This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/6QjHcvrDTdo3Dcsfkn83V1tztM4.roa File: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (raw, json) Hash identifier: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ= Subject key identifier: E9:08:C7:72:FA:C3:4D:DA:37:0D:CB:1F:92:7F:37:57:5B:73:B4:CE Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Certificate serial: 019B7AC84DBB9A5726362680DB32B57BB432 Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/6QjHcvrDTdo3Dcsfkn83V1tztM4.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 2a00:1838:9100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4d:bb:9a:57:26:36:26:80:db:32:b5:7b:b4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e908c772fac34dda370dcb1f927f37575b73b4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:85:9f:68:c1:55:ae:02:3d:86:73:4c:be: 89:a8:6b:d9:7e:3f:5e:68:a3:53:f6:9c:c2:23:f8: cc:29:cc:50:45:bc:49:69:d4:80:a1:e6:06:60:bf: 88:9a:a0:a0:98:57:a0:55:c7:76:fa:5f:b1:6a:59: 96:71:d9:f0:6e:aa:c7:bf:c4:3d:1c:d7:28:6f:c3: fd:aa:44:5a:be:1b:21:21:20:e1:9c:70:13:a8:90: 6e:76:49:a3:a0:5e:f1:c0:08:c0:d7:cb:ba:04:df: 48:c1:4a:a3:d2:72:02:48:b1:98:17:fd:71:18:c3: 14:d7:d9:c7:d1:0b:3c:61:4d:95:28:d0:d4:bf:d2: 19:6d:8c:3e:92:c1:60:5f:3e:d3:ea:15:c6:02:44: 8d:33:6d:a2:c3:68:f5:06:47:77:c6:43:bc:cb:40: 51:b7:fc:41:bc:73:34:c9:ea:2e:75:cc:14:0c:cf: 7f:15:1d:e2:dc:19:d0:c9:1d:60:3d:f0:72:32:b6: 79:b9:a5:02:58:3a:7c:80:c0:60:e7:40:b5:37:6c: c1:34:c2:49:36:8f:da:b4:8a:af:f3:14:f7:2c:31: 13:7b:e3:82:c2:2d:eb:36:93:9b:19:c5:ab:77:f1: 04:53:ec:00:72:b1:47:57:44:3f:6c:57:92:fd:d8: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:08:C7:72:FA:C3:4D:DA:37:0D:CB:1F:92:7F:37:57:5B:73:B4:CE X509v3 Authority Key Identifier: keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/6QjHcvrDTdo3Dcsfkn83V1tztM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1838:9100::/48 Signature Algorithm: sha256WithRSAEncryption c2:ee:8b:23:da:50:76:0f:c4:8b:6a:0f:f2:58:3d:7f:36:91: 53:11:fd:cd:35:88:90:23:6d:19:56:ee:2a:0e:ae:9a:c3:43: 58:88:a6:3b:6e:1b:6f:fa:e7:a6:8d:d1:c7:a3:86:7c:89:4c: fe:4b:e1:f8:d7:59:eb:d7:54:da:e7:99:cb:25:07:14:30:7a: f5:06:ef:01:e5:17:d9:ff:d8:c6:78:4e:17:be:dd:16:ca:41: 61:6d:eb:bd:c8:03:7c:39:5a:53:ec:bc:b1:cf:99:9c:1f:85: 6d:57:e6:af:0d:8e:15:6b:c5:a3:bc:26:ba:bb:06:7b:5a:34: fd:61:79:22:c6:48:64:82:52:15:c0:33:a2:64:90:71:41:96: 30:ea:e4:ef:6e:ce:ee:2f:08:52:ec:0a:44:6b:6d:7f:69:56: d7:ed:b4:57:96:bc:d9:46:ad:d3:dd:45:3d:20:b7:92:e6:15: 53:9e:ea:80:14:b6:06:fe:fa:1e:da:87:3f:d9:c1:b3:44:54: b6:dc:dc:81:0b:ac:b2:80:38:37:bc:c6:79:3e:f1:3a:a7:e1: 62:40:9b:6f:52:b7:33:bb:aa:1e:a6:f8:98:e7:8d:88:f0:cb: 3b:de:de:98:24:5f:66:a1:31:6a:15:88:7f:ed:a6:fc:ea:03: 7a:1a:cc:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yE27mlcmNiaA2zK1e7QyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh NjU4MjkwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTA4Yzc3MmZhYzM0ZGRhMzcwZGNiMWY5MjdmMzc1NzViNzNiNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRqFn2jBVa4CPYZzTL6JqGvZfj9e aKNT9pzCI/jMKcxQRbxJadSAoeYGYL+ImqCgmFegVcd2+l+xalmWcdnwbqrHv8Q9 HNcob8P9qkRavhshISDhnHATqJBudkmjoF7xwAjA18u6BN9IwUqj0nICSLGYF/1x GMMU19nH0Qs8YU2VKNDUv9IZbYw+ksFgXz7T6hXGAkSNM22iw2j1Bkd3xkO8y0BR t/xBvHM0yeoudcwUDM9/FR3i3BnQyR1gPfByMrZ5uaUCWDp8gMBg50C1N2zBNMJJ No/atIqv8xT3LDETe+OCwi3rNpObGcWrd/EEU+wAcrFHV0Q/bFeS/diLQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOkIx3L6w03aNw3LH5J/N1dbc7TOMB8GA1UdIwQY MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt ZWQ1ZjAwYzk1MDY3LzEvNlFqSGN2ckRUZG8zRGNzZmtuODNWMXR6dE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3 LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAYOJEA MA0GCSqGSIb3DQEBCwUAA4IBAQDC7osj2lB2D8SLag/yWD1/NpFTEf3NNYiQI20Z Vu4qDq6aw0NYiKY7bhtv+uemjdHHo4Z8iUz+S+H411nr11Ta55nLJQcUMHr1Bu8B 5RfZ/9jGeE4Xvt0WykFhbeu9yAN8OVpT7Lyxz5mcH4VtV+avDY4Va8WjvCa6uwZ7 WjT9YXkixkhkglIVwDOiZJBxQZYw6uTvbs7uLwhS7ApEa21/aVbX7bRXlrzZRq3T 3UU9ILeS5hVTnuqAFLYG/voe2oc/2cGzRFS23NyBC6yygDg3vMZ5PvE6p+FiQJtv Urczu6oepviY542I8Ms73t6YJF9moTFqFYh/7ab86gN6Gszy -----END CERTIFICATE-----Generated at Wed Jan 21 14:48:00 2026 by rpki-client