This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6zr2HQPN3nWXYk89qW9JmdlyNzQ.roa File: 6zr2HQPN3nWXYk89qW9JmdlyNzQ.roa (raw, json) Hash identifier: dYTl81M4cXQQO1z3PYFLbXtr3922WzCAlZQYNolgV3Q= Subject key identifier: EB:3A:F6:1D:03:CD:DE:75:97:62:4F:3D:A9:6F:49:99:D9:72:37:34 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85955F11764DA607F3CB6086214790 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6zr2HQPN3nWXYk89qW9JmdlyNzQ.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204776 IP address blocks: 2a0f:b240:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:95:5f:11:76:4d:a6:07:f3:cb:60:86:21:47:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb3af61d03cdde7597624f3da96f4999d9723734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:84:98:bc:93:9f:89:80:28:2e:86:d9:9a: 61:44:5c:3d:d3:79:5d:1a:76:4f:06:c1:d9:c5:b5: a2:4b:d8:2b:26:f6:29:a0:a1:20:a7:23:40:92:8b: 25:d6:26:6c:ea:b6:fa:2d:5e:c5:96:d8:67:9a:63: d7:a1:08:e4:e5:95:48:ec:4e:1b:61:60:93:54:48: 9d:94:96:18:23:b5:8b:ad:29:0d:37:f9:63:73:71: ee:8b:34:01:8c:e0:19:14:10:5a:4f:63:e0:a9:65: 1e:01:2f:21:09:fb:4d:7b:29:b1:a2:87:f9:c7:fd: 19:48:34:c7:a0:c0:f3:e4:41:e3:3c:8b:ca:19:45: 6a:04:a3:94:cb:52:48:a4:df:1f:4a:f9:b6:57:08: 7a:2b:cc:bb:35:b8:95:62:d1:15:e6:fd:63:8f:1a: 7d:14:8d:26:c9:72:14:bb:d4:a0:52:d9:ee:d6:d9: 03:27:37:fa:dc:e8:da:e9:e2:5a:d7:58:8d:6a:56: 3a:af:a3:b7:59:1b:66:68:7c:3d:2e:93:b8:4e:02: 94:be:f9:7d:68:c0:3a:72:d3:f5:55:38:ee:b8:56: 8f:8d:81:a3:13:da:dd:8d:36:16:86:b4:ee:76:11: 36:69:b3:50:d9:de:31:c1:e4:4f:85:54:fc:da:02: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3A:F6:1D:03:CD:DE:75:97:62:4F:3D:A9:6F:49:99:D9:72:37:34 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6zr2HQPN3nWXYk89qW9JmdlyNzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:8100::/40 Signature Algorithm: sha256WithRSAEncryption 2d:fc:10:8b:85:a1:81:b1:a0:82:02:f0:26:25:17:ea:c4:28: 1a:e8:33:3b:c0:9d:e5:ed:f9:e0:67:a6:d9:c1:88:10:42:66: 7e:1b:5f:83:30:30:85:48:df:23:20:57:06:1d:9d:9a:8e:8f: 0d:98:84:61:98:1e:69:d0:e8:06:8d:1d:a2:c2:4b:21:06:88: 4d:6e:df:69:d0:44:9b:d6:67:b7:e9:65:81:14:88:e0:b7:42: 79:ff:ea:45:f7:e5:95:cc:66:50:bd:57:99:b8:18:de:f1:e6: 83:6d:a3:f0:a8:2d:11:1c:87:63:b7:a8:f0:d1:1c:c8:3f:e9: 2e:a1:e4:c1:66:19:27:4f:d1:0c:ae:28:48:da:0b:f0:fe:3b: a2:3e:3c:d4:c1:0e:f7:f4:d6:41:77:c5:7b:a6:b1:07:04:b7: ee:84:08:ad:2b:ec:22:5c:05:6d:8e:fc:18:87:74:c3:18:73: cf:da:19:87:b3:77:af:9a:e8:70:6e:99:5a:3a:ba:14:6c:37: 0b:ad:15:1a:2d:58:4f:1a:f9:32:ab:a8:bd:26:c8:c7:8a:1f: 1a:75:9c:70:77:6a:52:fe:4b:e6:4a:31:e6:0a:ee:a2:c3:05: 11:40:81:83:47:9c:b6:61:aa:16:0e:8c:86:c0:51:58:34:25: 42:33:64:d5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZVfEXZNpgfzy2CGIUeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjNhZjYxZDAzY2RkZTc1OTc2MjRmM2RhOTZmNDk5OWQ5NzIzNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxaEmLyTn4mAKC6G2ZphRFw903ld GnZPBsHZxbWiS9grJvYpoKEgpyNAkosl1iZs6rb6LV7FlthnmmPXoQjk5ZVI7E4b YWCTVEidlJYYI7WLrSkNN/ljc3HuizQBjOAZFBBaT2PgqWUeAS8hCftNeymxoof5 x/0ZSDTHoMDz5EHjPIvKGUVqBKOUy1JIpN8fSvm2Vwh6K8y7NbiVYtEV5v1jjxp9 FI0myXIUu9SgUtnu1tkDJzf63Oja6eJa11iNalY6r6O3WRtmaHw9LpO4TgKUvvl9 aMA6ctP1VTjuuFaPjYGjE9rdjTYWhrTudhE2abNQ2d4xweRPhVT82gKLxQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOs69h0Dzd51l2JPPalvSZnZcjc0MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvNnpyMkhRUE4zbldYWWs4OXFXOUptZGx5TnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQIEw DQYJKoZIhvcNAQELBQADggEBAC38EIuFoYGxoIIC8CYlF+rEKBroMzvAneXt+eBn ptnBiBBCZn4bX4MwMIVI3yMgVwYdnZqOjw2YhGGYHmnQ6AaNHaLCSyEGiE1u32nQ RJvWZ7fpZYEUiOC3Qnn/6kX35ZXMZlC9V5m4GN7x5oNto/CoLREch2O3qPDRHMg/ 6S6h5MFmGSdP0QyuKEjaC/D+O6I+PNTBDvf01kF3xXumsQcEt+6ECK0r7CJcBW2O /BiHdMMYc8/aGYezd6+a6HBumVo6uhRsNwutFRotWE8a+TKrqL0myMeKHxp1nHB3 alL+S+ZKMeYK7qLDBRFAgYNHnLZhqhYOjIbAUVg0JUIzZNU= -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:42 2026 by rpki-client