This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/11S1p59O7nqWNggNoysjP-cBbgM.roa File: 11S1p59O7nqWNggNoysjP-cBbgM.roa (raw, json) Hash identifier: OEqIaiRpca9EJEVNpBx+tgW6pekre7RTM81SqYEcjpw= Subject key identifier: D7:54:B5:A7:9F:4E:EE:7A:96:36:08:0D:A3:2B:23:3F:E7:01:6E:03 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8590B8012C31B5B42F3D8B010C0FAA Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/11S1p59O7nqWNggNoysjP-cBbgM.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198016 IP address blocks: 2a0f:b240:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:90:b8:01:2c:31:b5:b4:2f:3d:8b:01:0c:0f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d754b5a79f4eee7a9636080da32b233fe7016e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:bd:d0:75:6e:66:8a:af:55:51:7d:82:f4: a6:d7:ad:36:1f:d2:51:85:2f:50:c9:b2:3e:f3:01: 1b:db:10:c0:0d:41:17:cd:4f:c2:d4:57:2a:66:39: a2:04:14:23:d0:68:df:e5:66:a7:3b:8d:76:ca:e1: dd:fa:7e:63:ce:e7:52:2f:48:ea:8e:96:96:8b:ac: e6:5d:c7:3c:a1:93:f6:16:83:11:8c:22:e5:cf:dc: de:21:00:9e:b0:13:a9:65:af:15:f0:db:8b:ce:3e: 64:83:70:1e:4f:3d:29:7a:8d:de:18:39:7a:22:d0: 82:87:66:61:2e:f2:ac:40:6a:5b:a1:d4:94:cd:9d: ef:04:4b:46:49:9e:76:9b:e7:98:95:ba:27:70:d1: 7e:d7:a6:32:f5:5b:35:e4:36:39:2f:9d:20:60:52: 48:0f:81:14:a2:e9:98:cd:b5:c0:d2:f1:dc:7b:c1: 0f:64:e2:5e:70:47:2d:c9:57:da:8c:36:6b:d7:2e: bd:b2:e1:69:98:04:fb:fe:1f:17:e8:3c:8d:49:0e: 9a:34:09:79:33:ea:be:98:f3:b1:94:8d:94:17:8e: e1:71:06:24:fd:74:ab:13:7e:06:f2:e3:b5:3f:59: 24:8c:c0:d2:2e:b4:29:e9:80:de:79:a2:fb:fa:a4: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:54:B5:A7:9F:4E:EE:7A:96:36:08:0D:A3:2B:23:3F:E7:01:6E:03 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/11S1p59O7nqWNggNoysjP-cBbgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5000::/40 Signature Algorithm: sha256WithRSAEncryption 6e:93:21:82:80:ea:3d:cf:ed:0b:3b:59:04:a0:24:7e:92:67: 83:29:16:91:fa:5d:78:47:9a:c0:1b:74:54:9d:ce:5e:2c:f6: 7b:c5:33:e9:43:de:10:c5:25:77:cc:09:4a:6f:70:6e:53:70: 2a:bd:a6:8b:e1:16:81:73:be:78:85:b3:dd:63:35:1a:04:67: 9d:da:91:dd:6f:dd:b2:1b:5b:1b:a0:60:20:b8:f4:73:64:7f: a1:c3:97:67:88:97:b8:c3:38:65:32:bd:79:d7:7a:0c:dc:34: 22:7e:df:f1:35:9d:38:4f:f3:59:32:bf:7a:85:c5:f5:1d:2e: 44:17:89:7d:1b:7c:81:e5:5b:e4:96:45:62:af:3b:37:e3:7c: a9:3d:32:2b:d2:91:15:e0:35:c0:21:3e:bf:8d:98:a6:71:29: 9f:5e:b5:08:9c:a1:e4:d7:99:a6:58:f3:e7:df:b3:3d:d8:b4: 58:3b:74:cd:42:ba:a4:6a:37:16:31:7a:50:8d:4a:93:a1:16: d3:4d:3e:d5:9c:59:a1:8b:dc:45:84:b6:57:ec:c2:4c:79:56: 32:c1:0f:e8:a8:e8:5d:c3:38:31:d5:fe:13:d3:cf:00:ad:17: f9:b9:5d:92:d7:2f:77:bd:6b:3d:c7:04:19:06:cb:ef:27:df: 84:2f:3d:ee -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZC4ASwxtbQvPYsBDA+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU0YjVhNzlmNGVlZTdhOTYzNjA4MGRhMzJiMjMzZmU3MDE2ZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+i90HVuZoqvVVF9gvSm1602H9JR hS9QybI+8wEb2xDADUEXzU/C1FcqZjmiBBQj0Gjf5WanO412yuHd+n5jzudSL0jq jpaWi6zmXcc8oZP2FoMRjCLlz9zeIQCesBOpZa8V8NuLzj5kg3AeTz0peo3eGDl6 ItCCh2ZhLvKsQGpbodSUzZ3vBEtGSZ52m+eYlboncNF+16Yy9Vs15DY5L50gYFJI D4EUoumYzbXA0vHce8EPZOJecEctyVfajDZr1y69suFpmAT7/h8X6DyNSQ6aNAl5 M+q+mPOxlI2UF47hcQYk/XSrE34G8uO1P1kkjMDSLrQp6YDeeaL7+qTVwwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNdUtaefTu56ljYIDaMrIz/nAW4DMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvMTFTMXA1OU83bnFXTmdnTm95c2pQLWNCYmdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFAw DQYJKoZIhvcNAQELBQADggEBAG6TIYKA6j3P7Qs7WQSgJH6SZ4MpFpH6XXhHmsAb dFSdzl4s9nvFM+lD3hDFJXfMCUpvcG5TcCq9povhFoFzvniFs91jNRoEZ53akd1v 3bIbWxugYCC49HNkf6HDl2eIl7jDOGUyvXnXegzcNCJ+3/E1nThP81kyv3qFxfUd LkQXiX0bfIHlW+SWRWKvOzfjfKk9MivSkRXgNcAhPr+NmKZxKZ9etQicoeTXmaZY 8+ffsz3YtFg7dM1CuqRqNxYxelCNSpOhFtNNPtWcWaGL3EWEtlfswkx5VjLBD+io 6F3DODHV/hPTzwCtF/m5XZLXL3e9az3HBBkGy+8n34QvPe4= -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:44 2026 by rpki-client