This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/6oZ5EjqZisGcBSFRGAY0I58w2z8.roa File: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (raw, json) Hash identifier: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4= Subject key identifier: EA:86:79:12:3A:99:8A:C1:9C:05:21:51:18:06:34:23:9F:30:DB:3F Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Certificate serial: 019B7DCA3CA4EA7D05EE2E216092476EC246 Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/6oZ5EjqZisGcBSFRGAY0I58w2z8.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34019 IP address blocks: 2001:7a8:800::/47 maxlen: 47 2001:7a8:810::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3c:a4:ea:7d:05:ee:2e:21:60:92:47:6e:c2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea8679123a998ac19c052151180634239f30db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:d2:5e:ff:58:7c:84:81:0f:b4:cb:80:7e: 28:36:fa:e3:bc:3d:3a:91:2c:f9:86:41:fe:99:36: 9b:ac:a3:09:8e:c2:36:0b:f0:8c:66:20:03:7a:90: cc:97:fb:df:fa:dd:4c:c1:12:6c:94:cc:3d:f7:2c: 37:4b:db:45:85:e0:f0:b1:b1:7a:1b:54:e3:19:eb: cb:a8:d1:f0:2e:d8:9d:ba:85:31:34:ce:5c:c2:a8: 16:57:04:d5:77:74:02:72:17:00:04:15:83:ad:22: a2:ec:71:d8:9c:a7:86:31:b2:0a:ec:5c:01:11:39: 39:7d:10:02:20:83:9a:d0:dd:fa:40:f6:6b:12:2b: 95:fb:64:98:5b:28:39:6b:ab:b5:d5:93:49:f6:e9: b0:0b:30:56:8a:1b:b6:33:7c:b1:eb:19:71:8e:af: ca:5f:8b:4e:16:11:31:a8:7a:39:e0:13:16:f5:53: d0:48:db:98:23:d8:9e:d7:7c:16:34:cd:41:fe:1c: 52:b4:bf:dc:7f:ad:ff:ab:05:a9:63:44:a5:1d:04: 45:f3:b1:29:b7:3e:16:6f:1b:92:78:08:51:d2:b0: 0a:bc:2f:c5:60:71:b8:ae:8d:b8:41:cc:95:8b:9e: 8a:93:5d:82:b9:00:fe:f2:e6:85:aa:17:4a:0b:0a: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:86:79:12:3A:99:8A:C1:9C:05:21:51:18:06:34:23:9F:30:DB:3F X509v3 Authority Key Identifier: keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/6oZ5EjqZisGcBSFRGAY0I58w2z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:7a8:800::/47 2001:7a8:810::/44 Signature Algorithm: sha256WithRSAEncryption 49:e1:f3:d1:d4:ac:14:7c:ad:13:a9:05:06:a5:e1:bd:5e:f8: 4e:09:25:73:79:b2:62:ad:f6:e0:90:a9:93:5b:d1:c9:ea:6d: 8b:e2:02:42:40:44:ba:8a:18:a9:03:0e:a9:42:87:2b:2d:02: ff:7d:06:ee:14:1d:8a:0c:5b:25:6c:d4:3f:3e:95:2f:7e:ef: 4f:04:ad:89:1b:ec:95:c4:2c:62:4e:92:94:f7:4b:5f:28:6d: 35:95:c2:a0:9e:b9:3d:75:0d:c9:21:22:08:90:07:3a:09:09: 53:5a:ec:9d:3d:c0:61:0a:e1:b4:a6:88:40:40:c1:3b:a8:04: 4f:02:12:49:b6:a5:f9:0c:68:11:47:e7:4e:da:fc:e2:ea:34: 1f:56:9c:ca:7d:a1:03:07:7b:4d:a1:cd:76:2b:e5:ab:68:e4: 6f:9d:da:b7:2d:da:36:38:6f:9e:56:6e:a4:c6:b8:d5:46:85: 30:7f:23:76:91:1f:e3:e1:c2:0f:eb:8e:1e:9f:b1:39:94:5d: 81:ff:ce:d6:2a:b7:fd:54:bf:25:3b:8d:80:d5:ef:73:7f:ac: 8e:48:ca:09:37:e6:0e:58:e4:39:2d:2d:23:ce:66:f7:64:72: 61:d0:ba:e0:d9:22:c1:54:9e:cd:60:89:1e:8e:39:33:a3:54: 44:a5:23:2f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yjyk6n0F7i4hYJJHbsJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4 NWNkYmEwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTg2NzkxMjNhOTk4YWMxOWMwNTIxNTExODA2MzQyMzlmMzBkYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVTSXv9YfISBD7TLgH4oNvrjvD06 kSz5hkH+mTabrKMJjsI2C/CMZiADepDMl/vf+t1MwRJslMw99yw3S9tFheDwsbF6 G1TjGevLqNHwLtiduoUxNM5cwqgWVwTVd3QCchcABBWDrSKi7HHYnKeGMbIK7FwB ETk5fRACIIOa0N36QPZrEiuV+2SYWyg5a6u11ZNJ9umwCzBWihu2M3yx6xlxjq/K X4tOFhExqHo54BMW9VPQSNuYI9ie13wWNM1B/hxStL/cf63/qwWpY0SlHQRF87Ep tz4WbxuSeAhR0rAKvC/FYHG4ro24QcyVi56Kk12CuQD+8uaFqhdKCwoiLwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOqGeRI6mYrBnAUhURgGNCOfMNs/MB8GA1UdIwQY MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt NzgxOGE4OTQ1NmNiLzEvNm9aNUVqcVppc0djQlNGUkdBWTBJNTh3Mno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBIAEHqAgA AwcEIAEHqAgQMA0GCSqGSIb3DQEBCwUAA4IBAQBJ4fPR1KwUfK0TqQUGpeG9XvhO CSVzebJirfbgkKmTW9HJ6m2L4gJCQES6ihipAw6pQocrLQL/fQbuFB2KDFslbNQ/ PpUvfu9PBK2JG+yVxCxiTpKU90tfKG01lcKgnrk9dQ3JISIIkAc6CQlTWuydPcBh CuG0pohAQME7qARPAhJJtqX5DGgRR+dO2vzi6jQfVpzKfaEDB3tNoc12K+WraORv ndq3Ldo2OG+eVm6kxrjVRoUwfyN2kR/j4cIP644en7E5lF2B/87WKrf9VL8lO42A 1e9zf6yOSMoJN+YOWOQ5LS0jzmb3ZHJh0Lrg2SLBVJ7NYIkejjkzo1REpSMv -----END CERTIFICATE-----Generated at Thu Jan 8 09:15:05 2026 by rpki-client