This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa File: 6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa (raw, json) Hash identifier: TDLoh7DszsOvKZFOmyvLjh7bfnLG215xsT9A8ZTykgo= Subject key identifier: EA:C4:FF:DB:05:B7:40:54:26:59:30:B6:08:CD:2F:1F:A1:DB:AB:B1 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C71B366CCE3D9221AF74A232E331A2 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216441 IP address blocks: 2a04:9307::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1b:36:6c:ce:3d:92:21:af:74:a2:32:e3:31:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac4ffdb05b74054265930b608cd2f1fa1dbabb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:58:4f:d7:39:18:c3:8c:38:b1:d5:9c:62: ad:be:fc:d8:32:5f:d8:39:84:a1:17:c9:65:a8:4d: a3:61:58:1c:2c:fd:28:95:2b:1e:ba:2c:eb:23:e1: 10:b6:96:a4:25:a2:0e:e2:4b:0f:1c:14:30:99:16: 8f:76:8a:61:fb:09:a6:37:68:7e:6e:80:1c:9b:62: 28:2d:23:de:1e:9f:fa:19:96:04:ef:2b:fd:6a:08: 71:7a:1d:00:f2:f6:06:40:51:69:b4:99:4f:e8:22: 42:73:1a:71:d5:d3:63:7f:d7:ba:f7:45:5e:2d:a5: 2b:a3:0c:6d:bb:a1:c5:33:49:fa:ed:b5:97:33:66: d3:69:f5:7b:50:40:39:f3:ec:b9:f3:cc:b3:8b:07: 7e:63:ec:09:5f:7b:20:76:dd:11:dc:a7:4d:9c:8b: 59:d5:88:95:9a:07:ab:43:15:3b:e4:06:c4:e5:52: a0:26:9e:c8:cc:fc:76:11:4b:9d:1d:e2:b6:a0:42: a8:c7:11:11:92:33:ba:97:77:d3:69:1b:55:65:7c: 9a:a8:24:39:d8:2e:25:54:13:5e:ab:77:a0:82:c9: 13:db:fd:9b:1d:10:6e:22:c1:1c:1e:10:14:60:3d: 17:f2:52:70:ca:3e:01:8d:d1:e8:b9:f1:2c:76:3b: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C4:FF:DB:05:B7:40:54:26:59:30:B6:08:CD:2F:1F:A1:DB:AB:B1 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9307::/44 Signature Algorithm: sha256WithRSAEncryption 70:6c:78:68:04:f1:f1:af:85:ad:68:1b:14:51:0d:73:e2:fd: aa:5d:0e:96:67:dd:e9:e6:af:ca:5b:09:f2:4c:6f:e4:b2:96: 16:39:39:f2:98:e3:4e:47:22:31:eb:c0:96:98:0e:64:77:d5: dc:d8:24:2a:32:3d:1c:e9:de:1c:c3:01:76:06:a6:3a:eb:47: 6c:c6:9c:ce:53:63:a6:25:fc:79:45:61:7e:05:90:24:e9:a8: ac:0c:aa:a4:34:71:08:bc:0d:6f:77:d3:a8:13:2a:20:1e:af: 6f:7f:7d:84:dc:3b:bd:9a:2e:2f:23:37:1c:8f:e5:f9:05:c2: a7:86:a1:ac:18:ee:7f:c8:d5:a7:7f:99:90:cf:23:a6:6a:04: b0:07:35:b1:29:f7:5f:12:22:ce:4b:ac:14:dc:39:64:12:3c: 8c:39:5b:6e:75:03:ab:19:f9:90:f0:96:fc:f8:92:3f:e5:c9: 13:9e:cf:4f:a0:dc:d2:77:82:7d:0a:60:a3:22:ee:8a:ad:31: 88:ac:48:18:1b:1e:4f:21:85:6a:e6:ce:6b:2b:dc:6b:32:ba: 5d:92:a1:c3:0b:ab:41:7a:85:af:24:8c:f7:8b:0e:b2:18:b2: 90:fe:ac:c1:a1:7b:e2:e6:32:05:6e:23:1f:61:9a:58:fb:a8: 50:17:4d:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxs2bM49kiGvdKIy4zGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWM0ZmZkYjA1Yjc0MDU0MjY1OTMwYjYwOGNkMmYxZmExZGJhYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxtYT9c5GMOMOLHVnGKtvvzYMl/Y OYShF8llqE2jYVgcLP0olSseuizrI+EQtpakJaIO4ksPHBQwmRaPdoph+wmmN2h+ boAcm2IoLSPeHp/6GZYE7yv9aghxeh0A8vYGQFFptJlP6CJCcxpx1dNjf9e690Ve LaUrowxtu6HFM0n67bWXM2bTafV7UEA58+y588yziwd+Y+wJX3sgdt0R3KdNnItZ 1YiVmgerQxU75AbE5VKgJp7IzPx2EUudHeK2oEKoxxERkjO6l3fTaRtVZXyaqCQ5 2C4lVBNeq3eggskT2/2bHRBuIsEcHhAUYD0X8lJwyj4BjdHoufEsdjt4ywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOrE/9sFt0BUJlkwtgjNLx+h26uxMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvNnNUXzJ3VzNRRlFtV1RDMkNNMHZINkhicTdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgSTBwAA MA0GCSqGSIb3DQEBCwUAA4IBAQBwbHhoBPHxr4WtaBsUUQ1z4v2qXQ6WZ93p5q/K WwnyTG/kspYWOTnymONORyIx68CWmA5kd9Xc2CQqMj0c6d4cwwF2BqY660dsxpzO U2OmJfx5RWF+BZAk6aisDKqkNHEIvA1vd9OoEyogHq9vf32E3Du9mi4vIzccj+X5 BcKnhqGsGO5/yNWnf5mQzyOmagSwBzWxKfdfEiLOS6wU3DlkEjyMOVtudQOrGfmQ 8Jb8+JI/5ckTns9PoNzSd4J9CmCjIu6KrTGIrEgYGx5PIYVq5s5rK9xrMrpdkqHD C6tBeoWvJIz3iw6yGLKQ/qzBoXvi5jIFbiMfYZpY+6hQF02A -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:42 2026 by rpki-client