This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/gq6lk47TA17e6REZA-zN8if3ODs.roa File: gq6lk47TA17e6REZA-zN8if3ODs.roa (raw, json) Hash identifier: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA= Subject key identifier: 82:AE:A5:93:8E:D3:03:5E:DE:E9:11:19:03:EC:CD:F2:27:F7:38:3B Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a Certificate serial: 019B7A5B33F4C92604243B1858BC5E0E3AAB Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/gq6lk47TA17e6REZA-zN8if3ODs.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:678:ae4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:33:f4:c9:26:04:24:3b:18:58:bc:5e:0e:3a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82aea5938ed3035edee9111903eccdf227f7383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:23:46:99:37:a3:1c:8c:20:44:8d:a8:0c: 98:e9:71:98:2b:7a:d8:57:9a:bb:57:76:c2:a6:87: da:55:c0:93:16:1e:ea:6f:f1:4c:d6:5f:c3:24:ad: 05:62:8c:c2:b5:8f:6d:15:f0:ea:a0:e0:0e:1f:55: 4d:e2:71:85:f7:cd:da:b5:e6:c2:6f:f9:09:5b:2e: 27:ca:c4:e9:48:5e:dc:a5:a5:00:3e:0a:65:71:f4: 56:0f:ce:ae:2a:bc:fb:34:ad:7e:0c:00:2f:4d:f3: 07:a9:9b:05:47:3d:a8:42:cb:34:9a:92:98:01:51: de:ce:63:ea:92:8f:75:57:1d:e1:e2:df:47:d4:a4: e8:51:f3:b4:6e:31:de:cc:86:1f:2f:91:88:20:67: b3:99:15:b0:8a:43:b1:8a:a3:73:88:fc:e6:7e:ca: 81:0b:ac:80:29:d5:93:f1:35:53:cc:cd:81:45:51: ab:be:d7:b1:f6:fc:cf:36:14:69:7c:d7:79:ef:ac: cf:d5:e8:a4:d2:fe:54:18:05:83:9b:8d:07:e9:3c: 40:99:6e:a1:c9:35:9a:14:8e:32:d0:99:a7:f0:de: 66:08:f2:ea:4f:e1:72:79:c1:02:ab:97:27:d9:6a: 76:3b:2e:e6:9b:e8:42:00:c7:a5:17:1c:ae:92:7a: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AE:A5:93:8E:D3:03:5E:DE:E9:11:19:03:EC:CD:F2:27:F7:38:3B X509v3 Authority Key Identifier: keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/gq6lk47TA17e6REZA-zN8if3ODs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ae4::/48 Signature Algorithm: sha256WithRSAEncryption 6a:14:62:aa:6f:34:f3:ac:1b:5d:b6:17:75:fb:aa:c4:69:01: e4:82:d5:cd:53:ae:78:68:21:19:97:a0:c7:89:dc:3b:c0:db: fb:b1:66:24:8f:aa:f2:83:e4:99:d9:b4:27:c9:1c:63:a8:fb: 2f:79:84:c2:99:ed:44:85:6f:17:35:01:ea:ce:4d:ed:f7:4c: a6:82:3f:19:e4:ff:8e:d5:3a:70:e0:ad:42:fb:c0:1a:d1:53: c9:a5:6b:d3:b1:29:85:32:e1:60:ff:1a:c0:fb:67:5d:74:d9: 0e:f1:28:b0:bc:f2:f8:3b:48:76:67:d5:03:c4:ec:40:61:af: 19:05:40:7d:f7:03:d2:34:c0:b7:08:73:b7:9c:e3:60:dc:92: f7:8d:e7:7f:5f:54:c3:46:e3:0a:7e:81:cb:ac:17:4f:5c:77: 63:50:90:f5:d8:93:93:98:16:b2:cc:81:75:3c:b8:dc:ae:50: 47:04:8d:96:6b:25:98:64:37:6e:ea:a5:8f:8b:55:93:89:27: 18:5c:dd:71:5c:f0:53:9d:00:74:f0:b8:4b:a1:e1:66:c9:76: 32:3d:18:97:61:e2:0f:88:99:52:88:28:84:96:79:5e:eb:92: fb:4e:78:8b:fc:97:e4:cb:75:15:90:50:9c:6d:db:18:bb:08: 91:b1:79:6a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WzP0ySYEJDsYWLxeDjqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz MDg3N2EwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmFlYTU5MzhlZDMwMzVlZGVlOTExMTkwM2VjY2RmMjI3ZjczODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DojRpk3oxyMIESNqAyY6XGYK3rY V5q7V3bCpofaVcCTFh7qb/FM1l/DJK0FYozCtY9tFfDqoOAOH1VN4nGF983atebC b/kJWy4nysTpSF7cpaUAPgplcfRWD86uKrz7NK1+DAAvTfMHqZsFRz2oQss0mpKY AVHezmPqko91Vx3h4t9H1KToUfO0bjHezIYfL5GIIGezmRWwikOxiqNziPzmfsqB C6yAKdWT8TVTzM2BRVGrvtex9vzPNhRpfNd576zP1eik0v5UGAWDm40H6TxAmW6h yTWaFI4y0Jmn8N5mCPLqT+FyecECq5cn2Wp2Oy7mm+hCAMelFxyuknobVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIKupZOO0wNe3ukRGQPszfIn9zg7MB8GA1UdIwQY MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt NGZhMzQ4MWE0N2UxLzEvZ3E2bGs0N1RBMTdlNlJFWkEtek44aWYzT0RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeArk MA0GCSqGSIb3DQEBCwUAA4IBAQBqFGKqbzTzrBtdthd1+6rEaQHkgtXNU654aCEZ l6DHidw7wNv7sWYkj6ryg+SZ2bQnyRxjqPsveYTCme1EhW8XNQHqzk3t90ymgj8Z 5P+O1Tpw4K1C+8Aa0VPJpWvTsSmFMuFg/xrA+2dddNkO8SiwvPL4O0h2Z9UDxOxA Ya8ZBUB99wPSNMC3CHO3nONg3JL3jed/X1TDRuMKfoHLrBdPXHdjUJD12JOTmBay zIF1PLjcrlBHBI2WayWYZDdu6qWPi1WTiScYXN1xXPBTnQB08LhLoeFmyXYyPRiX YeIPiJlSiCiElnle65L7TniL/Jfky3UVkFCcbdsYuwiRsXlq -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:07 2026 by rpki-client