This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/S_TbeJpmQpKC5D26Q8acNzFAnCQ.roa File: S_TbeJpmQpKC5D26Q8acNzFAnCQ.roa (raw, json) Hash identifier: 4C0c/aYrVRSaGmHyLjdOw+P/53Cvff1FKDn0tJoP9fQ= Subject key identifier: 4B:F4:DB:78:9A:66:42:92:82:E4:3D:BA:43:C6:9C:37:31:40:9C:24 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8591800EAB3CDD81CEEFF507BDE893 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/S_TbeJpmQpKC5D26Q8acNzFAnCQ.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199109 IP address blocks: 2a0f:b240:7500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:91:80:0e:ab:3c:dd:81:ce:ef:f5:07:bd:e8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bf4db789a66429282e43dba43c69c3731409c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:5b:cd:ce:c5:e5:64:dc:c3:95:8e:f1:4b: b6:4e:80:e5:3c:d2:d2:a8:8a:68:9f:6c:b5:ce:78: 60:ba:f3:7d:aa:14:39:09:4d:95:2a:0d:bf:f4:74: 4a:bc:78:9d:8b:da:f6:fd:84:88:d0:78:91:72:fb: 08:36:22:90:c9:74:72:17:71:f2:89:18:80:6c:c9: 07:b8:65:e4:32:db:2f:a0:2f:52:a4:26:11:95:02: ce:63:a0:fa:6e:66:e3:d3:11:2d:d1:4c:a3:36:bc: a5:0d:15:a2:74:47:0a:fa:e9:3c:62:85:0a:81:41: 7e:78:55:35:53:c1:4b:00:d6:3a:32:49:20:64:c2: e7:d9:62:36:47:fc:03:31:61:b9:7d:f6:cd:13:7f: be:0f:8a:41:29:80:ce:60:09:84:f5:c0:ec:fb:68: 51:38:13:e6:eb:77:79:19:ff:47:ae:1c:99:ba:b5: 1e:b2:86:74:9a:13:a8:af:88:e4:87:b3:d4:18:3f: ac:7e:c2:9f:78:4c:9d:a4:be:08:31:02:c9:c9:92: 78:7b:24:a8:c3:12:f9:10:22:19:ee:8c:55:7c:4a: 9e:52:52:0f:04:97:87:68:28:27:0d:57:ba:4c:2d: e9:5c:41:57:65:b0:8d:e3:4b:78:31:25:4e:54:8a: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:DB:78:9A:66:42:92:82:E4:3D:BA:43:C6:9C:37:31:40:9C:24 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/S_TbeJpmQpKC5D26Q8acNzFAnCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7500::/40 Signature Algorithm: sha256WithRSAEncryption 80:02:13:0b:c5:59:7d:ef:d5:50:36:de:d6:df:0e:b0:c9:c1: ca:20:13:8a:73:d3:76:8b:00:53:08:d7:a4:3f:a4:47:7f:96: 77:39:eb:06:78:d7:1c:b3:c0:a3:79:e3:c0:16:2e:af:ee:ad: 11:3b:c1:7b:7c:50:f4:6a:f0:e5:c4:42:00:8b:be:20:2a:d1: 56:5c:14:22:e7:a2:83:59:cf:01:ff:f4:b5:43:54:b2:5c:88: b0:c6:7d:4e:f3:8b:0f:19:48:3f:74:c3:5b:33:19:13:86:0b: 1b:ea:fd:05:a3:29:09:8f:68:e0:ae:a0:1d:f4:a3:ff:f9:42: f9:20:bc:c6:67:86:d9:0d:9c:e2:e2:9d:f0:2b:d4:5c:dc:a4: aa:ac:f9:d7:78:7f:2f:d0:b3:6a:51:77:55:d4:cb:ca:d2:2b: 67:3c:b8:44:50:c6:85:f1:2d:a4:13:9e:61:30:b3:12:dc:ca: 12:e8:7e:67:9f:a5:69:d1:4f:6d:e3:23:61:e1:ea:83:98:a5: ad:5c:8b:12:e8:a4:52:4a:0c:96:73:49:26:61:6c:01:bf:7c: 69:16:47:63:18:5a:46:0c:a2:49:8e:bf:2c:3a:aa:dc:33:42: 87:96:ac:8c:dd:e1:84:ec:cf:e1:c9:ad:2c:07:a1:2b:3f:2e: ce:8d:96:7f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZGADqs83YHO7/UHveiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmY0ZGI3ODlhNjY0MjkyODJlNDNkYmE0M2M2OWMzNzMxNDA5YzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya5bzc7F5WTcw5WO8Uu2ToDlPNLS qIpon2y1znhguvN9qhQ5CU2VKg2/9HRKvHidi9r2/YSI0HiRcvsINiKQyXRyF3Hy iRiAbMkHuGXkMtsvoC9SpCYRlQLOY6D6bmbj0xEt0UyjNrylDRWidEcK+uk8YoUK gUF+eFU1U8FLANY6MkkgZMLn2WI2R/wDMWG5ffbNE3++D4pBKYDOYAmE9cDs+2hR OBPm63d5Gf9HrhyZurUesoZ0mhOor4jkh7PUGD+sfsKfeEydpL4IMQLJyZJ4eySo wxL5ECIZ7oxVfEqeUlIPBJeHaCgnDVe6TC3pXEFXZbCN40t4MSVOVIro3wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEv023iaZkKSguQ9ukPGnDcxQJwkMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvU19UYmVKcG1RcEtDNUQyNlE4YWNOekZBbkNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQHUw DQYJKoZIhvcNAQELBQADggEBAIACEwvFWX3v1VA23tbfDrDJwcogE4pz03aLAFMI 16Q/pEd/lnc56wZ41xyzwKN548AWLq/urRE7wXt8UPRq8OXEQgCLviAq0VZcFCLn ooNZzwH/9LVDVLJciLDGfU7ziw8ZSD90w1szGROGCxvq/QWjKQmPaOCuoB30o//5 QvkgvMZnhtkNnOLinfAr1FzcpKqs+dd4fy/Qs2pRd1XUy8rSK2c8uERQxoXxLaQT nmEwsxLcyhLofmefpWnRT23jI2Hh6oOYpa1cixLopFJKDJZzSSZhbAG/fGkWR2MY WkYMokmOvyw6qtwzQoeWrIzd4YTsz+HJrSwHoSs/Ls6Nln8= -----END CERTIFICATE-----Generated at Tue Jan 20 00:27:57 2026 by rpki-client