This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Yo6coCIvMZj6MTC6gEKpBC_3IUM.roa File: Yo6coCIvMZj6MTC6gEKpBC_3IUM.roa (raw, json) Hash identifier: NPnuyTN08qukZl0qE8vJcCZ2Z5H6iFgadFv0eQxVv1M= Subject key identifier: 62:8E:9C:A0:22:2F:31:98:FA:31:30:BA:80:42:A9:04:2F:F7:21:43 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F858AA9D6BEC5CFE040A6C99C2FD689 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Yo6coCIvMZj6MTC6gEKpBC_3IUM.roa Signing time: Fri 02 Jan 2026 16:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:23:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25957 IP address blocks: 2a0f:b240:5a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8a:a9:d6:be:c5:cf:e0:40:a6:c9:9c:2f:d6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=628e9ca0222f3198fa3130ba8042a9042ff72143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:d0:e0:65:b0:2a:32:d6:a2:6e:16:91:75: bf:f5:e2:82:4c:96:0a:e6:bd:0c:4c:9a:ea:57:7a: e2:29:7b:85:fb:f1:c4:49:d3:b6:e4:27:20:8d:1c: 47:60:a1:d6:32:ed:36:eb:de:e4:ca:0f:6e:85:b4: f9:da:47:72:99:e5:ab:46:28:2b:d6:2f:9e:ec:33: de:ad:22:0b:d0:17:d3:b8:6b:d9:4b:82:3f:ea:8c: 5f:8f:b4:6a:c2:1b:5d:8e:1c:4a:9f:2b:a2:84:dd: e5:3f:85:57:f3:27:e6:6a:2f:f1:ef:4a:2c:f2:39: b9:4d:46:65:d7:b2:c9:be:ae:11:fa:0e:5a:91:fc: db:57:51:1e:6a:62:c1:4e:65:35:3b:a0:e0:14:8e: e4:f0:a7:47:3a:49:bb:b1:2f:a8:7a:e5:64:28:b6: e9:d8:e2:86:63:1f:ec:da:bd:f6:f1:91:90:42:af: 2f:7c:e7:f8:1a:fc:89:d4:8c:c8:3e:45:81:b4:77: 56:8b:04:41:3a:99:bb:75:16:1a:be:df:85:c4:b0: b8:f5:a7:6a:fe:72:c5:23:3f:76:ef:7a:2f:db:97: 1c:d8:ee:10:79:fb:9f:94:13:d5:4a:45:f9:77:46: 1a:58:f0:3f:78:0f:17:23:0c:61:8a:c7:14:70:71: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8E:9C:A0:22:2F:31:98:FA:31:30:BA:80:42:A9:04:2F:F7:21:43 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Yo6coCIvMZj6MTC6gEKpBC_3IUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5a00::/40 Signature Algorithm: sha256WithRSAEncryption 7e:7d:d9:3d:10:87:8f:f1:70:1f:42:0f:d2:76:d6:99:eb:b4: f1:55:ae:8b:f5:10:f5:0d:ae:9c:bc:a6:a5:92:2a:25:1c:44: 35:6c:06:d7:00:7d:db:24:41:b6:2a:23:63:e1:ae:00:4c:3e: 94:01:37:1d:54:92:42:53:5a:9e:68:dc:f2:96:8b:84:37:5e: e8:cf:02:4f:f8:29:6f:46:7e:3b:1f:7d:2c:37:f9:1f:ee:f8: a2:f5:95:1f:ba:29:cf:2a:67:12:18:d9:8e:94:a6:0a:d6:0b: 2c:b5:de:e2:01:16:2e:f1:7e:e2:83:f3:3e:f6:17:d6:b5:0a: b3:0e:69:78:70:32:71:ef:48:02:50:73:d1:37:02:72:ce:74: 01:10:c7:ff:17:91:f6:75:6b:76:94:b5:84:81:47:42:b0:96: 9f:92:67:74:68:4b:b5:47:70:97:fa:1d:19:cf:87:67:17:a3: 9a:ca:66:85:ca:cd:69:18:0c:40:22:0e:88:c7:a8:2a:4d:b9: 8e:a1:a8:44:bb:ce:59:86:1e:d0:e4:83:a1:40:7f:de:c3:f9: 53:78:38:15:68:61:84:7f:c7:b1:d0:6a:df:06:5a:26:3f:0b: ae:c3:9f:28:93:1d:3d:87:63:bc:9f:39:75:44:46:68:61:a9: 9e:25:14:9b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hYqp1r7Fz+BApsmcL9aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjhlOWNhMDIyMmYzMTk4ZmEzMTMwYmE4MDQyYTkwNDJmZjcyMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbbQ4GWwKjLWom4WkXW/9eKCTJYK 5r0MTJrqV3riKXuF+/HESdO25CcgjRxHYKHWMu02697kyg9uhbT52kdymeWrRigr 1i+e7DPerSIL0BfTuGvZS4I/6oxfj7RqwhtdjhxKnyuihN3lP4VX8yfmai/x70os 8jm5TUZl17LJvq4R+g5akfzbV1EeamLBTmU1O6DgFI7k8KdHOkm7sS+oeuVkKLbp 2OKGYx/s2r328ZGQQq8vfOf4GvyJ1IzIPkWBtHdWiwRBOpm7dRYavt+FxLC49adq /nLFIz9273ov25cc2O4QefuflBPVSkX5d0YaWPA/eA8XIwxhiscUcHHg7QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGKOnKAiLzGY+jEwuoBCqQQv9yFDMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvWW82Y29DSXZNWmo2TVRDNmdFS3BCQ18zSVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFow DQYJKoZIhvcNAQELBQADggEBAH592T0Qh4/xcB9CD9J21pnrtPFVrov1EPUNrpy8 pqWSKiUcRDVsBtcAfdskQbYqI2PhrgBMPpQBNx1UkkJTWp5o3PKWi4Q3XujPAk/4 KW9GfjsffSw3+R/u+KL1lR+6Kc8qZxIY2Y6UpgrWCyy13uIBFi7xfuKD8z72F9a1 CrMOaXhwMnHvSAJQc9E3AnLOdAEQx/8XkfZ1a3aUtYSBR0Kwlp+SZ3RoS7VHcJf6 HRnPh2cXo5rKZoXKzWkYDEAiDojHqCpNuY6hqES7zlmGHtDkg6FAf97D+VN4OBVo YYR/x7HQat8GWiY/C67DnyiTHT2HY7yfOXVERmhhqZ4lFJs= -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:36 2026 by rpki-client