This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa File: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (raw, json) Hash identifier: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q= Subject key identifier: E8:7E:D9:2B:2F:19:5C:C6:02:42:CD:6D:25:05:3D:1C:C7:87:0D:FF Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019B7F82E9508CDBFEE9A1815D27D24DD52E Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa Signing time: Fri 02 Jan 2026 16:20:44 +0000 ROA not before: Fri 02 Jan 2026 16:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213246 IP address blocks: 2a01:b960:230f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e9:50:8c:db:fe:e9:a1:81:5d:27:d2:4d:d5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jan 2 16:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e87ed92b2f195cc60242cd6d25053d1cc7870dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:77:66:56:5e:52:7b:c6:15:9a:e8:83:cc: ce:a9:fc:5a:df:bf:74:f0:b4:8b:ba:80:17:44:61: 78:f2:54:0a:72:68:2a:da:ff:0e:1e:f8:f4:5d:29: 03:43:67:a4:e7:5b:1c:61:35:74:19:aa:89:02:6b: 46:1e:80:50:b7:79:f4:9b:df:61:23:15:c1:f9:d7: 10:2b:38:8b:48:93:4d:9d:98:ea:7b:d4:d6:c0:67: 6d:c4:7b:b9:44:2b:63:a2:f8:97:18:86:11:c5:2c: 76:77:78:4a:e1:8c:13:c5:ba:51:2a:58:f3:62:b0: 9d:9e:17:04:84:99:36:79:7a:6f:c2:95:f8:34:77: cf:5b:73:95:9f:3c:8f:f0:06:9e:ce:2e:fa:22:f5: 0c:c0:43:a6:19:92:3f:c8:5e:cf:25:46:af:11:1b: eb:ac:02:f6:75:04:cd:74:26:55:83:aa:dc:e6:d5: 5f:0b:52:4e:27:4e:67:90:c6:cd:a4:ee:5e:5a:f0: e0:39:0d:e1:27:ea:d8:fc:09:9d:d8:aa:74:92:df: 79:76:16:09:87:db:91:8a:74:c9:e1:c6:a3:b2:ff: 43:86:c8:3b:3a:74:93:0b:21:69:df:51:c7:cc:4e: eb:48:68:b6:c1:5e:a3:d3:de:88:1f:3a:09:df:95: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7E:D9:2B:2F:19:5C:C6:02:42:CD:6D:25:05:3D:1C:C7:87:0D:FF X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:b960:230f::/48 Signature Algorithm: sha256WithRSAEncryption 4a:68:a2:7a:d8:b1:a0:f9:06:2f:91:0e:d4:d3:20:42:8b:60: 51:03:a3:da:9d:34:bc:e1:42:34:41:1a:d8:30:93:c2:8f:c7: d6:c6:f1:77:ac:dc:16:20:3f:f1:d4:cf:51:d9:23:8b:d0:07: d6:9d:bf:f0:98:39:5e:c8:ae:7e:a5:4f:6f:37:ff:13:d2:56: f8:59:4e:fc:7f:52:8e:7a:c8:10:9d:9d:56:b0:e0:e2:1a:5c: c1:4b:fe:f3:38:00:4f:93:e4:4b:8a:3e:d7:61:25:e8:d4:97: f3:cc:9d:04:c8:03:9f:74:cd:07:9c:a2:d8:aa:e9:91:e0:3a: d6:9a:db:43:b5:88:50:e1:cf:7c:72:7b:90:e6:79:3e:30:e8: 7c:60:52:2e:87:d3:ee:81:63:bf:c5:2e:c4:de:93:57:44:d1: 97:26:b2:e8:1d:8d:9a:45:2c:50:35:8b:22:79:f3:da:d5:b2: fd:cf:ce:91:57:c4:cd:f5:e7:d9:b2:89:06:2f:31:54:d0:75: f4:f8:0a:8c:44:0c:79:43:00:60:9c:bf:5e:db:b8:2b:3d:a4: e9:d5:bc:3c:f8:75:9a:fd:86:61:cc:33:6c:b6:47:df:00:4d: 8e:3a:64:e0:23:51:10:f5:4e:40:b0:f6:b2:3e:30:c6:db:be: df:6b:a4:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gulQjNv+6aGBXSfSTdUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMTAyMTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODdlZDkyYjJmMTk1Y2M2MDI0MmNkNmQyNTA1M2QxY2M3ODcwZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FV3ZlZeUnvGFZrog8zOqfxa3790 8LSLuoAXRGF48lQKcmgq2v8OHvj0XSkDQ2ek51scYTV0GaqJAmtGHoBQt3n0m99h IxXB+dcQKziLSJNNnZjqe9TWwGdtxHu5RCtjoviXGIYRxSx2d3hK4YwTxbpRKljz YrCdnhcEhJk2eXpvwpX4NHfPW3OVnzyP8Aaezi76IvUMwEOmGZI/yF7PJUavERvr rAL2dQTNdCZVg6rc5tVfC1JOJ05nkMbNpO5eWvDgOQ3hJ+rY/Amd2Kp0kt95dhYJ h9uRinTJ4cajsv9Dhsg7OnSTCyFp31HHzE7rSGi2wV6j096IHzoJ35WISwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOh+2SsvGVzGAkLNbSUFPRzHhw3/MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvNkg3Wkt5OFpYTVlDUXMxdEpRVTlITWVIRGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgG5YCMP MA0GCSqGSIb3DQEBCwUAA4IBAQBKaKJ62LGg+QYvkQ7U0yBCi2BRA6PanTS84UI0 QRrYMJPCj8fWxvF3rNwWID/x1M9R2SOL0AfWnb/wmDleyK5+pU9vN/8T0lb4WU78 f1KOesgQnZ1WsODiGlzBS/7zOABPk+RLij7XYSXo1JfzzJ0EyAOfdM0HnKLYqumR 4DrWmttDtYhQ4c98cnuQ5nk+MOh8YFIuh9PugWO/xS7E3pNXRNGXJrLoHY2aRSxQ NYsiefPa1bL9z86RV8TN9efZsokGLzFU0HX0+AqMRAx5QwBgnL9e27grPaTp1bw8 +HWa/YZhzDNstkffAE2OOmTgI1EQ9U5AsPayPjDG277fa6RA -----END CERTIFICATE-----Generated at Mon Jan 26 03:15:01 2026 by rpki-client