This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/6phx-w5UIxjdX_HJEdkzEKdfgmU.roa File: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (raw, json) Hash identifier: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY= Subject key identifier: EA:98:71:FB:0E:54:23:18:DD:5F:F1:C9:11:D9:33:10:A7:5F:82:65 Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0 Certificate serial: 019B7D5BD1C5E07597CDC9BAB4F282943DA2 Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/6phx-w5UIxjdX_HJEdkzEKdfgmU.roa Signing time: Fri 02 Jan 2026 06:18:47 +0000 ROA not before: Fri 02 Jan 2026 06:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6848 IP address blocks: 2001:67c:1902::/48 maxlen: 48 2001:67c:1903::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d1:c5:e0:75:97:cd:c9:ba:b4:f2:82:94:3d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0 Validity Not Before: Jan 2 06:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9871fb0e542318dd5ff1c911d93310a75f8265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:cc:be:df:82:e2:a5:de:9c:99:2d:15:9c: e2:58:a1:c4:4d:3b:f1:36:aa:ef:6b:90:ce:9f:1d: bd:77:a3:36:91:d9:7a:fe:d4:7c:a8:55:5a:69:29: 85:7c:11:18:e3:9e:bc:ef:17:a6:6b:63:e8:28:cd: 4f:eb:d4:cf:44:6e:ab:33:c5:8d:54:95:a8:8e:c8: 48:e7:92:e5:02:c8:c5:b2:74:b1:50:48:b8:ef:d1: ed:91:67:62:5b:0a:ba:a8:33:da:6d:f7:0a:78:6a: 17:5c:81:99:fa:50:de:e7:40:9d:57:25:3e:0f:a3: 6a:0c:26:01:79:96:b7:53:7d:8a:af:5f:49:76:50: 30:6b:28:c9:31:87:c8:7d:3d:2a:2a:d5:35:99:9f: 86:3f:8c:8f:47:05:16:7a:fb:a9:a9:e3:45:81:59: f1:29:34:0c:74:85:f4:6a:6f:0e:27:c4:2e:0c:90: e8:83:7e:ad:95:af:63:86:63:6b:47:38:24:0f:8d: 2d:7e:2d:4e:c3:73:ed:1e:7d:0a:81:93:74:77:fa: 7a:4f:50:2b:02:e8:eb:af:e6:f6:63:45:8c:98:c8: a7:99:c1:94:d8:49:b8:3e:96:69:48:79:cc:da:b8: 34:25:a3:f3:a5:b8:e2:bf:b2:c9:7a:63:59:34:b6: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:98:71:FB:0E:54:23:18:DD:5F:F1:C9:11:D9:33:10:A7:5F:82:65 X509v3 Authority Key Identifier: keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/6phx-w5UIxjdX_HJEdkzEKdfgmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1902::/47 Signature Algorithm: sha256WithRSAEncryption 1a:0a:b0:3a:ab:a9:01:70:d6:08:69:3a:e5:21:62:2e:8c:fe: 45:ca:9d:7f:b1:2f:85:87:2c:6c:4e:fc:8c:0b:89:0c:04:e5: 9e:f2:dc:84:50:1d:e2:d0:5a:64:65:5d:60:3b:55:1d:d5:d7: e5:0a:88:73:97:d8:51:0f:5b:55:aa:96:41:fd:f2:49:15:73: bd:d2:08:bd:de:dd:c4:ca:7b:34:3b:c0:7e:2e:2a:b3:9e:87: 67:0f:b1:ba:05:0d:3a:99:52:fe:b9:5c:a7:7c:74:ee:90:a1: 50:93:4e:b0:0e:7c:87:3a:7a:89:8d:3b:62:ee:14:28:46:69: a1:b5:62:13:6b:2a:b9:3e:3e:75:64:1b:ff:94:c0:07:44:9e: 0e:10:48:21:63:dd:bf:6a:09:f2:02:99:da:f9:66:3a:ca:4c: e3:1b:23:25:18:2f:2e:07:be:82:a5:c8:9e:9d:cc:63:96:94: 3a:77:8a:4b:41:e6:8a:5d:cd:37:8a:63:b8:8c:9d:cf:d0:3d: c6:84:9d:b6:d7:39:c9:f2:37:b1:f6:cd:ae:3a:3a:83:d8:3d: 02:e2:93:05:0b:2a:1f:67:c8:b5:01:06:b0:c4:b7:3f:10:51: 61:e5:40:ab:db:ba:77:fe:bb:25:2e:48:fe:07:da:0d:67:79: 55:33:35:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W9HF4HWXzcm6tPKClD2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTNhOWM3MTM5MWQ4ZmEwNmI3MzQyYWE5MmM2ZWVhMmE1 M2U1YzAwHhcNMjYwMTAyMDYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTk4NzFmYjBlNTQyMzE4ZGQ1ZmYxYzkxMWQ5MzMxMGE3NWY4MjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtonMvt+C4qXenJktFZziWKHETTvx Nqrva5DOnx29d6M2kdl6/tR8qFVaaSmFfBEY45687xema2PoKM1P69TPRG6rM8WN VJWojshI55LlAsjFsnSxUEi479HtkWdiWwq6qDPabfcKeGoXXIGZ+lDe50CdVyU+ D6NqDCYBeZa3U32Kr19JdlAwayjJMYfIfT0qKtU1mZ+GP4yPRwUWevupqeNFgVnx KTQMdIX0am8OJ8QuDJDog36tla9jhmNrRzgkD40tfi1Ow3PtHn0KgZN0d/p6T1Ar Aujrr+b2Y0WMmMinmcGU2Em4PpZpSHnM2rg0JaPzpbjiv7LJemNZNLbc+wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOqYcfsOVCMY3V/xyRHZMxCnX4JlMB8GA1UdIwQY MBaAFKajqccTkdj6Brc0KqksbuoqU+XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNWU0NjYtNmRlZS00ODVkLWFlMmMt YzY3MGYwZWIyM2E0LzEvNnBoeC13NVVJeGpkWF9ISkVka3pFS2RmZ21VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yNWU0NjYtNmRlZS00ODVkLWFlMmMtYzY3MGYwZWIyM2E0 LzEvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEGfBkC MA0GCSqGSIb3DQEBCwUAA4IBAQAaCrA6q6kBcNYIaTrlIWIujP5Fyp1/sS+Fhyxs TvyMC4kMBOWe8tyEUB3i0FpkZV1gO1Ud1dflCohzl9hRD1tVqpZB/fJJFXO90gi9 3t3Eyns0O8B+LiqznodnD7G6BQ06mVL+uVynfHTukKFQk06wDnyHOnqJjTti7hQo RmmhtWITayq5Pj51ZBv/lMAHRJ4OEEghY92/agnyApna+WY6ykzjGyMlGC8uB76C pciencxjlpQ6d4pLQeaKXc03imO4jJ3P0D3GhJ221znJ8jex9s2uOjqD2D0C4pMF CyofZ8i1AQawxLc/EFFh5UCr27p3/rslLkj+B9oNZ3lVMzUP -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:21 2026 by rpki-client