This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/avrUlSBtS1brJVmxeJ671jXhlyI.roa File: avrUlSBtS1brJVmxeJ671jXhlyI.roa (raw, json) Hash identifier: h8UShIZkmnAhLm2aXhU/wlxIZ4TP5RYG+Lx/HsHBgAo= Subject key identifier: 6A:FA:D4:95:20:6D:4B:56:EB:25:59:B1:78:9E:BB:D6:35:E1:97:22 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F858DB9B9129839F6C6E6EF5DE6996A Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/avrUlSBtS1brJVmxeJ671jXhlyI.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54148 IP address blocks: 2a0f:b240:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8d:b9:b9:12:98:39:f6:c6:e6:ef:5d:e6:99:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6afad495206d4b56eb2559b1789ebbd635e19722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:4f:6c:28:e3:26:d2:9d:1e:93:ad:8d:06: f3:4d:56:52:1d:60:fc:6c:7e:af:3b:93:bd:76:66: 42:7b:43:ff:77:16:64:2a:48:b7:6f:d2:f3:67:29: 67:f9:92:13:f9:d4:05:fa:f9:20:67:e3:2a:1a:ec: 07:ed:4f:0c:e8:82:66:29:18:29:b8:b4:1a:be:01: 0c:a6:f3:47:a5:eb:a8:08:89:19:d9:39:9e:cb:98: 1d:0b:a4:3e:4f:9d:b0:ee:73:c7:a3:c9:a1:c1:0b: 9d:cc:90:7e:c3:b5:82:58:dd:68:5f:3e:20:70:e2: 6a:0a:52:b2:2a:24:a1:91:98:9d:b3:f8:f7:15:24: 46:e9:d5:4c:6e:83:51:e1:8a:96:fb:c8:f8:e7:5b: 75:c9:a2:7f:2f:e8:a4:ea:b4:eb:99:52:da:6d:2e: 37:9d:d3:79:31:d3:55:74:49:5c:27:43:09:a6:4e: 56:18:a3:df:3b:97:79:29:de:64:84:d5:ee:e4:c6: fc:1e:d8:27:1e:07:78:f6:cb:48:7c:1a:93:da:a2: f0:07:02:76:54:6f:49:f2:b0:94:64:4b:08:95:c3: 50:55:92:e8:4d:3e:b5:fe:9b:99:1f:36:b3:07:cc: 36:0e:12:e7:7d:0f:35:68:51:cd:3d:e2:80:07:13: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FA:D4:95:20:6D:4B:56:EB:25:59:B1:78:9E:BB:D6:35:E1:97:22 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/avrUlSBtS1brJVmxeJ671jXhlyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:500::/40 Signature Algorithm: sha256WithRSAEncryption 2b:63:b0:d0:37:6d:00:b3:0c:80:be:4f:fc:c4:b1:3b:13:2b: 72:71:7f:61:da:59:f9:d5:bf:b2:22:c3:66:d7:b0:28:b1:91: 58:75:f5:9f:b8:3d:a1:15:06:f9:6a:30:9b:cc:12:29:9f:25: fa:0b:e8:b5:d6:93:a8:ca:6f:39:ec:dd:09:17:01:d9:57:df: 31:47:07:c4:39:91:bf:ac:6b:33:28:d2:ec:a0:b9:51:d5:50: 58:22:7a:f7:56:92:28:08:60:58:d1:e9:a5:ee:1c:68:76:63: 5a:76:87:c3:08:cd:a0:7a:f8:ae:b5:75:7c:bb:3a:d1:40:25: 36:fc:28:85:3e:da:78:d0:49:49:00:20:e2:f0:35:4b:33:ad: c8:04:bd:cf:e3:ba:cb:27:d5:7a:4b:4b:c9:35:70:13:73:ea: df:87:32:ce:f7:7f:bc:95:ed:15:b2:6e:2a:1b:9a:61:b4:18: 62:8d:33:da:2c:d7:a8:06:36:37:41:65:db:0d:66:67:47:61: e6:04:ae:f3:d5:fb:1d:fa:59:23:54:ce:bb:56:7f:20:d7:58: 00:49:d0:b1:5b:c8:91:e0:b4:53:68:f8:ca:0f:53:00:87:69: 75:ac:c6:f4:bf:b2:b3:a0:91:29:a7:48:73:b1:7f:c7:d3:8e: ad:58:d8:d1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hY25uRKYOfbG5u9d5plqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWZhZDQ5NTIwNmQ0YjU2ZWIyNTU5YjE3ODllYmJkNjM1ZTE5NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4hPbCjjJtKdHpOtjQbzTVZSHWD8 bH6vO5O9dmZCe0P/dxZkKki3b9LzZyln+ZIT+dQF+vkgZ+MqGuwH7U8M6IJmKRgp uLQavgEMpvNHpeuoCIkZ2Tmey5gdC6Q+T52w7nPHo8mhwQudzJB+w7WCWN1oXz4g cOJqClKyKiShkZids/j3FSRG6dVMboNR4YqW+8j451t1yaJ/L+ik6rTrmVLabS43 ndN5MdNVdElcJ0MJpk5WGKPfO5d5Kd5khNXu5Mb8HtgnHgd49stIfBqT2qLwBwJ2 VG9J8rCUZEsIlcNQVZLoTT61/puZHzazB8w2DhLnfQ81aFHNPeKABxPE4wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGr61JUgbUtW6yVZsXieu9Y14ZciMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvYXZyVWxTQnRTMWJySlZteGVKNjcxalhobHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAUw DQYJKoZIhvcNAQELBQADggEBACtjsNA3bQCzDIC+T/zEsTsTK3Jxf2HaWfnVv7Ii w2bXsCixkVh19Z+4PaEVBvlqMJvMEimfJfoL6LXWk6jKbzns3QkXAdlX3zFHB8Q5 kb+sazMo0uyguVHVUFgievdWkigIYFjR6aXuHGh2Y1p2h8MIzaB6+K61dXy7OtFA JTb8KIU+2njQSUkAIOLwNUszrcgEvc/jussn1XpLS8k1cBNz6t+HMs73f7yV7RWy biobmmG0GGKNM9os16gGNjdBZdsNZmdHYeYErvPV+x36WSNUzrtWfyDXWABJ0LFb yJHgtFNo+MoPUwCHaXWsxvS/srOgkSmnSHOxf8fTjq1Y2NE= -----END CERTIFICATE-----Generated at Sat Jan 3 08:17:37 2026 by rpki-client