This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/6tthdMUigNGL-Lj03VV1437ckw0.roa File: 6tthdMUigNGL-Lj03VV1437ckw0.roa (raw, json) Hash identifier: 3DKuUAToC850yfEHGnyn8P4fVujt3XjQI9EcyxZgd7k= Subject key identifier: EA:DB:61:74:C5:22:80:D1:8B:F8:B8:F4:DD:55:75:E3:7E:DC:93:0D Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019AFFF493EB3D117824108548416C602004 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/6tthdMUigNGL-Lj03VV1437ckw0.roa Signing time: Mon 08 Dec 2025 21:53:29 +0000 ROA not before: Mon 08 Dec 2025 21:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a01:e281:a200::/40 maxlen: 40 2a01:e281:a774::/48 maxlen: 48 2a01:e281:af00::/40 maxlen: 48 2a01:e281:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:f4:93:eb:3d:11:78:24:10:85:48:41:6c:60:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Dec 8 21:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eadb6174c52280d18bf8b8f4dd5575e37edc930d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:5b:d7:34:60:2a:8b:04:b3:2e:45:c1:87: 16:77:43:59:7e:92:3a:2b:78:98:03:e7:38:c7:04: 20:a3:d0:d2:eb:78:4e:bc:1d:6c:97:6f:0c:2e:c5: bb:49:6a:1b:c3:e7:33:c8:29:f8:68:eb:f4:41:30: b0:5a:97:59:67:75:7a:46:7e:80:a1:4d:be:e7:ee: 98:48:0f:7e:31:c9:fa:50:37:39:32:08:21:fe:9d: b1:55:34:79:d3:b8:63:07:15:13:33:31:8b:3d:ac: c3:cd:60:79:89:6b:38:8c:9c:67:52:66:0c:ad:af: e5:04:b2:da:33:15:e4:af:26:84:94:e5:c6:2b:c4: 97:12:4b:45:5d:8f:84:97:9e:7b:23:49:13:71:6e: a8:ee:ab:a1:64:43:8d:21:f6:ba:ce:db:ec:40:d6: 9c:ca:83:bb:b3:e9:12:35:4f:c9:89:39:4e:c2:f3: c0:f1:8d:e3:e1:a0:7f:fd:ba:5a:40:24:7e:db:91: 1b:82:93:b0:79:4f:fa:00:41:e8:b3:dc:c3:3e:8f: 3b:d5:dd:22:5f:9e:a8:27:70:c3:e7:c3:3e:81:aa: d5:f8:63:0c:a9:b2:8d:0a:d6:5d:4a:ad:06:36:29: b7:aa:a3:29:43:68:a3:d0:b0:a1:1a:69:2c:4e:3a: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DB:61:74:C5:22:80:D1:8B:F8:B8:F4:DD:55:75:E3:7E:DC:93:0D X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/6tthdMUigNGL-Lj03VV1437ckw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:a200::/40 2a01:e281:a774::/48 2a01:e281:af00::/40 2a01:e281:b100::/40 Signature Algorithm: sha256WithRSAEncryption bf:b5:53:1e:dd:35:70:52:d4:92:f8:dc:84:34:a8:ec:1c:a9: 99:ab:3f:38:8c:79:65:39:da:69:12:85:38:61:84:66:dc:f5: b5:2a:5f:1c:bc:f9:cf:50:dc:b1:88:11:d5:c8:df:fe:fa:ce: dc:3c:46:f7:88:d0:b2:d4:f4:1a:db:26:9d:84:f1:44:e5:d6: 0b:72:87:77:4b:76:7e:f4:24:e1:b2:10:de:22:74:56:a6:47: 6f:3d:32:d6:1f:10:a6:c6:7f:17:59:7c:10:29:ab:d1:32:6d: 4f:4c:f5:17:0b:96:5f:6d:e0:93:2d:d1:10:c8:5a:cf:29:98: a1:ca:a0:74:dc:88:4b:03:03:d9:c6:4c:88:f9:52:6c:87:80: e9:a1:b2:ba:94:b9:54:d4:67:14:27:b4:28:a5:55:77:33:f8: 94:60:6a:e1:73:3b:49:d4:ba:29:7d:5c:63:27:36:ff:5c:15: ea:02:6e:d1:df:50:4f:58:76:9f:61:9d:5d:f2:85:47:7d:1a: ac:93:9a:4b:c0:b9:be:d7:6e:3b:06:5f:28:fc:54:94:21:00: 63:d9:48:9d:27:b4:a4:e1:88:2e:b3:7e:2d:76:f0:e8:96:9e: 9d:b3:5b:42:a0:b9:04:3e:7d:66:af:ab:24:ff:aa:3b:d2:ad: 85:7f:6c:f3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZr/9JPrPRF4JBCFSEFsYCAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjUxMjA4MjE1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWRiNjE3NGM1MjI4MGQxOGJmOGI4ZjRkZDU1NzVlMzdlZGM5MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Bb1zRgKosEsy5FwYcWd0NZfpI6 K3iYA+c4xwQgo9DS63hOvB1sl28MLsW7SWobw+czyCn4aOv0QTCwWpdZZ3V6Rn6A oU2+5+6YSA9+Mcn6UDc5Mggh/p2xVTR507hjBxUTMzGLPazDzWB5iWs4jJxnUmYM ra/lBLLaMxXkryaElOXGK8SXEktFXY+El557I0kTcW6o7quhZEONIfa6ztvsQNac yoO7s+kSNU/JiTlOwvPA8Y3j4aB//bpaQCR+25EbgpOweU/6AEHos9zDPo871d0i X56oJ3DD58M+garV+GMMqbKNCtZdSq0GNim3qqMpQ2ij0LChGmksTjoSewIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOrbYXTFIoDRi/i49N1VdeN+3JMNMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvNnR0aGRNVWlnTkdMLUxqMDNWVjE0Mzdja3cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAAjAhAwYAKgHigaID BwAqAeKBp3QDBgAqAeKBrwMGACoB4oGxMA0GCSqGSIb3DQEBCwUAA4IBAQC/tVMe 3TVwUtSS+NyENKjsHKmZqz84jHllOdppEoU4YYRm3PW1Kl8cvPnPUNyxiBHVyN/+ +s7cPEb3iNCy1PQa2yadhPFE5dYLcod3S3Z+9CThshDeInRWpkdvPTLWHxCmxn8X WXwQKavRMm1PTPUXC5ZfbeCTLdEQyFrPKZihyqB03IhLAwPZxkyI+VJsh4DpobK6 lLlU1GcUJ7QopVV3M/iUYGrhcztJ1LopfVxjJzb/XBXqAm7R31BPWHafYZ1d8oVH fRqsk5pLwLm+1247Bl8o/FSUIQBj2UidJ7Sk4Ygus34tdvDolp6ds1tCoLkEPn1m r6sk/6o70q2Ff2zz -----END CERTIFICATE-----Generated at Sat Dec 13 08:17:10 2025 by rpki-client