This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/6CXf0Qte70UcGw2sCzSFKSm4wF4.roa File: 6CXf0Qte70UcGw2sCzSFKSm4wF4.roa (raw, json) Hash identifier: qMdOB3YMaPu1vZa6PtvMLCo+SZXp36O5lNGzdlEye9w= Subject key identifier: E8:25:DF:D1:0B:5E:EF:45:1C:1B:0D:AC:0B:34:85:29:29:B8:C0:5E Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864 Certificate serial: 019B76EAC4F7B07F6F0FB04F9317D1F70622 Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/6CXf0Qte70UcGw2sCzSFKSm4wF4.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207537 IP address blocks: 2001:67c:2bb4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c4:f7:b0:7f:6f:0f:b0:4f:93:17:d1:f7:06:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e825dfd10b5eef451c1b0dac0b34852929b8c05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7d:c6:29:8b:71:8e:2a:a9:71:16:86:c6:f0: c7:b1:b9:34:61:12:db:e0:81:3c:b7:40:ec:88:76: 67:2b:7e:83:eb:d5:a4:d6:7f:3e:53:c3:d3:5d:ae: a6:d3:99:24:47:07:a1:62:f5:75:09:26:35:84:31: 05:9d:de:dd:ca:ee:63:7e:10:ae:eb:12:68:cd:3a: 3f:9f:d8:bb:c9:80:71:de:d1:c0:10:b0:f4:e4:8f: 24:eb:41:81:02:96:a5:1d:19:f6:59:40:fa:1b:af: 3f:f4:1f:89:21:66:9d:c5:b6:ca:46:50:6b:b2:55: 29:89:83:e0:f8:df:80:87:77:6e:6c:5f:f8:81:72: fb:5a:db:3a:44:24:db:58:35:cc:a5:c7:fc:d2:2a: 29:35:bb:66:61:24:d4:0a:e8:22:73:81:cd:8a:d3: bd:e7:b7:02:5b:d4:2b:41:67:51:84:f5:4e:25:bf: 1e:85:2f:24:3b:08:ce:e1:98:f2:81:1a:95:b4:0c: 2e:62:a9:08:ae:b5:4d:73:b6:95:7c:b8:49:49:58: fc:c4:0f:53:97:b3:9a:f8:af:47:58:95:32:ba:a6: 41:57:32:7f:c0:18:30:91:63:87:f0:99:d9:36:2c: 24:d1:f0:59:b8:b3:59:9f:1b:6f:ff:c3:fd:56:96: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:DF:D1:0B:5E:EF:45:1C:1B:0D:AC:0B:34:85:29:29:B8:C0:5E X509v3 Authority Key Identifier: keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/6CXf0Qte70UcGw2sCzSFKSm4wF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2bb4::/48 Signature Algorithm: sha256WithRSAEncryption 7a:9a:05:77:41:60:ab:48:98:09:24:eb:61:86:33:16:0d:8e: 2b:db:98:8d:6d:e9:92:81:2e:bc:ea:d1:c2:81:75:82:f6:48: 9d:6a:09:9d:18:f0:19:a3:0b:5a:be:d2:d1:8a:2d:42:d8:30: 45:1e:52:eb:3b:ff:9c:d2:ee:55:7f:3b:a7:2b:fd:fe:fd:7a: 2d:d7:a3:03:6f:ab:33:25:86:c4:10:62:57:7b:17:22:a3:52: db:aa:64:90:02:70:58:e5:c1:66:39:f7:c5:0b:77:1c:e7:2d: 9f:a5:33:8e:46:cf:98:19:69:4f:a1:f7:97:1a:49:53:4c:a8: 16:41:54:70:47:8e:cf:d7:3d:3e:df:42:b5:05:9f:a9:a0:e9: cc:7e:d5:8d:36:99:76:53:85:fb:76:1c:fa:6d:e9:7e:b5:ec: 98:fc:e8:44:cd:7f:b5:ac:62:58:d5:e7:25:9d:12:91:1f:43: c5:81:9c:5b:c6:b9:41:43:2d:2b:5e:37:7b:9d:0a:ca:de:a6: 94:9a:d6:8d:44:09:a8:9a:e0:34:e5:8b:eb:bc:fa:1c:e4:45: 0b:df:ac:fe:51:ca:32:c2:3f:70:7b:79:35:52:ae:a8:26:78: 95:63:30:a9:06:cf:91:4c:d9:3b:ae:1e:b5:0c:43:a6:d0:3f: 96:18:65:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26sT3sH9vD7BPkxfR9wYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDE5NGY4MjQ5NzczZDNjZDZmYjY1NGIyMzlkZTc2OWM0 MmU4NjQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODI1ZGZkMTBiNWVlZjQ1MWMxYjBkYWMwYjM0ODUyOTI5YjhjMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X3GKYtxjiqpcRaGxvDHsbk0YRLb 4IE8t0DsiHZnK36D69Wk1n8+U8PTXa6m05kkRwehYvV1CSY1hDEFnd7dyu5jfhCu 6xJozTo/n9i7yYBx3tHAELD05I8k60GBApalHRn2WUD6G68/9B+JIWadxbbKRlBr slUpiYPg+N+Ah3dubF/4gXL7Wts6RCTbWDXMpcf80iopNbtmYSTUCugic4HNitO9 57cCW9QrQWdRhPVOJb8ehS8kOwjO4ZjygRqVtAwuYqkIrrVNc7aVfLhJSVj8xA9T l7Oa+K9HWJUyuqZBVzJ/wBgwkWOH8JnZNiwk0fBZuLNZnxtv/8P9VpasbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOgl39ELXu9FHBsNrAs0hSkpuMBeMB8GA1UdIwQY MBaAFFRBlPgkl3PTzW+2VLI53nacQuhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYt ZDYxZGYzM2M0MzFiLzEvNkNYZjBRdGU3MFVjR3cyc0N6U0ZLU200d0Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYtZDYxZGYzM2M0MzFi LzEvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCu0 MA0GCSqGSIb3DQEBCwUAA4IBAQB6mgV3QWCrSJgJJOthhjMWDY4r25iNbemSgS68 6tHCgXWC9kidagmdGPAZowtavtLRii1C2DBFHlLrO/+c0u5VfzunK/3+/Xot16MD b6szJYbEEGJXexcio1LbqmSQAnBY5cFmOffFC3cc5y2fpTOORs+YGWlPofeXGklT TKgWQVRwR47P1z0+30K1BZ+poOnMftWNNpl2U4X7dhz6bel+teyY/OhEzX+1rGJY 1eclnRKRH0PFgZxbxrlBQy0rXjd7nQrK3qaUmtaNRAmomuA05YvrvPoc5EUL36z+ Ucoywj9we3k1Uq6oJniVYzCpBs+RTNk7rh61DEOm0D+WGGWq -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:08 2026 by rpki-client