This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5tfqkhVvPdbD4x2Ha3OXI7EsO3c.roa File: 5tfqkhVvPdbD4x2Ha3OXI7EsO3c.roa (raw, json) Hash identifier: DKfpiasO09jbUvPvSBzW1EsgfJ/iH/OoOuVGcoQdX44= Subject key identifier: E6:D7:EA:92:15:6F:3D:D6:C3:E3:1D:87:6B:73:97:23:B1:2C:3B:77 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A90B3969E5388324A09AEEA46AA8 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5tfqkhVvPdbD4x2Ha3OXI7EsO3c.roa Signing time: Fri 02 Jan 2026 16:23:44 +0000 ROA not before: Fri 02 Jan 2026 16:23:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214980 IP address blocks: 2a0f:b240:6600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a9:0b:39:69:e5:38:83:24:a0:9a:ee:a4:6a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6d7ea92156f3dd6c3e31d876b739723b12c3b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:b4:49:07:5f:1a:3d:27:23:fd:ef:eb:d1: 45:13:a8:5d:77:db:45:2b:c2:85:8e:02:2d:0d:4b: 70:93:5d:cf:00:9c:23:3c:5b:94:cc:93:73:93:d6: e2:cb:c3:87:ae:41:79:71:f0:4d:2b:49:f1:9e:31: 14:4a:bd:61:0f:6e:62:e9:14:f5:ae:96:fb:e5:28: b5:d2:20:69:07:b5:70:96:f9:db:a0:37:24:0c:95: 9f:1d:4e:55:d1:68:1b:cc:8a:0e:56:0b:b6:9a:98: d0:ae:ac:da:d9:57:3f:72:e4:65:34:a6:ef:3a:6f: 28:4c:95:da:51:99:32:77:39:af:ed:25:b8:d0:a1: 13:64:97:10:e8:75:12:95:18:cc:ec:36:cb:d7:4f: 5a:cc:98:55:db:48:e5:aa:c9:17:59:25:9a:96:db: fa:fb:81:ff:9d:ff:ff:91:f3:20:f6:c6:de:cb:2c: 3b:a5:6d:37:d8:fe:bd:9e:98:7c:91:13:4c:85:01: 27:24:54:06:69:4e:42:c0:61:90:54:de:17:46:26: 3e:6e:f3:1c:c4:34:fd:7a:5d:9d:85:92:21:75:c0: 6b:60:21:70:54:72:a8:a1:0b:4c:4a:52:cd:7d:77: b7:0e:56:5e:6a:cc:12:ab:66:7b:ae:4c:d0:60:40: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D7:EA:92:15:6F:3D:D6:C3:E3:1D:87:6B:73:97:23:B1:2C:3B:77 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5tfqkhVvPdbD4x2Ha3OXI7EsO3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6600::/40 Signature Algorithm: sha256WithRSAEncryption 2a:a5:c8:6f:ee:35:00:48:e1:c9:70:1e:e1:76:9f:a9:a0:6c: 11:1c:e7:3a:ad:13:58:44:4c:9b:c4:67:7c:7c:ce:b9:8e:31: e1:97:d3:ee:9b:6e:d3:21:5d:9b:f8:cc:72:6a:74:91:6b:bc: ef:7b:8f:25:da:ff:4a:2c:cf:47:05:9d:71:10:45:c0:e9:b5: 49:82:dd:82:be:01:96:a0:76:bc:2d:2b:88:ec:63:05:c8:6c: e3:87:37:72:05:2a:60:4c:93:49:f5:f5:14:d3:18:d7:f8:12: 3a:77:bd:f2:68:bf:4f:15:2f:b1:d4:5a:6f:bb:e3:a2:19:85: e8:d2:6f:9e:a1:c7:9a:29:18:bf:99:c2:c8:6f:37:ef:5f:a2: a8:f9:70:86:c1:c6:d6:ac:e2:08:87:34:e0:08:48:f1:c1:3e: e5:83:e7:c9:71:39:77:c2:15:89:53:63:aa:8a:a2:46:40:c5: d9:2d:37:b5:3b:ea:2f:0f:c0:d1:45:e3:4e:0f:28:21:86:ed: d9:a1:92:1c:cc:37:33:55:bc:57:b0:ca:8c:26:af:36:ee:d2: 7c:b7:98:13:c0:20:59:e6:84:13:19:89:3c:04:d6:90:39:0b: 5e:85:7a:79:5e:3d:14:85:fe:6d:3a:50:0c:dc:4a:e5:10:59: 85:fc:85:b7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hakLOWnlOIMkoJrupGqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmQ3ZWE5MjE1NmYzZGQ2YzNlMzFkODc2YjczOTcyM2IxMmMzYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBy0SQdfGj0nI/3v69FFE6hdd9tF K8KFjgItDUtwk13PAJwjPFuUzJNzk9biy8OHrkF5cfBNK0nxnjEUSr1hD25i6RT1 rpb75Si10iBpB7VwlvnboDckDJWfHU5V0WgbzIoOVgu2mpjQrqza2Vc/cuRlNKbv Om8oTJXaUZkydzmv7SW40KETZJcQ6HUSlRjM7DbL109azJhV20jlqskXWSWaltv6 +4H/nf//kfMg9sbeyyw7pW032P69nph8kRNMhQEnJFQGaU5CwGGQVN4XRiY+bvMc xDT9el2dhZIhdcBrYCFwVHKooQtMSlLNfXe3DlZeaswSq2Z7rkzQYEBLjwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFObX6pIVbz3Ww+Mdh2tzlyOxLDt3MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvNXRmcWtoVnZQZGJENHgySGEzT1hJN0VzTzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGYw DQYJKoZIhvcNAQELBQADggEBACqlyG/uNQBI4clwHuF2n6mgbBEc5zqtE1hETJvE Z3x8zrmOMeGX0+6bbtMhXZv4zHJqdJFrvO97jyXa/0osz0cFnXEQRcDptUmC3YK+ AZagdrwtK4jsYwXIbOOHN3IFKmBMk0n19RTTGNf4Ejp3vfJov08VL7HUWm+746IZ hejSb56hx5opGL+ZwshvN+9foqj5cIbBxtas4giHNOAISPHBPuWD58lxOXfCFYlT Y6qKokZAxdktN7U76i8PwNFF404PKCGG7dmhkhzMNzNVvFewyowmrzbu0ny3mBPA IFnmhBMZiTwE1pA5C16FenlePRSF/m06UAzcSuUQWYX8hbc= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:36 2026 by rpki-client