This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa File: c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa (raw, json) Hash identifier: 4vJbjz8heF/m4GioZY43zb7qdmLusK1fKEnTbwbhKuE= Subject key identifier: 73:FE:8E:29:AD:A4:26:D2:CC:FE:3E:77:3D:9D:4C:2E:A8:03:A8:37 Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a Certificate serial: 019B78A2C79C959300F12386E6F4C183D7E0 Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207491 IP address blocks: 2001:678:c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c7:9c:95:93:00:f1:23:86:e6:f4:c1:83:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73fe8e29ada426d2ccfe3e773d9d4c2ea803a837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:71:3f:c7:91:ba:1f:62:80:e2:05:78:28: ab:31:b0:bb:5f:66:2a:38:5c:63:58:08:17:1c:08: 17:23:a6:e0:83:5e:17:dc:ed:03:46:fc:47:5f:0e: 71:a1:da:34:a1:43:78:40:c6:16:4c:f0:6b:d5:23: dd:74:2e:7d:bb:02:af:97:00:8f:fd:38:f7:d4:77: a5:ec:49:07:e6:66:b6:dd:f1:37:3b:04:8b:e7:c8: a2:ff:45:60:42:e5:d9:89:0a:c4:f4:45:ec:19:d3: 9d:d4:10:ee:65:c3:0e:fb:e4:ec:d2:67:c4:81:01: 7c:90:c4:56:d1:9b:d5:b0:ac:26:5d:90:3f:8d:f1: 25:3e:bd:c3:1d:3a:9f:a3:3f:ba:d5:99:cb:af:b9: 79:51:ec:a3:88:1f:73:df:ce:0f:de:0d:f2:19:57: 21:26:91:cb:63:35:88:e2:fb:27:a2:4c:01:37:d4: 06:8d:9d:36:3e:15:9d:da:94:e5:bd:cc:71:08:17: 81:29:12:4f:06:b6:e2:01:b2:0a:cd:70:1d:0d:be: d0:22:e7:ce:04:56:51:c7:42:4e:36:5d:14:04:d8: 1c:54:90:77:d0:10:b6:1c:04:40:c4:e1:6b:fb:90: 34:4c:9d:97:09:fd:b7:83:1a:2c:88:79:09:fa:11: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FE:8E:29:AD:A4:26:D2:CC:FE:3E:77:3D:9D:4C:2E:A8:03:A8:37 X509v3 Authority Key Identifier: keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c08::/48 Signature Algorithm: sha256WithRSAEncryption 59:fa:9a:e4:c3:d5:25:4d:f6:b9:31:0a:87:18:af:be:d5:d3: da:27:62:be:91:47:ee:95:88:d6:36:80:89:82:36:e6:23:41: 40:fe:83:17:56:ac:0b:09:65:b5:95:72:7c:03:97:02:be:a9: 77:3d:a9:ed:57:49:ad:d0:e3:b2:69:05:a3:7b:59:23:e9:89: 49:a5:30:bb:ac:f8:fd:39:96:25:91:6b:f5:96:3b:5c:88:27: 00:3a:f7:ee:cc:0e:5b:75:91:fb:30:bd:c6:08:a9:f5:65:5c: 1f:ff:d2:62:22:96:fd:ec:1b:36:21:b6:49:82:26:b6:66:70: ff:7a:ad:41:54:ff:8b:a0:50:54:84:06:d7:8e:47:9f:0b:87: e8:de:dd:7a:68:fd:91:25:b0:39:68:76:2d:f0:2f:54:53:6f: cc:52:d8:84:34:39:9b:ef:e0:23:da:7c:61:d8:dc:9a:19:82: 62:13:df:d6:8f:a4:7c:11:18:e2:75:05:42:00:a9:9a:bf:b3: 76:4c:f8:14:2d:74:f4:1d:af:f1:74:4b:e8:c2:89:4c:c1:fb: 0f:47:c7:97:b9:8c:cd:2a:d7:00:00:21:d9:4c:b0:78:0e:1f: d3:56:e6:20:6b:c0:18:af:d3:44:a5:06:94:fd:8b:98:ca:31: a2:23:e1:31 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oseclZMA8SOG5vTBg9fgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjFlOTAwMDk3N2JhZDU4Yzg3NzA1ZTNiMTY1YjA4NDgz ZjBiM2EwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2ZlOGUyOWFkYTQyNmQyY2NmZTNlNzczZDlkNGMyZWE4MDNhODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXFxP8eRuh9igOIFeCirMbC7X2Yq OFxjWAgXHAgXI6bgg14X3O0DRvxHXw5xodo0oUN4QMYWTPBr1SPddC59uwKvlwCP /Tj31Hel7EkH5ma23fE3OwSL58ii/0VgQuXZiQrE9EXsGdOd1BDuZcMO++Ts0mfE gQF8kMRW0ZvVsKwmXZA/jfElPr3DHTqfoz+61ZnLr7l5UeyjiB9z384P3g3yGVch JpHLYzWI4vsnokwBN9QGjZ02PhWd2pTlvcxxCBeBKRJPBrbiAbIKzXAdDb7QIufO BFZRx0JONl0UBNgcVJB30BC2HARAxOFr+5A0TJ2XCf23gxosiHkJ+hGk0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHP+jimtpCbSzP4+dz2dTC6oA6g3MB8GA1UdIwQY MBaAFGth6QAJd7rVjIdwXjsWWwhIPws6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMt MjIyOGY5YWQ3NTBmLzEvY182T0thMmtKdExNX2o1M1BaMU1McWdEcURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMtMjIyOGY5YWQ3NTBm LzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwI MA0GCSqGSIb3DQEBCwUAA4IBAQBZ+prkw9UlTfa5MQqHGK++1dPaJ2K+kUfulYjW NoCJgjbmI0FA/oMXVqwLCWW1lXJ8A5cCvql3PantV0mt0OOyaQWje1kj6YlJpTC7 rPj9OZYlkWv1ljtciCcAOvfuzA5bdZH7ML3GCKn1ZVwf/9JiIpb97Bs2IbZJgia2 ZnD/eq1BVP+LoFBUhAbXjkefC4fo3t16aP2RJbA5aHYt8C9UU2/MUtiENDmb7+Aj 2nxh2NyaGYJiE9/Wj6R8ERjidQVCAKmav7N2TPgULXT0Ha/xdEvowolMwfsPR8eX uYzNKtcAACHZTLB4Dh/TVuYga8AYr9NEpQaU/YuYyjGiI+Ex -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:35 2026 by rpki-client