This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa File: Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa (raw, json) Hash identifier: 01J0VB2/sc7Wjg5UC4eC51E7MgriDtGuK8sC7s32gVc= Subject key identifier: 0A:7E:A4:1A:AE:3A:2C:5F:4E:8A:46:FD:5E:72:F5:95:1A:B4:0F:A5 Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b Certificate serial: 019B78A335B5B157DD8D7A495EE85F25D006 Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35663 IP address blocks: 2001:1620:2015::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:35:b5:b1:57:dd:8d:7a:49:5e:e8:5f:25:d0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a7ea41aae3a2c5f4e8a46fd5e72f5951ab40fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:ef:23:c5:02:0d:b6:6b:bf:ee:cc:5b:41: af:e6:3f:2a:bf:87:1b:3d:e9:a2:a3:b4:4f:e6:34: 75:9e:ed:a7:f1:fa:95:68:8f:8b:a2:e6:d2:e5:a4: 0a:88:e5:9f:66:0a:4a:7b:22:4f:e4:bb:ad:72:01: ca:7c:13:3a:13:e3:d8:8c:90:8e:16:5e:85:2a:fe: 6e:bb:b6:37:dc:59:6c:eb:2d:8d:d6:19:92:f8:aa: 64:4f:72:60:a5:a6:0d:12:b5:cc:7f:7d:26:81:5b: fb:a4:18:9a:b0:2e:5e:45:e6:7f:2c:79:cf:7d:7c: 33:f4:2a:f8:bc:0b:45:db:0f:9a:2b:61:25:de:65: ab:68:6d:51:4d:2c:21:02:29:2e:3a:b7:df:85:be: fe:38:d9:9c:33:df:6d:f4:5c:aa:4c:35:50:10:d2: b6:f6:e0:77:90:d1:8e:45:ea:3c:14:51:ec:d2:70: b2:3e:14:e9:17:6f:d9:c5:85:f3:59:90:8d:f2:8c: 90:99:b1:89:57:fb:07:db:96:c6:10:6f:72:98:75: 66:31:8e:76:82:ad:8b:09:6a:7e:7a:79:d0:25:b0: a3:5f:1e:bb:12:78:93:ad:ff:f0:32:ec:8b:7b:7e: b3:9f:17:cd:51:b8:fe:62:4c:d9:29:be:e5:0c:e5: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7E:A4:1A:AE:3A:2C:5F:4E:8A:46:FD:5E:72:F5:95:1A:B4:0F:A5 X509v3 Authority Key Identifier: keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1620:2015::/48 Signature Algorithm: sha256WithRSAEncryption 13:14:9c:53:10:fb:de:bb:be:63:27:0a:11:90:d5:49:32:0a: 85:0b:b1:2e:eb:93:ac:68:8a:32:75:48:c1:00:3a:41:cf:2e: 97:b8:40:c2:30:dd:67:03:8a:28:a1:ea:66:1b:24:d8:f1:94: ec:bc:f1:55:42:64:bd:1f:c2:0d:15:97:e5:d3:4c:1e:97:1b: 21:e0:72:79:17:16:e1:e6:00:ea:e4:a7:09:3c:a9:49:a0:a5: 24:66:89:b8:c8:e7:87:6f:ff:c7:72:59:84:0d:28:b1:cf:80: d4:dc:b8:7f:80:97:6e:26:29:38:0e:ca:e9:37:28:d6:ab:93: 4b:3d:6c:0d:bf:1d:86:ee:e2:39:78:96:c3:e8:98:42:a0:f4: 7a:e6:16:4f:2d:6c:7c:4a:44:83:51:63:66:43:0c:ed:ec:26: 95:9e:c4:d3:a8:a7:92:84:25:73:e8:3e:2c:1b:e4:1c:e9:3c: d9:6a:25:c4:1b:76:0c:40:2a:d4:9e:c5:66:ab:83:bc:f9:d2: 59:05:75:b4:2f:cf:1e:af:80:86:16:bd:07:38:b8:c7:09:b4: ca:3b:3c:90:0d:31:4e:bb:19:a3:df:f7:55:3a:1d:43:c5:31: bc:73:a2:09:cb:16:ad:9e:bd:4b:5c:06:bf:be:3e:8b:c8:5a: a3:c7:58:54 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ozW1sVfdjXpJXuhfJdAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDc5NTE0OTU5Mzk3YzVlM2ZhNzZlMWVhNDk1ZThlMWY2 YzMxOWIwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTdlYTQxYWFlM2EyYzVmNGU4YTQ2ZmQ1ZTcyZjU5NTFhYjQwZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8jvI8UCDbZrv+7MW0Gv5j8qv4cb Pemio7RP5jR1nu2n8fqVaI+LoubS5aQKiOWfZgpKeyJP5LutcgHKfBM6E+PYjJCO Fl6FKv5uu7Y33Fls6y2N1hmS+KpkT3JgpaYNErXMf30mgVv7pBiasC5eReZ/LHnP fXwz9Cr4vAtF2w+aK2El3mWraG1RTSwhAikuOrffhb7+ONmcM99t9FyqTDVQENK2 9uB3kNGOReo8FFHs0nCyPhTpF2/ZxYXzWZCN8oyQmbGJV/sH25bGEG9ymHVmMY52 gq2LCWp+ennQJbCjXx67EniTrf/wMuyLe36znxfNUbj+YkzZKb7lDOUEoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAp+pBquOixfTopG/V5y9ZUatA+lMB8GA1UdIwQY MBaAFINHlRSVk5fF4/p24epJXo4fbDGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUt MWU1ZTQzMGRkNzExLzEvQ242a0dxNDZMRjlPaWtiOVhuTDFsUnEwRDZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUtMWU1ZTQzMGRkNzEx LzEvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEWICAV MA0GCSqGSIb3DQEBCwUAA4IBAQATFJxTEPveu75jJwoRkNVJMgqFC7Eu65OsaIoy dUjBADpBzy6XuEDCMN1nA4oooepmGyTY8ZTsvPFVQmS9H8INFZfl00welxsh4HJ5 Fxbh5gDq5KcJPKlJoKUkZom4yOeHb//HclmEDSixz4DU3Lh/gJduJik4DsrpNyjW q5NLPWwNvx2G7uI5eJbD6JhCoPR65hZPLWx8SkSDUWNmQwzt7CaVnsTTqKeShCVz 6D4sG+Qc6TzZaiXEG3YMQCrUnsVmq4O8+dJZBXW0L88er4CGFr0HOLjHCbTKOzyQ DTFOuxmj3/dVOh1DxTG8c6IJyxatnr1LXAa/vj6LyFqjx1hU -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:25 2026 by rpki-client