This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/6h3DLRd0aoO08FWkuvK-DIL1TAI.roa File: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (raw, json) Hash identifier: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c= Subject key identifier: EA:1D:C3:2D:17:74:6A:83:B4:F0:55:A4:BA:F2:BE:0C:82:F5:4C:02 Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Certificate serial: 019B7BA40BA8F5A84AA9E2220248F728FE4C Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/6h3DLRd0aoO08FWkuvK-DIL1TAI.roa Signing time: Thu 01 Jan 2026 22:18:26 +0000 ROA not before: Thu 01 Jan 2026 22:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142275 IP address blocks: 2a0c:8fc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0b:a8:f5:a8:4a:a9:e2:22:02:48:f7:28:fe:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea1dc32d17746a83b4f055a4baf2be0c82f54c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:be:82:60:68:37:8f:6d:53:ec:b0:dc:d9: 8f:cc:b6:2a:af:1d:70:88:0f:6e:de:dd:f0:df:c0: 10:f1:8c:ce:f0:67:b7:84:f1:98:a3:94:80:9c:39: a4:32:87:5e:33:32:a3:0e:56:23:65:a0:da:38:9e: 07:ec:dd:80:52:65:5a:af:5c:14:61:52:97:2f:c1: 8e:e6:81:13:29:0c:31:7c:b0:f6:e5:4b:ee:e9:bd: 9c:8d:6c:26:85:4e:35:bf:29:9a:f8:1c:a6:97:2a: 14:68:d9:a6:0a:90:0e:74:d8:a0:3c:83:8f:28:d6: 91:3c:4e:7f:73:f8:62:2c:9c:73:75:91:7c:2f:72: c1:2e:1c:1c:40:68:ea:6b:99:9a:33:5c:ec:9c:2a: 1f:a1:a4:83:7d:fc:ef:b7:20:62:99:cf:47:d8:39: 19:a0:cb:08:d0:0a:41:95:79:a1:40:19:81:c8:82: 1a:d4:3b:93:52:d6:3f:41:5f:b1:26:f2:e5:c5:66: b2:86:10:67:8b:03:f9:7e:e3:76:66:b2:88:bd:3d: b5:68:f6:7b:43:a0:81:0f:c4:ff:fc:8d:b1:b0:14: 8c:42:39:ae:62:7f:76:2c:87:5c:76:8f:d9:0e:13: 5b:16:6f:1e:ab:0c:76:2d:9e:9b:eb:3d:b0:19:62: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1D:C3:2D:17:74:6A:83:B4:F0:55:A4:BA:F2:BE:0C:82:F5:4C:02 X509v3 Authority Key Identifier: keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/6h3DLRd0aoO08FWkuvK-DIL1TAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:8fc1::/32 Signature Algorithm: sha256WithRSAEncryption 3b:5f:3a:d2:70:9b:3e:67:6d:c4:3a:48:51:06:94:d6:44:21: 25:8a:a4:e1:a1:b4:94:2a:df:08:5c:5f:77:61:07:a3:7d:58: a0:64:fe:58:c5:6b:53:fd:26:9e:9f:16:a2:c6:9a:5f:37:81: fb:5b:40:b7:6f:16:82:a8:ae:fc:05:22:c0:05:e3:fd:8d:6a: 7b:a6:5e:85:6e:33:5f:38:6a:45:59:58:ae:8e:cf:a5:c6:cb: 50:78:34:f6:e4:51:07:3f:3c:0a:87:31:d8:5a:a0:3a:95:51: 2d:ca:0d:bb:ac:96:4a:c8:67:6b:93:e1:6b:49:b2:30:71:10: 2a:10:7e:5a:46:1e:30:b1:ff:94:5f:24:d2:fe:66:0a:c1:5b: a2:62:2a:77:57:01:d0:25:d1:12:b4:bf:57:c8:21:bc:79:43: fc:81:47:ab:34:94:fe:9c:85:6f:28:29:85:cd:99:50:48:f8: ac:6b:f1:42:33:ff:45:94:ea:a2:f9:bc:a1:aa:a5:e1:22:e1: 46:a1:2c:ff:c1:9f:8c:4e:91:42:19:3e:6e:77:ed:31:4f:ba: 5e:aa:fe:88:20:ac:af:51:ff:3d:64:4a:f3:f3:31:46:4d:9b: d8:60:ff:ce:34:35:18:bd:53:73:74:48:24:b5:55:97:bd:33: f4:62:40:59 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pAuo9ahKqeIiAkj3KP5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy YTgxZWEwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTFkYzMyZDE3NzQ2YTgzYjRmMDU1YTRiYWYyYmUwYzgyZjU0YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wq+gmBoN49tU+yw3NmPzLYqrx1w iA9u3t3w38AQ8YzO8Ge3hPGYo5SAnDmkModeMzKjDlYjZaDaOJ4H7N2AUmVar1wU YVKXL8GO5oETKQwxfLD25Uvu6b2cjWwmhU41vyma+BymlyoUaNmmCpAOdNigPIOP KNaRPE5/c/hiLJxzdZF8L3LBLhwcQGjqa5maM1zsnCofoaSDffzvtyBimc9H2DkZ oMsI0ApBlXmhQBmByIIa1DuTUtY/QV+xJvLlxWayhhBniwP5fuN2ZrKIvT21aPZ7 Q6CBD8T//I2xsBSMQjmuYn92LIdcdo/ZDhNbFm8eqwx2LZ6b6z2wGWInGwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOodwy0XdGqDtPBVpLryvgyC9UwCMB8GA1UdIwQY MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt N2RjNWJkZGY5MWI1LzEvNmgzRExSZDBhb08wOEZXa3V2Sy1ESUwxVEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1 LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgyPwTAN BgkqhkiG9w0BAQsFAAOCAQEAO1860nCbPmdtxDpIUQaU1kQhJYqk4aG0lCrfCFxf d2EHo31YoGT+WMVrU/0mnp8WosaaXzeB+1tAt28Wgqiu/AUiwAXj/Y1qe6ZehW4z XzhqRVlYro7PpcbLUHg09uRRBz88Cocx2FqgOpVRLcoNu6yWSshna5Pha0myMHEQ KhB+WkYeMLH/lF8k0v5mCsFbomIqd1cB0CXRErS/V8ghvHlD/IFHqzSU/pyFbygp hc2ZUEj4rGvxQjP/RZTqovm8oaql4SLhRqEs/8GfjE6RQhk+bnftMU+6Xqr+iCCs r1H/PWRK8/MxRk2b2GD/zjQ1GL1Tc3RIJLVVl70z9GJAWQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:37 2026 by rpki-client