This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TGeFg4UoB32B825nnFNIA4ekX2Y.roa File: TGeFg4UoB32B825nnFNIA4ekX2Y.roa (raw, json) Hash identifier: Zb/F1mNSN2CP5+JG8pkDphjic+fUB7yl27Gv4qL2SY0= Subject key identifier: 4C:67:85:83:85:28:07:7D:81:F3:6E:67:9C:53:48:03:87:A4:5F:66 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B866A641D7E0D31E7135768C305F581AE Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TGeFg4UoB32B825nnFNIA4ekX2Y.roa Signing time: Sun 04 Jan 2026 00:31:17 +0000 ROA not before: Sun 04 Jan 2026 00:31:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399486 IP address blocks: 2a0f:b240:c::/48 maxlen: 48 2a0f:b240:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:86:6a:64:1d:7e:0d:31:e7:13:57:68:c3:05:f5:81:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 4 00:31:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c6785838528077d81f36e679c53480387a45f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:9c:ee:ba:e7:17:c0:5b:af:ef:29:d6:e4: af:d1:61:1b:81:76:3a:a6:ee:78:d8:6b:ff:3d:80: 60:ff:25:95:28:4e:90:97:21:63:47:38:97:84:4e: be:ac:72:77:76:74:85:45:4f:6c:aa:b9:d5:25:ec: f5:bc:63:e7:3e:1b:df:5f:eb:5b:c6:ab:99:0f:ea: dd:e2:5c:03:fd:97:0c:11:83:4a:c1:62:55:31:d3: 03:c5:84:58:cf:cf:49:09:91:9c:05:68:08:1d:b4: 70:98:5d:40:e0:bf:ef:05:c2:69:85:70:a6:42:5b: 5a:6a:3d:42:db:0d:4b:10:55:df:00:8e:51:25:7e: b8:42:6d:ad:90:b9:04:e5:cf:2f:df:9c:10:34:2e: 26:4c:23:73:02:d5:71:1a:a1:46:86:44:28:c5:2d: e6:41:63:fd:de:6e:36:e6:91:5e:58:96:cf:d0:14: f8:be:32:92:73:70:e6:79:68:4b:ec:dd:d8:5b:30: 39:64:9f:e6:fc:87:3f:bb:f0:fc:f2:ab:0f:f6:ac: ae:89:02:92:34:c2:e7:5a:93:86:29:18:89:fe:a1: 89:c2:f4:f9:96:a4:88:a7:a1:bd:74:88:e8:78:8c: 76:02:cf:c6:ce:3c:6b:13:00:c1:64:93:74:32:89: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:85:83:85:28:07:7D:81:F3:6E:67:9C:53:48:03:87:A4:5F:66 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TGeFg4UoB32B825nnFNIA4ekX2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:c::/48 2a0f:b240:20::/44 Signature Algorithm: sha256WithRSAEncryption 71:1a:8a:76:39:09:23:94:82:88:db:22:a5:3b:a8:ff:63:3d: c9:43:6e:c8:96:2f:05:35:6c:53:87:0d:7f:da:d8:e3:6d:98: bd:61:0a:e6:24:9d:25:bd:a2:f9:08:4b:3f:7f:0f:1f:4b:38: a4:da:60:12:05:33:35:67:68:25:8e:61:39:57:1c:68:b9:1f: 9c:1b:68:e3:01:e2:3b:87:cb:51:8d:bd:4d:13:a9:1e:ae:2e: d0:43:64:95:9c:95:c7:bc:eb:56:52:0b:64:c5:20:0e:83:ec: 4b:ae:97:9c:e9:bd:fa:f9:0e:e7:a0:03:c4:46:1d:8a:36:fe: 14:ba:29:a3:62:10:44:4a:96:6d:b5:e2:94:d5:01:d8:b0:86: 15:85:ae:53:3d:8a:17:38:62:7e:f1:2d:85:0a:bc:dc:a2:e1: e6:fa:71:c0:33:73:7f:1b:9d:ea:59:b6:70:be:f6:c6:c5:c1: 69:de:84:87:0a:c4:05:ce:72:18:5c:a6:b3:9b:8f:25:45:e9: 1e:ca:66:ac:92:8d:91:b3:1f:ce:b1:b3:2a:7a:40:13:52:78: 71:06:26:21:5d:2e:f4:f2:4e:d8:7d:83:55:f5:e7:e9:de:2e: 3f:af:34:4f:70:31:9c:a2:30:df:f1:51:1f:43:f4:3f:d3:92: 42:f9:91:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuGamQdfg0x5xNXaMMF9YGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTA0MDAzMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzY3ODU4Mzg1MjgwNzdkODFmMzZlNjc5YzUzNDgwMzg3YTQ1ZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaSc7rrnF8Bbr+8p1uSv0WEbgXY6 pu542Gv/PYBg/yWVKE6QlyFjRziXhE6+rHJ3dnSFRU9sqrnVJez1vGPnPhvfX+tb xquZD+rd4lwD/ZcMEYNKwWJVMdMDxYRYz89JCZGcBWgIHbRwmF1A4L/vBcJphXCm Qltaaj1C2w1LEFXfAI5RJX64Qm2tkLkE5c8v35wQNC4mTCNzAtVxGqFGhkQoxS3m QWP93m425pFeWJbP0BT4vjKSc3DmeWhL7N3YWzA5ZJ/m/Ic/u/D88qsP9qyuiQKS NMLnWpOGKRiJ/qGJwvT5lqSIp6G9dIjoeIx2As/GzjxrEwDBZJN0MollcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFExnhYOFKAd9gfNuZ5xTSAOHpF9mMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvVEdlRmc0VW9CMzJCODI1bm5GTklBNGVrWDJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+yQAAM AwcEKg+yQAAgMA0GCSqGSIb3DQEBCwUAA4IBAQBxGop2OQkjlIKI2yKlO6j/Yz3J Q27Ili8FNWxThw1/2tjjbZi9YQrmJJ0lvaL5CEs/fw8fSzik2mASBTM1Z2gljmE5 VxxouR+cG2jjAeI7h8tRjb1NE6keri7QQ2SVnJXHvOtWUgtkxSAOg+xLrpec6b36 +Q7noAPERh2KNv4UuimjYhBESpZtteKU1QHYsIYVha5TPYoXOGJ+8S2FCrzcouHm +nHAM3N/G53qWbZwvvbGxcFp3oSHCsQFznIYXKazm48lRekeymasko2Rsx/OsbMq ekATUnhxBiYhXS708k7YfYNV9efp3i4/rzRPcDGcojDf8VEfQ/Q/05JC+ZEK -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:06 2026 by rpki-client