This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/6weVCTckmKcufpwMMNkVwHRwP9Q.roa File: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (raw, json) Hash identifier: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo= Subject key identifier: EB:07:95:09:37:24:98:A7:2E:7E:9C:0C:30:D9:15:C0:74:70:3F:D4 Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Certificate serial: 019B78A2CFA8C26618B06022B5180A9132A0 Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/6weVCTckmKcufpwMMNkVwHRwP9Q.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8896 IP address blocks: 91.188.232.0/22 maxlen: 22 2a09:a300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cf:a8:c2:66:18:b0:60:22:b5:18:0a:91:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb079509372498a72e7e9c0c30d915c074703fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:ac:a2:e9:f3:b1:6a:89:13:9b:45:ab:48: 81:f1:f2:66:4a:7a:6d:69:05:2f:c9:d5:82:0b:80: 19:08:b8:39:be:8f:18:60:86:01:82:4c:f8:c8:ef: 74:54:f4:91:5b:31:f3:20:cb:87:d5:e3:5d:20:c6: 9f:c5:1a:c1:b4:cb:6e:c7:25:14:0c:57:a3:fd:1b: b3:2b:70:67:9c:c4:66:f1:26:10:ca:39:1f:29:b3: 19:c8:17:57:bb:14:4d:ee:2a:00:e8:2f:7c:35:31: 04:d3:b4:e6:4e:d0:36:d0:f8:a4:ab:12:b4:ec:b2: 8a:98:72:06:9f:6f:29:77:20:43:21:2f:8a:d8:8e: 03:a8:a5:b2:71:b0:50:a4:8b:29:0a:b2:a2:fa:37: 63:e3:dd:86:5a:fd:59:1a:c5:d6:33:21:8e:17:26: 5c:46:99:a8:a0:1f:38:1c:d7:d1:76:3c:3e:64:9d: c4:aa:27:a5:dc:31:de:6f:e7:8b:b9:40:68:e3:00: 64:cc:f9:62:2d:23:a0:49:7b:72:be:e1:fe:c1:23: 25:ad:c5:1e:02:03:43:b3:0b:de:d6:26:25:3f:3b: db:a0:c5:70:aa:df:04:5c:06:22:f6:48:b3:58:20: 26:8a:cb:77:e4:53:1e:15:b8:63:3f:0f:3f:d0:d0: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:07:95:09:37:24:98:A7:2E:7E:9C:0C:30:D9:15:C0:74:70:3F:D4 X509v3 Authority Key Identifier: keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/6weVCTckmKcufpwMMNkVwHRwP9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.232.0/22 IPv6: 2a09:a300::/32 Signature Algorithm: sha256WithRSAEncryption 4a:87:5b:14:b1:97:b8:d6:02:aa:96:36:14:49:e9:4c:6a:eb: 41:10:76:cd:06:88:90:78:a3:56:c9:c9:ca:77:e4:95:71:9d: 0c:08:77:11:c0:c7:fc:1e:07:ee:72:03:f0:21:c9:2c:f5:b6: b7:a7:03:d7:d2:4b:62:47:ab:ae:0b:fb:18:75:35:d6:2e:3a: ba:44:e9:ee:da:bb:44:64:e5:68:52:41:43:e5:ec:3e:13:92: b2:92:fd:31:4a:29:f5:46:16:42:fb:f1:9e:a9:f3:9b:ed:ae: d2:11:1c:b1:af:4b:b2:bc:3b:2e:27:46:a8:a3:78:03:00:ff: 04:6b:0e:19:79:aa:35:59:d8:6a:55:5e:3c:ae:a4:c7:b3:fc: c3:50:e0:50:b2:7e:ad:ec:96:70:19:97:0f:a4:22:6a:76:f6: 50:9d:a0:51:09:a0:d6:0d:2f:99:96:2f:ce:cb:d9:46:79:2c: ec:fa:a1:2a:c2:e1:f7:f2:e7:3a:ce:ac:0e:87:02:bb:c1:20: 28:0d:43:0a:dc:b5:6d:a2:89:34:72:16:bb:bd:1d:35:f8:d9: 96:1b:ae:2f:c9:30:f0:29:92:a8:5b:d4:4b:25:98:2d:91:d4: a3:24:f2:0a:20:38:36:af:43:ac:46:81:50:cf:ba:af:aa:b1: 8e:03:0b:bf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4os+owmYYsGAitRgKkTKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh YWI2OWEwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjA3OTUwOTM3MjQ5OGE3MmU3ZTljMGMzMGQ5MTVjMDc0NzAzZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptmsounzsWqJE5tFq0iB8fJmSnpt aQUvydWCC4AZCLg5vo8YYIYBgkz4yO90VPSRWzHzIMuH1eNdIMafxRrBtMtuxyUU DFej/RuzK3BnnMRm8SYQyjkfKbMZyBdXuxRN7ioA6C98NTEE07TmTtA20PikqxK0 7LKKmHIGn28pdyBDIS+K2I4DqKWycbBQpIspCrKi+jdj492GWv1ZGsXWMyGOFyZc RpmooB84HNfRdjw+ZJ3Eqiel3DHeb+eLuUBo4wBkzPliLSOgSXtyvuH+wSMlrcUe AgNDswve1iYlPzvboMVwqt8EXAYi9kizWCAmist35FMeFbhjPw8/0NDGIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOsHlQk3JJinLn6cDDDZFcB0cD/UMB8GA1UdIwQY MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt OWZmYjBlNDFjNGVmLzEvNndlVkNUY2ttS2N1ZnB3TU1Oa1Z3SFJ3UDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW7zoMA0E AgACMAcDBQAqCaMAMA0GCSqGSIb3DQEBCwUAA4IBAQBKh1sUsZe41gKqljYUSelM autBEHbNBoiQeKNWycnKd+SVcZ0MCHcRwMf8HgfucgPwIcks9ba3pwPX0ktiR6uu C/sYdTXWLjq6ROnu2rtEZOVoUkFD5ew+E5Kykv0xSin1RhZC+/GeqfOb7a7SERyx r0uyvDsuJ0aoo3gDAP8Eaw4Zeao1WdhqVV48rqTHs/zDUOBQsn6t7JZwGZcPpCJq dvZQnaBRCaDWDS+Zli/Oy9lGeSzs+qEqwuH38uc6zqwOhwK7wSAoDUMK3LVtook0 cha7vR01+NmWG64vyTDwKZKoW9RLJZgtkdSjJPIKIDg2r0OsRoFQz7qvqrGOAwu/ -----END CERTIFICATE-----Generated at Mon Jan 12 16:18:11 2026 by rpki-client