This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa File: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (raw, json) Hash identifier: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE= Subject key identifier: E8:59:C9:74:F1:96:E6:9B:CC:49:7A:53:5F:1F:A7:BA:BA:DC:14:9D Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36AB0B88B0BED91D5E4B89CAA51E9 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208333 IP address blocks: 2a01:e901:105::/48 maxlen: 48 2a01:e901:115::/48 maxlen: 48 2a01:e901:125::/48 maxlen: 48 2a01:e901:135::/48 maxlen: 48 2a01:e901:145::/48 maxlen: 48 2a01:e901:155::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6a:b0:b8:8b:0b:ed:91:d5:e4:b8:9c:aa:51:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e859c974f196e69bcc497a535f1fa7babadc149d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:24:75:15:4a:a2:34:02:91:88:97:8d:3c: 8a:2d:c7:d0:46:46:9c:01:3e:3f:04:d5:f8:b0:f5: 16:a0:90:11:c3:fc:7a:5c:c9:5f:82:0f:38:87:fb: e5:00:1b:b8:05:1f:3b:bd:0d:7c:da:97:0c:da:7b: 81:49:33:21:2c:ba:4c:01:a2:c0:86:66:6a:bd:6c: 5b:a5:ac:72:93:53:9d:c9:76:14:58:65:64:1d:59: 8c:23:12:1e:5e:93:ed:2e:5b:fb:ed:d5:0d:ea:0c: 5c:b8:82:05:f4:b3:c1:ef:4e:85:ce:ba:60:99:9c: 12:55:01:98:e7:26:6d:5e:a5:43:c8:af:47:aa:f5: b6:62:09:bd:d4:c9:f0:3c:2f:74:45:1d:8a:51:41: d2:b1:8c:1e:7e:48:b2:25:5c:9a:88:db:41:1c:18: 3f:51:73:47:d0:53:f2:a4:1c:d5:b4:0c:5f:18:b5: a4:b5:59:8f:63:9b:00:61:5a:ad:c7:9a:2e:2a:af: 52:f7:08:21:38:71:f4:32:0d:6d:a1:09:79:e6:e9: cf:f8:b3:0f:1c:8b:03:1e:86:a0:0f:f8:d8:2e:cd: 1e:08:49:35:a5:2f:19:6f:4b:e6:42:c2:6d:69:ff: de:c4:44:2e:d9:26:84:ee:30:81:db:c4:fc:f7:0d: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:C9:74:F1:96:E6:9B:CC:49:7A:53:5F:1F:A7:BA:BA:DC:14:9D X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:105::/48 2a01:e901:115::/48 2a01:e901:125::/48 2a01:e901:135::/48 2a01:e901:145::/48 2a01:e901:155::/48 Signature Algorithm: sha256WithRSAEncryption 31:37:20:6c:43:4e:70:76:c3:a2:c4:74:00:16:37:1b:35:c7: e7:dd:12:fb:c9:52:d6:cd:4f:79:8a:eb:25:76:9b:57:d8:f6: 63:b6:57:72:26:54:60:3a:32:99:20:61:e7:26:cf:f7:87:c7: 43:ca:e3:eb:df:07:60:47:d5:ab:1a:47:9c:1e:4a:29:f6:39: 61:1e:96:a8:37:3e:8f:a5:ca:66:d4:28:3c:e8:b6:ad:3e:61: 9d:74:d9:a9:55:86:5a:1d:8f:d8:ab:b6:ef:2f:f7:b8:ce:70: 3e:5a:91:4d:e6:e8:e7:dd:76:47:50:ef:97:27:43:15:b5:77: 38:ad:be:b2:ca:0b:57:32:da:e3:c5:60:6f:96:52:38:d9:aa: 85:82:5a:2e:8c:da:15:7f:09:7d:4f:83:6d:d3:20:55:10:7d: ef:f7:a7:51:84:39:b6:6b:69:77:5a:9a:76:d8:55:9e:0d:b3: 8d:67:65:f2:1a:cb:28:37:83:d4:50:7b:a8:cd:a1:7f:37:e6: d4:08:2b:f3:fc:15:15:8f:7a:5d:c0:16:a3:77:8b:53:da:7c: 03:b1:62:ef:91:14:26:0e:ab:9e:55:9b:15:ce:fc:8e:29:a5: 48:c3:53:19:1a:53:90:83:3c:9f:4d:6d:1d:ab:e7:30:01:e8: ef:43:fb:0e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o2qwuIsL7ZHV5LicqlHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODU5Yzk3NGYxOTZlNjliY2M0OTdhNTM1ZjFmYTdiYWJhZGMxNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFAkdRVKojQCkYiXjTyKLcfQRkac AT4/BNX4sPUWoJARw/x6XMlfgg84h/vlABu4BR87vQ182pcM2nuBSTMhLLpMAaLA hmZqvWxbpaxyk1OdyXYUWGVkHVmMIxIeXpPtLlv77dUN6gxcuIIF9LPB706Fzrpg mZwSVQGY5yZtXqVDyK9HqvW2Ygm91MnwPC90RR2KUUHSsYwefkiyJVyaiNtBHBg/ UXNH0FPypBzVtAxfGLWktVmPY5sAYVqtx5ouKq9S9wghOHH0Mg1toQl55unP+LMP HIsDHoagD/jYLs0eCEk1pS8Zb0vmQsJtaf/exEQu2SaE7jCB28T89w0OowIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFOhZyXTxluabzEl6U18fp7q63BSdMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvNkZuSmRQR1c1cHZNU1hwVFh4LW51cnJjRkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEF AwcAKgHpAQEVAwcAKgHpAQElAwcAKgHpAQE1AwcAKgHpAQFFAwcAKgHpAQFVMA0G CSqGSIb3DQEBCwUAA4IBAQAxNyBsQ05wdsOixHQAFjcbNcfn3RL7yVLWzU95iusl dptX2PZjtldyJlRgOjKZIGHnJs/3h8dDyuPr3wdgR9WrGkecHkop9jlhHpaoNz6P pcpm1Cg86LatPmGddNmpVYZaHY/Yq7bvL/e4znA+WpFN5ujn3XZHUO+XJ0MVtXc4 rb6yygtXMtrjxWBvllI42aqFgloujNoVfwl9T4Nt0yBVEH3v96dRhDm2a2l3Wpp2 2FWeDbONZ2XyGssoN4PUUHuozaF/N+bUCCvz/BUVj3pdwBajd4tT2nwDsWLvkRQm DqueVZsVzvyOKaVIw1MZGlOQgzyfTW0dq+cwAejvQ/sO -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:20 2026 by rpki-client