This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/6aTD1Diwy8BcVWDzJkFw59razas.roa File: 6aTD1Diwy8BcVWDzJkFw59razas.roa (raw, json) Hash identifier: x3rYw4DajkMDPWuTUBdkKJsPp8gMyPGdL85l8NrV1aI= Subject key identifier: E9:A4:C3:D4:38:B0:CB:C0:5C:55:60:F3:26:41:70:E7:DA:DA:CD:AB Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Certificate serial: 019B7EA57E05998F9C6DA7DC268BBA028861 Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/6aTD1Diwy8BcVWDzJkFw59razas.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210695 IP address blocks: 2a0a:2e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7e:05:99:8f:9c:6d:a7:dc:26:8b:ba:02:88:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9a4c3d438b0cbc05c5560f3264170e7dadacdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:44:81:36:62:0f:07:e1:83:f9:d8:a6:87: 2f:a9:84:ca:bc:9a:e4:58:0d:98:de:28:6e:be:9e: 99:84:cd:fe:f2:89:06:4b:6b:62:ba:99:03:97:b6: 42:02:e0:04:13:1a:06:b3:4a:b4:3f:41:76:ef:19: e4:e2:0e:4c:8c:52:ab:05:9f:c1:90:38:e8:60:be: 4b:17:bb:f7:0f:64:2b:a8:37:3c:a6:6e:20:4b:48: 1c:0e:bf:e2:9f:63:68:f2:0d:dc:d7:6f:e1:8a:3d: 1f:20:46:79:bd:10:ef:7f:21:3d:5f:cd:7d:21:c5: 21:79:87:16:14:75:b0:9a:96:d1:92:d5:a9:21:03: be:35:0e:51:0d:f1:af:05:0f:55:17:ed:b3:15:61: b0:97:dc:56:f8:5d:dc:52:e2:a7:d5:45:1c:f9:fe: 87:91:79:40:a7:4f:41:1a:05:b1:03:c9:1a:ba:eb: de:56:92:02:7d:4f:e7:54:64:23:e2:ac:2b:08:59: 57:81:0f:a6:ff:c4:a5:3b:46:a5:f2:59:13:81:ba: d1:94:fb:25:46:9b:2b:a3:2d:c8:d5:78:6b:01:05: e0:8e:92:ee:e1:43:72:98:52:6e:c6:57:50:3a:d6: 1b:77:c4:76:78:fb:b0:f2:ee:1d:7d:84:ed:bf:f2: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A4:C3:D4:38:B0:CB:C0:5C:55:60:F3:26:41:70:E7:DA:DA:CD:AB X509v3 Authority Key Identifier: keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/6aTD1Diwy8BcVWDzJkFw59razas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2e80::/32 Signature Algorithm: sha256WithRSAEncryption 47:0f:9a:37:e5:2b:6e:ab:8f:33:15:02:67:b3:90:81:c4:25: 28:fa:50:d0:7b:4f:68:e4:a0:8f:1d:1c:f0:eb:5a:5c:68:ad: 1d:09:96:91:b5:5d:ff:34:8e:ce:66:e7:22:3c:3a:8c:c8:dd: 48:c1:9f:02:af:4b:59:3c:ca:d2:d5:3b:dc:6d:e0:34:48:da: 64:b8:02:28:8f:f3:17:9e:1f:5b:50:0e:46:0d:da:a6:8b:bb: 7c:83:bc:20:fa:ef:1d:87:e5:85:b7:3d:05:41:6d:77:4c:df: cd:a7:6b:5c:f0:a2:b3:25:e1:d9:57:a1:df:ba:4a:ff:57:3a: c0:ca:84:bf:0c:cd:8b:bc:5d:f8:65:5e:3c:a7:9e:88:a2:5f: fb:1b:26:82:04:61:8f:00:d7:30:0b:32:4b:72:a6:27:ec:5a: 62:83:59:95:06:59:be:51:ef:c0:23:9c:4d:49:ea:58:15:fa: 04:c6:04:c9:de:03:fa:11:16:a6:a0:3f:b9:39:ea:80:df:71: c2:8b:75:10:27:75:96:1a:a1:df:b0:c2:da:ce:c7:47:9e:8e: 09:e9:cf:5f:ac:4c:9a:9a:0a:24:b5:1c:22:21:b0:8f:bb:d2: 43:03:44:9d:5c:48:cd:6e:38:11:61:9d:ff:88:ca:2b:12:bc: e0:da:a7:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pX4FmY+cbafcJou6AohhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3 ZmY3MzYwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWE0YzNkNDM4YjBjYmMwNWM1NTYwZjMyNjQxNzBlN2RhZGFjZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvxEgTZiDwfhg/nYpocvqYTKvJrk WA2Y3ihuvp6ZhM3+8okGS2tiupkDl7ZCAuAEExoGs0q0P0F27xnk4g5MjFKrBZ/B kDjoYL5LF7v3D2QrqDc8pm4gS0gcDr/in2No8g3c12/hij0fIEZ5vRDvfyE9X819 IcUheYcWFHWwmpbRktWpIQO+NQ5RDfGvBQ9VF+2zFWGwl9xW+F3cUuKn1UUc+f6H kXlAp09BGgWxA8kauuveVpICfU/nVGQj4qwrCFlXgQ+m/8SlO0al8lkTgbrRlPsl Rpsroy3I1XhrAQXgjpLu4UNymFJuxldQOtYbd8R2ePuw8u4dfYTtv/J75wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOmkw9Q4sMvAXFVg8yZBcOfa2s2rMB8GA1UdIwQY MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut YWYxZWYxZDdhZmI4LzEvNmFURDFEaXd5OEJjVldEekprRnc1OXJhemFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4 LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgougDAN BgkqhkiG9w0BAQsFAAOCAQEARw+aN+UrbquPMxUCZ7OQgcQlKPpQ0HtPaOSgjx0c 8OtaXGitHQmWkbVd/zSOzmbnIjw6jMjdSMGfAq9LWTzK0tU73G3gNEjaZLgCKI/z F54fW1AORg3apou7fIO8IPrvHYflhbc9BUFtd0zfzadrXPCisyXh2Veh37pK/1c6 wMqEvwzNi7xd+GVePKeeiKJf+xsmggRhjwDXMAsyS3KmJ+xaYoNZlQZZvlHvwCOc TUnqWBX6BMYEyd4D+hEWpqA/uTnqgN9xwot1ECd1lhqh37DC2s7HR56OCenPX6xM mpoKJLUcIiGwj7vSQwNEnVxIzW44EWGd/4jKKxK84Nqn5A== -----END CERTIFICATE-----Generated at Mon Jan 5 11:37:50 2026 by rpki-client