This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-ClsfDJX2vguEP0qjM3PdILf8hE.roa File: 1-ClsfDJX2vguEP0qjM3PdILf8hE.roa (raw, json) Hash identifier: Zz4ETEgzLdgbXVvY86hxo+84uvzj03C5o8pliOrb8Tk= Subject key identifier: F8:29:6C:7C:32:57:DA:F8:2E:10:FD:2A:8C:CD:CF:74:82:DF:F2:11 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A99DDECD557437FE8A49E65CFA13 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-ClsfDJX2vguEP0qjM3PdILf8hE.roa Signing time: Fri 02 Jan 2026 16:23:44 +0000 ROA not before: Fri 02 Jan 2026 16:23:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215153 IP address blocks: 2a0f:b240:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a9:9d:de:cd:55:74:37:fe:8a:49:e6:5c:fa:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8296c7c3257daf82e10fd2a8ccdcf7482dff211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:69:b4:e6:e2:01:c7:8f:1e:b7:9c:62:80: 09:8e:dc:b0:d4:bc:5c:f5:b4:af:10:8e:96:dd:c7: b3:60:5a:1e:80:8c:7e:29:3b:af:06:be:86:6d:b4: da:e8:13:a7:86:e2:b6:03:de:77:46:e8:9e:3d:80: ee:4b:0c:db:a6:e0:c1:56:7c:94:2f:e8:d4:64:d9: a4:65:bc:c8:0b:06:5f:18:bb:37:67:41:12:3d:fa: 54:71:e1:b2:ae:88:5f:fd:9b:b1:7d:e0:8b:26:7e: 6b:ad:d0:ac:12:9c:e4:12:4f:b6:1f:5f:c4:22:5f: 3d:c6:23:39:bf:21:f0:76:47:c6:0c:2e:ef:58:d8: 38:55:89:a9:ce:b0:54:fa:c5:f1:cf:fc:c6:9c:0a: fd:84:33:bf:97:08:f6:eb:aa:da:98:67:84:7b:eb: 1c:39:7d:44:58:05:1e:5d:23:c0:dc:cc:0c:80:bd: 21:04:fd:4d:04:b4:6e:b9:19:e3:6f:3e:c9:00:37: 00:19:d5:6d:69:86:5c:f1:5b:f0:27:0e:4e:d8:ba: d2:14:c9:57:d2:43:dc:a6:3c:e2:d1:e7:a7:54:a3: 0b:b3:56:0e:6f:6e:8e:2e:44:a9:7e:5d:e8:7b:5c: 5b:c6:69:3b:42:d7:65:b8:b6:32:94:f3:2c:b0:fc: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:29:6C:7C:32:57:DA:F8:2E:10:FD:2A:8C:CD:CF:74:82:DF:F2:11 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-ClsfDJX2vguEP0qjM3PdILf8hE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7400::/40 Signature Algorithm: sha256WithRSAEncryption 1d:db:d0:55:8d:9a:1d:81:ec:8b:2c:7f:8b:d9:9e:99:95:45: 6e:e4:3a:e5:9b:83:32:97:26:f1:bc:01:be:41:1d:18:17:08: ee:df:66:45:8f:21:2d:35:62:04:f5:00:fe:e8:4b:5f:2e:aa: 5c:b1:ac:74:f8:cd:d8:85:27:ac:1b:d2:ec:f8:97:0e:13:0f: 51:33:24:d9:47:cd:01:ad:f6:27:df:4e:b6:f7:88:b4:19:e0: 7c:34:52:05:c7:91:47:77:f1:20:60:a2:ed:c4:9e:d3:2c:96: c8:36:3b:f2:73:1d:cd:ed:91:7f:ee:b6:44:8d:87:67:cc:84: c7:af:de:bd:4f:f4:ff:20:d1:5b:90:a5:5f:da:f8:85:8d:04: 08:d1:17:97:0f:e8:86:f4:8e:ff:7e:0d:80:c5:e1:9e:06:d0: 48:25:67:dd:24:4e:f2:b7:80:ff:92:97:1b:91:77:e3:18:c8: 9a:d3:37:91:bc:5d:b5:e3:04:b9:5e:8e:91:87:f7:28:94:77: a6:45:74:4d:e0:42:93:2f:d5:ff:fd:33:ba:44:b7:e3:06:d4: a1:c2:4c:fc:58:4e:bb:17:1e:14:ef:ce:33:fe:bf:ef:0f:b6: 7d:e6:77:26:3f:0b:a4:69:71:a0:44:44:be:87:fd:74:c6:f4: 24:db:d0:d7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hamd3s1VdDf+iknmXPoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODI5NmM3YzMyNTdkYWY4MmUxMGZkMmE4Y2NkY2Y3NDgyZGZmMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX1ptObiAcePHrecYoAJjtyw1Lxc 9bSvEI6W3cezYFoegIx+KTuvBr6GbbTa6BOnhuK2A953RuiePYDuSwzbpuDBVnyU L+jUZNmkZbzICwZfGLs3Z0ESPfpUceGyrohf/ZuxfeCLJn5rrdCsEpzkEk+2H1/E Il89xiM5vyHwdkfGDC7vWNg4VYmpzrBU+sXxz/zGnAr9hDO/lwj266ramGeEe+sc OX1EWAUeXSPA3MwMgL0hBP1NBLRuuRnjbz7JADcAGdVtaYZc8VvwJw5O2LrSFMlX 0kPcpjzi0eenVKMLs1YOb26OLkSpfl3oe1xbxmk7QtdluLYylPMssPxjLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPgpbHwyV9r4LhD9KozNz3SC3/IRMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvMS1DbHNmREpYMnZndUVQMHFqTTNQZElMZjhoRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDMvYjg3ZWMwLWY3NWEtNGJiZS1iMDY3LWI3MTc5ODBlNGFk Ni8xL2JvY1FTazIweEdOeHBfaTJwRUg4TU96ZjRnOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoPskB0 MA0GCSqGSIb3DQEBCwUAA4IBAQAd29BVjZodgeyLLH+L2Z6ZlUVu5Drlm4Mylybx vAG+QR0YFwju32ZFjyEtNWIE9QD+6EtfLqpcsax0+M3YhSesG9Ls+JcOEw9RMyTZ R80BrfYn306294i0GeB8NFIFx5FHd/EgYKLtxJ7TLJbINjvycx3N7ZF/7rZEjYdn zITHr969T/T/INFbkKVf2viFjQQI0ReXD+iG9I7/fg2AxeGeBtBIJWfdJE7yt4D/ kpcbkXfjGMia0zeRvF214wS5Xo6Rh/colHemRXRN4EKTL9X//TO6RLfjBtShwkz8 WE67Fx4U784z/r/vD7Z95ncmPwukaXGgRES+h/10xvQk29DX -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:48 2026 by rpki-client