This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/6r4pRjuoYdc7x18_dB54Wore8SE.roa File: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (raw, json) Hash identifier: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs= Subject key identifier: EA:BE:29:46:3B:A8:61:D7:3B:C7:5F:3F:74:1E:78:5A:8A:DE:F1:21 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A3789CF8A3A3F9BF978F86BDC704D6 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/6r4pRjuoYdc7x18_dB54Wore8SE.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196689 IP address blocks: 2a03:f85:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:78:9c:f8:a3:a3:f9:bf:97:8f:86:bd:c7:04:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eabe29463ba861d73bc75f3f741e785a8adef121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:cc:c6:84:19:46:b7:6d:33:20:ba:dc:bb: 6a:7e:7e:9e:8e:54:cd:d9:8b:36:69:77:f7:03:8c: 7e:d0:59:22:2c:0c:d1:88:e6:a6:5f:d3:d4:71:b4: 33:a8:21:f9:a0:10:23:78:95:88:f5:5b:4b:1b:34: 26:e7:48:af:22:f8:ab:ac:ff:d5:01:2d:04:19:9f: d6:4c:7f:d2:13:58:ad:1f:39:1a:bb:cd:37:5e:a7: 4e:56:a4:66:c5:03:8f:f9:b6:0c:ff:1f:7f:76:5e: a5:3c:77:4d:38:76:12:bf:0d:0f:b1:d7:d8:13:8e: eb:34:05:e2:21:36:1e:32:ab:4b:3c:a5:79:24:a3: 76:97:ff:7b:8b:38:b6:e8:05:e1:92:fe:50:7c:d0: 0a:a1:9a:96:d7:4c:0f:0b:33:11:09:8f:e9:ef:e7: 85:5f:dc:cc:40:43:cd:ac:67:b2:95:67:cc:b8:6e: d8:e8:1d:3c:0c:4b:01:d0:8c:1b:5d:78:f0:e6:ff: 20:43:1c:61:a1:49:68:8b:5b:d8:03:25:e5:7f:eb: 70:68:be:12:b9:94:c2:ff:45:8d:07:ff:29:dc:ee: 8c:b2:08:35:92:13:13:48:aa:88:82:0d:c8:bd:a9: 69:8a:7c:4b:c7:ec:6e:7b:d5:19:22:38:63:8f:c7: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BE:29:46:3B:A8:61:D7:3B:C7:5F:3F:74:1E:78:5A:8A:DE:F1:21 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/6r4pRjuoYdc7x18_dB54Wore8SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f85:3::/48 Signature Algorithm: sha256WithRSAEncryption c2:b2:33:7b:f2:e7:a9:72:5e:ac:c8:e3:03:f9:06:7b:11:6a: 00:95:27:cb:7f:97:97:d5:36:9b:1a:79:88:d7:a9:85:8c:d0: 7c:12:9f:7f:30:84:cd:27:e1:06:83:ed:2b:2e:94:4a:70:c1: 25:57:c7:df:ce:8c:b6:b7:75:d7:42:61:be:ef:bc:3e:4c:83: 42:0d:f0:f8:c7:b8:ff:ac:64:1c:17:a6:15:89:77:30:1a:b8: 9f:6c:da:f9:67:48:e4:4e:c5:76:8b:91:d3:bd:32:02:11:ea: b7:f4:43:62:86:39:87:14:10:26:92:7b:9a:7b:8d:0f:bf:88: b0:25:99:30:ea:8b:f7:53:0a:dd:59:df:27:92:4b:81:69:e0: de:0d:9f:9e:04:29:02:e7:1f:4f:d7:09:11:41:05:db:2d:70: 0e:de:2b:d6:f9:f7:c2:98:31:ac:bd:f9:de:7c:46:57:47:fa: f3:81:fe:ea:49:8c:28:29:be:e5:00:2f:c0:92:48:39:4f:cc: 3b:31:94:3a:4f:d1:d4:2b:22:78:5a:df:80:18:55:97:5c:30: 6c:4b:8b:a3:8d:78:84:bd:4a:ee:9e:9c:72:78:d0:c0:70:58: bc:f7:94:29:79:24:77:67:e6:b3:0b:10:55:1f:be:77:7d:00: 0d:85:df:01 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3ic+KOj+b+Xj4a9xwTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWJlMjk0NjNiYTg2MWQ3M2JjNzVmM2Y3NDFlNzg1YThhZGVmMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjLMxoQZRrdtMyC63Ltqfn6ejlTN 2Ys2aXf3A4x+0FkiLAzRiOamX9PUcbQzqCH5oBAjeJWI9VtLGzQm50ivIvirrP/V AS0EGZ/WTH/SE1itHzkau803XqdOVqRmxQOP+bYM/x9/dl6lPHdNOHYSvw0PsdfY E47rNAXiITYeMqtLPKV5JKN2l/97izi26AXhkv5QfNAKoZqW10wPCzMRCY/p7+eF X9zMQEPNrGeylWfMuG7Y6B08DEsB0IwbXXjw5v8gQxxhoUloi1vYAyXlf+twaL4S uZTC/0WNB/8p3O6Msgg1khMTSKqIgg3IvalpinxLx+xue9UZIjhjj8fGkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOq+KUY7qGHXO8dfP3QeeFqK3vEhMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvNnI0cFJqdW9ZZGM3eDE4X2RCNTRXb3JlOFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPhQAD MA0GCSqGSIb3DQEBCwUAA4IBAQDCsjN78uepcl6syOMD+QZ7EWoAlSfLf5eX1Tab GnmI16mFjNB8Ep9/MITNJ+EGg+0rLpRKcMElV8ffzoy2t3XXQmG+77w+TINCDfD4 x7j/rGQcF6YViXcwGrifbNr5Z0jkTsV2i5HTvTICEeq39ENihjmHFBAmknuae40P v4iwJZkw6ov3UwrdWd8nkkuBaeDeDZ+eBCkC5x9P1wkRQQXbLXAO3ivW+ffCmDGs vfnefEZXR/rzgf7qSYwoKb7lAC/Akkg5T8w7MZQ6T9HUKyJ4Wt+AGFWXXDBsS4uj jXiEvUrunpxyeNDAcFi895QpeSR3Z+azCxBVH753fQANhd8B -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:42 2026 by rpki-client