This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BrH89SGf3EIcAO-C6KeJHrYZCLY.roa File: BrH89SGf3EIcAO-C6KeJHrYZCLY.roa (raw, json) Hash identifier: uajDDiLbJF40dJGjI/BGnfA+Qf8y4GVFfR0Icgp+4OI= Subject key identifier: 06:B1:FC:F5:21:9F:DC:42:1C:00:EF:82:E8:A7:89:1E:B6:19:08:B6 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8589573B4042CE757BF49965754122 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BrH89SGf3EIcAO-C6KeJHrYZCLY.roa Signing time: Fri 02 Jan 2026 16:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:23:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 2a0f:b242::/32 maxlen: 48 2a0f:b243::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:89:57:3b:40:42:ce:75:7b:f4:99:65:75:41:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06b1fcf5219fdc421c00ef82e8a7891eb61908b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:e7:7a:ad:64:a7:83:cc:5a:16:92:2a:30: 5c:55:64:a6:8f:f0:34:3e:46:ed:96:2b:e5:9c:35: cc:d9:c6:ad:93:4a:57:73:96:08:36:dc:2e:45:2f: 46:e3:e6:f2:98:06:cb:67:ef:f5:2a:6c:00:78:58: f6:59:98:49:8d:07:12:e7:a7:fc:70:4d:d9:fb:da: d7:49:75:50:85:1d:a6:27:ba:f8:77:9f:9b:3c:32: fb:3f:26:1f:6d:0e:fd:3f:07:50:68:c8:8f:bf:d4: f7:a6:cd:74:67:cf:33:45:99:11:f3:27:77:fd:f1: 88:31:d5:3a:b6:2c:1a:7b:15:b0:8b:f3:a7:69:c9: 49:19:af:8e:35:cc:d7:65:99:84:76:fe:cc:f8:0c: 86:bf:74:bc:7b:4b:26:0f:28:94:22:c0:96:cb:df: 27:a2:09:3f:fb:89:04:fb:9b:f4:f1:da:7e:7b:49: 00:e8:b7:5e:3c:cb:1f:6d:12:38:ca:eb:6e:09:e0: 8d:b3:76:0d:9b:23:8a:cc:23:6d:c2:bf:07:60:3c: 99:39:9e:c9:f3:f2:cd:3d:69:22:4f:13:80:fd:75: 10:78:f0:6b:22:ee:cc:d4:9c:32:77:5e:54:09:eb: 1c:9f:e3:2e:12:4e:92:bf:71:eb:9b:a8:ec:b3:d9: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B1:FC:F5:21:9F:DC:42:1C:00:EF:82:E8:A7:89:1E:B6:19:08:B6 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BrH89SGf3EIcAO-C6KeJHrYZCLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b242::/31 Signature Algorithm: sha256WithRSAEncryption 29:15:8f:f0:e9:0a:57:f1:28:b6:ab:5a:7e:30:f5:42:fc:0d: e8:c6:06:68:30:56:07:da:a2:47:15:58:40:8f:e9:f2:5b:4e: f7:46:55:16:08:c2:51:ad:df:e4:d3:9a:a8:48:d3:f4:3f:8a: be:b9:20:b6:ff:01:73:d7:3b:d7:f4:83:a7:af:b9:44:77:23: 8c:20:f1:37:e2:7c:75:f6:03:d3:ce:18:24:77:c6:db:8a:a4: d4:c5:ed:4a:e4:e7:c9:07:d5:bb:95:d8:ca:dc:1f:fa:30:e3: 30:24:0c:6c:28:42:17:f2:ff:19:a0:2b:76:da:46:e8:69:59: 93:d4:87:d7:67:aa:64:97:cb:e2:92:f6:49:09:fc:cc:d7:42: 87:64:e0:30:03:32:d3:aa:0f:02:d0:12:95:56:ea:42:ec:ef: ae:77:a4:17:17:90:b2:09:17:77:64:c4:7b:dc:e2:9e:96:a3: f6:9c:1f:63:86:6e:6c:8d:2b:2b:81:18:a0:70:a3:11:ee:19: 33:5c:24:46:69:f9:65:40:ef:6a:f9:6d:69:a8:a8:cb:2a:73: d6:06:8c:a2:3e:4e:64:b6:83:60:a1:ed:22:f8:85:6a:cd:4c: 6d:f4:cd:1c:95:90:bd:21:17:da:80:04:28:57:fa:b3:02:6d: 96:51:21:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hYlXO0BCznV79JlldUEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmIxZmNmNTIxOWZkYzQyMWMwMGVmODJlOGE3ODkxZWI2MTkwOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP7neq1kp4PMWhaSKjBcVWSmj/A0 PkbtlivlnDXM2catk0pXc5YINtwuRS9G4+bymAbLZ+/1KmwAeFj2WZhJjQcS56f8 cE3Z+9rXSXVQhR2mJ7r4d5+bPDL7PyYfbQ79PwdQaMiPv9T3ps10Z88zRZkR8yd3 /fGIMdU6tiwaexWwi/OnaclJGa+ONczXZZmEdv7M+AyGv3S8e0smDyiUIsCWy98n ogk/+4kE+5v08dp+e0kA6LdePMsfbRI4yutuCeCNs3YNmyOKzCNtwr8HYDyZOZ7J 8/LNPWkiTxOA/XUQePBrIu7M1Jwyd15UCescn+MuEk6Sv3Hrm6jss9m4HQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAax/PUhn9xCHADvguiniR62GQi2MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvQnJIODlTR2YzRUljQU8tQzZLZUpIcllaQ0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKg+yQjAN BgkqhkiG9w0BAQsFAAOCAQEAKRWP8OkKV/EotqtafjD1QvwN6MYGaDBWB9qiRxVY QI/p8ltO90ZVFgjCUa3f5NOaqEjT9D+Kvrkgtv8Bc9c71/SDp6+5RHcjjCDxN+J8 dfYD084YJHfG24qk1MXtSuTnyQfVu5XYytwf+jDjMCQMbChCF/L/GaArdtpG6GlZ k9SH12eqZJfL4pL2SQn8zNdCh2TgMAMy06oPAtASlVbqQuzvrnekFxeQsgkXd2TE e9zinpaj9pwfY4ZubI0rK4EYoHCjEe4ZM1wkRmn5ZUDvavltaaioyypz1gaMoj5O ZLaDYKHtIviFas1MbfTNHJWQvSEX2oAEKFf6swJtllEhfA== -----END CERTIFICATE-----Generated at Sat Jan 17 02:52:34 2026 by rpki-client