5D X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6jYCS_OJvprUCtvdSoi7YS1XZl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8900::/44 Signature Algorithm: sha256WithRSAEncryption 41:11:fd:91:97:e4:7a:35:a5:36:04:de:b6:f8:b5:ee:a6:33: be:cc:86:bf:de:0f:5d:02:cb:96:7c:e3:c3:20:f9:53:eb:42: ee:b4:4b:6d:0c:0b:fc:61:79:a7:3c:00:35:13:d1:f5:f0:75: a4:b6:98:89:ed:c7:66:ed:d3:1c:71:82:96:fd:b6:04:99:40: 3a:aa:db:2c:ff:88:b7:9a:4d:75:c8:21:b1:76:43:75:06:b8: fd:86:8c:44:fb:6a:32:1d:47:a9:4a:ef:42:a0:9a:4c:41:49: ea:ee:4f:3f:82:d6:83:66:b0:6b:05:65:f0:19:63:54:09:c2: ee:dd:34:1b:5e:49:f9:01:80:ee:c3:f3:18:91:dc:0f:be:8b: 9a:36:78:8d:7e:b0:d2:e2:ec:04:96:40:db:ae:b2:3d:11:18: 18:8f:21:31:9c:ea:24:ce:ae:4e:e8:9a:32:53:88:73:35:5f: f6:20:cf:d0:6f:2a:fc:2f:fc:b1:17:37:ec:15:fa:d0:03:20: e2:9c:00:2f:ee:19:f8:96:60:5a:31:97:ee:24:ab:23:93:d7: 7a:fa:20:74:a1:21:0a:08:25:fb:78:65:ba:17:b9:46:f3:d7: a6:6b:f4:77:4a:7d:e7:bb:15:66:e4:24:da:d5:20:5f:98:9c: fa:c9:d7:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtQnEmQ7dDWz89/EOzkIBkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjI0MTM0NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTM2MDI0YmYzODliZTlhZDQwYWRiZGQ0YTg4YmI2MTJkNTc2NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuacrUHqP43XcUOgZP8okypmh/Uwc 1NOPU7Y6YznYoDQl1ImQrmXk6u6F+moQtnFUzUZJzWUI8m6F3bE229n1S+bk5deq Yu7buuldWek1rf3gqvVjh//vsHfkF249FdZ4gRZMrhm/HmYHIW5kbgVD3dWLyHJx Ltg90WHLU2eh5eQtgtx6HKnAsmpDbJm7YmnH7B7Q1FQ2L0e6SFLgoUT4zYuLrmXl CrETXuQzFQQ9TFDvso2E2K8Bw2DE7fQ3f2x2MFrANuLhJll43Mh3zRlhXeFzqk0R X7aGxsR/5lyH6gFq1tcW+i97mN+DhBUNboNVnKK6w5/jWo/6zfgPHMNJlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOo2Akvzib6a1Arb3UqIu2EtV2ZdMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNmpZQ1NfT0p2cHJVQ3R2ZFNvaTdZUzFYWmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIkA MA0GCSqGSIb3DQEBCwUAA4IBAQBBEf2Rl+R6NaU2BN62+LXupjO+zIa/3g9dAsuW fOPDIPlT60LutEttDAv8YXmnPAA1E9H18HWktpiJ7cdm7dMccYKW/bYEmUA6qtss /4i3mk11yCGxdkN1Brj9hoxE+2oyHUepSu9CoJpMQUnq7k8/gtaDZrBrBWXwGWNU CcLu3TQbXkn5AYDuw/MYkdwPvouaNniNfrDS4uwElkDbrrI9ERgYjyExnOokzq5O 6JoyU4hzNV/2IM/Qbyr8L/yxFzfsFfrQAyDinAAv7hn4lmBaMZfuJKsjk9d6+iB0 oSEKCCX7eGW6F7lG89ema/R3Sn3nuxVm5CTa1SBfmJz6ydfi -----END CERTIFICATE-----Generated at Sat Dec 27 00:40:35 2025 by rpki-client