This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Hh_vwnUs5sa1nkoSBSXhqhWKb6k.roa File: Hh_vwnUs5sa1nkoSBSXhqhWKb6k.roa (raw, json) Hash identifier: tHeL9rGjhrDcjAxE/UjH5pfh+yc2GHztm+dTm1c9Dok= Subject key identifier: 1E:1F:EF:C2:75:2C:E6:C6:B5:9E:4A:12:05:25:E1:AA:15:8A:6F:A9 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8596F1316E287E371ACF40C75BD7E0 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Hh_vwnUs5sa1nkoSBSXhqhWKb6k.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205378 IP address blocks: 2a0f:b240:6100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:96:f1:31:6e:28:7e:37:1a:cf:40:c7:5b:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e1fefc2752ce6c6b59e4a120525e1aa158a6fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:71:01:17:f6:4a:03:4b:83:37:63:b9:01: 27:e2:fe:f6:67:ff:5a:4b:f7:ff:eb:b3:04:37:66: ee:ec:c6:dc:8e:23:55:55:09:58:da:9d:08:7c:66: 53:c9:d7:9e:df:af:0b:3c:f7:ac:6a:07:78:14:cc: 88:59:76:0a:6d:af:22:c8:05:d9:52:36:8a:62:dc: 6c:52:39:86:40:1c:88:a9:5e:c8:59:84:36:36:86: 8b:4b:6a:2b:f0:9a:47:30:cb:92:d4:9e:49:31:1c: 49:52:1a:4e:ca:ed:61:59:57:a9:7e:6c:f7:25:8c: 1d:f2:33:6b:c9:5e:95:ce:25:e1:1f:a2:47:0a:59: 2b:4e:25:a2:0f:26:bd:18:2a:9b:ea:b1:73:3a:d8: 58:02:5e:f2:d1:15:46:b1:94:6e:87:0b:f8:a7:7f: 81:fe:94:ea:a4:3c:9a:ef:18:c8:00:3d:67:86:0e: 4b:7a:91:c5:47:c8:84:b4:55:68:a3:65:82:fa:01: 52:80:cf:8e:9c:74:76:4d:6a:90:9d:df:ee:44:cf: 1e:d5:ea:d0:2b:08:30:59:c8:a5:8f:1b:ab:74:dc: 07:c8:8c:26:c1:bc:fd:9f:03:97:57:eb:29:15:45: ad:96:0b:fd:9a:7a:da:fe:ab:1b:e7:7d:98:4b:9a: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:EF:C2:75:2C:E6:C6:B5:9E:4A:12:05:25:E1:AA:15:8A:6F:A9 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Hh_vwnUs5sa1nkoSBSXhqhWKb6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6100::/40 Signature Algorithm: sha256WithRSAEncryption 80:dc:a7:b0:65:ec:f8:34:e3:d2:c4:eb:58:3d:0e:58:55:88: 93:72:87:59:2a:d5:e6:94:50:bd:d9:ca:ff:25:78:b3:cf:61: b9:78:d0:46:cd:77:6d:55:90:08:80:2a:64:ed:47:78:f1:e3: e2:5a:91:15:8b:58:fe:d9:a5:1f:4d:99:1c:ad:3a:17:81:55: 9a:51:8d:39:08:cc:9e:97:f0:e6:1b:20:63:eb:08:7b:36:ff: 93:80:05:fb:92:0d:b8:96:f2:d9:04:16:a4:ad:c0:79:57:6e: d2:dc:b7:c7:d2:a0:ca:f8:cb:c0:14:04:03:bd:79:a3:37:1f: 6c:94:75:3a:ee:69:1b:06:3f:b5:f3:10:2b:ab:6f:60:3d:9e: 16:bc:a3:35:cf:0f:14:28:c5:c4:26:e4:a2:b4:71:14:3c:d5: 6a:8c:81:b0:99:27:4f:ac:58:65:3b:51:8e:32:78:c8:1f:ea: c7:ad:19:4e:0f:73:6c:72:9d:d5:29:af:d2:6d:0e:78:b5:db: e2:cb:44:8e:9b:bd:a1:cc:97:ef:b7:09:82:01:be:48:bb:ee: 1b:59:1a:86:41:9f:16:99:71:0d:f4:6f:4e:0d:98:65:84:01: 99:a1:cb:bf:3a:43:57:e9:83:ee:59:11:fd:71:b1:5a:37:b2: d4:25:8b:7f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZbxMW4ofjcaz0DHW9fgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTFmZWZjMjc1MmNlNmM2YjU5ZTRhMTIwNTI1ZTFhYTE1OGE2ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPtxARf2SgNLgzdjuQEn4v72Z/9a S/f/67MEN2bu7MbcjiNVVQlY2p0IfGZTydee368LPPesagd4FMyIWXYKba8iyAXZ UjaKYtxsUjmGQByIqV7IWYQ2NoaLS2or8JpHMMuS1J5JMRxJUhpOyu1hWVepfmz3 JYwd8jNryV6VziXhH6JHClkrTiWiDya9GCqb6rFzOthYAl7y0RVGsZRuhwv4p3+B /pTqpDya7xjIAD1nhg5LepHFR8iEtFVoo2WC+gFSgM+OnHR2TWqQnd/uRM8e1erQ KwgwWciljxurdNwHyIwmwbz9nwOXV+spFUWtlgv9mnra/qsb532YS5objQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB4f78J1LObGtZ5KEgUl4aoVim+pMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvSGhfdnduVXM1c2ExbmtvU0JTWGhxaFdLYjZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGEw DQYJKoZIhvcNAQELBQADggEBAIDcp7Bl7Pg049LE61g9DlhViJNyh1kq1eaUUL3Z yv8leLPPYbl40EbNd21VkAiAKmTtR3jx4+JakRWLWP7ZpR9NmRytOheBVZpRjTkI zJ6X8OYbIGPrCHs2/5OABfuSDbiW8tkEFqStwHlXbtLct8fSoMr4y8AUBAO9eaM3 H2yUdTruaRsGP7XzECurb2A9nha8ozXPDxQoxcQm5KK0cRQ81WqMgbCZJ0+sWGU7 UY4yeMgf6setGU4Pc2xyndUpr9JtDni12+LLRI6bvaHMl++3CYIBvki77htZGoZB nxaZcQ30b04NmGWEAZmhy786Q1fpg+5ZEf1xsVo3stQli38= -----END CERTIFICATE-----Generated at Wed Jan 21 11:59:24 2026 by rpki-client