This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Gv9VHoVFbglEt8a0i6vao0tBQU.roa File: 1-Gv9VHoVFbglEt8a0i6vao0tBQU.roa (raw, json) Hash identifier: PeEHsvNRLDg9cOARbpxDinpNE9s2ZuNT8zdx5QAirVM= Subject key identifier: F8:6B:FD:54:7A:15:15:B8:25:12:DF:1A:D2:2E:AF:6A:8D:2D:05:05 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F859DE505FFABD51BA1A2A1661E5399 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Gv9VHoVFbglEt8a0i6vao0tBQU.roa Signing time: Fri 02 Jan 2026 16:23:41 +0000 ROA not before: Fri 02 Jan 2026 16:23:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210667 IP address blocks: 2a0f:b240:8300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:9d:e5:05:ff:ab:d5:1b:a1:a2:a1:66:1e:53:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f86bfd547a1515b82512df1ad22eaf6a8d2d0505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:5f:66:f9:4b:74:6a:11:99:59:a5:a8:39: 6f:a2:84:83:c1:e6:8e:d9:93:86:f9:f9:ff:fe:3a: 53:51:b4:3c:d6:bd:92:16:8e:4a:3a:c9:1c:af:67: 3a:37:c0:fd:be:c1:90:e3:8f:88:6c:19:d1:69:d9: cb:3f:43:4f:89:7f:7a:a1:03:ae:bb:bc:a5:8b:b2: 58:32:1b:33:5e:93:ee:db:26:b1:09:e0:a5:91:8e: 16:c7:bd:f9:9e:cd:64:b6:d1:fc:28:d3:ec:ac:37: 43:81:36:8a:be:97:6f:ba:9a:6e:be:db:e0:c4:e3: d0:bf:24:ed:f1:d9:9c:11:72:9d:9d:dc:e4:12:ce: 06:f6:a0:c4:7f:c2:9c:16:9c:da:d5:b4:eb:b8:b7: 34:57:a0:47:3d:49:d7:84:70:45:d2:c5:90:81:64: af:47:a4:37:09:20:57:60:62:4f:d6:20:b0:70:25: 0d:3a:02:78:3f:c6:37:15:d3:38:a1:c9:d1:22:7b: 01:42:92:4c:bc:86:d9:04:ac:98:f6:b0:6c:3c:77: e4:1d:c1:38:16:7a:94:da:5f:e5:1a:18:01:24:b1: 1e:b4:6a:0a:18:02:46:38:06:24:ee:02:ba:76:1b: 4a:33:13:09:80:c4:b3:97:f6:ad:cc:80:05:7e:ab: 86:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:FD:54:7A:15:15:B8:25:12:DF:1A:D2:2E:AF:6A:8D:2D:05:05 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Gv9VHoVFbglEt8a0i6vao0tBQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:8300::/40 Signature Algorithm: sha256WithRSAEncryption 07:1e:cc:d1:a2:7b:93:17:54:97:b9:64:a1:fd:a0:10:72:63: 8a:74:a3:43:e5:56:2a:7f:71:f1:75:e5:5c:f7:26:96:28:5b: 82:2e:00:ad:e1:6f:bd:36:07:ad:29:c4:0d:00:46:4a:87:06: 4c:37:0b:36:ab:a9:8c:8f:88:89:1a:2e:af:46:cf:d5:94:3e: 7a:f6:4f:f4:af:cf:f6:87:83:a8:43:fd:8a:1d:5a:64:aa:54: 8e:95:8b:2d:77:08:b5:fc:3a:55:c1:61:68:c8:47:59:cb:e2: 86:ae:95:2c:aa:40:bc:e2:e7:8d:44:12:af:0b:4b:ac:85:f9: 8b:3a:98:d6:08:b7:b1:8b:5c:3c:8e:5c:2f:73:e7:ff:be:fb: f8:ca:5b:c6:57:ce:46:f0:bc:97:22:07:67:2e:da:b0:7a:5c: 12:d3:a5:73:01:40:09:43:86:af:e8:29:80:3f:c9:08:1e:7d: 59:cd:b5:1e:50:9b:0c:8d:4f:be:de:45:24:bc:8d:a4:f4:82: 42:c9:9a:72:14:ec:9a:48:fe:a3:65:a4:45:d1:e7:a9:74:88: be:d1:c8:02:f4:b7:b1:c4:4f:83:af:08:b6:45:ae:c3:78:1d: b2:e0:a2:16:d5:7f:fd:0f:cd:b8:39:03:dc:d4:c2:ec:9a:59: 37:61:c7:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hZ3lBf+r1RuhoqFmHlOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODZiZmQ1NDdhMTUxNWI4MjUxMmRmMWFkMjJlYWY2YThkMmQwNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32NfZvlLdGoRmVmlqDlvooSDweaO 2ZOG+fn//jpTUbQ81r2SFo5KOskcr2c6N8D9vsGQ44+IbBnRadnLP0NPiX96oQOu u7yli7JYMhszXpPu2yaxCeClkY4Wx735ns1kttH8KNPsrDdDgTaKvpdvuppuvtvg xOPQvyTt8dmcEXKdndzkEs4G9qDEf8KcFpza1bTruLc0V6BHPUnXhHBF0sWQgWSv R6Q3CSBXYGJP1iCwcCUNOgJ4P8Y3FdM4ocnRInsBQpJMvIbZBKyY9rBsPHfkHcE4 FnqU2l/lGhgBJLEetGoKGAJGOAYk7gK6dhtKMxMJgMSzl/atzIAFfquGrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPhr/VR6FRW4JRLfGtIur2qNLQUFMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvMS1HdjlWSG9WRmJnbEV0OGEwaTZ2YW8wdEJRVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDMvYjg3ZWMwLWY3NWEtNGJiZS1iMDY3LWI3MTc5ODBlNGFk Ni8xL2JvY1FTazIweEdOeHBfaTJwRUg4TU96ZjRnOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoPskCD MA0GCSqGSIb3DQEBCwUAA4IBAQAHHszRonuTF1SXuWSh/aAQcmOKdKND5VYqf3Hx deVc9yaWKFuCLgCt4W+9NgetKcQNAEZKhwZMNws2q6mMj4iJGi6vRs/VlD569k/0 r8/2h4OoQ/2KHVpkqlSOlYstdwi1/DpVwWFoyEdZy+KGrpUsqkC84ueNRBKvC0us hfmLOpjWCLexi1w8jlwvc+f/vvv4ylvGV85G8LyXIgdnLtqwelwS06VzAUAJQ4av 6CmAP8kIHn1ZzbUeUJsMjU++3kUkvI2k9IJCyZpyFOyaSP6jZaRF0eepdIi+0cgC 9LexxE+Drwi2Ra7DeB2y4KIW1X/9D824OQPc1MLsmlk3Ycea -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:49 2026 by rpki-client