This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/6QL-slvQFdh5mvAbIdNlA4MoLfE.roa File: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (raw, json) Hash identifier: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM= Subject key identifier: E9:02:FE:B2:5B:D0:15:D8:79:9A:F0:1B:21:D3:65:03:83:28:2D:F1 Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Certificate serial: 019B797F4E5EFCF45CB19AD9634F6F6CFDE0 Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/6QL-slvQFdh5mvAbIdNlA4MoLfE.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201723 IP address blocks: 2001:678:3d4::/48 maxlen: 48 2001:67c:6bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:5e:fc:f4:5c:b1:9a:d9:63:4f:6f:6c:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e902feb25bd015d8799af01b21d3650383282df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:7f:be:c3:c3:48:fd:b0:50:0a:f3:3a:ce: 2e:86:7b:03:b8:30:0a:c2:86:bd:d1:bd:f4:98:5b: 53:0b:cb:d0:0c:71:fa:b8:1a:e3:e6:37:d2:9f:df: 6f:b9:93:f9:9b:e0:63:ed:a2:3f:40:ce:4c:37:83: 14:0e:d0:16:18:96:ba:c1:3c:ca:be:2c:0c:5a:ce: 83:bb:e2:e4:bc:9b:72:9c:d9:cd:a3:32:8e:5c:49: 6a:88:0a:dd:f7:d5:8d:5f:aa:b6:9b:d0:87:25:22: 37:72:5e:ff:cb:ec:c0:4b:d5:cb:db:b2:0b:67:c6: 5a:4e:40:f8:56:b5:68:9c:bb:d6:94:63:7a:ff:56: 85:f6:13:00:e4:ed:66:86:d1:44:f9:7a:38:4a:10: 15:85:66:9f:8d:09:4d:26:a5:b7:a9:cb:04:e6:0c: b3:83:25:d5:51:9f:a4:ca:68:db:b5:85:b4:31:a1: 42:61:f5:51:ab:b0:49:17:a9:eb:d2:8d:17:75:6b: 68:e6:e4:9a:75:95:d8:8e:8a:72:6b:f8:a1:73:08: 06:19:9d:54:60:20:79:d8:f5:06:5f:4e:51:a1:e6: 47:17:dd:42:35:1c:2f:d6:92:32:1a:c8:66:16:ef: d5:0b:e6:e7:5a:ff:08:39:ba:80:52:c4:f0:42:1e: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:02:FE:B2:5B:D0:15:D8:79:9A:F0:1B:21:D3:65:03:83:28:2D:F1 X509v3 Authority Key Identifier: keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/6QL-slvQFdh5mvAbIdNlA4MoLfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:3d4::/48 2001:67c:6bc::/48 Signature Algorithm: sha256WithRSAEncryption 6f:47:ab:ea:6b:ca:fa:af:6b:8d:e7:f9:45:cf:68:87:bd:86: 1a:16:b9:53:fd:cc:19:9d:68:0e:4b:b5:be:04:4c:55:03:33: d6:ae:40:a9:8f:d8:e5:90:2c:2e:52:9f:12:37:6f:be:91:17: 52:4f:20:d3:1d:6d:91:15:ae:15:5e:cf:b4:30:96:92:0a:a5: 37:79:0d:fd:dd:5e:b0:32:38:01:49:b2:cf:cd:24:af:37:69: 00:ae:55:db:5a:50:ba:3a:1c:a1:1f:e2:3b:76:65:32:6b:2e: 35:03:5b:15:b6:7a:a0:48:72:8e:31:cd:5f:aa:52:b6:77:92: 6c:f1:20:c6:f0:62:62:2c:d6:35:97:f9:21:59:86:4c:e5:2b: b9:1b:8c:66:ef:ea:63:39:1a:17:83:6c:42:b7:60:0e:d7:fd: c7:80:c6:43:99:8c:49:6b:11:3a:52:02:6a:85:0b:64:b5:12: 5f:79:55:e2:14:61:fc:34:9e:22:40:29:a0:ef:0c:8b:6c:2d: 35:05:66:17:9b:ce:74:ce:21:bb:ac:66:2a:7c:a2:e2:00:92: 68:2a:2e:fe:0d:45:c1:78:10:e6:79:44:75:d9:af:d9:8a:d1: ed:88:1e:5e:e4:f8:11:28:28:7f:e7:01:ee:39:8b:ef:db:d3: 03:bb:65:d7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5f05e/PRcsZrZY09vbP3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy NjEzMTEwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTAyZmViMjViZDAxNWQ4Nzk5YWYwMWIyMWQzNjUwMzgzMjgyZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaR/vsPDSP2wUArzOs4uhnsDuDAK woa90b30mFtTC8vQDHH6uBrj5jfSn99vuZP5m+Bj7aI/QM5MN4MUDtAWGJa6wTzK viwMWs6Du+LkvJtynNnNozKOXElqiArd99WNX6q2m9CHJSI3cl7/y+zAS9XL27IL Z8ZaTkD4VrVonLvWlGN6/1aF9hMA5O1mhtFE+Xo4ShAVhWafjQlNJqW3qcsE5gyz gyXVUZ+kymjbtYW0MaFCYfVRq7BJF6nr0o0XdWto5uSadZXYjopya/ihcwgGGZ1U YCB52PUGX05RoeZHF91CNRwv1pIyGshmFu/VC+bnWv8IObqAUsTwQh5dhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOkC/rJb0BXYeZrwGyHTZQODKC3xMB8GA1UdIwQY MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt YjM1ODA5OTRhM2IxLzEvNlFMLXNsdlFGZGg1bXZBYklkTmxBNE1vTGZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAPU AwcAIAEGfAa8MA0GCSqGSIb3DQEBCwUAA4IBAQBvR6vqa8r6r2uN5/lFz2iHvYYa FrlT/cwZnWgOS7W+BExVAzPWrkCpj9jlkCwuUp8SN2++kRdSTyDTHW2RFa4VXs+0 MJaSCqU3eQ393V6wMjgBSbLPzSSvN2kArlXbWlC6OhyhH+I7dmUyay41A1sVtnqg SHKOMc1fqlK2d5Js8SDG8GJiLNY1l/khWYZM5Su5G4xm7+pjORoXg2xCt2AO1/3H gMZDmYxJaxE6UgJqhQtktRJfeVXiFGH8NJ4iQCmg7wyLbC01BWYXm850ziG7rGYq fKLiAJJoKi7+DUXBeBDmeUR12a/ZitHtiB5e5PgRKCh/5wHuOYvv29MDu2XX -----END CERTIFICATE-----Generated at Tue Jan 27 09:08:55 2026 by rpki-client