This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6pzxly1r6duo4bfTPPly5YdWLj4.roa File: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (raw, json) Hash identifier: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk= Subject key identifier: EA:9C:F1:97:2D:6B:E9:DB:A8:E1:B7:D3:3C:F9:72:E5:87:56:2E:3E Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758C1E9D080A0A8C1F5E96A4AB5C946 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6pzxly1r6duo4bfTPPly5YdWLj4.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 46.29.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c1:e9:d0:80:a0:a8:c1:f5:e9:6a:4a:b5:c9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9cf1972d6be9dba8e1b7d33cf972e587562e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:20:80:e2:30:6a:a1:25:31:7e:39:3c:0e: 50:f3:42:73:01:ac:81:2a:22:c8:1a:68:bf:2c:f6: e4:5d:71:5f:56:d5:d0:c2:c7:33:b8:a1:0e:9a:fc: 87:db:9c:d5:be:54:ca:20:bb:72:ee:7e:ac:05:be: a7:51:80:b4:1e:e9:2f:bb:1b:2e:b9:f7:66:b2:74: 10:d8:95:6f:49:97:31:ae:fa:08:1b:93:66:bf:9a: 5b:33:ce:19:58:46:ad:60:cd:45:a9:b4:97:23:07: 9b:f1:6c:5c:a0:eb:e9:ed:8a:3b:02:7c:2d:02:5d: bb:9f:98:a5:87:24:e3:ae:3f:b7:00:37:a6:b3:4d: 0f:2a:15:8a:f8:cd:e1:82:4f:b3:10:62:14:b4:49: 2e:2d:49:a6:c0:c5:b0:77:05:79:59:a2:fe:a8:cb: de:ff:06:2f:51:74:10:c6:d2:a5:83:91:bf:69:98: a6:cc:94:e5:56:6b:1e:d2:00:ba:f4:7e:dc:4b:8c: 20:03:3a:a6:83:9e:54:b5:ec:b8:e1:13:4b:27:6f: eb:ff:79:8c:fd:ec:2e:6d:81:13:31:17:92:3a:a1: 12:cf:65:62:5d:22:d7:3e:9f:41:ed:69:c0:52:4b: fc:0a:10:28:dc:fd:16:93:04:bf:52:69:f2:f0:4e: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:F1:97:2D:6B:E9:DB:A8:E1:B7:D3:3C:F9:72:E5:87:56:2E:3E X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6pzxly1r6duo4bfTPPly5YdWLj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.25.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:8d:c1:85:3a:73:0c:ef:bb:4e:5b:31:01:c4:95:54:28:03: b0:1a:74:e7:b2:4d:bf:26:d3:77:a8:33:b3:fb:f0:fb:9a:a6: 7a:15:0a:ea:d1:45:fe:fb:51:cc:9e:10:66:7b:1f:e6:6e:cc: 86:b9:45:e7:38:3e:60:f9:15:be:41:da:a8:43:3e:df:35:11: f2:9c:33:43:b3:56:03:79:37:9f:0a:2c:7e:77:ab:71:3d:19: 1d:67:f8:72:18:8d:8c:4e:b7:2b:5d:aa:ff:49:fb:0b:ad:8d: 09:57:a0:c4:1d:5a:0e:51:cd:db:95:0a:4f:35:d0:03:b1:eb: 92:d1:aa:64:73:6a:88:93:04:fe:5d:b3:01:7a:9b:22:94:c0: 83:a9:fc:ac:de:9b:8f:00:b5:80:0f:e1:d4:97:33:3c:3e:cd: bd:96:c8:ee:03:11:f1:3b:f1:37:c9:ae:34:75:22:ca:ed:3b: f1:bb:92:c2:1f:42:9e:f8:0c:17:dd:c7:da:2d:03:58:4f:4e: 24:c5:d5:f7:a1:a1:7b:7b:da:c5:2b:d7:98:60:94:94:d1:e4: 28:6d:46:e7:59:4a:8f:15:87:81:a2:31:17:e5:6b:a7:40:2b: a5:7e:2e:9c:fe:a4:65:78:d8:49:69:0c:12:08:22:32:aa:2b: ca:03:43:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMHp0ICgqMH16WpKtclGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTljZjE5NzJkNmJlOWRiYThlMWI3ZDMzY2Y5NzJlNTg3NTYyZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWgggOIwaqElMX45PA5Q80JzAayB KiLIGmi/LPbkXXFfVtXQwsczuKEOmvyH25zVvlTKILty7n6sBb6nUYC0Hukvuxsu ufdmsnQQ2JVvSZcxrvoIG5Nmv5pbM84ZWEatYM1FqbSXIweb8WxcoOvp7Yo7Anwt Al27n5ilhyTjrj+3ADems00PKhWK+M3hgk+zEGIUtEkuLUmmwMWwdwV5WaL+qMve /wYvUXQQxtKlg5G/aZimzJTlVmse0gC69H7cS4wgAzqmg55Utey44RNLJ2/r/3mM /ewubYETMReSOqESz2ViXSLXPp9B7WnAUkv8ChAo3P0WkwS/Umny8E5XywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqc8Zcta+nbqOG30zz5cuWHVi4+MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvNnB6eGx5MXI2ZHVvNGJmVFBQbHk1WWRXTGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0ZMA0G CSqGSIb3DQEBCwUAA4IBAQA7jcGFOnMM77tOWzEBxJVUKAOwGnTnsk2/JtN3qDOz +/D7mqZ6FQrq0UX++1HMnhBmex/mbsyGuUXnOD5g+RW+QdqoQz7fNRHynDNDs1YD eTefCix+d6txPRkdZ/hyGI2MTrcrXar/SfsLrY0JV6DEHVoOUc3blQpPNdADseuS 0apkc2qIkwT+XbMBepsilMCDqfys3puPALWAD+HUlzM8Ps29lsjuAxHxO/E3ya40 dSLK7Tvxu5LCH0Ke+AwX3cfaLQNYT04kxdX3oaF7e9rFK9eYYJSU0eQobUbnWUqP FYeBojEX5WunQCulfi6c/qRleNhJaQwSCCIyqivKA0P2 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:59 2026 by rpki-client