This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/12ifjwtd90eElFK41ugdFgkPw2Q.roa File: 12ifjwtd90eElFK41ugdFgkPw2Q.roa (raw, json) Hash identifier: FEsadpntx8iS83CVhQfVVqw3xq9sqqSUMAoe7c3XjyE= Subject key identifier: D7:68:9F:8F:0B:5D:F7:47:84:94:52:B8:D6:E8:1D:16:09:0F:C3:64 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F859EB66CB636F8CD17EE33DBF98139 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/12ifjwtd90eElFK41ugdFgkPw2Q.roa Signing time: Fri 02 Jan 2026 16:23:41 +0000 ROA not before: Fri 02 Jan 2026 16:23:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210812 IP address blocks: 2a0f:b240:11::/48 maxlen: 48 2a0f:b240:5d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:9e:b6:6c:b6:36:f8:cd:17:ee:33:db:f9:81:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7689f8f0b5df747849452b8d6e81d16090fc364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:2e:5a:33:cc:f8:6f:8a:9f:43:b2:08:3d: a0:4e:b6:1a:35:a4:e4:ce:98:74:01:d4:45:fb:a1: 88:38:ba:92:c0:52:eb:8c:ac:f2:dd:6c:40:7a:f2: fc:64:79:0b:5a:7f:f0:64:8e:55:6a:03:fa:0a:46: 2c:24:e9:73:7a:5a:19:92:ea:89:11:e7:03:12:c2: de:56:30:4a:0b:74:a1:17:80:36:92:7e:e6:75:b3: ef:b2:4f:eb:2a:e5:58:37:4e:bc:3d:ca:5a:bc:19: cb:be:12:f9:31:2a:3d:bb:23:d7:de:38:5a:e2:af: 67:7e:b7:37:f6:00:c9:b9:9f:cf:57:8d:e2:09:18: a4:d9:76:15:ea:c4:a9:56:cc:2c:9c:77:b3:de:4c: bb:e4:10:ec:3f:a9:7c:af:4c:d5:be:dc:1b:80:03: 20:06:55:55:33:d8:f3:28:97:91:ed:ff:f4:66:11: 1f:97:81:35:06:50:dd:85:e9:95:81:33:51:8a:2a: 65:42:9b:5f:ef:4f:cb:b4:2d:2a:ff:70:00:c0:5c: f7:f1:76:fe:8c:51:ac:cb:53:af:7c:61:9b:58:02: 79:fd:68:77:79:8d:7b:fd:4b:7b:e3:d2:a8:04:30: 64:54:54:fe:52:fe:13:ce:10:15:94:20:07:d4:a0: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:9F:8F:0B:5D:F7:47:84:94:52:B8:D6:E8:1D:16:09:0F:C3:64 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/12ifjwtd90eElFK41ugdFgkPw2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:11::/48 2a0f:b240:5d00::/40 Signature Algorithm: sha256WithRSAEncryption 83:4d:eb:5c:2d:0b:5a:57:b2:e2:39:7e:f9:cc:52:db:de:9b: 4d:0e:fa:d7:76:12:75:32:83:5f:b1:3c:31:0a:2e:c7:88:c2: b8:8b:f3:e9:61:cc:0b:34:70:82:16:37:f4:ba:0c:c6:d8:b3: f0:bf:4d:39:3a:75:c4:77:9b:4e:98:7d:f3:71:66:61:73:fb: 01:a8:d5:78:a8:72:d3:19:df:8e:23:03:bf:19:6d:ce:18:00: 42:c2:e1:56:bd:c6:3b:b6:e4:a7:32:19:48:54:74:fa:7e:4d: ae:42:e2:c5:59:ef:cf:6f:11:99:cd:a7:d7:43:eb:5d:db:e7: 2d:7b:49:2b:ba:18:23:ca:9f:2e:e7:5e:a5:f6:ac:d6:3e:99: 49:de:da:ca:33:a6:48:b4:b3:92:09:84:e2:8d:6f:34:75:97: a7:a6:70:c0:50:b1:ab:db:00:37:99:95:6e:6f:1d:42:d4:ba: 6a:58:ee:e9:78:8e:a3:8c:76:64:f5:a4:7e:0e:4d:0b:1f:54: e4:a3:f2:ce:66:49:fa:b7:90:be:0a:9e:8f:68:3e:c8:dc:a3: c2:db:e3:c9:7d:9e:20:38:13:93:34:64:64:80:99:9c:a7:a7: 72:6b:7b:e2:4d:36:f0:69:95:ca:70:e1:93:4e:e2:b0:ef:ba: b3:50:84:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/hZ62bLY2+M0X7jPb+YE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzY4OWY4ZjBiNWRmNzQ3ODQ5NDUyYjhkNmU4MWQxNjA5MGZjMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifwuWjPM+G+Kn0OyCD2gTrYaNaTk zph0AdRF+6GIOLqSwFLrjKzy3WxAevL8ZHkLWn/wZI5VagP6CkYsJOlzeloZkuqJ EecDEsLeVjBKC3ShF4A2kn7mdbPvsk/rKuVYN068PcpavBnLvhL5MSo9uyPX3jha 4q9nfrc39gDJuZ/PV43iCRik2XYV6sSpVswsnHez3ky75BDsP6l8r0zVvtwbgAMg BlVVM9jzKJeR7f/0ZhEfl4E1BlDdhemVgTNRiiplQptf70/LtC0q/3AAwFz38Xb+ jFGsy1OvfGGbWAJ5/Wh3eY17/Ut749KoBDBkVFT+Uv4TzhAVlCAH1KBuOQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFNdon48LXfdHhJRSuNboHRYJD8NkMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvMTJpZmp3dGQ5MGVFbEZLNDF1Z2RGZ2tQdzJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKg+yQAAR AwYAKg+yQF0wDQYJKoZIhvcNAQELBQADggEBAINN61wtC1pXsuI5fvnMUtvem00O +td2EnUyg1+xPDEKLseIwriL8+lhzAs0cIIWN/S6DMbYs/C/TTk6dcR3m06YffNx ZmFz+wGo1XioctMZ344jA78Zbc4YAELC4Va9xju25KcyGUhUdPp+Ta5C4sVZ789v EZnNp9dD613b5y17SSu6GCPKny7nXqX2rNY+mUne2sozpki0s5IJhOKNbzR1l6em cMBQsavbADeZlW5vHULUumpY7ul4jqOMdmT1pH4OTQsfVOSj8s5mSfq3kL4Kno9o Psjco8Lb48l9niA4E5M0ZGSAmZynp3Jre+JNNvBplcpw4ZNO4rDvurNQhJU= -----END CERTIFICATE-----Generated at Tue Jan 20 00:27:57 2026 by rpki-client