This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/6Rn-wxtOzItHCQZfTf_aB44eX3w.roa File: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (raw, json) Hash identifier: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4= Subject key identifier: E9:19:FE:C3:1B:4E:CC:8B:47:09:06:5F:4D:FF:DA:07:8E:1E:5F:7C Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358 Certificate serial: 019B7A5AC8491A284DC5742730B74DE4B629 Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/6Rn-wxtOzItHCQZfTf_aB44eX3w.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211564 IP address blocks: 2001:678:fa8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c8:49:1a:28:4d:c5:74:27:30:b7:4d:e4:b6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e919fec31b4ecc8b4709065f4dffda078e1e5f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:71:16:27:6d:d7:4f:8f:59:6e:5b:a6:75: 45:90:0c:ca:a8:ff:ca:bc:74:8b:43:e1:ba:87:4e: 20:8d:be:89:91:27:ad:1f:85:fd:13:67:da:86:00: e7:a0:a3:02:cf:21:13:7d:52:5c:63:59:3c:5b:d5: 17:da:39:c8:7b:85:65:8d:ae:8c:2f:0d:b2:1b:57: f3:5c:98:5d:72:c0:1d:39:94:27:fb:64:33:f9:49: a2:04:fd:bc:f3:0b:dd:13:c6:c7:af:1c:62:0a:f0: 70:ce:d6:e8:ae:79:10:87:88:da:19:e3:9d:b4:c2: 63:96:21:fd:07:a6:68:c6:bb:5b:90:98:d8:3c:5c: 1e:a3:83:19:27:35:2f:4e:23:13:60:75:bd:fa:00: 4c:2e:2f:9e:fb:2f:2c:e0:87:ba:c0:00:aa:fa:bf: 99:a5:77:31:87:fc:b8:2e:45:8a:1f:ac:c6:3f:50: f0:e9:85:9b:e3:07:e2:46:b3:b4:0c:3b:ed:2e:56: 86:5a:01:5b:08:b1:0e:d7:bc:01:b5:68:d2:79:c3: 97:73:50:ae:7f:0c:0b:cb:1c:ed:3c:aa:d5:5d:45: 89:b8:0b:0e:71:cf:c5:b8:6f:d6:6e:3a:fe:2a:1b: 82:a2:f0:42:d3:21:22:44:df:24:07:23:ba:bd:d9: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:19:FE:C3:1B:4E:CC:8B:47:09:06:5F:4D:FF:DA:07:8E:1E:5F:7C X509v3 Authority Key Identifier: keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/6Rn-wxtOzItHCQZfTf_aB44eX3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:fa8::/48 Signature Algorithm: sha256WithRSAEncryption 59:ee:4b:74:43:18:a7:07:08:ba:d9:39:1b:0e:b7:bb:9d:8a: 93:b2:54:e9:20:fa:bf:6a:8a:ff:74:1d:95:45:4c:2c:86:99: 63:80:48:a4:c3:9d:b7:4c:2c:09:91:5a:7d:90:8a:5f:06:e8: 93:4d:d6:21:01:fa:a4:7b:d7:83:35:ac:bd:43:4d:6c:47:1d: 51:4b:25:20:10:04:7b:02:67:61:3d:ad:07:ac:4c:ef:16:9b: 10:9f:9b:30:29:0e:d4:3a:4c:38:b3:53:10:7b:aa:9f:be:b9: 75:2b:05:61:59:7f:03:dd:14:34:6c:f8:ac:05:26:6c:59:2b: 73:4e:b5:ea:2a:80:19:5a:b1:ee:72:d6:0d:01:35:ee:c3:45: b1:f6:58:da:4f:38:04:65:69:43:fa:d5:4c:62:9d:51:43:97: b5:42:43:d0:e8:2b:3d:40:78:ca:97:9f:d9:d3:92:fc:d9:76: f9:99:96:35:5f:ca:52:4d:2c:81:55:20:80:09:56:6d:ce:5f: e8:0c:07:cd:d5:c6:52:45:6d:51:c4:f4:a1:a8:f7:e5:69:7d: 02:b5:a6:79:56:9f:ab:84:46:47:6f:c5:76:97:1e:a8:c4:ae: 39:2d:72:29:ac:df:8c:18:de:07:26:fc:ff:dc:e4:52:b4:95: 30:2b:68:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WshJGihNxXQnMLdN5LYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Zjk4MWMyMGFhNjUyYWE4NWUwMDhiZDI2MmY3YmMxZjg1 NmMzNTgwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTE5ZmVjMzFiNGVjYzhiNDcwOTA2NWY0ZGZmZGEwNzhlMWU1ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19NxFidt10+PWW5bpnVFkAzKqP/K vHSLQ+G6h04gjb6JkSetH4X9E2fahgDnoKMCzyETfVJcY1k8W9UX2jnIe4Vlja6M Lw2yG1fzXJhdcsAdOZQn+2Qz+UmiBP288wvdE8bHrxxiCvBwztbornkQh4jaGeOd tMJjliH9B6ZoxrtbkJjYPFweo4MZJzUvTiMTYHW9+gBMLi+e+y8s4Ie6wACq+r+Z pXcxh/y4LkWKH6zGP1Dw6YWb4wfiRrO0DDvtLlaGWgFbCLEO17wBtWjSecOXc1Cu fwwLyxztPKrVXUWJuAsOcc/FuG/Wbjr+KhuCovBC0yEiRN8kByO6vdmmYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOkZ/sMbTsyLRwkGX03/2geOHl98MB8GA1UdIwQY MBaAFCj5gcIKplKqheAIvSYve8H4VsNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMt Yzg3ZmJiZDAzZTg2LzEvNlJuLXd4dE96SXRIQ1FaZlRmX2FCNDRlWDN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMtYzg3ZmJiZDAzZTg2 LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+o MA0GCSqGSIb3DQEBCwUAA4IBAQBZ7kt0QxinBwi62TkbDre7nYqTslTpIPq/aor/ dB2VRUwshpljgEikw523TCwJkVp9kIpfBuiTTdYhAfqke9eDNay9Q01sRx1RSyUg EAR7AmdhPa0HrEzvFpsQn5swKQ7UOkw4s1MQe6qfvrl1KwVhWX8D3RQ0bPisBSZs WStzTrXqKoAZWrHuctYNATXuw0Wx9ljaTzgEZWlD+tVMYp1RQ5e1QkPQ6Cs9QHjK l5/Z05L82Xb5mZY1X8pSTSyBVSCACVZtzl/oDAfN1cZSRW1RxPShqPflaX0CtaZ5 Vp+rhEZHb8V2lx6oxK45LXIprN+MGN4HJvz/3ORStJUwK2go -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:58 2026 by rpki-client