This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/G6JTgK9c0CWNOmQ8QvDityy_X10.roa File: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (raw, json) Hash identifier: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs= Subject key identifier: 1B:A2:53:80:AF:5C:D0:25:8D:3A:64:3C:42:F0:E2:B7:2C:BF:5F:5D Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601 Certificate serial: 019B78348C41A0A493500483C1C35F63DFDA Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/G6JTgK9c0CWNOmQ8QvDityy_X10.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210776 IP address blocks: 2a13:1200::/44 maxlen: 44 2a13:1200:10::/44 maxlen: 44 2a13:1200:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:41:a0:a4:93:50:04:83:c1:c3:5f:63:df:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba25380af5cd0258d3a643c42f0e2b72cbf5f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:69:25:49:50:98:87:11:4f:12:10:05:f4: 6e:99:68:96:59:82:c3:a2:d7:22:89:c4:f9:22:b4: b0:05:c9:90:cd:fe:1d:71:93:27:c2:12:d6:7e:c3: 2b:fe:9d:ed:19:b1:21:88:90:ce:89:e5:45:95:8e: 3d:f7:39:1b:4f:8e:60:0f:24:c2:30:89:9d:ff:86: 27:70:80:1c:a3:81:6e:dc:73:e0:10:94:47:b9:41: 13:38:cd:e8:52:60:79:7d:75:27:b3:28:4f:6a:71: 68:34:35:4e:48:50:3a:eb:a6:54:51:e7:9e:29:7a: 30:06:eb:ef:fa:91:8f:28:6a:cf:fe:3f:c7:9c:6f: 54:3f:c5:c6:e1:58:90:18:48:4e:31:27:f7:24:3b: be:27:23:b1:c0:45:64:ac:ae:c0:52:53:a6:61:8a: bd:60:81:37:d7:0f:46:ae:24:72:34:fd:c1:cd:7c: c2:ec:f5:1d:07:a7:24:a4:b7:76:b0:8a:ff:ca:56: 3d:c7:0f:4f:26:63:7b:51:4d:77:47:8d:87:c0:68: 95:b5:95:9f:73:ed:ec:67:e1:dc:1b:fd:83:05:79: a2:50:72:a9:aa:ab:b0:a5:e9:8a:ec:ec:8d:0e:bc: 36:88:07:b8:55:03:c3:8d:fc:35:59:43:2e:df:2e: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A2:53:80:AF:5C:D0:25:8D:3A:64:3C:42:F0:E2:B7:2C:BF:5F:5D X509v3 Authority Key Identifier: keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/G6JTgK9c0CWNOmQ8QvDityy_X10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:1200::-2a13:1200:2f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 50:06:84:d0:88:ef:bc:71:fc:b6:8d:21:cc:00:a1:ff:13:68: fe:d8:d6:f1:a4:76:70:da:36:65:ea:78:50:73:22:8a:cc:a9: 3e:0d:ea:52:74:9e:a2:ce:c6:b8:f4:f1:bf:81:16:5e:7f:33: 1f:f8:21:6d:eb:cc:d4:2f:99:c1:f8:fc:90:c0:98:be:f4:02: 7b:4a:66:ce:d4:82:20:61:e5:d1:6c:df:1a:8e:f8:4e:ce:31: 4c:42:f7:6e:82:ea:ad:76:7c:9b:f0:ef:dd:46:54:cb:cc:47: ed:8a:c1:9d:5b:d4:43:ef:b0:c3:06:aa:57:86:af:6f:dc:35: a6:83:68:b1:35:7c:88:ed:fb:d2:0e:3f:cc:77:c0:fd:ed:5c: 95:7b:cc:09:97:6c:25:10:fd:a0:4f:65:fe:8b:05:43:c5:fc: 15:bb:14:72:c1:96:80:c8:ed:21:a6:d4:1a:37:2a:2a:6f:3a: 38:d5:a0:aa:82:39:32:fa:4b:98:73:b5:a7:a7:dc:8e:64:e9: 04:2c:f5:2b:cf:19:97:f9:f7:8a:09:70:fe:2a:e7:00:18:28: df:a8:c1:09:b4:1f:7e:09:d8:65:bf:60:0f:df:27:21:b9:36: ed:a8:fe:fc:c9:45:a6:f0:d0:7d:cc:85:c3:66:80:e2:ea:ec: 31:9d:fb:64 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt4NIxBoKSTUASDwcNfY9/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNzZmNzdkYTg0MWI3Yjk0MjE1YjZmYWMyZDQxYTcxYzIx NTE2MDEwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmEyNTM4MGFmNWNkMDI1OGQzYTY0M2M0MmYwZTJiNzJjYmY1ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DdpJUlQmIcRTxIQBfRumWiWWYLD otciicT5IrSwBcmQzf4dcZMnwhLWfsMr/p3tGbEhiJDOieVFlY499zkbT45gDyTC MImd/4YncIAco4Fu3HPgEJRHuUETOM3oUmB5fXUnsyhPanFoNDVOSFA666ZUUeee KXowBuvv+pGPKGrP/j/HnG9UP8XG4ViQGEhOMSf3JDu+JyOxwEVkrK7AUlOmYYq9 YIE31w9GriRyNP3BzXzC7PUdB6ckpLd2sIr/ylY9xw9PJmN7UU13R42HwGiVtZWf c+3sZ+HcG/2DBXmiUHKpqquwpemK7OyNDrw2iAe4VQPDjfw1WUMu3y6D0QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFBuiU4CvXNAljTpkPELw4rcsv19dMB8GA1UdIwQY MBaAFJB2932oQbe5QhW2+sLUGnHCFRYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEt ZTYzY2U1NTM3MGViLzEvRzZKVGdLOWMwQ1dOT21ROFF2RGl0eXlfWDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEtZTYzY2U1NTM3MGVi LzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBAEqExID BwQqExIAACAwDQYJKoZIhvcNAQELBQADggEBAFAGhNCI77xx/LaNIcwAof8TaP7Y 1vGkdnDaNmXqeFBzIorMqT4N6lJ0nqLOxrj08b+BFl5/Mx/4IW3rzNQvmcH4/JDA mL70AntKZs7UgiBh5dFs3xqO+E7OMUxC926C6q12fJvw791GVMvMR+2KwZ1b1EPv sMMGqleGr2/cNaaDaLE1fIjt+9IOP8x3wP3tXJV7zAmXbCUQ/aBPZf6LBUPF/BW7 FHLBloDI7SGm1Bo3KipvOjjVoKqCOTL6S5hztaen3I5k6QQs9SvPGZf594oJcP4q 5wAYKN+owQm0H34J2GW/YA/fJyG5Nu2o/vzJRabw0H3MhcNmgOLq7DGd+2Q= -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:19 2026 by rpki-client