This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/n6xxVcjkCug-o7SUn1MPcYv_4gw.roa File: n6xxVcjkCug-o7SUn1MPcYv_4gw.roa (raw, json) Hash identifier: E2YghB0SYkXGzN8panSbLUgBzPNuukknYhzwjv2afJg= Subject key identifier: 9F:AC:71:55:C8:E4:0A:E8:3E:A3:B4:94:9F:53:0F:71:8B:FF:E2:0C Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc Certificate serial: 019B79111BCB2E4F6BA4CD7D99B628640609 Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/n6xxVcjkCug-o7SUn1MPcYv_4gw.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211180 IP address blocks: 2a03:a80:bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1b:cb:2e:4f:6b:a4:cd:7d:99:b6:28:64:06:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fac7155c8e40ae83ea3b4949f530f718bffe20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:28:ec:e1:91:7f:63:6a:29:e1:f4:fa:a3: 57:81:b5:1b:aa:94:47:62:d2:93:56:9b:43:49:ff: 8f:2d:a0:b0:e5:6c:93:77:3f:c2:cf:ba:c8:17:ba: 6f:0f:11:73:7f:8d:02:ea:d9:39:ec:60:68:ee:34: 65:3c:44:a6:5d:a0:78:a5:47:bd:e1:5d:e8:97:3b: af:dd:60:41:8d:82:0d:cc:20:95:c2:8c:72:05:a3: 9c:79:6d:f6:50:79:51:08:f8:7c:14:d8:e9:27:4f: e8:63:49:be:9c:a9:ae:77:63:2a:9a:dc:1a:cb:33: 17:bb:57:2a:20:20:e6:5b:f6:6c:f1:cf:45:d8:49: e4:02:3e:37:12:1f:6e:37:33:fd:75:c9:38:49:2c: 9e:03:0a:79:6c:6b:f2:22:5e:08:1c:8d:fe:b6:cd: 4d:de:91:31:02:c1:4a:d7:95:d4:7d:91:4b:ca:30: 7d:e8:e0:12:f9:98:91:03:b8:7d:46:9e:f7:8e:d0: df:4e:37:8a:29:e4:83:3c:55:bd:fb:15:a7:4c:34: 04:de:17:48:31:18:f2:b3:38:3c:61:4a:eb:ed:38: e0:76:5c:98:be:c6:a2:c9:5a:69:47:a1:98:24:77: ba:15:c0:c5:f5:f7:a2:cc:2b:94:d2:cd:2b:f7:a4: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AC:71:55:C8:E4:0A:E8:3E:A3:B4:94:9F:53:0F:71:8B:FF:E2:0C X509v3 Authority Key Identifier: keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/n6xxVcjkCug-o7SUn1MPcYv_4gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:a80:bc::/48 Signature Algorithm: sha256WithRSAEncryption 0b:25:4a:9e:05:23:48:9f:1a:30:56:f2:db:7b:a4:d4:5a:61: 52:85:57:ed:1f:6a:50:59:ec:4a:d1:2f:2d:10:06:7d:5c:e1: ea:04:c7:0b:5e:30:3f:d2:b6:7b:19:9a:bf:f0:af:12:9e:60: 0e:91:8d:84:09:48:f2:d9:b4:f5:4c:9a:83:34:5f:26:db:2a: f3:c1:0c:27:bf:6d:1c:62:95:13:a0:44:17:37:3f:f9:fd:17: c7:6d:b0:4f:d1:0f:f2:0d:08:51:94:16:60:f1:d4:df:3e:21: d6:db:e5:57:61:1c:cc:61:f6:49:3d:9a:f5:0c:ed:a0:49:eb: a5:87:07:0e:5d:f6:28:12:93:04:81:ff:b8:14:be:57:aa:bc: 9b:78:bc:f6:49:ad:56:43:b7:a7:39:73:ce:4c:cc:09:55:1e: 1d:6d:6b:2a:4a:61:2d:00:c2:88:06:4f:de:3c:e4:49:74:51: 5c:1f:de:55:c8:c9:3b:dc:c3:3f:4f:70:4e:da:6c:8d:00:ee: 2b:ed:ce:35:ed:33:7f:87:07:f5:01:17:a8:e3:89:88:19:f4: a2:bc:39:ad:b0:2e:de:21:09:8b:66:e2:3b:2f:72:64:1c:8f: 78:d0:70:ba:0a:5d:b7:55:55:13:a6:51:44:25:55:f8:d9:9d: 3d:6a:4c:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ERvLLk9rpM19mbYoZAYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzQyNzI1ODYyYjkwYmRhNDUxMGEwMmU4MDRmZWYzYWQx MTQyZGMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmFjNzE1NWM4ZTQwYWU4M2VhM2I0OTQ5ZjUzMGY3MThiZmZlMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvoo7OGRf2NqKeH0+qNXgbUbqpRH YtKTVptDSf+PLaCw5WyTdz/Cz7rIF7pvDxFzf40C6tk57GBo7jRlPESmXaB4pUe9 4V3olzuv3WBBjYINzCCVwoxyBaOceW32UHlRCPh8FNjpJ0/oY0m+nKmud2Mqmtwa yzMXu1cqICDmW/Zs8c9F2EnkAj43Eh9uNzP9dck4SSyeAwp5bGvyIl4IHI3+ts1N 3pExAsFK15XUfZFLyjB96OAS+ZiRA7h9Rp73jtDfTjeKKeSDPFW9+xWnTDQE3hdI MRjyszg8YUrr7TjgdlyYvsaiyVppR6GYJHe6FcDF9feizCuU0s0r96Sa9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ+scVXI5AroPqO0lJ9TD3GL/+IMMB8GA1UdIwQY MBaAFPd0JyWGK5C9pFEKAugE/vOtEULcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUt N2I4ZTlkMzM1Y2E4LzEvbjZ4eFZjamtDdWctbzdTVW4xTVBjWXZfNGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUtN2I4ZTlkMzM1Y2E4 LzEvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMKgAC8 MA0GCSqGSIb3DQEBCwUAA4IBAQALJUqeBSNInxowVvLbe6TUWmFShVftH2pQWexK 0S8tEAZ9XOHqBMcLXjA/0rZ7GZq/8K8SnmAOkY2ECUjy2bT1TJqDNF8m2yrzwQwn v20cYpUToEQXNz/5/RfHbbBP0Q/yDQhRlBZg8dTfPiHW2+VXYRzMYfZJPZr1DO2g SeulhwcOXfYoEpMEgf+4FL5XqrybeLz2Sa1WQ7enOXPOTMwJVR4dbWsqSmEtAMKI Bk/ePORJdFFcH95VyMk73MM/T3BO2myNAO4r7c417TN/hwf1AReo44mIGfSivDmt sC7eIQmLZuI7L3JkHI940HC6Cl23VVUTplFEJVX42Z09akw8 -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:39 2026 by rpki-client