This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/6gcDsJpxsKX0PxtnBH4T97xLx9M.roa File: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (raw, json) Hash identifier: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs= Subject key identifier: EA:07:03:B0:9A:71:B0:A5:F4:3F:1B:67:04:7E:13:F7:BC:4B:C7:D3 Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Certificate serial: 019B78A2F587B540BD3B172096514D29ABEB Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/6gcDsJpxsKX0PxtnBH4T97xLx9M.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3308 IP address blocks: 2001:2000:1000::/40 maxlen: 40 2001:2010::/28 maxlen: 28 2001:2010::/31 maxlen: 31 2001:2012::/32 maxlen: 32 2001:2092::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:87:b5:40:bd:3b:17:20:96:51:4d:29:ab:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea0703b09a71b0a5f43f1b67047e13f7bc4bc7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:f8:0e:ca:f3:66:dd:a8:7d:97:47:bd:e8: 50:3d:8d:0d:e3:a8:84:b4:cb:30:a4:f3:d1:80:81: 08:7f:a5:a2:77:5d:96:93:73:28:22:db:83:d4:49: a4:5a:da:39:66:e4:74:5e:7d:04:7a:b7:8b:be:16: 56:84:2c:94:84:ba:27:19:1d:7d:45:a5:d0:2e:bf: 8c:f8:28:be:95:cb:c7:67:2e:90:a5:34:c8:18:dd: 05:16:4f:12:8d:92:dd:6b:68:d5:3d:4c:88:68:1c: 19:b6:7e:fc:81:98:c6:d7:d0:c0:ca:41:60:28:79: 9d:a5:25:29:46:23:1a:55:68:68:e5:b8:fa:ee:5f: 5a:3a:45:6a:5f:11:b2:fe:cc:5a:54:fa:f3:51:02: f4:be:d3:25:ef:1e:fc:ff:30:1b:52:b0:d0:b6:59: a2:d0:4e:51:b0:eb:0c:ac:5b:54:30:57:7a:8a:a0: 10:bb:69:9e:ca:9b:a1:df:2d:04:6c:e2:95:f9:00: 9a:16:76:d7:2c:3d:04:78:ab:a0:39:40:58:59:f1: 35:9b:f8:76:51:61:6d:cc:6d:cb:03:36:7a:fc:45: d6:90:71:15:8c:15:7a:10:cf:04:68:13:4e:e2:44: fd:24:1e:1c:73:c0:13:09:86:64:28:6a:31:5e:aa: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:07:03:B0:9A:71:B0:A5:F4:3F:1B:67:04:7E:13:F7:BC:4B:C7:D3 X509v3 Authority Key Identifier: keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/6gcDsJpxsKX0PxtnBH4T97xLx9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:2000:1000::/40 2001:2010::/28 2001:2092::/32 Signature Algorithm: sha256WithRSAEncryption 2f:51:a7:00:de:28:c8:de:6b:51:e3:d8:7f:b6:27:98:86:57: da:d2:31:4b:88:89:0b:d8:c5:09:82:69:10:7a:5e:16:cf:b3: 37:7e:17:87:6b:96:96:23:a0:bd:d6:7b:34:02:be:06:ba:78: 33:76:2e:61:9a:fe:cd:9c:d4:be:21:19:3c:41:09:2e:9b:51: 54:9c:56:da:60:58:cd:14:d9:c0:8d:13:c7:c5:34:84:f2:03: b9:c2:1f:d1:29:ae:b8:75:d3:a9:b8:91:dd:69:56:ec:97:a7: 6e:81:3d:88:7e:47:01:73:ce:c5:4a:0d:b6:47:0e:9b:e2:1d: b1:a5:9d:21:8b:7e:8d:31:39:78:60:f0:08:2d:9b:49:b8:b2: cc:fb:da:ad:d1:c3:e7:54:38:2e:38:08:58:90:7e:00:d4:14: 41:f4:23:06:09:b1:79:cd:cd:80:df:93:63:f1:f5:5e:a1:4b: 6c:68:dd:2c:6f:a0:98:a1:48:a5:79:24:bc:31:bd:ab:15:74: 41:fb:6c:b5:be:0c:0e:da:14:e1:56:83:16:73:b4:b6:5e:36: a7:a5:18:73:2d:f0:0b:cb:f8:d9:40:82:f6:22:c0:fa:35:1d: d7:29:3c:3d:0b:66:eb:fa:a8:9c:60:bc:bf:63:74:1b:7e:5f: de:b6:e8:73 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4ovWHtUC9OxcgllFNKavrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5 NjZkNDIwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTA3MDNiMDlhNzFiMGE1ZjQzZjFiNjcwNDdlMTNmN2JjNGJjN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwr4DsrzZt2ofZdHvehQPY0N46iE tMswpPPRgIEIf6Wid12Wk3MoItuD1EmkWto5ZuR0Xn0EereLvhZWhCyUhLonGR19 RaXQLr+M+Ci+lcvHZy6QpTTIGN0FFk8SjZLda2jVPUyIaBwZtn78gZjG19DAykFg KHmdpSUpRiMaVWho5bj67l9aOkVqXxGy/sxaVPrzUQL0vtMl7x78/zAbUrDQtlmi 0E5RsOsMrFtUMFd6iqAQu2meypuh3y0EbOKV+QCaFnbXLD0EeKugOUBYWfE1m/h2 UWFtzG3LAzZ6/EXWkHEVjBV6EM8EaBNO4kT9JB4cc8ATCYZkKGoxXqrpWwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOoHA7CacbCl9D8bZwR+E/e8S8fTMB8GA1UdIwQY MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt NDY2ZTljYWI3ODY0LzEvNmdjRHNKcHhzS1gwUHh0bkJINFQ5N3hMeDlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0 LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAAjAWAwYAIAEgABAD BQQgASAQAwUAIAEgkjANBgkqhkiG9w0BAQsFAAOCAQEAL1GnAN4oyN5rUePYf7Yn mIZX2tIxS4iJC9jFCYJpEHpeFs+zN34Xh2uWliOgvdZ7NAK+Brp4M3YuYZr+zZzU viEZPEEJLptRVJxW2mBYzRTZwI0Tx8U0hPIDucIf0SmuuHXTqbiR3WlW7JenboE9 iH5HAXPOxUoNtkcOm+IdsaWdIYt+jTE5eGDwCC2bSbiyzPvardHD51Q4LjgIWJB+ ANQUQfQjBgmxec3NgN+TY/H1XqFLbGjdLG+gmKFIpXkkvDG9qxV0Qftstb4MDtoU 4VaDFnO0tl42p6UYcy3wC8v42UCC9iLA+jUd1yk8PQtm6/qonGC8v2N0G35f3rbo cw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:36 2026 by rpki-client