This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/6EvVe1iSCny24nuXxCceU1INn48.roa File: 6EvVe1iSCny24nuXxCceU1INn48.roa (raw, json) Hash identifier: sr6pla8qayIY/DqIMDGG8xE9TOAtMeSL1wSO8tlpa+s= Subject key identifier: E8:4B:D5:7B:58:92:0A:7C:B6:E2:7B:97:C4:27:1E:53:52:0D:9F:8F Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BDA3CE700D3F3D3C0E9B625279E3 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/6EvVe1iSCny24nuXxCceU1INn48.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214439 IP address blocks: 2a13:a5c7:2300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bd:a3:ce:70:0d:3f:3d:3c:0e:9b:62:52:79:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e84bd57b58920a7cb6e27b97c4271e53520d9f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:01:f3:1c:32:31:42:9b:2d:a8:3f:da:49: 29:1b:d2:ff:7e:69:b8:9d:2d:80:10:c7:c5:42:87: b4:f4:c8:fb:34:24:d0:a1:03:bf:4b:04:aa:de:ec: 14:c8:d0:88:c7:eb:f2:91:64:cb:fe:95:18:8e:07: 4e:95:f6:b3:c8:94:10:c6:88:4b:9f:b3:b8:1c:c3: 1f:29:60:9e:51:e6:b1:e2:ad:5f:9c:df:5a:af:c9: fe:ba:38:b8:e2:a4:07:a0:ae:53:e4:1e:0c:b0:24: 13:59:59:b0:e4:9d:35:c3:85:97:88:74:e4:b3:a9: 85:b6:73:ec:1b:75:32:1e:46:0f:34:65:e1:01:4c: 7d:90:f6:53:f9:d6:bc:a1:71:99:b2:4f:3e:7a:05: e3:35:54:57:34:8a:ec:98:d8:83:d2:5f:87:bd:0e: 17:bd:de:5d:68:de:2e:71:57:58:b2:65:9e:29:67: 76:e7:cd:5b:ba:42:b5:1a:ac:9d:ef:25:b7:5d:2f: 35:96:8d:c6:94:90:34:81:17:52:c2:b2:c1:9c:85: a3:76:90:90:a8:f6:84:bd:b0:d4:0b:e4:94:c7:29: c4:8d:ce:78:f2:53:a4:59:de:3b:ef:1f:18:fc:6d: f9:90:51:50:c2:4e:98:4c:6e:ba:e1:48:2b:c5:1d: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4B:D5:7B:58:92:0A:7C:B6:E2:7B:97:C4:27:1E:53:52:0D:9F:8F X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/6EvVe1iSCny24nuXxCceU1INn48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2300::/40 Signature Algorithm: sha256WithRSAEncryption 9d:08:f9:2c:23:f4:77:50:82:a3:fc:0c:61:6a:fd:4f:58:f0: 16:3a:1e:43:73:b3:a0:c8:6e:3e:68:e0:45:b1:9a:3d:04:bb: 3d:0d:a0:36:a2:bd:0f:ea:7e:96:59:5f:ff:d2:14:1c:0d:17: 27:76:09:65:ec:6b:42:d8:5f:d3:d1:1a:a6:45:6d:79:1b:13: 10:bb:57:a5:7f:cd:bd:cf:75:05:b2:d9:ba:a1:c3:a2:3e:99: e1:97:dc:ce:a9:9f:b7:7c:ef:79:77:e0:56:ef:d6:d8:ec:e3: d6:c5:e6:3f:9b:ad:4b:da:f8:72:71:ad:24:97:ed:f4:bf:8a: 7a:80:a8:eb:18:34:ea:06:ad:e8:08:78:e1:c3:ba:bb:a6:6a: 5b:d2:6e:16:3f:e7:76:34:d2:12:dc:ae:f2:82:41:0d:bc:34: 99:c0:3e:a1:cb:d7:65:fc:54:2b:c6:2f:e5:f5:c8:4b:62:8a: 2f:ba:85:08:6b:c1:4e:9f:dc:cb:f0:95:82:96:55:e4:9a:09: 05:49:62:6d:ca:49:7e:23:cf:33:cb:ec:c4:95:c4:6f:7c:6b: f4:af:5e:be:c2:13:f1:ce:b1:09:9e:28:23:aa:b8:f0:60:47: 67:97:71:9e:61:c8:88:02:ec:e8:1f:89:d8:3b:2f:5d:54:da: 71:f2:8f:32 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OL2jznANPz08DptiUnnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODRiZDU3YjU4OTIwYTdjYjZlMjdiOTdjNDI3MWU1MzUyMGQ5ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hMB8xwyMUKbLag/2kkpG9L/fmm4 nS2AEMfFQoe09Mj7NCTQoQO/SwSq3uwUyNCIx+vykWTL/pUYjgdOlfazyJQQxohL n7O4HMMfKWCeUeax4q1fnN9ar8n+uji44qQHoK5T5B4MsCQTWVmw5J01w4WXiHTk s6mFtnPsG3UyHkYPNGXhAUx9kPZT+da8oXGZsk8+egXjNVRXNIrsmNiD0l+HvQ4X vd5daN4ucVdYsmWeKWd2581bukK1Gqyd7yW3XS81lo3GlJA0gRdSwrLBnIWjdpCQ qPaEvbDUC+SUxynEjc548lOkWd477x8Y/G35kFFQwk6YTG664UgrxR2KnwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOhL1XtYkgp8tuJ7l8QnHlNSDZ+PMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvNkV2VmUxaVNDbnkyNG51WHhDY2VVMUlObjQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxyMw DQYJKoZIhvcNAQELBQADggEBAJ0I+Swj9HdQgqP8DGFq/U9Y8BY6HkNzs6DIbj5o 4EWxmj0Euz0NoDaivQ/qfpZZX//SFBwNFyd2CWXsa0LYX9PRGqZFbXkbExC7V6V/ zb3PdQWy2bqhw6I+meGX3M6pn7d873l34Fbv1tjs49bF5j+brUva+HJxrSSX7fS/ inqAqOsYNOoGregIeOHDurumalvSbhY/53Y00hLcrvKCQQ28NJnAPqHL12X8VCvG L+X1yEtiii+6hQhrwU6f3MvwlYKWVeSaCQVJYm3KSX4jzzPL7MSVxG98a/SvXr7C E/HOsQmeKCOquPBgR2eXcZ5hyIgC7Ogfidg7L11U2nHyjzI= -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:38 2026 by rpki-client