This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa File: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (raw, json) Hash identifier: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I= Subject key identifier: 7B:A7:10:02:DB:6B:D8:79:9B:3A:54:C1:6E:32:95:FF:62:56:A3:46 Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47 Certificate serial: 019B79ECCA8307C343000EC30C42681D4157 Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215914 IP address blocks: 2a01:f800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ca:83:07:c3:43:00:0e:c3:0c:42:68:1d:41:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47 Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ba71002db6bd8799b3a54c16e3295ff6256a346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:be:5c:f4:83:d0:8c:c2:26:32:09:0a:5a: 79:b0:c8:75:2a:94:8d:d4:33:65:b5:24:8d:d1:8c: 56:f9:79:33:66:b4:3e:f1:ca:00:2d:cf:e1:c4:b0: fb:e7:f4:2b:0e:d4:8f:a8:c0:c4:de:0a:37:f4:a9: f0:47:38:93:a1:af:bf:5f:5a:95:ce:cf:a9:04:f7: c7:9e:52:94:7c:9a:a7:9a:38:13:c6:4a:c4:4b:af: 84:fc:8c:74:9c:2f:38:fb:5b:29:64:ac:74:2f:e7: 8f:cc:ad:b5:b8:39:06:1e:1e:f3:9e:7e:0c:01:4f: bf:49:ab:69:b2:b4:a1:05:47:75:2f:03:20:9a:a2: 6f:05:8a:06:3d:21:f6:07:1b:e7:b1:c8:d9:bb:f6: 45:39:3f:3b:88:26:6d:ed:16:88:98:c2:ba:5f:02: 0d:b9:2f:b1:61:88:03:54:9c:ae:57:d1:a0:00:2e: f1:96:69:a3:1b:ef:f4:8a:ca:43:c0:cd:0d:bf:be: a8:f9:70:5e:1a:2d:99:b5:06:61:39:fc:51:b4:0f: 37:79:34:27:ef:67:eb:04:3f:e7:9c:eb:1f:93:98: e8:2a:5e:fc:5c:b7:4c:9c:8e:d8:90:4f:b9:f4:72: 42:6f:87:0a:e3:71:4c:64:9f:cc:f8:4b:95:84:30: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A7:10:02:DB:6B:D8:79:9B:3A:54:C1:6E:32:95:FF:62:56:A3:46 X509v3 Authority Key Identifier: keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f800::/29 Signature Algorithm: sha256WithRSAEncryption 53:11:ec:d2:94:74:d0:4e:de:a7:37:79:4f:84:0a:ca:0e:1c: f3:08:07:c2:23:d7:ce:a4:0b:37:05:0b:52:3d:9f:ee:8e:01: c2:1b:ea:77:4f:d2:de:57:ec:e2:8b:90:1c:20:0e:99:75:b8: 21:4f:63:09:9c:6e:96:fa:18:51:d2:68:80:36:30:02:fc:29: 06:7e:15:54:6e:40:70:9a:98:c2:07:67:2c:6c:26:c4:e6:df: 61:05:de:53:45:57:ae:0e:44:49:07:00:43:15:89:94:6d:b2: a3:03:a6:e3:13:3d:76:04:ab:41:49:d0:29:a6:22:7a:be:60: f5:63:ad:a8:63:1c:9a:24:17:4f:ef:a6:41:9b:84:89:1f:bd: 10:75:81:02:0a:08:ed:9c:94:0f:2d:8a:6c:97:9f:10:0f:ee: 5c:d9:b6:66:3c:86:05:ec:4a:e7:a1:49:51:8c:79:a3:c5:46: 16:d4:d1:e9:36:75:68:2a:ab:7c:23:b3:1c:c2:97:ad:62:c8: e8:7b:fd:30:b5:35:4c:fa:2a:19:07:cc:ef:35:d7:df:fe:9d: 44:24:40:76:22:c3:30:2f:df:94:7e:d8:f3:4a:77:c3:5c:b9: 54:24:76:3c:54:16:48:f1:39:fb:31:6d:65:df:4d:da:da:fd: 92:0e:e7:8b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57MqDB8NDAA7DDEJoHUFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzlhMDdlZjQ3ZjgwNWNjYTA3YzEwYWUxODdjOTM5Njg4 MDhjNDcwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmE3MTAwMmRiNmJkODc5OWIzYTU0YzE2ZTMyOTVmZjYyNTZhMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/a+XPSD0IzCJjIJClp5sMh1KpSN 1DNltSSN0YxW+XkzZrQ+8coALc/hxLD75/QrDtSPqMDE3go39KnwRziToa+/X1qV zs+pBPfHnlKUfJqnmjgTxkrES6+E/Ix0nC84+1spZKx0L+ePzK21uDkGHh7znn4M AU+/SatpsrShBUd1LwMgmqJvBYoGPSH2BxvnscjZu/ZFOT87iCZt7RaImMK6XwIN uS+xYYgDVJyuV9GgAC7xlmmjG+/0ispDwM0Nv76o+XBeGi2ZtQZhOfxRtA83eTQn 72frBD/nnOsfk5joKl78XLdMnI7YkE+59HJCb4cK43FMZJ/M+EuVhDAUtwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHunEALba9h5mzpUwW4ylf9iVqNGMB8GA1UdIwQY MBaAFPU5oH70f4BcygfBCuGHyTlogIxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUt NTAzYTlmYzU5YTIwLzEvZTZjUUF0dHIySG1iT2xUQmJqS1ZfMkpXbzBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUtNTAzYTlmYzU5YTIw LzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgH4ADAN BgkqhkiG9w0BAQsFAAOCAQEAUxHs0pR00E7epzd5T4QKyg4c8wgHwiPXzqQLNwUL Uj2f7o4Bwhvqd0/S3lfs4ouQHCAOmXW4IU9jCZxulvoYUdJogDYwAvwpBn4VVG5A cJqYwgdnLGwmxObfYQXeU0VXrg5ESQcAQxWJlG2yowOm4xM9dgSrQUnQKaYier5g 9WOtqGMcmiQXT++mQZuEiR+9EHWBAgoI7ZyUDy2KbJefEA/uXNm2ZjyGBexK56FJ UYx5o8VGFtTR6TZ1aCqrfCOzHMKXrWLI6Hv9MLU1TPoqGQfM7zXX3/6dRCRAdiLD MC/flH7Y80p3w1y5VCR2PFQWSPE5+zFtZd9N2tr9kg7niw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:29 2026 by rpki-client