This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa File: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (raw, json) Hash identifier: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk= Subject key identifier: E8:4F:4B:4C:0C:B3:42:DD:45:10:F7:EB:EC:58:72:32:D0:05:83:63 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C77E6E1DDF4B86B0495A752167836 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57406 IP address blocks: 2a13:b480::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:77:e6:e1:dd:f4:b8:6b:04:95:a7:52:16:78:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e84f4b4c0cb342dd4510f7ebec587232d0058363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:8b:72:f7:53:ae:d6:76:f7:0d:ed:86:53: 93:ef:58:53:72:42:c2:cf:03:5b:78:63:a9:48:19: 48:67:63:43:db:3b:91:42:d2:87:de:1a:5f:30:ef: 4f:0b:89:d8:9a:20:f4:d5:a1:b5:71:51:82:60:57: 22:be:06:9c:b5:6d:cd:49:aa:6c:db:c3:e7:46:dd: 53:73:92:47:e4:24:7d:0c:51:23:a2:12:23:81:26: 39:e4:4c:52:1b:23:25:56:c8:d7:f0:f9:cb:c0:91: ce:1f:69:9a:59:5b:28:f6:2f:b8:7d:92:0d:a2:46: 37:89:a3:40:57:d5:da:69:b2:92:60:41:6b:40:19: c2:f6:56:93:ab:be:f2:14:5f:7a:d3:21:f7:67:17: 48:c5:6e:0d:01:1f:b8:8d:57:ba:80:16:b5:65:c9: c5:1c:94:e3:f5:ac:b5:2f:44:f4:00:ee:d1:c5:25: 60:74:20:52:1d:3c:87:03:d2:80:c5:05:83:45:66: 74:3a:e7:a1:71:35:6a:f2:5d:ec:f8:a6:cd:b2:16: 34:76:33:70:52:bd:4a:70:44:50:b3:64:f5:7c:52: f4:aa:c7:6f:18:82:01:70:b7:e8:34:17:c3:20:85: 39:e8:ea:3b:a0:c8:28:8e:3a:62:0c:8b:04:be:62: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4F:4B:4C:0C:B3:42:DD:45:10:F7:EB:EC:58:72:32:D0:05:83:63 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b480::/29 Signature Algorithm: sha256WithRSAEncryption a3:0d:f6:96:b3:4d:a6:6b:c9:5f:44:03:e0:67:bd:38:9d:e3: 44:6f:22:0b:5a:d0:74:3a:b2:78:77:e1:83:87:61:14:66:34: 03:7c:23:6b:46:dc:8e:de:ce:23:00:66:61:66:6b:50:ae:f4: 2a:82:50:ed:b4:7b:59:f1:b7:42:1a:bb:11:85:29:f8:1f:e2: 0c:b8:6d:13:7e:e3:71:0b:71:66:64:15:5e:05:f6:0b:e5:5c: e0:6c:a8:2d:5b:5a:c1:ac:24:8d:07:ab:60:26:3f:26:f1:17: 46:e5:8c:2c:64:40:7d:d9:32:1b:14:c1:c9:87:dc:34:f5:99: 89:e6:89:56:62:ee:36:10:cf:5f:e7:8d:03:ac:9c:b4:30:28: 62:54:a5:8d:74:f6:5f:51:94:19:9b:f7:fc:6e:29:e9:8b:8f: 87:cb:19:b8:59:9b:49:55:ae:fa:e7:b0:b1:30:4c:84:5f:cc: 10:5f:0b:70:fa:fe:d2:46:48:d7:44:5d:b5:d2:3e:56:0d:72: 58:09:62:51:da:35:ba:bb:8d:03:51:4e:fe:9b:90:4c:c4:d0: 0a:b9:47:e7:2c:7f:26:99:d5:f8:d6:58:6f:76:ed:27:3c:b6: c9:88:74:e7:23:49:6e:a4:89:b2:41:5a:e8:be:da:6e:4c:84: 2d:e8:1e:29 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XHfm4d30uGsEladSFng2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODRmNGI0YzBjYjM0MmRkNDUxMGY3ZWJlYzU4NzIzMmQwMDU4MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4qLcvdTrtZ29w3thlOT71hTckLC zwNbeGOpSBlIZ2ND2zuRQtKH3hpfMO9PC4nYmiD01aG1cVGCYFcivgactW3NSaps 28PnRt1Tc5JH5CR9DFEjohIjgSY55ExSGyMlVsjX8PnLwJHOH2maWVso9i+4fZIN okY3iaNAV9XaabKSYEFrQBnC9laTq77yFF960yH3ZxdIxW4NAR+4jVe6gBa1ZcnF HJTj9ay1L0T0AO7RxSVgdCBSHTyHA9KAxQWDRWZ0OuehcTVq8l3s+KbNshY0djNw Ur1KcERQs2T1fFL0qsdvGIIBcLfoNBfDIIU56Oo7oMgojjpiDIsEvmKCHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOhPS0wMs0LdRRD36+xYcjLQBYNjMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvNkU5TFRBeXpRdDFGRVBmcjdGaHlNdEFGZzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhO0gDAN BgkqhkiG9w0BAQsFAAOCAQEAow32lrNNpmvJX0QD4Ge9OJ3jRG8iC1rQdDqyeHfh g4dhFGY0A3wja0bcjt7OIwBmYWZrUK70KoJQ7bR7WfG3Qhq7EYUp+B/iDLhtE37j cQtxZmQVXgX2C+Vc4GyoLVtawawkjQerYCY/JvEXRuWMLGRAfdkyGxTByYfcNPWZ ieaJVmLuNhDPX+eNA6yctDAoYlSljXT2X1GUGZv3/G4p6YuPh8sZuFmbSVWu+uew sTBMhF/MEF8LcPr+0kZI10RdtdI+Vg1yWAliUdo1uruNA1FO/puQTMTQCrlH5yx/ JpnV+NZYb3btJzy2yYh05yNJbqSJskFa6L7abkyELegeKQ== -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:31 2026 by rpki-client