This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/6CzQRMn6GnwsVxYiA_23IYKMeoo.roa File: 6CzQRMn6GnwsVxYiA_23IYKMeoo.roa (raw, json) Hash identifier: yTq5lptLiZc3PV2A2cnpwYQvB925u7nVJPs/y3zGz+4= Subject key identifier: E8:2C:D0:44:C9:FA:1A:7C:2C:57:16:22:03:FD:B7:21:82:8C:7A:8A Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5677DB7741814F1B20D4244B4DA1D Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/6CzQRMn6GnwsVxYiA_23IYKMeoo.roa Signing time: Fri 02 Jan 2026 12:18:47 +0000 ROA not before: Fri 02 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216308 IP address blocks: 2a10:4646:390::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:67:7d:b7:74:18:14:f1:b2:0d:42:44:b4:da:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e82cd044c9fa1a7c2c57162203fdb721828c7a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:a8:de:28:e3:2e:b8:47:bb:07:d3:75:55: 36:8c:ed:1a:4b:f4:64:cc:99:6c:36:33:59:4a:0f: 96:87:aa:87:b2:11:f0:20:3f:ea:85:3c:7a:33:f7: 60:20:eb:87:b2:e4:9f:cd:d1:57:87:d1:c9:13:3e: 75:f4:f2:b7:9d:6b:d5:74:d4:1c:23:5e:be:b5:04: 4f:69:ed:e1:9d:6b:17:ee:b7:e9:99:93:27:0f:48: 5e:06:16:85:06:af:e2:93:7b:5a:f3:ef:0e:01:8b: 1e:2b:93:f3:0b:ea:6c:e0:8e:2a:1c:f4:3c:ea:cf: c1:a3:9a:53:ca:25:a2:74:fd:30:c5:03:9f:63:89: d5:a1:51:24:ba:a8:ef:7a:33:57:d2:9b:43:59:08: 23:a5:25:99:7f:50:d7:72:b1:7b:36:52:d1:34:36: 37:81:58:31:39:b0:de:4f:8b:0d:d5:44:07:ca:85: 97:73:73:30:be:10:85:1e:4c:1b:fb:0f:2e:b6:0f: 4b:23:57:cb:bd:bd:bd:d2:a9:2c:2e:08:90:5d:6c: d8:80:ec:2e:10:05:b9:aa:8a:0b:51:2e:7a:5d:1d: f6:9a:da:1a:a0:a6:24:4e:3e:ba:b5:b0:ed:4d:0d: 52:2c:15:fe:c7:bd:94:8e:01:4d:6a:57:a3:86:da: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2C:D0:44:C9:FA:1A:7C:2C:57:16:22:03:FD:B7:21:82:8C:7A:8A X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/6CzQRMn6GnwsVxYiA_23IYKMeoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:390::/44 Signature Algorithm: sha256WithRSAEncryption 71:0b:c8:fa:91:c6:1a:f9:67:c9:b3:10:3c:33:d9:b0:73:c1: cc:ab:22:b6:0f:f6:f0:79:25:50:35:de:70:9f:0d:ba:b1:23: 8a:73:7a:e6:26:90:9b:da:0d:f4:92:4a:47:62:44:28:3b:01: 44:ba:61:c6:4b:7a:41:0d:a6:53:86:19:66:ed:23:b8:52:6d: 7d:5a:2e:51:85:04:c7:0d:87:01:82:56:0e:99:5a:a0:e6:7d: 98:ba:a5:86:5f:4b:70:79:44:b5:48:99:6f:4c:c8:72:fe:80: d5:3a:b9:7b:a9:67:c5:1c:73:2a:54:5b:f6:09:56:2f:cb:38: dd:69:63:4a:5c:fb:94:42:29:c6:3e:47:7f:74:f7:dc:f3:36: ec:41:d2:3e:14:41:12:3e:a9:7a:8d:19:f2:c9:42:af:f6:84: 29:3a:d8:f0:f0:2d:ea:03:8e:a7:9e:bd:0f:ac:31:47:8a:f1: 88:8e:04:86:38:f6:f1:1f:1e:a4:73:a7:bb:13:48:93:c5:ec: 9b:65:23:7c:37:72:ea:e1:43:d0:f1:8a:92:a3:f8:1b:50:1a: 92:42:55:e3:9e:54:74:06:29:72:ba:22:14:b3:9a:e4:c3:29: 6d:49:ba:0c:f2:06:4d:b4:f7:e2:56:31:98:a2:82:f7:fa:0b: 0b:81:ca:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWd9t3QYFPGyDUJEtNodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODJjZDA0NGM5ZmExYTdjMmM1NzE2MjIwM2ZkYjcyMTgyOGM3YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEyo3ijjLrhHuwfTdVU2jO0aS/Rk zJlsNjNZSg+Wh6qHshHwID/qhTx6M/dgIOuHsuSfzdFXh9HJEz519PK3nWvVdNQc I16+tQRPae3hnWsX7rfpmZMnD0heBhaFBq/ik3ta8+8OAYseK5PzC+ps4I4qHPQ8 6s/Bo5pTyiWidP0wxQOfY4nVoVEkuqjvejNX0ptDWQgjpSWZf1DXcrF7NlLRNDY3 gVgxObDeT4sN1UQHyoWXc3MwvhCFHkwb+w8utg9LI1fLvb290qksLgiQXWzYgOwu EAW5qooLUS56XR32mtoaoKYkTj66tbDtTQ1SLBX+x72UjgFNalejhtqJkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOgs0ETJ+hp8LFcWIgP9tyGCjHqKMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvNkN6UVJNbjZHbndzVnhZaUFfMjNJWUtNZW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgOQ MA0GCSqGSIb3DQEBCwUAA4IBAQBxC8j6kcYa+WfJsxA8M9mwc8HMqyK2D/bweSVQ Nd5wnw26sSOKc3rmJpCb2g30kkpHYkQoOwFEumHGS3pBDaZThhlm7SO4Um19Wi5R hQTHDYcBglYOmVqg5n2YuqWGX0tweUS1SJlvTMhy/oDVOrl7qWfFHHMqVFv2CVYv yzjdaWNKXPuUQinGPkd/dPfc8zbsQdI+FEESPql6jRnyyUKv9oQpOtjw8C3qA46n nr0PrDFHivGIjgSGOPbxHx6kc6e7E0iTxeybZSN8N3Lq4UPQ8YqSo/gbUBqSQlXj nlR0BilyuiIUs5rkwyltSboM8gZNtPfiVjGYooL3+gsLgcrY -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:35 2026 by rpki-client