This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9qvApW65FyeeC3QzSnxv1Uy8prM.roa File: 9qvApW65FyeeC3QzSnxv1Uy8prM.roa (raw, json) Hash identifier: VVhFueQ7npM333GfIb8ssg+i/mapEmJKRAnmOHuCKWM= Subject key identifier: F6:AB:C0:A5:6E:B9:17:27:9E:0B:74:33:4A:7C:6F:D5:4C:BC:A6:B3 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019BB92F3C2FC6E4B2CAF676F408BFD3EA5E Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9qvApW65FyeeC3QzSnxv1Uy8prM.roa Signing time: Tue 13 Jan 2026 21:07:19 +0000 ROA not before: Tue 13 Jan 2026 21:07:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215122 IP address blocks: 2a0f:b240:50::/44 maxlen: 48 2a0f:b241:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b9:2f:3c:2f:c6:e4:b2:ca:f6:76:f4:08:bf:d3:ea:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 13 21:07:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6abc0a56eb917279e0b74334a7c6fd54cbca6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:9a:b9:f1:87:45:e4:e2:78:15:2d:c5:8f: 89:df:6c:79:ad:7d:2c:08:59:6d:c3:46:b6:05:ed: f7:74:56:13:fc:b5:d0:7a:f4:3b:aa:9b:df:99:95: ec:6c:3d:cc:ec:af:51:08:dd:13:37:e4:33:13:f9: ff:cf:52:4b:d1:f5:b0:56:ec:5d:9d:a0:80:bf:55: 29:09:46:30:db:50:4b:00:f9:6d:06:8e:45:9b:95: 6a:38:c1:d3:92:74:84:2b:32:08:bc:bb:30:c4:ea: 7c:af:5a:38:56:2d:5d:58:ff:a6:7a:90:e9:1c:20: cc:79:c3:43:ad:ab:40:33:4a:6e:4b:91:74:5e:00: 51:c1:15:b3:45:fd:bb:2b:69:ff:2a:7f:04:61:1a: ae:a2:9f:ea:d4:61:e6:18:17:25:4f:fe:67:9a:92: da:88:83:e4:2e:8a:6c:0f:79:2e:a5:98:22:5a:45: d7:2c:66:00:92:b6:60:d4:07:cb:7d:cd:c2:c7:1e: b1:4b:c3:65:52:5e:90:bb:e9:f9:90:20:22:73:91: 28:27:2d:e0:6c:23:7b:38:42:b2:90:93:1c:35:2b: 7b:15:48:01:d8:9f:e3:fa:68:25:8e:46:8e:d0:11: e0:ce:a0:12:7e:33:80:f4:a8:b4:79:9d:f5:23:eb: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AB:C0:A5:6E:B9:17:27:9E:0B:74:33:4A:7C:6F:D5:4C:BC:A6:B3 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9qvApW65FyeeC3QzSnxv1Uy8prM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:50::/44 2a0f:b241:1::/48 Signature Algorithm: sha256WithRSAEncryption 6b:b6:7e:3f:9e:18:27:0b:ad:db:a1:fa:95:d2:56:51:fc:1b: a6:e4:38:78:05:4a:50:62:cb:d3:3c:63:34:64:62:c5:a7:fe: 4a:01:2a:7b:ea:84:f4:f0:1a:b6:a4:72:44:8f:3a:e1:25:78: 9a:03:c3:a6:34:d1:16:88:64:0a:e8:60:5d:84:59:b7:99:b7: 2d:2a:78:e8:e4:96:fd:f3:1c:74:9c:57:68:dd:7a:32:16:18: 0e:8a:83:80:66:51:23:34:42:58:d1:c5:09:83:df:02:f2:4a: 46:ae:f2:74:94:0d:d5:6d:fe:48:0d:55:03:8d:3c:de:25:5f: 04:63:90:9f:e2:6f:56:2a:2b:ea:76:31:d7:24:ef:94:bc:ef: 02:ce:ee:2d:5b:42:3f:61:9c:df:05:cc:3c:9d:be:fb:7f:b2: 88:cd:4a:e3:5f:51:43:db:82:f7:59:c0:3a:2c:55:1e:78:34: 9a:09:8b:dd:38:ec:0d:29:f6:a0:d9:7e:bc:87:0c:25:de:99: cc:27:62:a5:e0:85:f1:fb:bc:25:ca:d7:92:50:8b:aa:b7:82: 8e:27:39:01:e0:f3:2d:3d:c4:8c:81:fc:ff:c5:4a:d5:b1:38: a4:21:cc:a6:45:29:1c:6f:17:e9:17:5a:7a:6d:2d:0c:fa:7f: 10:76:9a:dc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu5LzwvxuSyyvZ29Ai/0+peMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTEzMjEwNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmFiYzBhNTZlYjkxNzI3OWUwYjc0MzM0YTdjNmZkNTRjYmNhNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgyaufGHReTieBUtxY+J32x5rX0s CFltw0a2Be33dFYT/LXQevQ7qpvfmZXsbD3M7K9RCN0TN+QzE/n/z1JL0fWwVuxd naCAv1UpCUYw21BLAPltBo5Fm5VqOMHTknSEKzIIvLswxOp8r1o4Vi1dWP+mepDp HCDMecNDratAM0puS5F0XgBRwRWzRf27K2n/Kn8EYRquop/q1GHmGBclT/5nmpLa iIPkLopsD3kupZgiWkXXLGYAkrZg1AfLfc3Cxx6xS8NlUl6Qu+n5kCAic5EoJy3g bCN7OEKykJMcNSt7FUgB2J/j+mgljkaO0BHgzqASfjOA9Ki0eZ31I+sPswIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFParwKVuuRcnngt0M0p8b9VMvKazMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvOXF2QXBXNjVGeWVlQzNRelNueHYxVXk4cHJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg+yQABQ AwcAKg+yQQABMA0GCSqGSIb3DQEBCwUAA4IBAQBrtn4/nhgnC63bofqV0lZR/Bum 5Dh4BUpQYsvTPGM0ZGLFp/5KASp76oT08Bq2pHJEjzrhJXiaA8OmNNEWiGQK6GBd hFm3mbctKnjo5Jb98xx0nFdo3XoyFhgOioOAZlEjNEJY0cUJg98C8kpGrvJ0lA3V bf5IDVUDjTzeJV8EY5Cf4m9WKivqdjHXJO+UvO8Czu4tW0I/YZzfBcw8nb77f7KI zUrjX1FD24L3WcA6LFUeeDSaCYvdOOwNKfag2X68hwwl3pnMJ2Kl4IXx+7wlyteS UIuqt4KOJzkB4PMtPcSMgfz/xUrVsTikIcymRSkcbxfpF1p6bS0M+n8Qdprc -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:38 2026 by rpki-client