This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa File: 6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa (raw, json) Hash identifier: pjL7PLIGwLTNOBt+seTt/W2jPyX7Bk12lzulixeL94A= Subject key identifier: EA:C3:EE:79:A5:3E:5F:3F:A2:35:81:3A:9F:AC:F5:50:86:17:6C:FB Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B48489892C6D96358E2FF38626E78 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10104 IP address blocks: 2a12:f8c0::/32 maxlen: 48 2a12:f8c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:48:48:98:92:c6:d9:63:58:e2:ff:38:62:6e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac3ee79a53e5f3fa235813a9facf55086176cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:58:35:82:2a:eb:03:7b:44:5c:d4:c1:12: b9:93:38:91:5b:17:82:7c:9b:58:9b:d8:fd:7d:f7: a6:da:fb:d2:f2:65:22:30:d9:f7:33:34:2d:7e:74: 4d:cb:c9:49:52:8e:0e:8e:7d:e6:46:ee:ce:9f:dc: b9:eb:ae:03:31:f0:91:ec:2d:9e:80:ae:2c:e2:9b: fd:6e:42:24:fb:21:5f:09:e2:12:2a:e1:02:ca:1f: 4c:fd:63:1f:a3:62:6e:b7:36:b8:ec:0d:0a:8b:79: 05:f7:d8:e9:28:4e:f9:82:19:71:33:10:2d:41:3c: e7:2d:50:16:ed:d2:00:db:7e:13:5d:e6:15:21:33: 64:c9:1d:83:d1:d3:c7:a9:26:a9:4f:a5:77:8d:4f: 47:8f:eb:8d:55:20:9d:51:fb:60:2e:62:74:14:fd: d5:37:0f:14:31:1a:e8:a0:a5:bb:c2:19:4d:e5:5d: 58:f9:0b:e4:90:cf:85:22:4c:4e:4b:b9:57:db:f7: 7d:ca:e1:4f:b7:54:1e:17:75:d9:fd:ac:4c:52:43: 73:4a:82:48:2a:66:c7:d8:09:18:ee:d4:9a:fc:5b: d4:d4:2c:66:40:f4:aa:b4:8e:bd:09:c2:9b:8f:ce: 86:5b:4e:fe:41:85:a4:20:60:50:d3:df:1b:ba:b5: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:EE:79:A5:3E:5F:3F:A2:35:81:3A:9F:AC:F5:50:86:17:6C:FB X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c0::-2a12:f8c1:0:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5d:34:07:56:da:b1:08:73:86:81:35:06:c4:36:fd:2c:67:2c: a4:7d:c1:a9:c6:13:89:15:73:4d:b8:4d:34:d2:fa:c4:c5:70: bc:2f:bc:2d:5d:06:f2:ec:5a:3a:74:33:b3:cc:c3:0d:c1:0f: f1:80:13:c5:a3:84:50:a6:06:26:8b:e4:c9:82:34:a1:c3:6a: 24:77:4b:b2:80:ae:1b:c9:b1:f7:46:f4:20:b8:72:56:eb:03: 65:b8:43:bb:fc:f4:a1:1d:f9:db:7e:c9:17:8a:dc:79:f4:44: 8c:55:cc:f7:c3:ef:0f:19:4e:25:99:b9:d8:26:ce:9d:e3:fb: 98:ae:96:91:8f:4b:dd:76:ea:85:22:bc:ab:33:f4:27:6f:66: 1f:de:13:1a:77:83:87:ce:e6:91:78:4b:a9:09:1e:7f:fe:53: b4:9b:c4:a7:a9:12:24:ce:ed:d8:6e:23:c5:86:98:e0:fd:d3: de:33:46:f9:4e:65:5c:7b:f8:7d:ed:7a:6b:f6:7b:46:4b:47: 5c:4c:87:49:b4:16:ed:f8:5d:f2:f0:97:e2:89:4d:44:dc:af: 58:ae:11:6d:c8:4a:a9:6c:1b:c5:72:5e:6a:30:cd:4e:94:94: 55:5e:c1:e8:58:f1:f3:0d:de:a6:5f:d7:df:cf:31:a5:bf:8e: 20:05:f8:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W0hImJLG2WNY4v84Ym54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWMzZWU3OWE1M2U1ZjNmYTIzNTgxM2E5ZmFjZjU1MDg2MTc2Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVdYNYIq6wN7RFzUwRK5kziRWxeC fJtYm9j9ffem2vvS8mUiMNn3MzQtfnRNy8lJUo4Ojn3mRu7On9y5664DMfCR7C2e gK4s4pv9bkIk+yFfCeISKuECyh9M/WMfo2Jutza47A0Ki3kF99jpKE75ghlxMxAt QTznLVAW7dIA234TXeYVITNkyR2D0dPHqSapT6V3jU9Hj+uNVSCdUftgLmJ0FP3V Nw8UMRrooKW7whlN5V1Y+QvkkM+FIkxOS7lX2/d9yuFPt1QeF3XZ/axMUkNzSoJI KmbH2AkY7tSa/FvU1CxmQPSqtI69CcKbj86GW07+QYWkIGBQ098burUD4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOrD7nmlPl8/ojWBOp+s9VCGF2z7MB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvNnNQdWVhVS1Yei1pTllFNm42ejFVSVlYYlBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQYqEvjA AwcAKhL4wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQBdNAdW2rEIc4aBNQbENv0sZyyk fcGpxhOJFXNNuE000vrExXC8L7wtXQby7Fo6dDOzzMMNwQ/xgBPFo4RQpgYmi+TJ gjShw2okd0uygK4bybH3RvQguHJW6wNluEO7/PShHfnbfskXitx59ESMVcz3w+8P GU4lmbnYJs6d4/uYrpaRj0vdduqFIryrM/Qnb2Yf3hMad4OHzuaReEupCR5//lO0 m8SnqRIkzu3YbiPFhpjg/dPeM0b5TmVce/h97Xpr9ntGS0dcTIdJtBbt+F3y8Jfi iU1E3K9YrhFtyEqpbBvFcl5qMM1OlJRVXsHoWPHzDd6mX9ffzzGlv44gBfgU -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:08 2026 by rpki-client