This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/6JluXjhm_3nHCCaPoS3TfBvKy-U.roa File: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (raw, json) Hash identifier: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0= Subject key identifier: E8:99:6E:5E:38:66:FF:79:C7:08:26:8F:A1:2D:D3:7C:1B:CA:CB:E5 Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F7BB51516DECFFDDE4377AFCE921 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/6JluXjhm_3nHCCaPoS3TfBvKy-U.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213197 IP address blocks: 2a12:5844:1310::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:bb:51:51:6d:ec:ff:dd:e4:37:7a:fc:e9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8996e5e3866ff79c708268fa12dd37c1bcacbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:af:05:ba:08:06:3a:f7:c7:d1:12:64:8b: 24:05:11:d0:1c:b7:cf:06:8b:56:05:37:3a:a1:5a: 57:b3:9b:12:9b:6d:bd:f3:00:33:0e:41:57:3d:81: b1:72:bc:2c:3b:5e:0f:72:b9:e0:de:17:cd:4a:72: 30:f9:ad:be:63:6f:b2:e3:75:6a:c1:0f:00:41:f7: c3:f0:ae:4f:77:e5:69:97:c2:5a:ef:74:c4:33:1b: e9:29:9e:b4:06:f0:04:ff:de:6a:b7:93:f0:cc:cf: 13:5d:ec:71:a5:44:db:e5:1e:95:aa:ed:9f:23:6f: ad:19:71:d3:f9:94:95:e5:5a:1a:98:d1:4c:53:01: c4:58:f8:dc:68:a9:8a:ff:fa:54:ff:9b:1a:d6:e4: 75:6e:8f:bb:0d:78:1f:df:39:70:27:b7:3c:a9:9f: 13:1e:fe:bf:13:c1:8b:9f:68:4e:3c:ca:22:ff:f1: 29:a6:a0:95:46:d2:de:02:d7:59:c6:3e:e4:9b:a4: d8:dd:85:4e:02:14:62:36:bd:0c:1c:25:db:59:a9: 17:37:11:b8:da:46:69:11:e6:41:1f:f6:91:33:50: 00:3e:79:e3:b9:0e:f1:e7:0d:b0:ee:af:cf:eb:36: 89:6e:12:4a:3a:00:6e:97:e3:4d:1c:3d:11:0d:be: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:99:6E:5E:38:66:FF:79:C7:08:26:8F:A1:2D:D3:7C:1B:CA:CB:E5 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/6JluXjhm_3nHCCaPoS3TfBvKy-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5844:1310::/44 Signature Algorithm: sha256WithRSAEncryption 82:ed:e8:37:a6:ef:30:0d:27:4f:d0:fb:30:e6:5a:c8:8b:e2: f2:4d:62:0d:a8:21:86:15:5f:2c:e6:ef:1f:2f:8a:f9:bf:1e: 45:a8:c0:1b:92:8f:2d:2d:7c:6e:d3:bc:95:64:18:7d:34:a9: 99:4f:47:39:8e:10:ec:54:38:2c:c1:2b:9f:32:36:74:3b:58: 7b:54:e5:ad:d3:23:8a:0a:7a:6f:18:77:f1:9f:58:4e:28:07: 31:10:da:d3:c5:68:f6:d8:c5:1b:83:1c:5b:3e:88:8f:d1:75: 79:30:74:bb:1c:05:1c:c5:5e:43:ed:4a:10:93:01:11:50:50: ef:aa:9a:de:cb:ee:c5:53:07:95:74:4c:6a:13:8b:ac:b1:6d: cd:1b:e7:0b:56:40:79:d6:d6:28:c3:e6:37:e3:fd:ba:07:87: 06:19:92:35:99:6f:a3:7b:8d:b5:9f:d6:cf:6a:ec:a5:78:31: 4e:5a:5a:b7:48:2d:18:35:14:ce:c2:6f:7f:8c:d1:87:87:18: 3c:e9:e4:6d:33:fb:3b:9a:b7:f1:ec:76:35:26:cb:ab:cc:01: 06:33:05:ad:ad:70:2e:d3:94:5b:59:9a:0a:28:bd:61:bb:5b: 6f:24:ae:2f:e6:38:a0:19:e1:f1:c3:c7:d9:ff:90:af:0c:91: ef:5e:53:1c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPe7UVFt7P/d5Dd6/OkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODk5NmU1ZTM4NjZmZjc5YzcwODI2OGZhMTJkZDM3YzFiY2FjYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk6vBboIBjr3x9ESZIskBRHQHLfP BotWBTc6oVpXs5sSm2298wAzDkFXPYGxcrwsO14Pcrng3hfNSnIw+a2+Y2+y43Vq wQ8AQffD8K5Pd+Vpl8Ja73TEMxvpKZ60BvAE/95qt5PwzM8TXexxpUTb5R6Vqu2f I2+tGXHT+ZSV5VoamNFMUwHEWPjcaKmK//pU/5sa1uR1bo+7DXgf3zlwJ7c8qZ8T Hv6/E8GLn2hOPMoi//EppqCVRtLeAtdZxj7km6TY3YVOAhRiNr0MHCXbWakXNxG4 2kZpEeZBH/aRM1AAPnnjuQ7x5w2w7q/P6zaJbhJKOgBul+NNHD0RDb4ppwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOiZbl44Zv95xwgmj6Et03wbysvlMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvNkpsdVhqaG1fM25IQ0NhUG9TM1RmQnZLeS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJYRBMQ MA0GCSqGSIb3DQEBCwUAA4IBAQCC7eg3pu8wDSdP0Psw5lrIi+LyTWINqCGGFV8s 5u8fL4r5vx5FqMAbko8tLXxu07yVZBh9NKmZT0c5jhDsVDgswSufMjZ0O1h7VOWt 0yOKCnpvGHfxn1hOKAcxENrTxWj22MUbgxxbPoiP0XV5MHS7HAUcxV5D7UoQkwER UFDvqprey+7FUweVdExqE4ussW3NG+cLVkB51tYow+Y34/26B4cGGZI1mW+je421 n9bPauyleDFOWlq3SC0YNRTOwm9/jNGHhxg86eRtM/s7mrfx7HY1JsurzAEGMwWt rXAu05RbWZoKKL1hu1tvJK4v5jigGeHxw8fZ/5CvDJHvXlMc -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:08 2026 by rpki-client