This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/6v4HqsYH-6som_YpUpTifh8cS0U.roa File: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (raw, json) Hash identifier: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM= Subject key identifier: EA:FE:07:AA:C6:07:FB:AB:28:9B:F6:29:52:94:E2:7E:1F:1C:4B:45 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B7B3655DEA98D27A8B75144168F8FB200 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/6v4HqsYH-6som_YpUpTifh8cS0U.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215453 IP address blocks: 2a10:4744::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:55:de:a9:8d:27:a8:b7:51:44:16:8f:8f:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eafe07aac607fbab289bf6295294e27e1f1c4b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:8f:f1:86:3c:49:a1:96:35:27:94:0d:cd: f7:01:42:70:14:ea:30:33:4f:c0:95:f7:49:3f:ea: 6c:88:42:1c:70:f3:7c:e5:bc:58:b7:c4:09:ad:36: 83:e0:d8:bc:0d:2c:95:26:82:ba:d8:79:fa:0f:af: 44:c3:64:b9:90:4e:2e:f0:a5:82:fa:8b:5c:f7:8e: 52:e2:d5:48:0b:5d:6e:ce:22:6c:21:ce:9a:8d:bf: 73:e0:cb:fe:70:b4:57:9c:e8:3e:b5:38:52:26:5f: ef:01:65:a0:d2:29:96:14:60:1b:a6:48:d3:40:c5: 13:66:da:7b:de:1e:ca:37:fc:59:5e:84:5c:96:2d: bf:7d:53:e9:93:e4:88:75:64:7b:ec:05:d5:b6:07: 7b:71:75:3e:0d:2e:14:09:3c:4e:3a:84:27:72:00: 8d:fb:da:69:20:44:95:22:45:2e:56:5a:1b:dc:36: 55:3a:a9:34:ea:93:f8:f5:e5:6d:47:c1:0d:c5:09: 48:fb:b3:64:ba:66:71:c2:36:d6:f0:66:65:f6:b7: da:e7:62:bb:6b:25:c0:89:47:23:08:7c:33:a3:d1: 8a:6e:57:c7:dd:f4:b8:35:b8:b4:73:86:f9:69:02: 9c:14:a0:18:fb:e7:68:09:95:b3:7b:cc:9a:44:2a: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FE:07:AA:C6:07:FB:AB:28:9B:F6:29:52:94:E2:7E:1F:1C:4B:45 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/6v4HqsYH-6som_YpUpTifh8cS0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4744::/32 Signature Algorithm: sha256WithRSAEncryption 3d:79:88:1b:e7:4b:8f:20:0f:49:4c:10:67:4a:5b:46:2f:35: a4:b6:54:ae:28:fc:df:ef:c1:0c:9c:c7:8a:5d:df:1e:a5:74: 70:a3:71:19:52:5a:72:71:bb:2a:c4:c1:14:e1:9c:12:4b:ca: c5:ac:02:eb:d1:bb:e9:ee:9b:2a:48:bd:c1:7f:01:69:35:f0: a2:4c:c0:56:e2:b9:69:c4:5d:58:6c:f8:1c:84:f9:fe:2c:35: 4c:72:5f:fc:c6:b5:6e:b6:c9:e4:6f:6b:d6:b3:ba:8e:52:fc: 45:c8:38:09:a4:2f:e6:98:81:9c:67:4c:98:fc:72:3d:5d:69: d1:a8:44:b1:49:5c:75:b4:d0:2c:78:77:4d:2f:e0:fc:e6:72: 8d:55:05:02:6b:7e:e5:f1:fe:4a:f0:16:e2:da:c9:73:0b:ec: 8d:25:9d:33:bd:2f:b5:7a:76:be:3e:ab:0d:42:ab:2e:a4:10: d7:b5:5b:47:a7:82:d3:b1:ea:37:53:fe:91:94:78:12:8a:9d: 26:94:3e:1d:7f:d6:fc:81:f2:93:f7:5d:06:33:35:05:6f:05: e2:94:90:fb:a5:80:90:9b:40:7d:13:eb:30:0b:52:5c:3e:8c: 9d:e0:10:72:d3:38:fb:ec:27:76:c2:79:a3:fe:16:20:19:20: b2:60:c3:4f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NlXeqY0nqLdRRBaPj7IAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWZlMDdhYWM2MDdmYmFiMjg5YmY2Mjk1Mjk0ZTI3ZTFmMWM0YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDuP8YY8SaGWNSeUDc33AUJwFOow M0/AlfdJP+psiEIccPN85bxYt8QJrTaD4Ni8DSyVJoK62Hn6D69Ew2S5kE4u8KWC +otc945S4tVIC11uziJsIc6ajb9z4Mv+cLRXnOg+tThSJl/vAWWg0imWFGAbpkjT QMUTZtp73h7KN/xZXoRcli2/fVPpk+SIdWR77AXVtgd7cXU+DS4UCTxOOoQncgCN +9ppIESVIkUuVlob3DZVOqk06pP49eVtR8ENxQlI+7NkumZxwjbW8GZl9rfa52K7 ayXAiUcjCHwzo9GKblfH3fS4Nbi0c4b5aQKcFKAY++doCZWze8yaRCpkFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOr+B6rGB/urKJv2KVKU4n4fHEtFMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvNnY0SHFzWUgtNnNvbV9ZcFVwVGlmaDhjUzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhBHRDAN BgkqhkiG9w0BAQsFAAOCAQEAPXmIG+dLjyAPSUwQZ0pbRi81pLZUrij83+/BDJzH il3fHqV0cKNxGVJacnG7KsTBFOGcEkvKxawC69G76e6bKki9wX8BaTXwokzAVuK5 acRdWGz4HIT5/iw1THJf/Ma1brbJ5G9r1rO6jlL8Rcg4CaQv5piBnGdMmPxyPV1p 0ahEsUlcdbTQLHh3TS/g/OZyjVUFAmt+5fH+SvAW4trJcwvsjSWdM70vtXp2vj6r DUKrLqQQ17VbR6eC07HqN1P+kZR4EoqdJpQ+HX/W/IHyk/ddBjM1BW8F4pSQ+6WA kJtAfRPrMAtSXD6MneAQctM4++wndsJ5o/4WIBkgsmDDTw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:58 2026 by rpki-client