This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/6vNcTBtihwxM2kX5mTwo0tTWvrM.roa File: 6vNcTBtihwxM2kX5mTwo0tTWvrM.roa (raw, json) Hash identifier: inTdCPb2DbuFCu/Dh4hi2+8wsFRsWzTJ42usZefCNC4= Subject key identifier: EA:F3:5C:4C:1B:62:87:0C:4C:DA:45:F9:99:3C:28:D2:D4:D6:BE:B3 Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400 Certificate serial: 019B7BA5299DA9C45968320A31C8BE9AD3AF Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/6vNcTBtihwxM2kX5mTwo0tTWvrM.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a00:a640:10a0::/44 maxlen: 48 2a00:a640:20a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:29:9d:a9:c4:59:68:32:0a:31:c8:be:9a:d3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaf35c4c1b62870c4cda45f9993c28d2d4d6beb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:8b:a9:b0:e3:9d:fd:20:e6:72:c1:49:5f: 92:3e:24:9f:5f:0d:8f:e8:d6:e2:62:38:94:51:7d: c4:96:f6:0f:fb:52:24:a0:75:29:69:51:aa:9b:23: 08:3d:59:51:72:cf:6e:87:4d:e8:bf:96:fa:38:32: 63:15:81:1d:2c:c0:fe:f9:f5:63:f6:a8:dc:4d:4f: f4:6d:be:cf:28:c5:a2:cb:e3:4a:9d:cf:74:f5:cf: 8e:fe:ad:5d:2e:4c:ca:02:01:3f:24:84:8e:2f:00: 6d:ac:b3:2b:10:d5:8d:60:df:d1:14:ce:3e:72:be: c6:bd:89:66:e9:09:ed:37:aa:dc:be:fd:bb:93:ad: e6:b9:9c:1e:80:bf:67:84:1d:32:00:6e:ea:63:8a: 04:2e:94:87:91:01:bf:4b:53:0e:9d:19:5d:5b:48: ca:2e:fc:60:c2:d5:8a:82:ea:16:61:8c:f1:db:27: 32:b6:e8:c5:78:55:88:74:f1:45:a6:8e:e3:de:63: 6c:80:22:9d:b1:42:03:01:11:4c:27:26:c5:85:00: 9e:9f:ef:2c:32:cb:79:e4:e5:3b:f1:af:8d:ca:96: 32:19:6e:16:47:4f:1f:38:12:30:23:45:aa:bc:9b: 9f:b7:3e:0c:8c:55:c1:46:73:a7:80:67:b3:68:dc: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:5C:4C:1B:62:87:0C:4C:DA:45:F9:99:3C:28:D2:D4:D6:BE:B3 X509v3 Authority Key Identifier: keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/6vNcTBtihwxM2kX5mTwo0tTWvrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:a640:10a0::/44 2a00:a640:20a0::/44 Signature Algorithm: sha256WithRSAEncryption 01:2c:e2:4e:32:4d:24:a5:73:f4:bb:6f:2f:2a:46:85:c4:11: da:7f:1c:e1:3b:86:ec:26:8f:a4:b8:26:13:22:c0:52:bf:a1: 38:51:38:43:b0:c5:69:1e:00:f0:63:3d:52:77:e1:e4:aa:64: 2b:a2:4e:ed:18:b7:c2:00:28:45:c3:ce:f8:f0:b8:9b:fc:47: e3:78:44:50:09:34:91:f7:f5:77:45:cb:b0:b5:b0:07:05:07: 21:89:00:ec:a3:31:da:1d:5e:61:88:bb:aa:a0:e3:54:53:9b: 96:e3:ab:f2:82:8a:b5:c5:cb:27:ef:cc:25:2e:ef:24:0a:01: db:71:fb:f7:0e:65:fb:40:f8:43:4d:0f:7e:a5:4f:2b:8b:1b: 60:17:bf:bf:58:18:d1:17:db:31:25:95:af:23:ac:e8:ef:86: 7f:77:7b:a0:a4:9b:48:b9:ad:3f:32:83:54:a3:82:75:76:7e: 7c:88:dc:a4:4e:4d:9d:99:d0:5a:68:8a:e6:d5:3b:af:b0:10: d6:3f:46:21:49:9b:41:52:83:a6:81:7a:04:c9:80:9a:9b:22: 24:d8:21:bd:a5:ed:0b:8d:99:16:ca:78:a0:75:b6:1f:16:68: 99:32:d7:72:28:8e:9b:18:c5:cd:6c:7f:91:0a:03:21:60:ad: eb:c2:a2:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pSmdqcRZaDIKMci+mtOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTRkMTk1MjdmZDg1ZDBkNDQ0YWNhZGQ0NGEwMTY1NWZk Yzc0MDAwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWYzNWM0YzFiNjI4NzBjNGNkYTQ1Zjk5OTNjMjhkMmQ0ZDZiZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhqLqbDjnf0g5nLBSV+SPiSfXw2P 6NbiYjiUUX3ElvYP+1IkoHUpaVGqmyMIPVlRcs9uh03ov5b6ODJjFYEdLMD++fVj 9qjcTU/0bb7PKMWiy+NKnc909c+O/q1dLkzKAgE/JISOLwBtrLMrENWNYN/RFM4+ cr7GvYlm6QntN6rcvv27k63muZwegL9nhB0yAG7qY4oELpSHkQG/S1MOnRldW0jK LvxgwtWKguoWYYzx2ycytujFeFWIdPFFpo7j3mNsgCKdsUIDARFMJybFhQCen+8s Mst55OU78a+NypYyGW4WR08fOBIwI0WqvJuftz4MjFXBRnOngGezaNz0/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOrzXEwbYocMTNpF+Zk8KNLU1r6zMB8GA1UdIwQY MBaAFFdU0ZUn/YXQ1ESsrdRKAWVf3HQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFUUmxTZjloZERVUkt5dDFFb0JaVl9jZEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83YzlmY2MtOGZjZS00NGI3LWI2YmYt MTE3NzYwMzE0MTVmLzEvNnZOY1RCdGlod3hNMmtYNW1Ud28wdFRXdnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS83YzlmY2MtOGZjZS00NGI3LWI2YmYtMTE3NzYwMzE0MTVm LzEvVjFUUmxTZjloZERVUkt5dDFFb0JaVl9jZEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgCmQBCg AwcEKgCmQCCgMA0GCSqGSIb3DQEBCwUAA4IBAQABLOJOMk0kpXP0u28vKkaFxBHa fxzhO4bsJo+kuCYTIsBSv6E4UThDsMVpHgDwYz1Sd+HkqmQrok7tGLfCAChFw874 8Lib/EfjeERQCTSR9/V3RcuwtbAHBQchiQDsozHaHV5hiLuqoONUU5uW46vygoq1 xcsn78wlLu8kCgHbcfv3DmX7QPhDTQ9+pU8rixtgF7+/WBjRF9sxJZWvI6zo74Z/ d3ugpJtIua0/MoNUo4J1dn58iNykTk2dmdBaaIrm1TuvsBDWP0YhSZtBUoOmgXoE yYCamyIk2CG9pe0LjZkWynigdbYfFmiZMtdyKI6bGMXNbH+RCgMhYK3rwqKb -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:12 2026 by rpki-client