This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa File: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (raw, json) Hash identifier: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ= Subject key identifier: EA:AF:5B:EF:FF:EC:44:C0:10:E4:7F:30:3C:D3:35:FB:95:A3:D4:C6 Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Certificate serial: 019B78A21225E6471C9C626A3D3A6AEB0A7B Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198571 IP address blocks: 2a13:3f81::/32 maxlen: 32 2a13:3f82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:12:25:e6:47:1c:9c:62:6a:3d:3a:6a:eb:0a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaaf5befffec44c010e47f303cd335fb95a3d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:a9:06:e5:42:d0:e8:4a:82:4d:cd:8d:dd: 46:00:df:16:7d:c4:8d:09:d5:23:0f:de:12:31:fa: 4e:9b:05:97:98:de:47:c7:ca:d1:d9:b0:10:d5:27: 14:95:9a:78:8c:1a:44:5b:24:30:a3:18:92:b9:a6: 9c:0e:c4:8f:e1:71:b4:32:41:7a:87:4b:35:fc:10: bc:1b:16:1f:47:07:1d:6c:36:51:05:3e:94:40:57: 8b:29:28:b0:e7:65:d5:7c:26:6e:2f:74:cc:e6:d9: 7f:53:65:69:51:27:32:6c:e1:37:d9:1a:0d:49:c1: da:e2:06:1d:e9:07:fb:b0:ed:c0:ff:af:95:f4:5a: a6:88:f8:53:f3:e9:71:67:6f:3d:1c:a3:90:ba:0c: 0b:9b:dc:3d:c6:f5:7f:9b:34:f3:e7:2a:d5:fd:a5: a1:58:d4:85:08:b7:b9:29:6a:3b:88:0f:11:3c:0d: e1:25:ba:3d:58:71:40:87:a2:4e:76:43:0a:ee:11: c4:a1:a9:8d:fc:b4:69:2f:67:f0:76:3d:40:9f:d9: 19:b2:36:ca:bb:65:3f:d8:4f:fb:b1:c3:dd:15:35: ed:d3:66:fe:50:47:3f:ed:c4:1e:e5:54:41:a9:88: 1e:c0:79:ef:3d:3f:be:25:bd:03:bb:86:9a:d3:57: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AF:5B:EF:FF:EC:44:C0:10:E4:7F:30:3C:D3:35:FB:95:A3:D4:C6 X509v3 Authority Key Identifier: keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8d:e9:21:47:aa:ee:70:a7:81:83:06:a9:cb:b7:b7:08:03:ac: b2:bc:5e:36:05:4c:16:2f:f1:a1:bd:92:e2:33:58:ba:81:37: 50:a2:6c:9e:50:25:5c:94:60:bd:8f:13:8c:1d:b1:d8:9b:23: 87:3c:1f:03:e6:1a:63:74:b1:54:02:c4:e5:f2:fc:d6:2f:1a: eb:64:4d:2f:cd:3e:e6:2f:19:1b:e2:c5:92:16:01:85:1b:1f: 49:aa:78:8f:f1:c6:98:40:c8:4d:53:d7:cd:19:8d:c8:62:cf: d6:9a:39:25:4b:b9:1b:d9:82:45:4b:d3:62:1e:ba:e4:ae:13: d2:68:e7:48:13:d6:63:b9:e3:40:e9:b0:2b:65:6c:e3:c2:9c: 96:1b:18:1b:cc:e9:4e:40:ac:4c:75:db:ac:ca:ac:1d:71:e2: 28:b9:bb:4f:73:5f:8b:2f:b0:63:0c:64:d0:5f:11:a7:3b:d8: 2f:02:53:ba:e3:c8:2b:b4:d0:65:1e:09:1f:76:9e:66:94:cb: c9:dd:c7:48:2e:7f:8b:97:c5:4b:f7:51:91:23:fb:9a:48:31: 1e:da:43:2c:34:59:55:e5:eb:83:1d:b3:51:1e:e1:da:d5:fc: 05:f6:bd:0d:0f:d1:5d:1c:36:bf:0c:6c:2e:a1:ba:55:70:ac: 2a:a1:ae:96 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt4ohIl5kccnGJqPTpq6wp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl NjFiZDUwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWFmNWJlZmZmZWM0NGMwMTBlNDdmMzAzY2QzMzVmYjk1YTNkNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkOpBuVC0OhKgk3Njd1GAN8WfcSN CdUjD94SMfpOmwWXmN5Hx8rR2bAQ1ScUlZp4jBpEWyQwoxiSuaacDsSP4XG0MkF6 h0s1/BC8GxYfRwcdbDZRBT6UQFeLKSiw52XVfCZuL3TM5tl/U2VpUScybOE32RoN ScHa4gYd6Qf7sO3A/6+V9FqmiPhT8+lxZ289HKOQugwLm9w9xvV/mzTz5yrV/aWh WNSFCLe5KWo7iA8RPA3hJbo9WHFAh6JOdkMK7hHEoamN/LRpL2fwdj1An9kZsjbK u2U/2E/7scPdFTXt02b+UEc/7cQe5VRBqYgewHnvPT++Jb0Du4aa01cYwwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFOqvW+//7ETAEOR/MDzTNfuVo9TGMB8GA1UdIwQY MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt MDg4MzVkZmY2YzRmLzEvNnE5YjdfX3NSTUFRNUg4d1BOTTEtNVdqMU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqEz+B AwUAKhM/gjANBgkqhkiG9w0BAQsFAAOCAQEAjekhR6rucKeBgwapy7e3CAOssrxe NgVMFi/xob2S4jNYuoE3UKJsnlAlXJRgvY8TjB2x2JsjhzwfA+YaY3SxVALE5fL8 1i8a62RNL80+5i8ZG+LFkhYBhRsfSap4j/HGmEDITVPXzRmNyGLP1po5JUu5G9mC RUvTYh665K4T0mjnSBPWY7njQOmwK2Vs48KclhsYG8zpTkCsTHXbrMqsHXHiKLm7 T3Nfiy+wYwxk0F8RpzvYLwJTuuPIK7TQZR4JH3aeZpTLyd3HSC5/i5fFS/dRkSP7 mkgxHtpDLDRZVeXrgx2zUR7h2tX8Bfa9DQ/RXRw2vwxsLqG6VXCsKqGulg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:02 2026 by rpki-client