This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/6hjRC5CVze9zc5X-ahmmHNfkYUE.roa File: 6hjRC5CVze9zc5X-ahmmHNfkYUE.roa (raw, json) Hash identifier: MyI+C5KzfoPCsm1Iwk5YmiKlS7nD2ofoSW1+cSi8FPo= Subject key identifier: EA:18:D1:0B:90:95:CD:EF:73:73:95:FE:6A:19:A6:1C:D7:E4:61:41 Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d Certificate serial: 019B7AC8A7554CFCCFA68086FB4D9B3A4D15 Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/6hjRC5CVze9zc5X-ahmmHNfkYUE.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41948 IP address blocks: 2001:678:4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a7:55:4c:fc:cf:a6:80:86:fb:4d:9b:3a:4d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea18d10b9095cdef737395fe6a19a61cd7e46141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:69:8d:e1:40:33:68:ba:50:40:39:65:fb: 44:e9:01:a6:29:e7:6e:4c:0e:39:2f:db:e9:fc:b0: 68:ed:98:00:8e:5e:52:46:73:d4:43:30:cd:76:13: f9:ea:ba:7f:d1:c2:fe:e2:c4:91:54:cc:57:bc:39: 0a:7a:15:2b:52:11:f1:17:94:9a:41:8b:6d:4d:38: cb:c4:90:82:2a:67:cc:0a:30:29:7a:68:c8:02:11: da:62:ac:28:ad:bf:b4:a2:ed:a0:54:3b:eb:04:32: 98:f9:70:cc:c4:b4:f6:96:53:3f:87:55:27:61:0b: 4e:fb:1f:e9:a8:51:49:8e:c8:ee:45:e6:4f:74:2b: 6a:5a:b8:03:d0:af:2c:14:e8:c6:80:a4:ac:86:d4: 1b:09:55:4a:09:9b:18:10:cb:7e:76:07:18:ff:51: 71:52:43:82:8b:e0:e4:d4:cb:70:bf:ad:62:36:59: 0a:d3:7c:f6:86:3d:75:8b:5b:ad:23:f1:65:81:2c: 89:5e:af:f9:5a:b6:33:58:2f:e9:67:d5:1e:d2:30: 38:dc:05:2e:54:3b:54:26:c8:34:a1:fd:04:bb:2f: d2:e5:76:d3:65:61:49:b3:2e:36:67:60:24:e0:ee: e6:a8:10:38:1f:99:77:5c:15:c5:59:c1:ca:19:ac: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:18:D1:0B:90:95:CD:EF:73:73:95:FE:6A:19:A6:1C:D7:E4:61:41 X509v3 Authority Key Identifier: keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/6hjRC5CVze9zc5X-ahmmHNfkYUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:4c0::/48 Signature Algorithm: sha256WithRSAEncryption 53:85:f5:b5:c1:3a:c8:12:80:4a:f1:6b:fd:3e:30:eb:53:7f: 7f:85:ee:26:50:e5:8c:d6:35:97:ca:08:5f:16:9e:cd:94:89: ae:ea:5f:73:44:13:48:97:bc:6f:2b:5d:59:dc:3d:c9:b8:20: 02:8c:9b:16:a7:17:47:11:95:17:6c:87:d0:bf:bb:43:e5:2c: fd:06:a5:e2:00:93:df:88:a2:74:1e:2d:e9:61:14:eb:d9:86: e8:77:04:8e:f9:8c:b3:7c:3f:54:b0:be:bd:b1:03:eb:1c:47: b8:a4:5a:30:85:0e:68:0a:7c:ff:1c:7a:43:72:77:89:f9:2f: 75:b6:74:aa:fd:73:5d:49:7b:e7:61:da:91:ac:bd:97:96:79: 89:6e:95:7d:4b:67:1e:77:de:98:5b:22:a6:06:be:94:e5:14: 9e:9a:02:e7:13:47:93:c5:dc:6d:b9:02:c8:54:fe:ee:a2:21: f8:d6:67:e9:1a:93:be:14:98:52:15:3d:60:8f:3b:30:0e:b2: 34:40:f8:de:42:e3:5e:7e:16:16:8f:b3:c4:34:b6:e8:29:1f: 35:2f:58:42:93:98:c9:14:b0:a9:01:b7:60:ce:57:6f:17:e3: 9f:cd:21:ae:a8:0a:b3:4c:a4:44:fd:42:19:6b:ff:f2:a3:50: 00:4a:2a:6c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yKdVTPzPpoCG+02bOk0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0 MGVkMmQwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTE4ZDEwYjkwOTVjZGVmNzM3Mzk1ZmU2YTE5YTYxY2Q3ZTQ2MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyxpjeFAM2i6UEA5ZftE6QGmKedu TA45L9vp/LBo7ZgAjl5SRnPUQzDNdhP56rp/0cL+4sSRVMxXvDkKehUrUhHxF5Sa QYttTTjLxJCCKmfMCjApemjIAhHaYqworb+0ou2gVDvrBDKY+XDMxLT2llM/h1Un YQtO+x/pqFFJjsjuReZPdCtqWrgD0K8sFOjGgKSshtQbCVVKCZsYEMt+dgcY/1Fx UkOCi+Dk1Mtwv61iNlkK03z2hj11i1utI/FlgSyJXq/5WrYzWC/pZ9Ue0jA43AUu VDtUJsg0of0Euy/S5XbTZWFJsy42Z2Ak4O7mqBA4H5l3XBXFWcHKGazZxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOoY0QuQlc3vc3OV/moZphzX5GFBMB8GA1UdIwQY MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt NjdjZmUzMDY3YjJhLzEvNmhqUkM1Q1Z6ZTl6YzVYLWFobW1ITmZrWVVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeATA MA0GCSqGSIb3DQEBCwUAA4IBAQBThfW1wTrIEoBK8Wv9PjDrU39/he4mUOWM1jWX yghfFp7NlImu6l9zRBNIl7xvK11Z3D3JuCACjJsWpxdHEZUXbIfQv7tD5Sz9BqXi AJPfiKJ0Hi3pYRTr2YbodwSO+YyzfD9UsL69sQPrHEe4pFowhQ5oCnz/HHpDcneJ +S91tnSq/XNdSXvnYdqRrL2XlnmJbpV9S2ced96YWyKmBr6U5RSemgLnE0eTxdxt uQLIVP7uoiH41mfpGpO+FJhSFT1gjzswDrI0QPjeQuNefhYWj7PENLboKR81L1hC k5jJFLCpAbdgzldvF+OfzSGuqAqzTKRE/UIZa//yo1AASips -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:53 2026 by rpki-client