This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6AFK5mM_pkipVa4oA9KBEWU4GOg.roa File: 6AFK5mM_pkipVa4oA9KBEWU4GOg.roa (raw, json) Hash identifier: b5KDMk7GsOPse1kur30II4LepcAGcu3lQy08H1+wE14= Subject key identifier: E8:01:4A:E6:63:3F:A6:48:A9:55:AE:28:03:D2:81:11:65:38:18:E8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D23DB30A87187F0175310F33C440A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6AFK5mM_pkipVa4oA9KBEWU4GOg.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210320 IP address blocks: 2a0e:b107:18c0::/48 maxlen: 48 2a0e:b107:18c1::/48 maxlen: 48 2a0e:b107:18c2::/48 maxlen: 48 2a0e:b107:18c3::/48 maxlen: 48 2a0e:b107:18c4::/48 maxlen: 48 2a0e:b107:18c5::/48 maxlen: 48 2a0e:b107:18c6::/48 maxlen: 48 2a0e:b107:18c7::/48 maxlen: 48 2a0e:b107:18c8::/48 maxlen: 48 2a0e:b107:18c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:23:db:30:a8:71:87:f0:17:53:10:f3:3c:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8014ae6633fa648a955ae2803d28111653818e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:7c:7c:b4:04:b3:56:7e:8f:6d:ca:6e:6f: 63:65:88:52:4f:1f:6d:d0:29:03:aa:ea:3d:72:a3: f0:50:fb:56:6d:a9:85:67:b9:7e:6f:ae:1b:3e:9d: db:b4:60:bf:57:0d:ca:72:be:e7:30:ab:f3:ad:f5: f4:8a:6b:8e:f0:e9:07:5a:96:3b:75:13:df:73:3a: 5f:a0:a9:5d:f2:b6:47:d0:62:f9:0b:26:13:b7:f3: ef:0a:13:28:df:10:23:c4:5b:30:3a:27:66:ed:03: 7e:93:37:54:99:fc:6c:96:76:21:81:b1:57:5c:e9: ed:7d:ed:d3:8c:b8:83:56:86:e6:48:c2:fc:bd:a3: f1:e8:3a:02:a2:77:6b:61:2a:de:b3:7c:7b:88:d3: c5:e0:73:a8:93:be:8f:65:17:35:d4:cc:93:c5:4d: a4:44:2a:d5:a8:66:00:43:15:c1:b3:da:55:15:da: cf:62:a2:c4:64:b4:32:e5:cb:1b:ea:19:ce:1b:b4: 89:b3:b7:52:4e:7c:d7:3a:8a:58:a4:68:b2:6c:2b: 47:26:e1:2e:83:42:43:7f:2f:8f:59:7b:f9:b6:1c: 4c:d1:9e:5f:68:db:5a:5e:bc:a5:1f:57:c6:ba:a2: 66:68:87:87:37:73:ff:e2:67:c2:33:2c:9d:62:86: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:01:4A:E6:63:3F:A6:48:A9:55:AE:28:03:D2:81:11:65:38:18:E8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6AFK5mM_pkipVa4oA9KBEWU4GOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:18c0::-2a0e:b107:18c9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6e:9e:6f:86:ba:4c:21:b7:ac:e0:85:df:f7:1a:66:d8:10:1b: e0:35:99:3c:2a:8b:c2:ba:61:18:c2:5e:36:e0:d4:84:5d:5d: bd:40:04:94:0e:f9:83:ff:4e:00:6d:65:64:99:ee:20:91:f8: 31:a7:a4:ea:d9:3a:2a:52:17:83:6b:04:cd:56:17:78:48:0c: bc:c8:2a:c6:f9:72:c5:99:82:0d:30:f9:b6:d6:02:a9:ed:07: 69:36:ad:af:01:6c:e9:14:c5:99:cd:72:62:88:af:a3:74:f4: db:f0:a3:3b:52:8f:66:56:4c:4c:ed:26:5c:ff:42:d7:34:dc: 0e:1b:ea:5c:1c:f4:8f:db:68:50:da:34:f2:cb:63:d6:d1:c9: 55:44:04:d9:2f:80:18:95:52:3e:8a:90:46:0d:e2:a3:e0:e0: 89:e3:a4:3e:14:da:4b:36:37:d8:57:f6:ca:42:b5:a7:56:01: 67:35:33:01:5e:ba:16:a6:96:f8:04:5e:7a:8d:2e:bf:f9:e6: 25:77:67:9e:c3:f5:d3:fc:cf:be:50:95:fd:f6:92:53:e9:e3: cb:24:5e:2a:31:cc:bb:67:cd:f6:d7:94:97:b0:b9:3a:1d:a7: 82:25:51:ef:c7:af:7d:1d:f4:c5:2f:16:a6:6b:54:e3:50:5d: 24:b0:9d:84 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XSPbMKhxh/AXUxDzPEQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODAxNGFlNjYzM2ZhNjQ4YTk1NWFlMjgwM2QyODExMTY1MzgxOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhZ8fLQEs1Z+j23Kbm9jZYhSTx9t 0CkDquo9cqPwUPtWbamFZ7l+b64bPp3btGC/Vw3Kcr7nMKvzrfX0imuO8OkHWpY7 dRPfczpfoKld8rZH0GL5CyYTt/PvChMo3xAjxFswOidm7QN+kzdUmfxslnYhgbFX XOntfe3TjLiDVobmSML8vaPx6DoCondrYSres3x7iNPF4HOok76PZRc11MyTxU2k RCrVqGYAQxXBs9pVFdrPYqLEZLQy5csb6hnOG7SJs7dSTnzXOopYpGiybCtHJuEu g0JDfy+PWXv5thxM0Z5faNtaXrylH1fGuqJmaIeHN3P/4mfCMyydYoa5ewIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOgBSuZjP6ZIqVWuKAPSgRFlOBjoMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNkFGSzVtTV9wa2lwVmE0b0E5S0JFV1U0R09nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYqDrEH GMADBwEqDrEHGMgwDQYJKoZIhvcNAQELBQADggEBAG6eb4a6TCG3rOCF3/caZtgQ G+A1mTwqi8K6YRjCXjbg1IRdXb1ABJQO+YP/TgBtZWSZ7iCR+DGnpOrZOipSF4Nr BM1WF3hIDLzIKsb5csWZgg0w+bbWAqntB2k2ra8BbOkUxZnNcmKIr6N09NvwoztS j2ZWTEztJlz/Qtc03A4b6lwc9I/baFDaNPLLY9bRyVVEBNkvgBiVUj6KkEYN4qPg 4InjpD4U2ks2N9hX9spCtadWAWc1MwFeuhamlvgEXnqNLr/55iV3Z57D9dP8z75Q lf32klPp48skXioxzLtnzfbXlJewuTodp4IlUe/Hr30d9MUvFqZrVONQXSSwnYQ= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:49 2026 by rpki-client