This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/6McvAi_B7uOq7AKtddu5F_ymIkI.roa File: 6McvAi_B7uOq7AKtddu5F_ymIkI.roa (raw, json) Hash identifier: KjDfRazG/LsZe72akexaUpk8rsfKJIHwL/LdrbvrSFo= Subject key identifier: E8:C7:2F:02:2F:C1:EE:E3:AA:EC:02:AD:75:DB:B9:17:FC:A6:22:42 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8035EB6DC71EA507B7EB928E96FDC3 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/6McvAi_B7uOq7AKtddu5F_ymIkI.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215829 IP address blocks: 2a0f:7803:fe20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:eb:6d:c7:1e:a5:07:b7:eb:92:8e:96:fd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8c72f022fc1eee3aaec02ad75dbb917fca62242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:26:b2:47:b5:e3:db:74:91:c0:4e:42:c8: f3:a5:c6:04:4a:13:e4:06:cb:01:cd:d2:45:41:59: 2f:62:8f:61:2d:9f:d7:bf:f4:79:fd:62:f9:61:c4: ae:31:7e:6f:3e:6c:69:d3:d8:cc:d9:24:69:99:9d: 25:f1:b6:89:06:af:a4:81:ff:c0:d0:47:82:af:ea: c0:d1:8b:d9:d1:f6:49:c6:f7:15:e0:f6:d0:4e:ff: 08:5e:50:19:a1:a9:d9:24:58:9f:fe:d8:b7:f3:34: d4:f4:7c:43:fc:82:ab:4c:1b:c9:d6:40:06:b1:1d: 56:d2:29:3f:e8:81:bd:ef:4b:e3:1b:6a:aa:12:4d: 14:97:f1:6a:2b:2c:af:6e:2a:04:ef:90:87:bc:d2: d5:59:b0:ed:01:1c:2c:71:0a:17:81:91:c6:ac:2b: fd:c2:e1:c4:62:ef:c7:fb:93:97:8c:fe:30:a8:3a: 88:46:64:ec:21:29:a0:4f:09:be:5b:3c:c6:d0:62: 4a:e6:26:42:26:fd:d7:81:98:fd:b4:d2:44:bc:16: 3f:3b:bd:2a:1a:b9:0b:80:2b:1c:ef:a0:db:d9:0a: cb:b5:54:ce:97:5f:8f:20:8c:f9:0c:99:15:60:2a: bf:b6:8b:4b:3d:b3:19:21:55:85:9e:15:c6:12:ef: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C7:2F:02:2F:C1:EE:E3:AA:EC:02:AD:75:DB:B9:17:FC:A6:22:42 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/6McvAi_B7uOq7AKtddu5F_ymIkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fe20::/44 Signature Algorithm: sha256WithRSAEncryption 65:83:c9:07:22:b6:b1:88:af:b8:c9:d3:b2:4f:ae:00:54:b5: 0c:a4:3d:13:c9:d9:40:b9:f9:e1:8f:68:7e:ef:aa:bf:0c:e8: e9:50:2b:6b:70:b9:bc:56:9e:40:2e:02:ca:19:ad:46:1a:18: df:fc:54:e9:a5:25:f7:2a:9f:5c:d0:36:b1:ab:be:5a:d1:3b: 8c:c2:97:15:3d:76:6e:c5:35:ac:12:a6:94:50:de:7e:10:c0: ed:52:01:e3:8d:1b:77:c5:88:ba:87:3f:05:d2:f9:57:d9:04: 45:0c:dd:33:c8:04:26:f8:a1:4a:cc:1c:42:3e:c5:60:7d:0c: ec:7f:9c:09:1d:37:fc:24:43:ac:d1:dd:f7:e2:ce:26:1d:1c: 63:4c:df:c8:bf:f8:d7:d6:c0:3b:32:6c:90:44:ca:88:6d:09: 3f:33:59:8d:67:bb:1c:0b:37:47:8c:a0:06:15:10:36:41:d7: 84:33:41:6e:cc:77:c1:13:a1:ad:69:da:38:a5:d4:2a:f3:12: a6:7d:a6:02:c9:5a:c8:a2:34:bd:c2:8e:62:c7:dc:2b:d7:bf: 92:1e:f7:94:d5:fc:e5:cf:f9:81:71:aa:94:71:17:b4:08:ff: e5:4a:62:d2:05:e6:e7:4e:a5:4e:59:35:bb:57:15:17:3c:e2: 93:42:6b:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDXrbccepQe365KOlv3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGM3MmYwMjJmYzFlZWUzYWFlYzAyYWQ3NWRiYjkxN2ZjYTYyMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt60mske149t0kcBOQsjzpcYEShPk BssBzdJFQVkvYo9hLZ/Xv/R5/WL5YcSuMX5vPmxp09jM2SRpmZ0l8baJBq+kgf/A 0EeCr+rA0YvZ0fZJxvcV4PbQTv8IXlAZoanZJFif/ti38zTU9HxD/IKrTBvJ1kAG sR1W0ik/6IG970vjG2qqEk0Ul/FqKyyvbioE75CHvNLVWbDtARwscQoXgZHGrCv9 wuHEYu/H+5OXjP4wqDqIRmTsISmgTwm+WzzG0GJK5iZCJv3XgZj9tNJEvBY/O70q GrkLgCsc76Db2QrLtVTOl1+PIIz5DJkVYCq/totLPbMZIVWFnhXGEu+B6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOjHLwIvwe7jquwCrXXbuRf8piJCMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvNk1jdkFpX0I3dU9xN0FLdGRkdTVGX3ltSWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/4g MA0GCSqGSIb3DQEBCwUAA4IBAQBlg8kHIraxiK+4ydOyT64AVLUMpD0TydlAufnh j2h+76q/DOjpUCtrcLm8Vp5ALgLKGa1GGhjf/FTppSX3Kp9c0Daxq75a0TuMwpcV PXZuxTWsEqaUUN5+EMDtUgHjjRt3xYi6hz8F0vlX2QRFDN0zyAQm+KFKzBxCPsVg fQzsf5wJHTf8JEOs0d334s4mHRxjTN/Iv/jX1sA7MmyQRMqIbQk/M1mNZ7scCzdH jKAGFRA2QdeEM0FuzHfBE6Gtado4pdQq8xKmfaYCyVrIojS9wo5ix9wr17+SHveU 1fzlz/mBcaqUcRe0CP/lSmLSBebnTqVOWTW7VxUXPOKTQmuk -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:30 2026 by rpki-client