This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/zX6QTKu5bdfzDlEKlxRngpN7jFg.roa File: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (raw, json) Hash identifier: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s= Subject key identifier: CD:7E:90:4C:AB:B9:6D:D7:F3:0E:51:0A:97:14:67:82:93:7B:8C:58 Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Certificate serial: 019B791130C066B1463A807A5524846D5CC0 Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/zX6QTKu5bdfzDlEKlxRngpN7jFg.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201190 IP address blocks: 2001:67c:b0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:30:c0:66:b1:46:3a:80:7a:55:24:84:6d:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd7e904cabb96dd7f30e510a97146782937b8c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:8b:ec:20:10:d1:ac:b5:93:29:1f:a8:8e: ca:c6:99:d4:ad:07:fa:c3:a6:46:fc:27:fa:e7:ed: 41:6f:8a:2c:83:7d:3f:6c:8a:93:a2:e2:08:25:88: 06:25:cf:bd:07:3f:5d:d9:d0:e6:54:06:38:00:8c: 8f:a5:62:00:ae:59:df:ec:e9:e7:6c:80:3b:7a:ed: 72:35:3a:9e:e5:94:a8:5f:34:67:03:96:66:55:28: 80:1e:06:86:ac:f4:94:e9:f5:39:c5:64:c1:f2:1d: e1:f4:85:a0:62:8a:40:f3:3e:57:3f:d3:d2:04:a2: a4:b5:6e:1a:6d:7c:46:78:ac:f2:54:91:17:ac:24: a9:ee:21:b4:cd:c5:c4:d8:45:77:b1:59:b4:ef:af: 6a:00:a3:70:db:ec:3c:d7:38:e8:86:4c:52:6c:53: 43:9b:e5:e2:52:a0:e6:96:de:a6:88:94:c0:2f:8f: 30:16:ad:61:b1:ef:ea:0c:ee:bc:af:fb:3f:57:4b: b3:a3:91:f9:a8:b9:11:5f:9d:ac:c6:90:79:8d:20: 74:1e:9c:a1:31:d8:71:3a:c9:c7:23:5f:a6:28:f7: 45:92:dd:8e:dd:b8:04:cc:b2:4a:49:69:93:75:0f: 7d:bd:e9:97:1a:72:37:54:dc:4e:26:c3:da:b9:45: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7E:90:4C:AB:B9:6D:D7:F3:0E:51:0A:97:14:67:82:93:7B:8C:58 X509v3 Authority Key Identifier: keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/zX6QTKu5bdfzDlEKlxRngpN7jFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b0c::/48 Signature Algorithm: sha256WithRSAEncryption 10:bc:b2:28:71:6b:1f:13:8e:85:d4:c1:41:94:4b:38:24:f9: b8:da:95:b2:e6:d5:bd:e2:54:5e:40:78:01:a2:d4:f7:7c:8d: db:77:21:e9:df:0c:75:c4:dd:60:73:d3:3d:78:81:32:0f:e4: 6b:66:1b:8b:b3:06:62:1d:ba:1d:c6:66:8c:4a:59:51:b0:f9: 5f:36:f1:54:6a:02:ad:29:48:5a:6e:77:54:6c:37:21:b2:89: c3:52:e4:8a:ba:18:9d:e0:29:aa:03:0c:6e:68:8e:44:e5:f3: 67:f5:f5:0d:00:ac:2c:2d:33:29:14:83:d1:b0:38:b5:39:24: ae:37:95:c6:e2:47:cc:d4:37:ee:0c:f4:0b:be:b5:68:e1:69: 10:eb:0c:8b:1a:6b:da:5a:2a:4c:76:00:b6:80:61:a0:39:26: e0:ba:39:30:78:72:29:41:0c:c8:b2:93:b2:0a:ed:15:0b:0f: 2b:47:99:1c:4e:21:0d:ae:33:b5:50:84:4e:cb:01:23:31:2a: f6:25:31:2f:4a:a1:07:4f:7a:44:23:00:85:4d:0b:e7:44:d7: cd:56:00:61:95:4f:5d:5b:0e:08:cb:f0:0f:bc:99:4b:8b:cd: f2:b9:f6:16:97:00:2e:fc:56:b4:b9:61:28:f5:b8:e6:93:5d: a9:e1:08:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ETDAZrFGOoB6VSSEbVzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1 NjdjZDMwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDdlOTA0Y2FiYjk2ZGQ3ZjMwZTUxMGE5NzE0Njc4MjkzN2I4YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LmL7CAQ0ay1kykfqI7KxpnUrQf6 w6ZG/Cf65+1Bb4osg30/bIqTouIIJYgGJc+9Bz9d2dDmVAY4AIyPpWIArlnf7Onn bIA7eu1yNTqe5ZSoXzRnA5ZmVSiAHgaGrPSU6fU5xWTB8h3h9IWgYopA8z5XP9PS BKKktW4abXxGeKzyVJEXrCSp7iG0zcXE2EV3sVm0769qAKNw2+w81zjohkxSbFND m+XiUqDmlt6miJTAL48wFq1hse/qDO68r/s/V0uzo5H5qLkRX52sxpB5jSB0Hpyh MdhxOsnHI1+mKPdFkt2O3bgEzLJKSWmTdQ99vemXGnI3VNxOJsPauUUyXwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM1+kEyruW3X8w5RCpcUZ4KTe4xYMB8GA1UdIwQY MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt YjNlNDNkMzA1Yjg5LzEvelg2UVRLdTViZGZ6RGxFS2x4Um5ncE43akZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5 LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsM MA0GCSqGSIb3DQEBCwUAA4IBAQAQvLIocWsfE46F1MFBlEs4JPm42pWy5tW94lRe QHgBotT3fI3bdyHp3wx1xN1gc9M9eIEyD+RrZhuLswZiHbodxmaMSllRsPlfNvFU agKtKUhabndUbDchsonDUuSKuhid4CmqAwxuaI5E5fNn9fUNAKwsLTMpFIPRsDi1 OSSuN5XG4kfM1DfuDPQLvrVo4WkQ6wyLGmvaWipMdgC2gGGgOSbgujkweHIpQQzI spOyCu0VCw8rR5kcTiENrjO1UIROywEjMSr2JTEvSqEHT3pEIwCFTQvnRNfNVgBh lU9dWw4Iy/APvJlLi83yufYWlwAu/Fa0uWEo9bjmk12p4Qg4 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:20 2026 by rpki-client