This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6u1fXpIToeWRm8hB4qrw_gM7uBA.roa File: 6u1fXpIToeWRm8hB4qrw_gM7uBA.roa (raw, json) Hash identifier: MzrLyUx4YF7buLDabqcKMI47ie//SUNikVIBlpXlkj4= Subject key identifier: EA:ED:5F:5E:92:13:A1:E5:91:9B:C8:41:E2:AA:F0:FE:03:3B:B8:10 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E38FE39AEE97D5C21B1F6F4C18C9654 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6u1fXpIToeWRm8hB4qrw_gM7uBA.roa Signing time: Fri 02 Jan 2026 10:20:22 +0000 ROA not before: Fri 02 Jan 2026 10:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3058 IP address blocks: 2a00:db8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fe:39:ae:e9:7d:5c:21:b1:f6:f4:c1:8c:96:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaed5f5e9213a1e5919bc841e2aaf0fe033bb810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:79:fd:42:53:89:8f:47:35:02:b7:d4:d1: 30:21:25:d4:ca:75:83:e2:06:93:bc:ef:cb:00:b9: 85:af:11:71:01:a9:1c:e3:02:9b:27:06:33:e9:09: 51:80:57:bf:87:9b:1b:49:4f:b8:f5:ea:8d:df:6f: d8:e6:be:20:e0:a9:60:a3:05:a8:a4:24:d5:33:8e: fc:94:30:d5:b5:d3:58:4e:9e:48:06:65:ed:3e:c7: bd:95:2f:d2:f4:f2:b8:a4:56:4e:31:69:d4:3c:90: 9d:89:47:36:9c:1d:f2:5e:08:51:38:4d:a6:13:d9: 4a:fe:00:ce:95:0a:cf:0c:26:0e:0d:98:df:0d:23: 39:40:7e:04:5c:d6:53:6a:8b:4b:ec:61:49:0b:87: 87:41:22:42:96:49:85:73:6d:2f:35:d5:9c:33:f4: 5a:21:0d:71:fd:39:f2:3e:fe:aa:a0:16:dc:84:f5: 28:72:f9:7e:65:a8:da:bf:ef:38:df:87:b8:43:b8: f8:8e:ad:36:4c:31:d7:3a:2f:86:13:61:c1:2d:26: ae:16:01:ff:a8:55:f2:cf:87:5a:ab:ec:a4:08:b3: 76:87:c3:d8:ad:ea:e6:0a:d4:1a:01:5c:b1:5c:0a: f4:e0:fe:8d:1e:b4:7f:da:4b:2d:61:67:05:1a:5f: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:5F:5E:92:13:A1:E5:91:9B:C8:41:E2:AA:F0:FE:03:3B:B8:10 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6u1fXpIToeWRm8hB4qrw_gM7uBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:db8::/32 Signature Algorithm: sha256WithRSAEncryption 2a:9d:dd:c6:d0:9a:0b:83:a8:a1:e8:29:51:20:a0:4b:38:e5: 14:05:10:37:aa:8e:59:76:09:51:e5:75:8d:e8:31:83:16:91: 61:64:a5:9d:4d:e0:a3:3c:fc:3b:5e:d9:1d:94:5f:69:c4:cb: be:7f:c8:ba:c0:49:04:3d:1a:f6:ef:b6:1a:58:8c:ad:dc:d3: 29:f9:a3:b7:24:e6:a1:d8:f9:b0:6e:c6:fa:e3:60:9a:37:c0: 39:a3:c1:87:7d:d1:71:16:e6:33:ab:0c:30:0e:3b:de:cf:ba: 02:a0:21:ce:d4:76:04:e6:f3:65:a9:f8:6d:78:cd:49:7b:a6: d3:23:42:3a:d3:5e:04:3c:17:15:c8:b6:1a:72:4b:22:05:64: 64:40:14:18:1e:5b:35:36:d4:0b:b5:62:dc:e3:2e:36:06:06: 99:b4:a8:0e:ca:20:9f:ff:e7:11:ac:a3:1b:a8:a4:48:99:f7: f6:49:b6:4a:56:35:aa:d8:97:ec:53:84:47:e6:c2:6f:fd:64: 85:7d:f6:74:81:d9:0e:77:8a:a8:14:2a:39:8b:f4:43:83:cf: dc:21:ae:93:48:39:7e:b0:0f:41:3a:fa:fb:83:bc:68:f2:22: 20:a6:97:62:48:0e:5b:16:9a:ee:49:ba:49:e0:98:ec:3f:63: 6f:f1:64:eb -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OP45rul9XCGx9vTBjJZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWVkNWY1ZTkyMTNhMWU1OTE5YmM4NDFlMmFhZjBmZTAzM2JiODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+p5/UJTiY9HNQK31NEwISXUynWD 4gaTvO/LALmFrxFxAakc4wKbJwYz6QlRgFe/h5sbSU+49eqN32/Y5r4g4KlgowWo pCTVM478lDDVtdNYTp5IBmXtPse9lS/S9PK4pFZOMWnUPJCdiUc2nB3yXghROE2m E9lK/gDOlQrPDCYODZjfDSM5QH4EXNZTaotL7GFJC4eHQSJClkmFc20vNdWcM/Ra IQ1x/TnyPv6qoBbchPUocvl+Zajav+8434e4Q7j4jq02TDHXOi+GE2HBLSauFgH/ qFXyz4daq+ykCLN2h8PYrermCtQaAVyxXAr04P6NHrR/2kstYWcFGl/mfwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOrtX16SE6HlkZvIQeKq8P4DO7gQMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvNnUxZlhwSVRvZVdSbThoQjRxcndfZ003dUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgANuDAN BgkqhkiG9w0BAQsFAAOCAQEAKp3dxtCaC4OooegpUSCgSzjlFAUQN6qOWXYJUeV1 jegxgxaRYWSlnU3gozz8O17ZHZRfacTLvn/IusBJBD0a9u+2GliMrdzTKfmjtyTm odj5sG7G+uNgmjfAOaPBh33RcRbmM6sMMA473s+6AqAhztR2BObzZan4bXjNSXum 0yNCOtNeBDwXFci2GnJLIgVkZEAUGB5bNTbUC7Vi3OMuNgYGmbSoDsogn//nEayj G6ikSJn39km2SlY1qtiX7FOER+bCb/1khX32dIHZDneKqBQqOYv0Q4PP3CGuk0g5 frAPQTr6+4O8aPIiIKaXYkgOWxaa7km6SeCY7D9jb/Fk6w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:52 2026 by rpki-client