This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa File: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (raw, json) Hash identifier: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg= Subject key identifier: EB:E1:30:FA:C8:BD:27:48:5F:E9:96:AB:AC:25:5E:42:37:EA:8C:4E Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c Certificate serial: 019B7AC8EB831FE97D2802BCFAA047DDFCC9 Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51468 IP address blocks: 141.138.172.0/22 maxlen: 22 2a03:3c00:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:eb:83:1f:e9:7d:28:02:bc:fa:a0:47:dd:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebe130fac8bd27485fe996abac255e4237ea8c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bc:48:9e:fd:6a:e1:0a:9f:e6:c4:7f:99:67: c3:e7:09:b7:04:03:59:26:3c:b0:96:72:1b:27:c3: 8d:68:e7:cc:c3:07:cc:ea:5c:dd:1d:00:9d:51:bd: b6:d0:13:da:05:e7:e0:8f:d8:3c:dc:6d:c3:74:3c: 8c:54:d9:cb:9e:c6:df:47:db:c4:39:22:52:9f:ba: d8:df:90:70:a8:a7:25:82:02:91:e6:02:0c:62:1d: c1:22:35:f8:66:6c:bd:6a:e9:04:7a:c5:6f:df:68: 7e:3e:3c:88:a8:b9:c9:94:63:74:23:96:e7:83:b2: 30:c8:36:34:f1:ea:d8:60:d4:6d:0b:85:5f:9b:a8: 3d:60:00:84:2f:ca:ab:25:39:f1:72:d3:c6:86:bc: 71:07:74:be:8e:2f:75:07:dd:37:30:e5:14:b4:ea: 3d:bc:3a:2f:9d:09:74:62:b6:f3:14:00:5f:e9:c6: 28:1c:50:e8:88:e3:e4:ae:c0:b1:3d:5f:35:fb:ff: 5b:8a:f3:05:ed:c3:33:58:28:89:3c:e1:0e:51:2e: 4b:e0:f6:57:74:3e:b4:33:01:61:20:89:b3:f0:3d: a4:05:69:78:c4:31:61:87:68:df:38:fa:07:4a:46: eb:f0:cf:3b:fc:c5:de:60:0d:13:f1:ef:f6:a3:26: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E1:30:FA:C8:BD:27:48:5F:E9:96:AB:AC:25:5E:42:37:EA:8C:4E X509v3 Authority Key Identifier: keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.172.0/22 IPv6: 2a03:3c00:c000::/34 Signature Algorithm: sha256WithRSAEncryption ce:5d:ae:8c:6a:64:f3:b6:24:52:c9:ef:00:75:6b:52:f5:3d: c5:62:12:12:82:dc:1c:16:af:33:17:2e:a3:c3:3b:0f:e4:60: 97:13:a6:37:77:a9:55:55:cf:90:d3:86:9e:39:db:d9:09:44: 85:8a:2c:63:b4:a3:7d:e1:9b:9e:f3:16:44:1c:07:4c:3a:1e: 06:2b:46:1d:6d:79:d3:09:c2:c3:e5:d4:03:96:96:67:8d:c5: 03:46:aa:42:20:1d:7c:30:f4:af:46:05:13:f6:b8:c3:90:f6: 08:30:81:b4:24:e2:10:fb:52:6d:54:c6:c1:17:6c:66:ad:27: 0a:46:ac:64:5a:00:d1:ce:b6:fc:c5:c1:20:18:79:99:8f:fd: 59:e8:87:7f:f4:7d:64:82:aa:ae:0f:31:a8:75:15:2e:19:6f: 7f:f7:25:e2:7f:be:71:3c:7a:7c:f1:76:09:cd:20:ad:08:f8: 73:9b:5f:1b:b4:0e:50:78:2b:f7:8e:c3:c9:f1:1d:33:32:0c: 3c:87:98:d5:79:28:a7:d6:91:ef:d3:db:00:ac:6d:d2:23:78: ce:e3:5f:3f:5a:11:38:1d:ab:b7:74:3c:ef:b1:e1:5e:e9:60: 00:e7:e0:44:78:e2:92:43:7c:88:f7:92:43:ba:d5:fc:de:03: 34:ac:38:c2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6yOuDH+l9KAK8+qBH3fzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi MGQ3NmMwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmUxMzBmYWM4YmQyNzQ4NWZlOTk2YWJhYzI1NWU0MjM3ZWE4YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LxInv1q4Qqf5sR/mWfD5wm3BANZ JjywlnIbJ8ONaOfMwwfM6lzdHQCdUb220BPaBefgj9g83G3DdDyMVNnLnsbfR9vE OSJSn7rY35BwqKclggKR5gIMYh3BIjX4Zmy9aukEesVv32h+PjyIqLnJlGN0I5bn g7IwyDY08erYYNRtC4Vfm6g9YACEL8qrJTnxctPGhrxxB3S+ji91B903MOUUtOo9 vDovnQl0YrbzFABf6cYoHFDoiOPkrsCxPV81+/9bivMF7cMzWCiJPOEOUS5L4PZX dD60MwFhIImz8D2kBWl4xDFhh2jfOPoHSkbr8M87/MXeYA0T8e/2oyav4wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOvhMPrIvSdIX+mWq6wlXkI36oxOMB8GA1UdIwQY MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt MWUxZGU5MWE5ODdjLzEvNi1Fdy1zaTlKMGhmNlphcnJDVmVRamZxakU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjYqsMA4E AgACMAgDBgYqAzwAwDANBgkqhkiG9w0BAQsFAAOCAQEAzl2ujGpk87YkUsnvAHVr UvU9xWISEoLcHBavMxcuo8M7D+RglxOmN3epVVXPkNOGnjnb2QlEhYosY7SjfeGb nvMWRBwHTDoeBitGHW150wnCw+XUA5aWZ43FA0aqQiAdfDD0r0YFE/a4w5D2CDCB tCTiEPtSbVTGwRdsZq0nCkasZFoA0c62/MXBIBh5mY/9WeiHf/R9ZIKqrg8xqHUV Lhlvf/cl4n++cTx6fPF2Cc0grQj4c5tfG7QOUHgr947DyfEdMzIMPIeY1Xkop9aR 79PbAKxt0iN4zuNfP1oROB2rt3Q877HhXulgAOfgRHjikkN8iPeSQ7rV/N4DNKw4 wg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:44 2026 by rpki-client