This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UtgPr72zn9MLfUTD6Q13BI_cm4E.roa File: UtgPr72zn9MLfUTD6Q13BI_cm4E.roa (raw, json) Hash identifier: 1cPTfRXioLBbChCF9OTwI1YKkyfvgJp1mjbj9UIo0uU= Subject key identifier: 52:D8:0F:AF:BD:B3:9F:D3:0B:7D:44:C3:E9:0D:77:04:8F:DC:9B:81 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F858F66ACCEC2734A9FC7852DB7FB31 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UtgPr72zn9MLfUTD6Q13BI_cm4E.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135103 IP address blocks: 2a0f:b240:5500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8f:66:ac:ce:c2:73:4a:9f:c7:85:2d:b7:fb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52d80fafbdb39fd30b7d44c3e90d77048fdc9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:b4:a8:11:f7:72:1c:93:e6:e6:b3:14:00: bc:e3:27:57:1d:8e:17:62:86:6a:f0:28:53:ae:1a: 63:7f:10:a2:f3:d2:61:d1:00:9d:79:16:2f:f9:cd: 9d:a0:a1:df:08:e7:ad:30:d2:38:8a:e9:01:03:a4: bd:66:36:f2:63:69:ac:4c:ac:d0:8f:a0:cb:b8:e2: 54:15:60:44:37:50:8f:6c:2e:6c:a5:dd:6c:dc:b3: a2:a9:0b:15:68:51:d4:02:c2:54:59:0f:d2:8b:17: 26:07:39:1e:5d:e9:69:44:5e:5c:7f:75:71:fd:2b: 75:1b:bd:b6:9f:58:e9:c4:93:62:fc:f1:1e:86:87: d1:fa:13:f5:9c:22:5a:14:bd:49:6e:4c:ce:72:5d: 95:9c:53:84:55:14:0e:1f:72:2d:ae:f6:c8:23:f1: f7:23:96:3f:f6:dd:21:a7:ff:f1:b9:dd:06:31:0a: 56:c1:0f:2c:b8:c5:ff:d7:4e:44:17:17:02:5d:a7: df:4b:20:31:71:d8:48:70:b3:42:17:5a:99:1f:ba: aa:d4:85:59:41:0f:47:d6:25:bf:e7:c4:30:c4:b1: 2a:ba:b0:74:98:2b:c4:9e:c8:28:57:dc:4f:67:ef: c3:66:5a:f5:15:ff:36:74:c6:b6:d8:2e:3d:4f:ff: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:0F:AF:BD:B3:9F:D3:0B:7D:44:C3:E9:0D:77:04:8F:DC:9B:81 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UtgPr72zn9MLfUTD6Q13BI_cm4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5500::/40 Signature Algorithm: sha256WithRSAEncryption 6d:57:69:3d:40:21:b6:9b:b6:20:a3:08:b2:42:8d:03:84:a1: 9f:45:ae:fe:6a:51:b8:e7:5b:6c:ab:a6:04:35:cc:ec:51:c0: 40:e9:e7:64:63:a8:1b:89:0b:ea:e5:03:8f:69:ed:cb:e2:03: 18:a0:4c:71:b9:13:4a:2d:e3:a9:d4:a2:ff:cd:ed:4b:de:42: 05:3a:04:83:6e:97:57:02:06:cc:a2:19:29:5c:f2:4e:f0:d1: 23:b7:8f:d7:2c:ef:fc:04:b3:0b:08:ce:6a:8a:a1:cb:18:31: f4:6f:4b:11:43:3f:95:e4:98:89:78:eb:82:22:19:74:3f:c2: 7a:db:1b:f1:7d:c8:a1:fd:ff:87:0f:07:df:f4:e3:57:ee:a8: 71:64:be:2b:bb:32:3c:1b:c0:a5:07:fb:37:0d:48:ee:02:6c: 87:2a:2d:0d:f2:a8:ff:1d:8a:a9:8e:01:ce:97:f0:e3:d3:ea: 44:55:f0:6a:f5:16:bd:95:75:2a:f7:43:81:23:6b:48:0d:45: b5:9d:56:21:8b:a8:22:fb:4f:ff:05:11:60:f4:d3:66:a9:66: 05:80:fd:11:d0:ec:15:a0:e2:f1:1b:ec:64:31:23:b1:3e:d6: 2b:1f:6d:73:49:8f:5a:23:b8:7f:53:f1:7e:51:5c:60:d9:31: 16:47:d3:a8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hY9mrM7Cc0qfx4Utt/sxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmQ4MGZhZmJkYjM5ZmQzMGI3ZDQ0YzNlOTBkNzcwNDhmZGM5YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t+0qBH3chyT5uazFAC84ydXHY4X YoZq8ChTrhpjfxCi89Jh0QCdeRYv+c2doKHfCOetMNI4iukBA6S9ZjbyY2msTKzQ j6DLuOJUFWBEN1CPbC5spd1s3LOiqQsVaFHUAsJUWQ/SixcmBzkeXelpRF5cf3Vx /St1G722n1jpxJNi/PEehofR+hP1nCJaFL1JbkzOcl2VnFOEVRQOH3ItrvbII/H3 I5Y/9t0hp//xud0GMQpWwQ8suMX/105EFxcCXaffSyAxcdhIcLNCF1qZH7qq1IVZ QQ9H1iW/58QwxLEqurB0mCvEnsgoV9xPZ+/DZlr1Ff82dMa22C49T//fCwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFLYD6+9s5/TC31Ew+kNdwSP3JuBMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvVXRnUHI3MnpuOU1MZlVURDZRMTNCSV9jbTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFUw DQYJKoZIhvcNAQELBQADggEBAG1XaT1AIbabtiCjCLJCjQOEoZ9Frv5qUbjnW2yr pgQ1zOxRwEDp52RjqBuJC+rlA49p7cviAxigTHG5E0ot46nUov/N7UveQgU6BINu l1cCBsyiGSlc8k7w0SO3j9cs7/wEswsIzmqKocsYMfRvSxFDP5XkmIl464IiGXQ/ wnrbG/F9yKH9/4cPB9/041fuqHFkviu7MjwbwKUH+zcNSO4CbIcqLQ3yqP8diqmO Ac6X8OPT6kRV8Gr1Fr2VdSr3Q4Eja0gNRbWdViGLqCL7T/8FEWD002apZgWA/RHQ 7BWg4vEb7GQxI7E+1isfbXNJj1ojuH9T8X5RXGDZMRZH06g= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:24 2026 by rpki-client