This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Xm3rmKtGeRjQO75nFCwo2wCYPAo.roa File: Xm3rmKtGeRjQO75nFCwo2wCYPAo.roa (raw, json) Hash identifier: 0WiEC5r8/Cmu7kL8iU4JX1xveWVEaHShMeHSbkUHBgg= Subject key identifier: 5E:6D:EB:98:AB:46:79:18:D0:3B:BE:67:14:2C:28:DB:00:98:3C:0A Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8594463E92DA4C6FBCD1B651F16374 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Xm3rmKtGeRjQO75nFCwo2wCYPAo.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202427 IP address blocks: 2a0f:b241:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:94:46:3e:92:da:4c:6f:bc:d1:b6:51:f1:63:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e6deb98ab467918d03bbe67142c28db00983c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:95:30:d4:24:f6:c4:cf:a7:30:99:e1:70: eb:b8:68:9c:35:f3:78:08:a1:fe:4d:85:18:a0:ae: cd:2a:c6:a0:e2:bf:8e:cd:9b:c0:ba:8f:ee:43:6f: 95:ac:c4:1b:b2:4b:4a:7d:16:31:5b:6f:93:84:5c: 3f:d4:84:19:b7:ea:89:3f:89:be:54:2e:22:59:1c: ad:67:0b:9a:7c:1e:a1:be:ce:f2:3c:0e:16:21:c8: ea:2e:ea:72:23:07:63:d8:f4:11:64:50:29:d1:2a: 06:cd:fe:a2:ea:1e:f5:2c:a7:ac:81:ca:6b:d4:95: 66:ff:d3:8c:c1:39:54:76:21:52:fa:49:b5:28:b3: 2c:ec:54:c0:b5:77:80:c2:31:92:f5:34:a4:d9:66: 89:ee:4a:4d:bb:8d:5a:5e:d4:04:72:82:ba:c8:72: 1d:11:dd:90:2c:a9:69:bb:5b:40:ef:cd:a3:87:a1: c8:89:f2:ec:6e:e1:c6:cc:54:48:fc:1c:29:88:f6: a3:4f:02:3b:3b:72:02:58:24:e4:ba:f2:79:03:d3: 0f:30:a0:49:d1:ca:ba:8d:6b:34:a7:d7:86:9b:a4: 50:85:ff:1a:68:1b:08:80:6d:84:e5:64:16:c8:f3: 5f:9b:ad:13:d3:ca:9d:e7:cc:28:22:f2:66:3e:e0: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6D:EB:98:AB:46:79:18:D0:3B:BE:67:14:2C:28:DB:00:98:3C:0A X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Xm3rmKtGeRjQO75nFCwo2wCYPAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b241:2c::/48 Signature Algorithm: sha256WithRSAEncryption 30:e5:09:c8:08:6f:ad:d3:87:7f:37:6a:3e:c2:02:a4:9a:75: f5:37:9f:8c:8c:dd:e0:99:bc:fb:36:cf:ff:57:1e:0a:8f:17: 14:e3:1b:83:83:4f:3a:4e:ac:26:0b:5c:ee:f3:69:6a:c9:79: 9d:cc:7c:be:ee:0a:ff:0b:69:9f:20:55:f1:cb:88:65:6c:10: a5:bb:09:3c:9e:24:a9:4a:56:8e:d6:46:5c:27:49:c3:08:a4: f0:c5:17:fe:e3:9d:a7:c1:82:08:33:c8:24:29:05:32:01:7c: 6e:7c:10:01:52:6c:48:cf:64:64:61:ff:df:3b:1b:32:9f:88: 2b:b5:8c:78:1b:7a:cc:71:eb:04:4b:f0:5c:88:13:ac:92:02: cd:4a:53:9b:80:d9:73:3d:de:2b:a8:9c:6d:f9:a9:55:6a:2f: 64:84:8d:6e:31:58:fb:56:e9:64:15:41:50:8e:0d:73:c4:a3: 0e:be:dd:4e:24:7a:d1:af:6f:18:c6:10:65:df:b3:84:e6:43: 27:78:48:5c:7d:89:53:d4:39:6b:6c:f5:e0:a2:96:ca:69:f2: 2e:65:0d:2d:57:c5:a0:a2:53:f1:5e:5b:3b:94:a6:70:af:55: db:eb:f6:d8:93:5c:81:c8:7b:b0:bf:de:2e:3f:34:a8:df:df: e6:a5:50:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hZRGPpLaTG+80bZR8WN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTZkZWI5OGFiNDY3OTE4ZDAzYmJlNjcxNDJjMjhkYjAwOTgzYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr+VMNQk9sTPpzCZ4XDruGicNfN4 CKH+TYUYoK7NKsag4r+OzZvAuo/uQ2+VrMQbsktKfRYxW2+ThFw/1IQZt+qJP4m+ VC4iWRytZwuafB6hvs7yPA4WIcjqLupyIwdj2PQRZFAp0SoGzf6i6h71LKesgcpr 1JVm/9OMwTlUdiFS+km1KLMs7FTAtXeAwjGS9TSk2WaJ7kpNu41aXtQEcoK6yHId Ed2QLKlpu1tA782jh6HIifLsbuHGzFRI/BwpiPajTwI7O3ICWCTkuvJ5A9MPMKBJ 0cq6jWs0p9eGm6RQhf8aaBsIgG2E5WQWyPNfm60T08qd58woIvJmPuB6UQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF5t65irRnkY0Du+ZxQsKNsAmDwKMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvWG0zcm1LdEdlUmpRTzc1bkZDd28yd0NZUEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAs MA0GCSqGSIb3DQEBCwUAA4IBAQAw5QnICG+t04d/N2o+wgKkmnX1N5+MjN3gmbz7 Ns//Vx4KjxcU4xuDg086TqwmC1zu82lqyXmdzHy+7gr/C2mfIFXxy4hlbBCluwk8 niSpSlaO1kZcJ0nDCKTwxRf+452nwYIIM8gkKQUyAXxufBABUmxIz2RkYf/fOxsy n4grtYx4G3rMcesES/BciBOskgLNSlObgNlzPd4rqJxt+alVai9khI1uMVj7Vulk FUFQjg1zxKMOvt1OJHrRr28YxhBl37OE5kMneEhcfYlT1DlrbPXgopbKafIuZQ0t V8WgolPxXls7lKZwr1Xb6/bYk1yByHuwv94uPzSo39/mpVDY -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:04 2026 by rpki-client