This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_apfRiiPMOyjdsfmZGA3uQurxKM.roa File: _apfRiiPMOyjdsfmZGA3uQurxKM.roa (raw, json) Hash identifier: RzIqLNEhBz45d3gaCOEUqR+CMeZQW32bgh34hFZBdBA= Subject key identifier: FD:AA:5F:46:28:8F:30:EC:A3:76:C7:E6:64:60:37:B9:0B:AB:C4:A3 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F859768D3DAB4669BEA07A08A1F37BF Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_apfRiiPMOyjdsfmZGA3uQurxKM.roa Signing time: Fri 02 Jan 2026 16:23:40 +0000 ROA not before: Fri 02 Jan 2026 16:23:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205398 IP address blocks: 2a0f:b240:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:97:68:d3:da:b4:66:9b:ea:07:a0:8a:1f:37:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdaa5f46288f30eca376c7e6646037b90babc4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:1b:5b:d1:13:fc:c6:6d:42:9d:2d:9d:0c: 1f:d6:ec:e4:3f:c2:ea:c4:6e:b7:1a:87:51:e6:d7: a1:05:4a:b3:0d:13:94:08:40:17:93:59:e4:ad:dc: ea:27:f0:eb:c2:4f:19:1e:d5:31:35:dd:70:33:b4: c5:0c:a0:f6:e9:c6:09:9f:cd:b7:c8:e3:1c:fc:c7: fa:44:4a:b3:f8:23:2d:f5:96:5b:2a:cc:46:af:b1: 42:27:24:54:aa:60:cd:b5:94:37:6a:e5:37:5a:80: cf:fe:2c:64:0a:80:5a:d4:62:f3:77:9b:41:13:3f: c7:bc:24:a6:46:3d:8b:bd:53:7f:5a:aa:52:40:23: 9a:ee:5c:c6:0b:d8:2b:62:32:b7:97:3c:ba:88:9a: e7:0e:b8:52:cb:e8:87:ee:18:84:e0:6f:4e:be:3f: 2f:46:e6:13:56:67:25:1a:9f:04:eb:19:84:7b:f7: 4e:b5:7a:3b:b3:d7:1e:68:fe:30:6c:2f:48:2c:4b: 69:a8:d1:21:23:2a:ad:07:14:3c:32:dc:51:5f:f3: da:f1:0b:de:f7:95:8a:73:97:1e:bf:8b:15:b4:19: af:59:24:bc:d4:7b:ae:f6:27:d3:b8:25:df:56:45: 8f:01:93:7f:99:91:2c:96:14:67:bf:68:a3:d8:ed: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AA:5F:46:28:8F:30:EC:A3:76:C7:E6:64:60:37:B9:0B:AB:C4:A3 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_apfRiiPMOyjdsfmZGA3uQurxKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:200::/40 Signature Algorithm: sha256WithRSAEncryption 06:6e:98:8b:bd:63:1a:cd:e6:fe:41:d9:98:22:cb:e5:23:db: 81:af:a0:0c:de:13:f7:39:98:f7:7e:86:c5:85:82:61:41:e5: 7a:d4:d6:76:a5:6b:a4:bf:27:74:65:a0:ae:49:c7:dd:36:14: e9:85:b8:69:9c:1e:24:19:42:22:dc:fb:08:83:00:ad:4d:9f: 16:fb:95:4c:e2:e1:00:95:5a:5d:9f:43:93:19:91:8f:b5:40: 57:4c:34:b0:1c:ae:fe:45:2e:99:c4:2d:19:79:e1:17:af:77: a0:a8:fc:7f:2d:de:5b:a9:d0:f6:ed:68:a8:1b:c6:a4:96:99: 3c:51:78:3d:39:db:e5:38:2f:ed:ec:50:0b:73:41:1c:b5:ea: 7d:5e:c5:b6:cf:af:6f:db:f6:b7:f7:83:3b:4e:d9:83:47:50: fb:cd:91:68:44:95:44:14:a2:0c:6f:ac:f4:02:91:21:a4:11: 14:9a:63:64:84:ed:0b:f8:79:68:7c:ea:91:6b:93:55:cb:eb: 25:78:a4:16:31:d2:63:9b:5d:42:ad:20:7d:23:a0:e1:d8:91: a5:fd:53:20:ea:55:c9:92:b3:42:2d:b3:c5:4c:e4:ed:3e:9f: 5e:69:a9:48:bf:2e:2a:4c:69:e9:4e:fe:fd:5a:85:32:96:b0: 6a:97:43:5e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZdo09q0ZpvqB6CKHze/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGFhNWY0NjI4OGYzMGVjYTM3NmM3ZTY2NDYwMzdiOTBiYWJjNGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8bW9ET/MZtQp0tnQwf1uzkP8Lq xG63GodR5tehBUqzDROUCEAXk1nkrdzqJ/Drwk8ZHtUxNd1wM7TFDKD26cYJn823 yOMc/Mf6REqz+CMt9ZZbKsxGr7FCJyRUqmDNtZQ3auU3WoDP/ixkCoBa1GLzd5tB Ez/HvCSmRj2LvVN/WqpSQCOa7lzGC9grYjK3lzy6iJrnDrhSy+iH7hiE4G9Ovj8v RuYTVmclGp8E6xmEe/dOtXo7s9ceaP4wbC9ILEtpqNEhIyqtBxQ8MtxRX/Pa8Qve 95WKc5cev4sVtBmvWSS81Huu9ifTuCXfVkWPAZN/mZEslhRnv2ij2O2AcQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP2qX0YojzDso3bH5mRgN7kLq8SjMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvX2FwZlJpaVBNT3lqZHNmbVpHQTN1UXVyeEtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAIw DQYJKoZIhvcNAQELBQADggEBAAZumIu9YxrN5v5B2Zgiy+Uj24GvoAzeE/c5mPd+ hsWFgmFB5XrU1nala6S/J3RloK5Jx902FOmFuGmcHiQZQiLc+wiDAK1Nnxb7lUzi 4QCVWl2fQ5MZkY+1QFdMNLAcrv5FLpnELRl54Revd6Co/H8t3lup0PbtaKgbxqSW mTxReD052+U4L+3sUAtzQRy16n1exbbPr2/b9rf3gztO2YNHUPvNkWhElUQUogxv rPQCkSGkERSaY2SE7Qv4eWh86pFrk1XL6yV4pBYx0mObXUKtIH0joOHYkaX9UyDq VcmSs0Its8VM5O0+n15pqUi/LipMaelO/v1ahTKWsGqXQ14= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:38 2026 by rpki-client