This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/6CkXD84pke9k3M4G741F2bkK36U.roa File: 6CkXD84pke9k3M4G741F2bkK36U.roa (raw, json) Hash identifier: W5UgpdGLKX1sz4JtCaw9TLFL+VAMoIT+vGJMM59xCmY= Subject key identifier: E8:29:17:0F:CE:29:91:EF:64:DC:CE:06:EF:8D:45:D9:B9:0A:DF:A5 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019B7F147FBFD9E51EC5037C44F43981DFF6 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/6CkXD84pke9k3M4G741F2bkK36U.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 2a04:88c5::/32 maxlen: 32 2a11:bb44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7f:bf:d9:e5:1e:c5:03:7c:44:f4:39:81:df:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e829170fce2991ef64dcce06ef8d45d9b90adfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:db:42:68:53:74:be:c0:9a:c8:36:74:07: c0:7a:c6:6b:7a:d3:cf:67:f0:68:a6:96:4b:8a:ea: 4f:ea:13:c5:09:4d:a9:ed:5e:cc:fc:9b:ed:57:70: 98:09:b7:79:5f:5e:df:d3:5f:02:0e:f4:e7:f4:84: 97:61:26:90:af:60:7d:6c:d9:56:bc:dd:72:fa:d4: cf:b4:8b:61:28:50:fc:b7:1b:51:34:45:e1:2e:fc: 4c:84:d0:ef:4f:e7:1f:09:df:a0:21:66:f7:a3:bf: 10:38:d3:81:3a:1d:c4:92:c9:b1:64:53:89:a1:6b: 42:40:ec:6d:f2:1c:8f:9d:62:fa:12:f7:4c:69:16: 6c:10:4c:a4:5a:96:c9:62:9f:9e:b4:a9:2b:78:c5: db:e7:37:23:52:4d:49:71:9f:bc:77:68:7d:75:32: c7:d3:52:6b:be:e7:1f:7c:92:18:76:3b:f4:3a:2a: 22:fb:11:61:e1:c1:a0:7d:db:7b:a4:3f:2e:82:61: e5:28:c2:1c:29:dd:a1:e1:b0:ce:da:a5:c3:6d:0b: b2:55:3b:ae:3c:e6:36:2d:66:74:6b:60:f5:0a:e0: b4:f0:fc:ee:d5:c6:61:f9:3c:73:94:d7:e0:5b:ee: 33:fc:1f:ef:5f:45:47:62:8e:3d:11:98:12:ba:6e: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:29:17:0F:CE:29:91:EF:64:DC:CE:06:EF:8D:45:D9:B9:0A:DF:A5 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/6CkXD84pke9k3M4G741F2bkK36U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:88c5::/32 2a11:bb44::/32 Signature Algorithm: sha256WithRSAEncryption b4:26:97:00:23:dd:c6:5d:29:e7:17:ff:f8:6a:7f:e6:68:ab: f3:7a:e6:bd:0d:81:96:99:47:16:d4:91:05:e7:97:dc:e2:cd: 91:15:b8:6b:57:24:c4:b7:ab:50:af:63:d8:4d:b6:29:f4:5b: 2f:74:9f:a2:28:dc:ea:27:f6:0c:d5:84:2e:27:60:68:6f:6e: 2c:d5:e4:cc:a3:2a:bf:10:4f:2c:41:3d:cc:3a:f7:ad:2b:c6: 6e:c7:b0:7a:19:4c:84:46:8b:20:81:e2:58:00:35:51:8d:94: a1:bf:03:ab:48:a6:6d:6e:bf:81:7c:82:47:3c:27:83:5f:20: 47:c2:d7:66:a8:72:16:c7:58:96:b2:3f:26:8f:60:0d:fd:03: 33:92:12:f0:f5:a6:70:90:bb:ea:26:1e:1b:8b:87:7c:62:80: 67:84:ce:03:8c:42:54:54:eb:ec:6e:36:ef:49:03:2a:84:57: 72:66:75:49:aa:f0:04:c0:70:16:77:b9:e6:77:8b:44:0d:8f: 2e:81:c5:55:b9:4c:54:b1:1f:e7:14:90:07:95:f5:cb:2d:f6: 9d:84:74:5a:98:6d:a7:fa:27:b3:39:f8:88:43:a2:9e:d7:19: 51:3b:4f:3c:13:19:43:7f:17:51:88:5e:91:9d:5e:e6:8e:60: f9:d6:80:d9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FH+/2eUexQN8RPQ5gd/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODI5MTcwZmNlMjk5MWVmNjRkY2NlMDZlZjhkNDVkOWI5MGFkZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy27bQmhTdL7Amsg2dAfAesZretPP Z/BoppZLiupP6hPFCU2p7V7M/JvtV3CYCbd5X17f018CDvTn9ISXYSaQr2B9bNlW vN1y+tTPtIthKFD8txtRNEXhLvxMhNDvT+cfCd+gIWb3o78QONOBOh3EksmxZFOJ oWtCQOxt8hyPnWL6EvdMaRZsEEykWpbJYp+etKkreMXb5zcjUk1JcZ+8d2h9dTLH 01JrvucffJIYdjv0Oioi+xFh4cGgfdt7pD8ugmHlKMIcKd2h4bDO2qXDbQuyVTuu POY2LWZ0a2D1CuC08Pzu1cZh+TxzlNfgW+4z/B/vX0VHYo49EZgSum6nbwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOgpFw/OKZHvZNzOBu+NRdm5Ct+lMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvNkNrWEQ4NHBrZTlrM000Rzc0MUYyYmtLMzZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgSIxQMF ACoRu0QwDQYJKoZIhvcNAQELBQADggEBALQmlwAj3cZdKecX//hqf+Zoq/N65r0N gZaZRxbUkQXnl9zizZEVuGtXJMS3q1CvY9hNtin0Wy90n6Io3Oon9gzVhC4nYGhv bizV5MyjKr8QTyxBPcw6960rxm7HsHoZTIRGiyCB4lgANVGNlKG/A6tIpm1uv4F8 gkc8J4NfIEfC12aochbHWJayPyaPYA39AzOSEvD1pnCQu+omHhuLh3xigGeEzgOM QlRU6+xuNu9JAyqEV3JmdUmq8ATAcBZ3ueZ3i0QNjy6BxVW5TFSxH+cUkAeV9cst 9p2EdFqYbaf6J7M5+IhDop7XGVE7TzwTGUN/F1GIXpGdXuaOYPnWgNk= -----END CERTIFICATE-----Generated at Wed Jan 7 17:19:36 2026 by rpki-client