This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa File: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (raw, json) Hash identifier: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE= Subject key identifier: E9:3D:67:9F:F3:B9:55:13:43:53:C8:81:5E:74:5D:11:6B:BE:01:AD Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F34FBAEA4F40419A6EEC239200845 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211358 IP address blocks: 2a05:b0c6:5001::/48 maxlen: 48 2a05:b0c6:5006::/48 maxlen: 48 2a05:b0c6:5008::/48 maxlen: 48 2a05:b0c6:5009::/48 maxlen: 48 2a05:b0c6:500f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:fb:ae:a4:f4:04:19:a6:ee:c2:39:20:08:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e93d679ff3b955134353c8815e745d116bbe01ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:d3:95:6f:0d:79:88:3c:a6:96:44:90:1a: 8b:ef:22:11:0a:b7:eb:20:65:78:f4:30:57:89:09: e1:a7:33:c3:ea:c0:99:1a:a1:b9:4d:6b:81:7c:c3: be:71:03:39:7e:87:bd:b7:aa:62:38:1c:53:af:e8: a3:4e:51:87:c0:25:e0:95:3c:38:a8:8a:86:8c:2c: c0:2a:ba:84:f1:ca:f0:29:09:42:19:b4:9e:96:8f: 9b:36:9c:7d:51:ef:91:e1:2d:3e:ac:26:1b:dc:48: c6:78:10:57:8a:0b:27:a3:3c:5b:7e:d9:24:42:9d: 0a:ea:3a:9d:66:68:03:ac:c8:d9:f3:00:3a:19:72: de:d6:05:8b:e9:ed:30:13:fd:aa:75:63:17:97:29: 17:6d:b0:fb:77:65:3d:1d:19:cc:34:8f:4e:22:25: 68:33:6b:c2:f4:e1:d0:aa:d4:2d:06:10:ad:72:a6: 50:a3:a6:0c:a6:9f:2d:7c:4f:6a:3b:8b:a4:75:9a: db:e9:17:35:bd:ef:87:49:8f:ab:65:54:c1:7a:51: 7f:87:13:d8:b8:79:70:82:88:1f:03:b9:ae:12:7b: fa:de:4a:3a:8a:0a:df:68:37:08:90:7a:5b:91:2d: ca:41:7b:1e:11:65:a7:c7:a1:30:cf:37:69:a2:0c: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:67:9F:F3:B9:55:13:43:53:C8:81:5E:74:5D:11:6B:BE:01:AD X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c6:5001::/48 2a05:b0c6:5006::/48 2a05:b0c6:5008::/47 2a05:b0c6:500f::/48 Signature Algorithm: sha256WithRSAEncryption 00:b1:46:4b:d8:d9:c2:f1:18:80:78:c6:6f:ae:fa:f6:bf:cd: 8f:b4:30:12:1c:fa:16:57:81:87:57:b5:56:3e:17:c6:fa:3f: 22:5f:30:1e:0d:af:b3:f3:56:70:54:62:ef:13:fd:96:60:e1: f8:03:6b:f8:a4:f9:64:aa:21:a1:e0:ee:48:79:ee:80:e3:1f: e4:b6:c9:7d:e5:1d:e5:4f:36:0d:d9:f2:fe:4b:bb:ff:9d:d7: b1:1b:a8:90:68:d3:94:a6:83:d7:38:a0:62:9d:01:81:87:1d: 8d:13:10:47:54:20:a6:64:5d:b3:a9:a5:9e:32:06:76:24:36: ff:21:3d:66:f6:ed:94:aa:55:88:1d:93:65:5f:3b:ad:bc:a7: ab:87:ee:5b:2e:89:c6:f8:e8:1b:f2:29:d7:c6:91:4e:69:93: ba:ad:ba:2d:64:d1:e7:08:f8:d2:7d:a0:6d:5a:1e:bd:20:7e: 40:1c:4d:f3:5f:ca:62:b9:80:5b:57:d5:d7:3b:b6:8f:47:b3: 52:c4:c7:c6:72:37:49:9a:c7:48:a9:1f:10:6f:be:29:da:97: f3:22:c6:02:39:79:61:16:f9:91:6f:e0:95:8e:6e:de:37:83: 8f:e1:36:81:d7:e5:51:d8:37:f5:0f:99:6b:b4:50:0d:a3:68: e0:b8:d3:51 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fzT7rqT0BBmm7sI5IAhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTNkNjc5ZmYzYjk1NTEzNDM1M2M4ODE1ZTc0NWQxMTZiYmUwMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lbTlW8NeYg8ppZEkBqL7yIRCrfr IGV49DBXiQnhpzPD6sCZGqG5TWuBfMO+cQM5foe9t6piOBxTr+ijTlGHwCXglTw4 qIqGjCzAKrqE8crwKQlCGbSelo+bNpx9Ue+R4S0+rCYb3EjGeBBXigsnozxbftkk Qp0K6jqdZmgDrMjZ8wA6GXLe1gWL6e0wE/2qdWMXlykXbbD7d2U9HRnMNI9OIiVo M2vC9OHQqtQtBhCtcqZQo6YMpp8tfE9qO4ukdZrb6Rc1ve+HSY+rZVTBelF/hxPY uHlwgogfA7muEnv63ko6igrfaDcIkHpbkS3KQXseEWWnx6EwzzdpogxwLwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFOk9Z5/zuVUTQ1PIgV50XRFrvgGtMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvNlQxbm5fTzVWUk5EVThpQlhuUmRFV3UtQWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgWwxlAB AwcAKgWwxlAGAwcBKgWwxlAIAwcAKgWwxlAPMA0GCSqGSIb3DQEBCwUAA4IBAQAA sUZL2NnC8RiAeMZvrvr2v82PtDASHPoWV4GHV7VWPhfG+j8iXzAeDa+z81ZwVGLv E/2WYOH4A2v4pPlkqiGh4O5Iee6A4x/ktsl95R3lTzYN2fL+S7v/ndexG6iQaNOU poPXOKBinQGBhx2NExBHVCCmZF2zqaWeMgZ2JDb/IT1m9u2UqlWIHZNlXzutvKer h+5bLonG+Ogb8inXxpFOaZO6rbotZNHnCPjSfaBtWh69IH5AHE3zX8piuYBbV9XX O7aPR7NSxMfGcjdJmsdIqR8Qb74p2pfzIsYCOXlhFvmRb+CVjm7eN4OP4TaB1+VR 2Df1D5lrtFANo2jguNNR -----END CERTIFICATE-----Generated at Mon Jan 19 20:35:02 2026 by rpki-client