This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6Gtxp8Qdby2A47LT_KYiakuDrtE.roa File: 6Gtxp8Qdby2A47LT_KYiakuDrtE.roa (raw, json) Hash identifier: BA8nh9grEBQ7UWUuUef5NazdmOCM03HbfFpXWfVVGx8= Subject key identifier: E8:6B:71:A7:C4:1D:6F:2D:80:E3:B2:D3:FC:A6:22:6A:4B:83:AE:D1 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C80115F03BB36A8FE23318B1871BA87 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6Gtxp8Qdby2A47LT_KYiakuDrtE.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134823 IP address blocks: 193.42.40.0/22 maxlen: 24 2a13:2200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:11:5f:03:bb:36:a8:fe:23:31:8b:18:71:ba:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e86b71a7c41d6f2d80e3b2d3fca6226a4b83aed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:69:46:e4:84:b0:0e:a2:b5:3e:58:68:7e: 70:a9:fb:12:0c:5d:14:50:45:5f:34:60:2c:7e:e9: ae:ee:bb:c4:84:eb:17:38:15:65:52:76:3b:a7:d5: 96:91:39:fe:f6:c6:e1:77:27:c5:d1:25:05:11:42: 9f:b1:48:8a:eb:8b:b2:ae:c6:57:78:2e:d2:8c:23: 9b:65:de:03:cb:ec:f8:b7:57:f8:ab:82:4a:e8:5f: 86:ab:03:6d:e5:bf:89:61:17:66:21:fc:e5:f7:07: 82:90:b0:19:bb:49:d2:68:dd:a5:cc:ec:a0:e8:c3: 19:af:38:a6:e3:ff:55:f2:86:f6:5e:68:c6:f8:74: a4:57:7f:3f:6f:fb:34:fe:53:50:27:a7:af:fa:35: 96:01:b4:2c:a5:1b:ba:47:be:96:12:c3:46:22:48: 0c:76:d0:28:05:86:68:19:9d:56:d8:77:69:de:03: 41:fd:32:2c:24:15:41:78:ad:d4:8b:40:ee:42:6a: 1c:3c:62:5b:ed:5e:be:cc:b5:a6:5a:87:ad:a2:3b: 71:c9:1f:ca:76:bd:3c:31:b8:46:ee:b8:f8:43:fd: b2:18:8f:52:59:e0:89:9f:58:97:49:3a:a6:fe:07: fe:c4:34:01:aa:dd:7e:b9:f6:3b:62:f5:82:20:46: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6B:71:A7:C4:1D:6F:2D:80:E3:B2:D3:FC:A6:22:6A:4B:83:AE:D1 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6Gtxp8Qdby2A47LT_KYiakuDrtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.40.0/22 IPv6: 2a13:2200::/29 Signature Algorithm: sha256WithRSAEncryption 80:c1:a1:02:a5:51:c9:63:8f:00:87:46:dd:66:7c:e3:a9:15: c9:68:57:a3:50:11:e0:26:11:27:94:46:81:f0:98:39:22:04: 80:cf:50:cf:80:e9:34:f3:b8:67:03:90:d9:2a:0e:f7:21:cb: f2:73:ca:40:d7:39:53:d1:28:64:a0:28:87:ee:f4:ab:78:6c: 34:48:a2:b0:16:f2:0a:c5:e0:34:a2:2b:ce:76:6a:fb:d0:e1: 99:52:2d:43:96:70:96:75:4e:ed:cc:60:5b:2d:31:50:27:bb: 1b:40:fc:22:f0:45:94:f9:92:b1:7b:2b:91:e1:54:a5:d6:de: 07:9e:b4:82:f0:e7:36:08:fb:aa:68:a1:41:50:fa:1c:5d:e1: ac:b2:e2:2d:61:f8:d4:c5:a3:3a:85:5f:72:97:6e:b9:8b:42: 0c:f0:aa:b0:47:bb:36:63:d5:f7:70:22:01:f2:18:72:09:5c: fb:f0:24:e6:bf:5e:c1:9a:8d:2a:83:27:29:fb:33:a1:a3:ae: 8f:fb:89:ad:16:8d:6e:ad:fc:13:a1:20:b7:9e:f1:a3:f8:15: 3f:28:cf:f0:50:27:b1:8c:fa:17:b2:94:0a:5f:6c:35:bd:15: e4:58:6e:c9:67:e3:5f:1b:e4:1a:fc:3b:1a:64:09:9b:36:92: 6d:49:39:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gBFfA7s2qP4jMYsYcbqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODZiNzFhN2M0MWQ2ZjJkODBlM2IyZDNmY2E2MjI2YTRiODNhZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MFpRuSEsA6itT5YaH5wqfsSDF0U UEVfNGAsfumu7rvEhOsXOBVlUnY7p9WWkTn+9sbhdyfF0SUFEUKfsUiK64uyrsZX eC7SjCObZd4Dy+z4t1f4q4JK6F+GqwNt5b+JYRdmIfzl9weCkLAZu0nSaN2lzOyg 6MMZrzim4/9V8ob2XmjG+HSkV38/b/s0/lNQJ6ev+jWWAbQspRu6R76WEsNGIkgM dtAoBYZoGZ1W2Hdp3gNB/TIsJBVBeK3Ui0DuQmocPGJb7V6+zLWmWoetojtxyR/K dr08MbhG7rj4Q/2yGI9SWeCJn1iXSTqm/gf+xDQBqt1+ufY7YvWCIEaRiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOhrcafEHW8tgOOy0/ymImpLg67RMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNkd0eHA4UWRieTJBNDdMVF9LWWlha3VEcnRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwSooMA0E AgACMAcDBQMqEyIAMA0GCSqGSIb3DQEBCwUAA4IBAQCAwaECpVHJY48Ah0bdZnzj qRXJaFejUBHgJhEnlEaB8Jg5IgSAz1DPgOk087hnA5DZKg73Icvyc8pA1zlT0Shk oCiH7vSreGw0SKKwFvIKxeA0oivOdmr70OGZUi1DlnCWdU7tzGBbLTFQJ7sbQPwi 8EWU+ZKxeyuR4VSl1t4HnrSC8Oc2CPuqaKFBUPocXeGssuItYfjUxaM6hV9yl265 i0IM8KqwR7s2Y9X3cCIB8hhyCVz78CTmv17Bmo0qgycp+zOho66P+4mtFo1urfwT oSC3nvGj+BU/KM/wUCexjPoXspQKX2w1vRXkWG7JZ+NfG+Qa/DsaZAmbNpJtSTkP -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:36 2026 by rpki-client