This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa File: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (raw, json) Hash identifier: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM= Subject key identifier: E8:F4:42:1A:48:88:FD:7C:C9:FD:53:AA:AE:13:26:74:54:93:4A:B2 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019B7759084CF601C52862BC32D3ABD40B78 Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16262 IP address blocks: 2a03:e140:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:4c:f6:01:c5:28:62:bc:32:d3:ab:d4:0b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f4421a4888fd7cc9fd53aaae13267454934ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:0a:c4:a5:d2:31:32:a9:11:ea:7e:92:44: bb:27:f9:ca:30:66:46:74:ba:55:84:e3:7a:e0:c8: 31:a4:12:df:86:5f:bd:13:4f:e7:6b:f4:6f:7e:99: 68:0b:45:56:c9:56:c0:cb:30:4d:18:40:43:f2:9e: 42:09:98:c6:e5:96:9b:a3:19:d1:4b:37:ec:d2:f8: 8e:c1:95:dd:a7:18:56:7f:c4:ba:32:74:91:7b:ae: 34:45:be:83:90:5d:f6:4e:53:90:b2:b1:df:bb:39: 0b:52:72:d9:5a:3c:09:48:e8:78:11:25:6d:2d:f3: d0:20:f6:0f:a7:94:f6:92:f5:24:fc:2c:58:61:8a: 20:26:94:8d:04:f0:fd:d0:29:b6:26:7e:ba:92:3a: 60:aa:00:f1:cc:ca:81:5c:f9:e4:38:3e:16:8a:a0: 86:b3:59:37:29:e8:9e:05:1f:6c:b0:da:4d:af:e7: 24:ab:5c:17:55:7d:f6:35:bb:6c:63:51:e3:a4:92: c1:de:6a:43:74:4d:2a:77:b1:dc:bd:bb:a7:02:ee: 02:a3:2a:bd:39:19:aa:59:7f:98:49:9a:a1:3e:dc: a1:95:31:08:fd:e7:89:d8:2f:ad:39:c3:64:e7:85: 02:68:32:8c:7f:dc:d5:a8:7f:ea:15:3f:14:a8:13: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F4:42:1A:48:88:FD:7C:C9:FD:53:AA:AE:13:26:74:54:93:4A:B2 X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:e140:3a::/48 Signature Algorithm: sha256WithRSAEncryption 54:01:27:e0:09:71:7e:02:30:6c:1d:77:c3:f8:17:d6:a0:8a: b3:b0:f1:63:47:15:f9:13:c8:f7:d5:bf:96:16:6d:eb:e3:a4: 1f:e7:91:f5:c4:ea:19:ac:93:3b:aa:5a:06:bb:fa:96:ab:7b: 89:41:82:98:8a:a7:e3:25:29:88:a4:41:8f:89:2a:d3:da:e1: 2e:0e:f4:c3:ba:7b:c5:27:2e:67:d9:ad:a2:07:41:13:0e:9c: b2:ca:9b:71:8b:37:ab:e8:93:d0:a6:3e:91:7e:8a:5f:1b:56: 02:cb:4d:8f:13:f7:27:74:2b:af:7c:2e:ec:0c:ba:95:68:cc: a3:89:5a:e1:f9:12:16:30:93:db:84:13:9f:49:aa:ea:e2:e0: e1:3c:ac:cf:80:da:0a:bd:52:27:20:0c:4b:03:f7:6e:66:3d: 2e:83:f2:d9:2c:cb:7e:55:c6:1e:e0:b3:99:85:22:e2:dd:bf: 2d:d4:76:64:65:48:fb:ef:c4:76:7d:34:ab:50:15:a3:c0:75: 16:19:3b:ab:d4:4a:64:eb:b8:87:13:4c:7e:cd:f0:d3:ed:b6: 76:da:55:8b:f4:2f:63:99:52:3e:f9:bd:eb:d4:72:3a:c3:8b: 3e:73:54:57:4d:57:89:6a:1b:d4:3c:b1:34:86:af:dc:21:71: d6:68:e3:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WQhM9gHFKGK8MtOr1At4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGY0NDIxYTQ4ODhmZDdjYzlmZDUzYWFhZTEzMjY3NDU0OTM0YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1QKxKXSMTKpEep+kkS7J/nKMGZG dLpVhON64MgxpBLfhl+9E0/na/RvfploC0VWyVbAyzBNGEBD8p5CCZjG5ZaboxnR Szfs0viOwZXdpxhWf8S6MnSRe640Rb6DkF32TlOQsrHfuzkLUnLZWjwJSOh4ESVt LfPQIPYPp5T2kvUk/CxYYYogJpSNBPD90Cm2Jn66kjpgqgDxzMqBXPnkOD4WiqCG s1k3KeieBR9ssNpNr+ckq1wXVX32NbtsY1HjpJLB3mpDdE0qd7HcvbunAu4Coyq9 ORmqWX+YSZqhPtyhlTEI/eeJ2C+tOcNk54UCaDKMf9zVqH/qFT8UqBOgrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOj0QhpIiP18yf1Tqq4TJnRUk0qyMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvNlBSQ0draUlfWHpKX1ZPcXJoTW1kRlNUU3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPhQAA6 MA0GCSqGSIb3DQEBCwUAA4IBAQBUASfgCXF+AjBsHXfD+BfWoIqzsPFjRxX5E8j3 1b+WFm3r46Qf55H1xOoZrJM7qloGu/qWq3uJQYKYiqfjJSmIpEGPiSrT2uEuDvTD unvFJy5n2a2iB0ETDpyyyptxizer6JPQpj6RfopfG1YCy02PE/cndCuvfC7sDLqV aMyjiVrh+RIWMJPbhBOfSarq4uDhPKzPgNoKvVInIAxLA/duZj0ug/LZLMt+VcYe 4LOZhSLi3b8t1HZkZUj778R2fTSrUBWjwHUWGTur1Epk67iHE0x+zfDT7bZ22lWL 9C9jmVI++b3r1HI6w4s+c1RXTVeJahvUPLE0hq/cIXHWaOM8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:16 2026 by rpki-client