This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/fl6Eoa1hwEGKCuanPNc7n4y91UA.roa File: fl6Eoa1hwEGKCuanPNc7n4y91UA.roa (raw, json) Hash identifier: huCWkhi4zMpb70tuPgc5lncDVkB3BLN/Pb3IpFyP/Z4= Subject key identifier: 7E:5E:84:A1:AD:61:C0:41:8A:0A:E6:A7:3C:D7:3B:9F:8C:BD:D5:40 Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Certificate serial: 019B7EA6E73AC20E1336DF58CC75F4D654D7 Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/fl6Eoa1hwEGKCuanPNc7n4y91UA.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12695 IP address blocks: 2001:67c:b18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e7:3a:c2:0e:13:36:df:58:cc:75:f4:d6:54:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e5e84a1ad61c0418a0ae6a73cd73b9f8cbdd540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:db:d2:51:40:66:f7:85:eb:70:4e:28:25: 54:4b:e6:ee:25:5a:6f:d8:a2:31:d0:53:b0:e0:87: c4:f8:73:fe:da:24:11:15:b3:f1:8f:18:8c:1d:2c: 1c:01:54:03:cc:fe:0e:e3:6c:43:b2:88:d7:c1:18: 6f:df:1e:cc:0d:b5:20:36:d2:16:48:19:f4:6f:29: 66:9d:5b:be:13:e4:d1:d4:cf:d0:aa:f5:7a:36:17: 51:f2:c2:e1:f9:a0:89:ef:65:d5:3f:8f:6c:d8:f5: 50:b3:f1:dd:7b:b4:f5:c3:b2:bd:f2:73:99:af:57: de:be:eb:84:9a:25:d0:47:f8:d2:0a:1f:23:09:bf: c5:85:93:e4:54:97:db:21:13:01:81:e0:77:9f:be: cf:58:76:5f:c9:7d:fe:a8:34:2b:fb:3a:48:01:ff: c3:07:74:98:be:ef:ad:5e:df:0e:30:63:f0:64:5e: 04:aa:82:cb:b1:d4:51:5f:29:41:c9:8f:42:f7:ba: 82:1e:43:97:dd:0e:87:15:b2:91:60:ff:3a:88:0b: bd:18:a2:65:53:ae:87:2e:2f:eb:f9:25:bc:3c:a8: a9:2c:bb:15:c5:cb:30:b6:f0:79:15:41:0d:46:12: 3a:b6:17:b9:fe:15:ac:ad:a8:f4:ae:7a:3c:04:bc: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5E:84:A1:AD:61:C0:41:8A:0A:E6:A7:3C:D7:3B:9F:8C:BD:D5:40 X509v3 Authority Key Identifier: keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/fl6Eoa1hwEGKCuanPNc7n4y91UA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b18::/48 Signature Algorithm: sha256WithRSAEncryption 36:6a:13:be:ab:03:f5:4e:32:d6:04:7e:82:1e:a2:58:8a:92: 9e:4a:7f:4c:6f:99:bc:80:44:ba:31:cb:de:db:67:64:8e:96: 9c:fc:7f:4f:96:66:ff:27:4c:6c:1c:64:b7:d4:b1:74:b0:e7: e3:80:92:21:af:bc:dc:ed:ca:34:17:7d:a5:e2:ac:c0:b0:20: 1d:a1:5b:64:ec:64:b5:ad:6c:b1:38:ff:d3:e0:bc:b1:a7:73: 13:27:39:27:c7:6d:8e:c1:c6:c4:29:f1:49:34:cc:8f:8b:00: da:e0:98:a3:27:97:fa:6e:5b:12:c3:e6:43:26:3f:96:42:13: 12:a0:3a:c1:d6:02:8f:42:52:01:93:0a:62:d4:98:40:72:06: aa:65:1a:03:a9:67:f3:a1:75:8c:9c:cb:ff:c3:3b:52:8d:1d: ee:2c:6f:db:7b:ac:38:22:6d:e4:19:d1:ae:c6:6a:ca:f6:fa: 91:9a:a8:c7:a1:ca:39:80:3f:57:d1:51:ee:4e:77:d9:21:99: ef:f4:9c:d0:dd:40:d3:44:ec:b7:ce:95:da:7b:8c:aa:24:f8: f0:87:15:21:d1:74:23:e7:e9:7e:13:10:3c:b6:e4:a8:a0:78: fb:87:7a:d9:56:b4:25:f2:a3:0a:3a:93:22:74:c1:03:0c:ff: aa:b7:66:8d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puc6wg4TNt9YzHX01lTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx YzhjZGQwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTVlODRhMWFkNjFjMDQxOGEwYWU2YTczY2Q3M2I5ZjhjYmRkNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySLb0lFAZveF63BOKCVUS+buJVpv 2KIx0FOw4IfE+HP+2iQRFbPxjxiMHSwcAVQDzP4O42xDsojXwRhv3x7MDbUgNtIW SBn0bylmnVu+E+TR1M/QqvV6NhdR8sLh+aCJ72XVP49s2PVQs/Hde7T1w7K98nOZ r1fevuuEmiXQR/jSCh8jCb/FhZPkVJfbIRMBgeB3n77PWHZfyX3+qDQr+zpIAf/D B3SYvu+tXt8OMGPwZF4EqoLLsdRRXylByY9C97qCHkOX3Q6HFbKRYP86iAu9GKJl U66HLi/r+SW8PKipLLsVxcswtvB5FUENRhI6the5/hWsraj0rno8BLwCBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH5ehKGtYcBBigrmpzzXO5+MvdVAMB8GA1UdIwQY MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt YTI2Y2I2NDI5NDg2LzEvZmw2RW9hMWh3RUdLQ3VhblBOYzduNHk5MVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2 LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsY MA0GCSqGSIb3DQEBCwUAA4IBAQA2ahO+qwP1TjLWBH6CHqJYipKeSn9Mb5m8gES6 Mcve22dkjpac/H9Plmb/J0xsHGS31LF0sOfjgJIhr7zc7co0F32l4qzAsCAdoVtk 7GS1rWyxOP/T4Lyxp3MTJzknx22OwcbEKfFJNMyPiwDa4JijJ5f6blsSw+ZDJj+W QhMSoDrB1gKPQlIBkwpi1JhAcgaqZRoDqWfzoXWMnMv/wztSjR3uLG/be6w4Im3k GdGuxmrK9vqRmqjHoco5gD9X0VHuTnfZIZnv9JzQ3UDTROy3zpXae4yqJPjwhxUh 0XQj5+l+ExA8tuSooHj7h3rZVrQl8qMKOpMidMEDDP+qt2aN -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:55 2026 by rpki-client