This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa File: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (raw, json) Hash identifier: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU= Subject key identifier: 66:D8:56:E4:AC:77:9E:7C:87:4A:1A:DF:DE:87:B4:FC:1E:DF:32:41 Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Certificate serial: 019B7D5B62CD4B613F5F45D98FF3DA276DD3 Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa Signing time: Fri 02 Jan 2026 06:18:19 +0000 ROA not before: Fri 02 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12257 IP address blocks: 2a01:6f40:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:62:cd:4b:61:3f:5f:45:d9:8f:f3:da:27:6d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Validity Not Before: Jan 2 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d856e4ac779e7c874a1adfde87b4fc1edf3241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:c1:df:2b:83:82:ce:46:7c:83:e2:db:2e: fc:92:4c:78:40:ac:15:be:9d:15:ec:3e:40:97:52: 7e:7b:a0:3d:1c:f3:6c:5c:56:81:e1:63:50:0a:63: 25:3b:c6:15:5b:e5:21:29:53:f7:77:34:9e:c8:ef: ee:2d:25:05:1f:e1:f4:c1:33:c2:37:73:9d:2e:b0: e5:74:af:ec:e0:ec:cb:d3:6e:be:58:d6:aa:55:c1: 6c:9c:7e:04:2d:03:e1:3c:93:33:b1:6b:f2:5e:86: e6:e6:0c:62:f1:8d:2c:9f:c1:e7:5e:c8:72:68:3f: a6:28:ff:a4:1c:db:5f:4d:a8:6b:de:b0:c9:48:79: dd:04:91:e7:7f:99:47:99:46:e4:de:5c:96:c1:7c: ff:5c:be:0f:90:1c:b3:9f:ef:e8:9f:98:e1:58:f8: 46:3e:ac:cc:5f:7c:e1:e8:c8:c8:b8:95:17:7f:6d: 7e:e9:30:e0:ae:74:79:6d:36:1b:85:70:9f:d1:54: 32:fb:6d:8c:6c:c7:d5:cf:ee:18:6d:df:ec:9a:32: 70:32:cf:d2:b2:66:c9:10:73:63:e6:a5:87:bc:a1: 22:ea:03:f6:76:6f:ee:31:4c:24:da:ec:f3:46:b3: 5e:47:67:0b:f8:3e:ec:04:dc:29:17:92:e6:7b:ee: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D8:56:E4:AC:77:9E:7C:87:4A:1A:DF:DE:87:B4:FC:1E:DF:32:41 X509v3 Authority Key Identifier: keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:6f40:f100::/48 Signature Algorithm: sha256WithRSAEncryption 6c:7d:7b:3f:3a:50:9a:c8:86:48:f7:0a:1d:fe:8f:45:e1:86: c2:ed:bb:20:1d:36:f6:ee:44:92:ba:e3:c0:1d:58:d7:52:cd: 2f:19:c9:2b:b6:55:da:46:c5:4f:26:32:54:f4:7d:5f:4d:a6: 2d:33:f2:ce:e4:ac:85:b3:54:44:0d:9d:7c:0d:19:49:e6:5f: 47:5a:03:30:fc:55:d3:5c:ce:3d:ce:a0:de:e8:fa:d1:f9:3e: 0a:6f:0b:5c:98:09:3f:62:26:58:67:b8:92:5a:3b:70:40:cf: d3:03:e5:b0:ae:2a:5e:35:53:ae:a7:19:86:8d:46:50:36:2b: 56:05:63:db:a4:bf:ab:94:db:e3:bb:3f:9b:40:61:b2:d0:21: 75:70:cb:1d:ed:d3:ab:93:23:2c:f9:c4:90:3b:2d:a7:4d:07: ec:59:18:13:82:c5:42:6a:d6:83:1d:b5:0e:02:40:7e:67:19: 71:57:7d:cf:87:de:fc:fa:bf:13:1b:ea:c6:1c:61:f4:fe:03: a8:b9:9d:0b:bd:ea:72:90:32:db:12:58:a4:f9:c0:07:63:39: b6:7a:ba:eb:5c:87:e7:91:4f:a7:6f:af:1c:65:b5:3d:fd:66: 96:f5:03:0c:09:dc:e5:2d:c2:da:4b:e4:fb:9a:4d:91:30:56: ab:77:0a:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W2LNS2E/X0XZj/PaJ23TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOWE3NDA1YTYwODVjOWFiYWNmMDgzZGM5MGE0OTVmY2Qy NjhjZjgwHhcNMjYwMTAyMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ4NTZlNGFjNzc5ZTdjODc0YTFhZGZkZTg3YjRmYzFlZGYzMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEjB3yuDgs5GfIPi2y78kkx4QKwV vp0V7D5Al1J+e6A9HPNsXFaB4WNQCmMlO8YVW+UhKVP3dzSeyO/uLSUFH+H0wTPC N3OdLrDldK/s4OzL026+WNaqVcFsnH4ELQPhPJMzsWvyXobm5gxi8Y0sn8HnXshy aD+mKP+kHNtfTahr3rDJSHndBJHnf5lHmUbk3lyWwXz/XL4PkByzn+/on5jhWPhG PqzMX3zh6MjIuJUXf21+6TDgrnR5bTYbhXCf0VQy+22MbMfVz+4Ybd/smjJwMs/S smbJEHNj5qWHvKEi6gP2dm/uMUwk2uzzRrNeR2cL+D7sBNwpF5Lme+4CrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGbYVuSsd558h0oa396HtPwe3zJBMB8GA1UdIwQY MBaAFGuadAWmCFyaus8IPckKSV/NJoz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMt MmUxZWU5NDcxZWVjLzEvWnRoVzVLeDNubnlIU2hyZjNvZTBfQjdmTWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMtMmUxZWU5NDcxZWVj LzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFvQPEA MA0GCSqGSIb3DQEBCwUAA4IBAQBsfXs/OlCayIZI9wod/o9F4YbC7bsgHTb27kSS uuPAHVjXUs0vGckrtlXaRsVPJjJU9H1fTaYtM/LO5KyFs1REDZ18DRlJ5l9HWgMw /FXTXM49zqDe6PrR+T4KbwtcmAk/YiZYZ7iSWjtwQM/TA+WwripeNVOupxmGjUZQ NitWBWPbpL+rlNvjuz+bQGGy0CF1cMsd7dOrkyMs+cSQOy2nTQfsWRgTgsVCataD HbUOAkB+ZxlxV33Ph978+r8TG+rGHGH0/gOouZ0LvepykDLbElik+cAHYzm2errr XIfnkU+nb68cZbU9/WaW9QMMCdzlLcLaS+T7mk2RMFardwpd -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:47 2026 by rpki-client