This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/t6qrZMnMT533RSAzZ-Cs1wkfZKU.roa File: t6qrZMnMT533RSAzZ-Cs1wkfZKU.roa (raw, json) Hash identifier: za2khRaYkPT+2IlbEqg/xal2w9rhxHbcNNQ5m8PfzoI= Subject key identifier: B7:AA:AB:64:C9:CC:4F:9D:F7:45:20:33:67:E0:AC:D7:09:1F:64:A5 Certificate issuer: /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9 Certificate serial: 019B7AC8853FD5A2B8D9CDF8F835EA66815A Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/t6qrZMnMT533RSAzZ-Cs1wkfZKU.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210564 IP address blocks: 2001:67c:20fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:85:3f:d5:a2:b8:d9:cd:f8:f8:35:ea:66:81:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7aaab64c9cc4f9df745203367e0acd7091f64a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:ac:8d:3f:19:b2:31:87:ec:f6:02:b3:9e: 8f:1f:90:00:00:6b:b0:ed:71:2c:dd:d6:1f:26:25: 9a:39:57:68:0e:6a:42:bc:c3:f9:f8:d0:0a:87:4e: a3:8f:bf:b2:aa:d0:58:e0:81:1a:db:78:6d:92:ae: 63:50:67:e3:3e:81:80:e7:b0:ee:72:a5:76:23:e0: 28:6b:48:48:e0:6c:1b:8d:c2:93:46:1c:13:ea:38: 52:73:f3:36:8a:5a:58:60:7e:95:72:e1:ad:21:98: 1d:47:08:db:5f:d4:76:2e:3c:5d:e6:14:35:b1:58: 4c:c4:36:ab:61:9c:09:f5:65:17:21:85:a2:76:79: 4e:7f:d4:69:74:57:24:19:45:dc:13:92:d6:40:6a: 51:1c:ad:ef:aa:8e:9c:e3:88:36:e6:7d:f9:55:fb: b1:ee:a2:d2:44:e8:0a:59:d4:55:d8:fc:62:47:9c: 97:af:03:a6:24:8f:e5:ad:76:42:1f:17:57:82:2b: 26:f0:cb:f4:c3:fd:8c:01:91:f3:f0:a3:48:ae:be: 56:40:f2:3a:2a:ac:1e:7e:30:bf:63:30:10:13:62: 5e:c3:4c:0d:88:df:ec:04:eb:fd:a4:3f:01:1d:ba: 22:89:cc:7f:f9:19:e9:38:8d:16:ba:74:32:c2:ea: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AA:AB:64:C9:CC:4F:9D:F7:45:20:33:67:E0:AC:D7:09:1F:64:A5 X509v3 Authority Key Identifier: keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/t6qrZMnMT533RSAzZ-Cs1wkfZKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:20fc::/48 Signature Algorithm: sha256WithRSAEncryption 6b:f9:01:f3:39:67:8d:e5:ff:01:5f:e9:a9:4c:4d:af:e7:6b: 97:19:74:71:c2:db:c4:56:25:36:17:c2:91:94:2d:21:59:77: 47:8c:b9:d8:77:fe:0f:20:9c:cf:6e:1f:65:d1:99:c2:1b:9b: 6b:e7:f4:29:6d:a8:80:d0:96:ee:2a:58:3b:44:f9:4d:27:85: 9b:55:13:7f:bc:0c:7e:9d:c2:cf:7d:d5:79:82:e7:c1:9a:cc: 77:b8:ae:bf:ac:70:2b:d5:f7:df:0c:2c:79:8e:8d:2d:c8:5d: b9:67:97:b3:52:28:5c:f9:b9:64:6e:48:09:2d:b1:8d:c9:1d: 6b:c3:b1:b4:a2:fe:3a:d5:07:64:8d:9c:6f:a4:93:cf:30:6c: e6:5e:66:6b:77:98:af:d8:99:cd:31:8f:db:51:fc:7b:8c:b1: 17:f6:fb:47:ed:4d:77:ad:3d:9d:82:44:31:5b:4e:7b:b6:89: a2:8c:fd:15:f2:e2:4a:b4:7a:06:36:b0:6c:62:8a:f1:82:58: 24:70:18:03:62:06:6e:53:90:a2:4e:af:35:03:72:ce:bf:a4: 32:c2:11:0a:1b:9c:bb:a2:94:ac:bd:95:64:0c:f3:43:0f:00: f7:6c:b9:80:cf:1e:49:24:cc:93:05:18:5c:c2:b3:ac:2f:38: 3b:92:aa:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yIU/1aK42c34+DXqZoFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZjhlOTgwY2UxZWViMzI3NDhkOTRiMWQwY2Q0MjQ4OWY5 MWY2ZTkwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2FhYWI2NGM5Y2M0ZjlkZjc0NTIwMzM2N2UwYWNkNzA5MWY2NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c2sjT8ZsjGH7PYCs56PH5AAAGuw 7XEs3dYfJiWaOVdoDmpCvMP5+NAKh06jj7+yqtBY4IEa23htkq5jUGfjPoGA57Du cqV2I+Aoa0hI4GwbjcKTRhwT6jhSc/M2ilpYYH6VcuGtIZgdRwjbX9R2Ljxd5hQ1 sVhMxDarYZwJ9WUXIYWidnlOf9RpdFckGUXcE5LWQGpRHK3vqo6c44g25n35Vfux 7qLSROgKWdRV2PxiR5yXrwOmJI/lrXZCHxdXgism8Mv0w/2MAZHz8KNIrr5WQPI6 KqwefjC/YzAQE2Jew0wNiN/sBOv9pD8BHboiicx/+RnpOI0WunQywuowQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLeqq2TJzE+d90UgM2fgrNcJH2SlMB8GA1UdIwQY MBaAFO746YDOHusydI2UsdDNQkifkfbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3ZqcGdNNGU2ekowalpTeDBNMUNTSi1SOXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lOGUwNTMtZWExMC00Mjg1LWFkYWEt YjQ5NWVjY2IwOWM0LzEvdDZxclpNbk1UNTMzUlNBelotQ3Mxd2tmWktVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lOGUwNTMtZWExMC00Mjg1LWFkYWEtYjQ5NWVjY2IwOWM0 LzEvN3ZqcGdNNGU2ekowalpTeDBNMUNTSi1SOXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCD8 MA0GCSqGSIb3DQEBCwUAA4IBAQBr+QHzOWeN5f8BX+mpTE2v52uXGXRxwtvEViU2 F8KRlC0hWXdHjLnYd/4PIJzPbh9l0ZnCG5tr5/QpbaiA0JbuKlg7RPlNJ4WbVRN/ vAx+ncLPfdV5gufBmsx3uK6/rHAr1fffDCx5jo0tyF25Z5ezUihc+blkbkgJLbGN yR1rw7G0ov461QdkjZxvpJPPMGzmXmZrd5iv2JnNMY/bUfx7jLEX9vtH7U13rT2d gkQxW057tomijP0V8uJKtHoGNrBsYorxglgkcBgDYgZuU5CiTq81A3LOv6QywhEK G5y7opSsvZVkDPNDDwD3bLmAzx5JJMyTBRhcwrOsLzg7kqq8 -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:41 2026 by rpki-client