This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6dMncFxQ28-OzrSnRQJ1TsVhND4.roa File: 6dMncFxQ28-OzrSnRQJ1TsVhND4.roa (raw, json) Hash identifier: A68BUnhZ2xp9jUeO2irY7vVRJ631W595Ogs1VPXnIiE= Subject key identifier: E9:D3:27:70:5C:50:DB:CF:8E:CE:B4:A7:45:02:75:4E:C5:61:34:3E Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76C835AAAC54D88FAD44E1BF6EC3C Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6dMncFxQ28-OzrSnRQJ1TsVhND4.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400813 IP address blocks: 2a0d:6f80:38d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6c:83:5a:aa:c5:4d:88:fa:d4:4e:1b:f6:ec:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9d327705c50dbcf8eceb4a74502754ec561343e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:4b:e1:0a:dc:38:e8:6f:9d:ac:65:c1:42: 29:17:2a:26:d7:ec:b4:ae:62:32:c6:25:93:a0:1b: ba:2f:6a:34:0c:3e:74:04:9a:7e:63:6c:68:6a:d1: ff:3a:b8:f0:0d:ef:f7:87:b3:f4:60:e5:e7:0f:84: 13:ee:4b:e0:f8:14:cb:3e:0c:ae:6a:39:17:3a:3e: 2e:ec:c5:e0:bd:1e:e3:1b:7f:17:be:bd:0a:51:04: 3f:dc:05:53:36:4e:b4:03:c4:08:b9:2a:8d:b4:7b: 01:07:81:d0:ff:14:ab:53:36:24:ab:a2:a3:ab:d7: a7:e8:03:8d:88:40:c0:bd:5b:29:97:ad:b4:59:92: ad:51:81:96:23:36:6f:ec:0d:cd:b4:22:3f:b2:0b: 91:43:a6:60:bd:9e:86:ed:55:28:5e:9b:f6:16:03: 65:4c:18:18:69:95:18:6c:31:be:ea:50:bc:67:61: 35:52:89:ce:e4:95:34:74:2e:0f:b2:bb:9a:6d:02: 17:87:37:13:f6:8c:d6:dc:31:ee:70:af:91:f0:2e: c1:37:a2:58:52:e7:11:99:be:90:6e:65:27:b6:0a: 66:05:c7:0d:1c:11:cf:e9:5d:d0:79:f3:0b:e4:9a: 64:f3:62:02:95:23:91:52:5d:eb:28:12:c6:c5:0e: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:27:70:5C:50:DB:CF:8E:CE:B4:A7:45:02:75:4E:C5:61:34:3E X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6dMncFxQ28-OzrSnRQJ1TsVhND4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:38d2::/48 Signature Algorithm: sha256WithRSAEncryption 94:78:03:8b:01:c4:4c:10:cc:55:5d:43:1a:ce:d8:54:06:8b: 6c:29:d2:8d:b3:3b:f3:0d:5d:55:68:88:f1:17:39:dc:99:4c: 2e:3f:f4:46:d0:32:15:0a:9a:23:81:e4:69:3a:ee:b7:86:dc: 66:4d:35:6f:82:1f:a1:42:46:4b:76:e2:09:12:75:4d:0a:34: 8a:64:bf:66:2c:1a:c1:38:12:07:47:17:80:ad:77:e3:77:cf: cd:98:20:59:bc:f2:5f:47:c2:8d:e7:4a:a5:4d:d2:4f:28:c0: b9:15:2a:6f:9c:19:ad:a1:76:a1:31:25:bc:db:2f:08:57:89: 52:eb:d4:99:86:b3:eb:e5:74:00:bb:4f:c4:6d:62:69:25:19: 13:12:bc:f2:a3:e3:bb:69:a8:7d:bc:47:fe:e2:01:77:b9:b2: 90:e6:34:a4:97:50:f6:4e:dd:13:05:d5:41:c6:68:aa:fb:56: 5a:56:37:53:9b:5a:99:3c:eb:54:51:b4:0d:82:dd:6e:11:40: 9e:de:88:04:f9:15:ac:2b:4a:52:93:97:21:50:f3:25:cd:20: 06:33:a2:9e:0f:c0:a6:00:38:a2:8e:49:8b:64:05:e8:d4:68: b8:f7:60:4b:0f:cb:55:f8:03:65:84:43:26:6c:32:38:b2:2d: 32:76:1c:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2yDWqrFTYj61E4b9uw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWQzMjc3MDVjNTBkYmNmOGVjZWI0YTc0NTAyNzU0ZWM1NjEzNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphdL4QrcOOhvnaxlwUIpFyom1+y0 rmIyxiWToBu6L2o0DD50BJp+Y2xoatH/OrjwDe/3h7P0YOXnD4QT7kvg+BTLPgyu ajkXOj4u7MXgvR7jG38Xvr0KUQQ/3AVTNk60A8QIuSqNtHsBB4HQ/xSrUzYkq6Kj q9en6AONiEDAvVspl620WZKtUYGWIzZv7A3NtCI/sguRQ6ZgvZ6G7VUoXpv2FgNl TBgYaZUYbDG+6lC8Z2E1UonO5JU0dC4PsruabQIXhzcT9ozW3DHucK+R8C7BN6JY UucRmb6QbmUntgpmBccNHBHP6V3QefML5Jpk82IClSORUl3rKBLGxQ506wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOnTJ3BcUNvPjs60p0UCdU7FYTQ+MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvNmRNbmNGeFEyOC1PenJTblJRSjFUc1ZoTkQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgDjS MA0GCSqGSIb3DQEBCwUAA4IBAQCUeAOLAcRMEMxVXUMazthUBotsKdKNszvzDV1V aIjxFzncmUwuP/RG0DIVCpojgeRpOu63htxmTTVvgh+hQkZLduIJEnVNCjSKZL9m LBrBOBIHRxeArXfjd8/NmCBZvPJfR8KN50qlTdJPKMC5FSpvnBmtoXahMSW82y8I V4lS69SZhrPr5XQAu0/EbWJpJRkTErzyo+O7aah9vEf+4gF3ubKQ5jSkl1D2Tt0T BdVBxmiq+1ZaVjdTm1qZPOtUUbQNgt1uEUCe3ogE+RWsK0pSk5chUPMlzSAGM6Ke D8CmADiijkmLZAXo1Gi492BLD8tV+ANlhEMmbDI4si0ydhy+ -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:00 2026 by rpki-client