This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/L1X1mBC8gTxx3NOZz7AjzLCe9g0.roa File: L1X1mBC8gTxx3NOZz7AjzLCe9g0.roa (raw, json) Hash identifier: bkHRjeoY2mWlbJHBNmY9hE1kqrLqZyS0m/kNqdRyWWI= Subject key identifier: 2F:55:F5:98:10:BC:81:3C:71:DC:D3:99:CF:B0:23:CC:B0:9E:F6:0D Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85AC8E9AB8A643F569A4D6102E831C Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/L1X1mBC8gTxx3NOZz7AjzLCe9g0.roa Signing time: Fri 02 Jan 2026 16:23:45 +0000 ROA not before: Fri 02 Jan 2026 16:23:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401665 IP address blocks: 2a0f:b240:6500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:ac:8e:9a:b8:a6:43:f5:69:a4:d6:10:2e:83:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f55f59810bc813c71dcd399cfb023ccb09ef60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:43:ff:b2:f5:25:1b:12:56:79:39:f9:42: 6b:cb:d0:89:6b:15:7f:30:2f:c1:d8:88:3c:04:49: 7b:d7:a6:36:34:33:b2:2a:89:81:0b:38:b6:c5:a5: 55:bb:71:d4:0f:4f:50:82:5c:c0:9c:e6:c7:ce:8d: 47:cb:f8:7a:f0:b8:db:ea:a3:ea:36:89:4e:23:4e: 1b:77:cf:1b:83:8f:f9:be:99:42:05:b3:72:93:e4: 1d:91:4a:a7:3a:bf:f2:2e:7c:92:75:49:d1:7b:96: 42:92:67:fd:f0:e1:1a:6c:b2:76:c3:a9:ba:a9:b4: 85:46:d7:eb:d0:0d:97:21:9e:58:d1:18:45:ca:7f: b9:6e:e2:4f:df:cf:82:4f:e5:f5:ba:62:5f:da:10: 06:ca:92:f0:0c:d7:6b:73:8b:79:d8:e3:b1:a8:ef: 9e:46:a0:a9:59:38:2a:de:08:b0:98:3b:0e:99:fa: d1:2c:04:3a:88:04:d4:5d:ff:dc:5a:a5:94:1b:a9: 2a:9a:cb:a9:82:c7:f8:9b:17:18:71:2b:20:db:d5: 65:f6:ce:33:6b:a3:f3:e8:00:f0:70:22:81:ba:83: 65:cc:a6:14:11:f7:d2:7c:07:d4:52:e9:53:31:33: 35:93:44:d2:20:6f:53:e8:80:56:4f:6d:d0:7b:67: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:55:F5:98:10:BC:81:3C:71:DC:D3:99:CF:B0:23:CC:B0:9E:F6:0D X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/L1X1mBC8gTxx3NOZz7AjzLCe9g0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6500::/40 Signature Algorithm: sha256WithRSAEncryption 3a:be:6c:20:f1:a3:cc:dc:5d:32:de:11:ab:ca:21:26:85:ef: 14:c6:61:1b:89:c8:28:d6:f9:5c:15:a4:ec:1a:6c:51:be:b6: 28:ed:9d:56:fd:63:27:15:f6:7d:f9:6c:82:d6:60:d2:48:b8: 0f:fd:17:d9:f9:42:78:32:74:34:cc:07:13:e3:9e:29:08:fe: 8c:f0:7a:91:d5:7d:81:63:ac:0e:43:0c:f8:7b:b2:6a:48:f5: 72:c1:04:89:de:2f:14:ff:a9:d5:72:c3:11:c9:fb:47:3d:60: 35:5c:90:f5:03:14:19:c8:9e:e7:e9:56:32:05:50:00:4e:e7: e4:34:26:bf:56:7a:31:80:d7:ab:5f:a5:e2:8d:64:5f:21:af: 3c:ab:8c:ff:3d:f6:35:c3:13:67:cd:39:8b:d7:67:44:2f:f6: 52:46:e9:3d:7d:72:9b:65:d3:0e:77:d3:4d:05:a5:ed:ed:73: db:98:51:ff:68:48:b3:7d:0b:cd:87:63:34:e7:41:fc:20:a8: 27:f4:53:ee:ce:dc:08:5d:4f:11:4a:12:c5:08:e1:85:68:6b: c2:2c:b1:7d:a4:1c:ae:81:8f:9e:65:42:31:e1:ed:6f:9e:54: fe:ef:3c:cd:35:cf:35:ab:1b:f5:8e:5b:c9:b9:1b:6e:af:50: e0:7e:9b:17 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hayOmrimQ/VppNYQLoMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjU1ZjU5ODEwYmM4MTNjNzFkY2QzOTljZmIwMjNjY2IwOWVmNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRD/7L1JRsSVnk5+UJry9CJaxV/ MC/B2Ig8BEl716Y2NDOyKomBCzi2xaVVu3HUD09QglzAnObHzo1Hy/h68Ljb6qPq NolOI04bd88bg4/5vplCBbNyk+QdkUqnOr/yLnySdUnRe5ZCkmf98OEabLJ2w6m6 qbSFRtfr0A2XIZ5Y0RhFyn+5buJP38+CT+X1umJf2hAGypLwDNdrc4t52OOxqO+e RqCpWTgq3giwmDsOmfrRLAQ6iATUXf/cWqWUG6kqmsupgsf4mxcYcSsg29Vl9s4z a6Pz6ADwcCKBuoNlzKYUEffSfAfUUulTMTM1k0TSIG9T6IBWT23Qe2fZ0QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC9V9ZgQvIE8cdzTmc+wI8ywnvYNMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvTDFYMW1CQzhnVHh4M05PWno3QWp6TENlOWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGUw DQYJKoZIhvcNAQELBQADggEBADq+bCDxo8zcXTLeEavKISaF7xTGYRuJyCjW+VwV pOwabFG+tijtnVb9YycV9n35bILWYNJIuA/9F9n5QngydDTMBxPjnikI/ozwepHV fYFjrA5DDPh7smpI9XLBBIneLxT/qdVywxHJ+0c9YDVckPUDFBnInufpVjIFUABO 5+Q0Jr9WejGA16tfpeKNZF8hrzyrjP899jXDE2fNOYvXZ0Qv9lJG6T19cptl0w53 000Fpe3tc9uYUf9oSLN9C82HYzTnQfwgqCf0U+7O3AhdTxFKEsUI4YVoa8IssX2k HK6Bj55lQjHh7W+eVP7vPM01zzWrG/WOW8m5G26vUOB+mxc= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:06 2026 by rpki-client