This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Lx0kaxGXsAiGXVfpxqWhou1GGX4.roa File: Lx0kaxGXsAiGXVfpxqWhou1GGX4.roa (raw, json) Hash identifier: 3Rbn/JmgA/ms7N/Hj8BD/Zo420E9Zj1HEdkU7gjQt90= Subject key identifier: 2F:1D:24:6B:11:97:B0:08:86:5D:57:E9:C6:A5:A1:A2:ED:46:19:7E Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A1327DE70F31C63A6BD29564CB0E Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Lx0kaxGXsAiGXVfpxqWhou1GGX4.roa Signing time: Fri 02 Jan 2026 16:23:42 +0000 ROA not before: Fri 02 Jan 2026 16:23:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213576 IP address blocks: 2a0f:b240:f00::/40 maxlen: 48 2a0f:b244:120::/44 maxlen: 48 2a0f:b244:140::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a1:32:7d:e7:0f:31:c6:3a:6b:d2:95:64:cb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f1d246b1197b008865d57e9c6a5a1a2ed46197e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:7c:54:8c:ac:c9:56:ba:ac:1d:16:61:34: 7c:fa:ba:1c:5c:80:12:5a:ee:12:60:0d:14:21:8c: a3:8c:59:ec:6c:89:52:65:43:52:f9:c3:e6:54:58: 60:b2:1a:83:c7:87:3b:4a:e9:57:12:11:bc:84:9b: 56:3c:35:17:ae:c8:83:d2:5c:b3:ac:26:5c:67:54: be:4a:e6:ee:5f:62:3d:4a:1d:a6:a4:9f:fc:e5:07: 4b:0a:75:5d:e8:57:5e:b8:77:1f:c2:0e:33:03:cc: d2:7e:d8:18:f0:35:01:e3:60:fc:22:b5:be:49:81: 1d:e6:8b:5c:e7:55:02:e9:a8:ef:59:a2:a8:ed:ac: 1e:34:87:fd:1d:c8:93:74:05:0c:19:bc:6d:9d:ac: 27:61:de:b8:35:27:ea:09:64:ee:43:a0:3c:46:ad: 86:48:3d:a7:91:bd:9f:b4:6b:3d:89:fd:50:14:f8: ec:cb:05:54:7d:9f:69:60:63:05:57:55:7d:4c:08: 25:1a:d4:3c:d5:47:4f:e0:6b:ec:b1:aa:cf:dc:21: f0:d0:14:c0:aa:92:f0:9e:e1:ff:95:8f:81:68:fd: 9d:4b:1c:16:e4:31:89:b6:35:cf:30:0c:74:a8:08: 6d:5e:b8:e9:c8:d6:e0:24:cc:37:b4:df:4a:d2:b7: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:24:6B:11:97:B0:08:86:5D:57:E9:C6:A5:A1:A2:ED:46:19:7E X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Lx0kaxGXsAiGXVfpxqWhou1GGX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:f00::/40 2a0f:b244:120::/44 2a0f:b244:140::/44 Signature Algorithm: sha256WithRSAEncryption 2f:60:53:47:f1:7b:c2:93:17:d5:1f:a2:39:46:79:76:68:66: 45:c0:24:bf:80:1e:e7:eb:2c:ff:4f:3b:da:76:ea:d5:00:3b: 6e:66:9a:58:94:68:59:51:f5:53:45:e3:2e:7c:46:cd:56:e7: 1a:11:0b:0a:83:23:5c:b7:da:fe:32:9f:c4:3e:c0:a1:0f:c0: 04:a0:49:be:98:7d:4d:85:86:11:39:ce:dc:cd:cb:01:95:f4: ff:ad:06:ed:f6:30:f9:e6:33:c0:92:d6:d2:7f:40:ad:05:ff: 25:ae:67:d7:78:6b:2e:c6:94:8d:40:4d:30:bb:e8:61:cc:ea: 50:97:c1:c3:72:c7:c8:15:04:7b:05:6c:be:86:4a:e2:12:b8: 4a:80:ec:19:e8:2a:c7:0e:a0:29:a3:95:66:ae:c8:f4:19:05: 7c:90:02:95:96:75:47:9c:e4:48:ab:89:35:97:0d:f4:dc:b2: c7:2f:61:36:76:1a:84:e9:5d:66:b6:31:cb:81:18:a3:d1:fc: 95:94:1c:30:57:4a:97:91:de:74:56:44:a9:22:46:11:8f:72: bd:dd:26:3f:3c:14:2b:4f:8a:9f:1b:1b:9d:0e:fe:76:40:56: 22:1a:ca:b5:bd:9d:7e:9e:d4:4d:62:31:8d:7b:9e:e9:a9:eb: 6d:7e:14:c7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/haEyfecPMcY6a9KVZMsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjFkMjQ2YjExOTdiMDA4ODY1ZDU3ZTljNmE1YTFhMmVkNDYxOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IR8VIysyVa6rB0WYTR8+rocXIAS Wu4SYA0UIYyjjFnsbIlSZUNS+cPmVFhgshqDx4c7SulXEhG8hJtWPDUXrsiD0lyz rCZcZ1S+SubuX2I9Sh2mpJ/85QdLCnVd6FdeuHcfwg4zA8zSftgY8DUB42D8IrW+ SYEd5otc51UC6ajvWaKo7aweNIf9HciTdAUMGbxtnawnYd64NSfqCWTuQ6A8Rq2G SD2nkb2ftGs9if1QFPjsywVUfZ9pYGMFV1V9TAglGtQ81UdP4GvssarP3CHw0BTA qpLwnuH/lY+BaP2dSxwW5DGJtjXPMAx0qAhtXrjpyNbgJMw3tN9K0reTdQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFC8dJGsRl7AIhl1X6caloaLtRhl+MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvTHgwa2F4R1hzQWlHWFZmcHhxV2hvdTFHR1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwYAKg+yQA8D BwQqD7JEASADBwQqD7JEAUAwDQYJKoZIhvcNAQELBQADggEBAC9gU0fxe8KTF9Uf ojlGeXZoZkXAJL+AHufrLP9PO9p26tUAO25mmliUaFlR9VNF4y58Rs1W5xoRCwqD I1y32v4yn8Q+wKEPwASgSb6YfU2FhhE5ztzNywGV9P+tBu32MPnmM8CS1tJ/QK0F /yWuZ9d4ay7GlI1ATTC76GHM6lCXwcNyx8gVBHsFbL6GSuISuEqA7BnoKscOoCmj lWauyPQZBXyQApWWdUec5EiriTWXDfTcsscvYTZ2GoTpXWa2McuBGKPR/JWUHDBX SpeR3nRWRKkiRhGPcr3dJj88FCtPip8bG50O/nZAViIayrW9nX6e1E1iMY17nump 621+FMc= -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:04 2026 by rpki-client