This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_A1lBFuaHNihPhrU_gWi8ow_O2E.roa File: _A1lBFuaHNihPhrU_gWi8ow_O2E.roa (raw, json) Hash identifier: tfm/aEc4+9yMmelN++d6RjcZJHd+G9N+JYbJbJ+x1Ko= Subject key identifier: FC:0D:65:04:5B:9A:1C:D8:A1:3E:1A:D4:FE:05:A2:F2:8C:3F:3B:61 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8598DF00A7690E5CA65A7227644905 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_A1lBFuaHNihPhrU_gWi8ow_O2E.roa Signing time: Fri 02 Jan 2026 16:23:40 +0000 ROA not before: Fri 02 Jan 2026 16:23:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207113 IP address blocks: 2a0f:b240:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:98:df:00:a7:69:0e:5c:a6:5a:72:27:64:49:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc0d65045b9a1cd8a13e1ad4fe05a2f28c3f3b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:90:76:c5:8b:7a:ba:f9:66:dc:08:a6:f4: 42:a2:c4:2a:57:40:e8:39:2d:41:86:0e:49:b9:50: 6e:25:19:5a:8b:4f:6f:c9:44:7f:10:31:b4:fd:f5: 3a:bd:98:df:33:90:85:69:45:d4:e6:73:fb:3e:10: 5d:3b:42:c0:3a:b2:e5:68:d4:b3:b4:00:fe:53:75: cc:98:8d:67:9d:88:6f:32:78:ff:d3:45:6d:90:3f: 17:bb:c7:a2:36:00:22:05:74:7d:75:2d:53:42:e0: 58:df:56:54:4b:66:29:1e:ed:3b:32:41:af:30:cc: eb:c4:63:f9:0c:5c:a2:38:9a:2e:90:13:87:18:99: cb:e5:5e:cb:9c:8f:70:7e:57:ad:a3:1b:3d:b6:92: 4c:d4:ba:76:c2:f8:33:f2:4e:57:ca:9d:13:c8:24: 5d:65:b8:0a:3b:fc:d0:a2:7a:c1:9f:60:f7:99:0f: 42:70:b9:e0:9f:a9:fc:9d:b8:3a:28:74:45:17:d0: 47:26:76:61:11:91:b2:68:35:5b:4d:0b:22:33:0a: cd:2c:b3:97:38:67:f9:9b:a4:f8:73:86:5a:01:cd: 34:a7:ee:79:01:cf:17:39:ce:65:23:1f:9b:f7:82: f1:5c:89:e7:31:c4:12:04:fc:67:1d:fc:71:14:b2: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0D:65:04:5B:9A:1C:D8:A1:3E:1A:D4:FE:05:A2:F2:8C:3F:3B:61 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_A1lBFuaHNihPhrU_gWi8ow_O2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:8000::/40 Signature Algorithm: sha256WithRSAEncryption 59:b1:51:c5:29:22:5f:10:ef:51:d1:1f:c1:3c:c4:1b:4f:8c: 7a:63:28:9e:36:d9:23:ce:1e:74:44:07:2c:8b:95:d9:44:26: 0d:a5:91:ea:c6:8e:5c:e5:39:30:82:bf:5b:40:8a:ec:48:88: 4c:25:dc:11:c2:ae:b1:94:4c:7c:67:89:d7:83:de:3c:7d:86: c3:d5:3e:dc:76:d4:ba:53:16:cb:58:17:77:cc:e2:de:28:2d: 19:f6:1e:d0:49:12:5b:ce:ec:61:74:b6:c6:21:92:0f:96:42: a3:17:53:0f:90:be:18:65:18:42:e0:87:41:dd:a0:67:d8:d4: f7:c7:2e:a1:4e:ec:cc:5b:6f:f5:55:76:f2:44:41:cb:a2:85: de:76:d4:4f:38:dd:41:fc:9f:1c:cc:0d:29:8e:00:ec:59:1e: d9:88:75:73:9b:da:a5:71:97:da:b7:26:7f:e8:9b:f6:32:ff: 73:0c:38:89:e6:b6:fe:04:b7:4c:de:c3:14:d8:b6:00:85:fb: 70:e8:b1:f8:18:04:a0:b9:b1:47:cb:87:05:03:25:8b:44:41: 5f:02:18:8c:01:4e:96:4e:55:8b:8e:ff:18:c4:8e:d6:68:66: ae:af:7b:44:44:95:68:bc:f9:86:45:ee:bf:e7:c2:28:81:dc: 2f:a7:66:7b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZjfAKdpDlymWnInZEkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzBkNjUwNDViOWExY2Q4YTEzZTFhZDRmZTA1YTJmMjhjM2YzYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1eQdsWLerr5ZtwIpvRCosQqV0Do OS1Bhg5JuVBuJRlai09vyUR/EDG0/fU6vZjfM5CFaUXU5nP7PhBdO0LAOrLlaNSz tAD+U3XMmI1nnYhvMnj/00VtkD8Xu8eiNgAiBXR9dS1TQuBY31ZUS2YpHu07MkGv MMzrxGP5DFyiOJoukBOHGJnL5V7LnI9wfletoxs9tpJM1Lp2wvgz8k5Xyp0TyCRd ZbgKO/zQonrBn2D3mQ9CcLngn6n8nbg6KHRFF9BHJnZhEZGyaDVbTQsiMwrNLLOX OGf5m6T4c4ZaAc00p+55Ac8XOc5lIx+b94LxXInnMcQSBPxnHfxxFLLzcQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPwNZQRbmhzYoT4a1P4FovKMPzthMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvX0ExbEJGdWFITmloUGhyVV9nV2k4b3dfTzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQIAw DQYJKoZIhvcNAQELBQADggEBAFmxUcUpIl8Q71HRH8E8xBtPjHpjKJ422SPOHnRE ByyLldlEJg2lkerGjlzlOTCCv1tAiuxIiEwl3BHCrrGUTHxnideD3jx9hsPVPtx2 1LpTFstYF3fM4t4oLRn2HtBJElvO7GF0tsYhkg+WQqMXUw+QvhhlGELgh0HdoGfY 1PfHLqFO7Mxbb/VVdvJEQcuihd521E843UH8nxzMDSmOAOxZHtmIdXOb2qVxl9q3 Jn/om/Yy/3MMOInmtv4Et0zewxTYtgCF+3DosfgYBKC5sUfLhwUDJYtEQV8CGIwB TpZOVYuO/xjEjtZoZq6ve0RElWi8+YZF7r/nwiiB3C+nZns= -----END CERTIFICATE-----Generated at Wed Jan 21 11:56:07 2026 by rpki-client