This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/6_4vYpi4LmNAug3APCxVXyHx21w.roa File: 6_4vYpi4LmNAug3APCxVXyHx21w.roa (raw, json) Hash identifier: 5cDYU8ay7U40brHTUMpIBEhR6GWAEgFdVZ1R1d9FZAw= Subject key identifier: EB:FE:2F:62:98:B8:2E:63:40:BA:0D:C0:3C:2C:55:5F:21:F1:DB:5C Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F1517FC205D33055CDAC2DEBC808ABB Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/6_4vYpi4LmNAug3APCxVXyHx21w.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214630 IP address blocks: 2a14:c380:b00::/40 maxlen: 48 2a14:c380:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:17:fc:20:5d:33:05:5c:da:c2:de:bc:80:8a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebfe2f6298b82e6340ba0dc03c2c555f21f1db5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:a2:9f:01:0e:44:f8:e9:00:14:1f:72:2c: a3:8b:de:72:0d:79:f4:17:60:e7:5a:ee:89:4f:9e: ab:65:17:ce:7a:2d:91:84:67:06:cc:3e:1b:a2:89: 59:16:7a:6c:20:3e:fe:c0:a9:ae:4c:59:96:01:94: 8d:ee:87:e7:d5:0d:d9:25:61:9e:a8:0b:b7:9e:25: 47:aa:17:76:57:22:4a:21:68:99:94:6c:06:5a:e5: 70:6d:e5:e7:06:69:1c:7c:da:5c:af:bc:1a:ab:f0: cc:2e:3b:f6:d5:22:e1:d0:8d:77:09:7a:e8:a6:41: 0a:29:db:8a:6a:53:f6:59:81:be:62:8e:8e:b8:67: 1e:92:8c:5d:35:f6:49:63:36:b5:5a:da:7c:79:75: d1:ff:f0:9d:c0:06:b0:6b:cb:8d:de:95:ad:6d:0f: e0:4a:a8:0d:1c:1e:b3:8b:fa:af:91:2b:e3:23:f9: 30:ed:19:34:06:9a:d9:5a:31:77:b4:a9:da:8d:d9: 13:69:fb:09:b8:af:58:02:3d:7b:d4:34:5a:91:c4: 51:a6:3f:c8:0d:85:66:3e:56:7d:c8:4a:b9:f9:1d: 8c:b9:88:e1:b6:5c:bc:6e:b0:93:a2:d4:f5:c1:ff: 62:5a:29:e9:17:00:a3:07:49:ac:a9:5f:c6:b0:a3: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FE:2F:62:98:B8:2E:63:40:BA:0D:C0:3C:2C:55:5F:21:F1:DB:5C X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/6_4vYpi4LmNAug3APCxVXyHx21w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:b00::/40 2a14:c380:d00::/40 Signature Algorithm: sha256WithRSAEncryption 08:ae:7b:dc:ae:e3:98:40:5a:d3:53:56:a4:ef:14:aa:cd:c0: 9a:67:0a:85:22:0a:e0:54:ec:8f:4e:f8:cb:43:86:9e:91:91: ff:96:77:b1:00:3a:4d:81:99:4d:dd:89:6e:51:ed:7f:5b:8b: 6e:f2:36:2f:75:48:6d:25:3d:05:fb:e4:d1:91:9d:1c:8a:8b: ae:d4:e1:9e:63:93:81:4f:39:c2:b9:8d:db:e4:db:bd:fb:15: 20:b9:f7:ad:58:2d:d9:8d:73:c4:3d:fa:27:78:83:3b:1b:fc: a9:b8:a9:88:2f:63:b6:d2:27:b4:f3:21:c0:51:ad:dd:d9:0a: ef:91:61:6f:12:b6:67:75:2c:a2:44:a5:44:1c:7a:1e:b1:a1: b6:7c:c9:e2:d1:90:4a:6f:28:ca:eb:11:cd:c7:33:9c:24:6e: 4e:c9:80:c9:3a:cd:68:3c:75:ca:5c:14:1e:e4:c5:b7:cc:09: e6:ca:1d:f1:f0:82:de:0a:b4:87:54:d7:a8:f7:3c:1d:fa:b7: 7a:c0:2f:3b:4c:77:28:73:b4:b9:b8:6d:47:21:1e:da:05:99: 8c:cf:2a:be:81:c7:bd:80:11:33:a5:cf:5a:54:33:e1:aa:17: 23:8c:d1:41:12:15:1f:46:95:63:02:73:e7:c3:8a:e0:13:fd: 80:47:fd:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt/FRf8IF0zBVzawt68gIq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmZlMmY2Mjk4YjgyZTYzNDBiYTBkYzAzYzJjNTU1ZjIxZjFkYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpuinwEORPjpABQfciyji95yDXn0 F2DnWu6JT56rZRfOei2RhGcGzD4boolZFnpsID7+wKmuTFmWAZSN7ofn1Q3ZJWGe qAu3niVHqhd2VyJKIWiZlGwGWuVwbeXnBmkcfNpcr7waq/DMLjv21SLh0I13CXro pkEKKduKalP2WYG+Yo6OuGcekoxdNfZJYza1Wtp8eXXR//CdwAawa8uN3pWtbQ/g SqgNHB6zi/qvkSvjI/kw7Rk0BprZWjF3tKnajdkTafsJuK9YAj171DRakcRRpj/I DYVmPlZ9yEq5+R2MuYjhtly8brCTotT1wf9iWinpFwCjB0msqV/GsKNUAwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFOv+L2KYuC5jQLoNwDwsVV8h8dtcMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvNl80dllwaTRMbU5BdWczQVBDeFZYeUh4MjF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKhTDgAsD BgAqFMOADTANBgkqhkiG9w0BAQsFAAOCAQEACK573K7jmEBa01NWpO8Uqs3AmmcK hSIK4FTsj074y0OGnpGR/5Z3sQA6TYGZTd2JblHtf1uLbvI2L3VIbSU9Bfvk0ZGd HIqLrtThnmOTgU85wrmN2+TbvfsVILn3rVgt2Y1zxD36J3iDOxv8qbipiC9jttIn tPMhwFGt3dkK75FhbxK2Z3UsokSlRBx6HrGhtnzJ4tGQSm8oyusRzccznCRuTsmA yTrNaDx1ylwUHuTFt8wJ5sod8fCC3gq0h1TXqPc8Hfq3esAvO0x3KHO0ubhtRyEe 2gWZjM8qvoHHvYARM6XPWlQz4aoXI4zRQRIVH0aVYwJz58OK4BP9gEf92g== -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:44 2026 by rpki-client