This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cdlu5Zry9YywfmD2ukS33tE0_ec.roa File: cdlu5Zry9YywfmD2ukS33tE0_ec.roa (raw, json) Hash identifier: U2A4mqp9X9hO23uCYhHhql3AYl6bCSXhlpMtx4nVrSQ= Subject key identifier: 71:D9:6E:E5:9A:F2:F5:8C:B0:7E:60:F6:BA:44:B7:DE:D1:34:FD:E7 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8593B7F9BC89C936C387612178A424 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cdlu5Zry9YywfmD2ukS33tE0_ec.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201979 IP address blocks: 2a0f:b240:8200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:93:b7:f9:bc:89:c9:36:c3:87:61:21:78:a4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d96ee59af2f58cb07e60f6ba44b7ded134fde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:5f:4d:e6:a0:e2:cd:31:c7:65:bd:58:21: 4a:7e:fb:3e:2e:8d:1c:23:ac:38:f4:66:ee:59:6a: ca:23:f5:02:c9:a1:24:d7:04:5e:ed:2c:22:38:b2: 67:75:75:fc:8e:04:20:4e:83:19:ba:14:62:1f:85: 1b:53:de:66:fd:b0:1e:39:c3:44:8b:9f:2e:31:3e: f4:f6:c5:16:ff:ce:0f:d5:fa:84:6d:71:26:3a:74: f0:a5:f3:53:9d:26:f6:87:b5:16:7a:4e:89:2f:96: 2a:83:a9:fd:44:6d:6f:31:2f:5a:63:4d:d6:0d:ec: dc:91:80:d4:47:74:e4:6d:14:aa:fb:fd:8a:0a:17: e7:55:9d:20:06:45:2e:3e:d0:04:49:df:c2:ef:24: 5e:19:f6:fe:13:0c:6c:3b:c5:cd:1b:6d:da:84:34: ce:c4:3b:4a:74:a4:cb:a7:c2:a0:72:6c:de:4e:84: 21:9f:4b:a6:bb:1b:12:53:95:f8:75:17:09:b6:d1: fc:a9:3c:f6:d0:bd:1b:22:34:10:b0:d5:3d:bb:69: e2:0a:f3:1f:01:6b:0b:cf:fb:8d:f7:04:b0:ce:88: f7:2c:16:0a:88:41:28:d9:72:82:17:a2:37:6f:b1: 78:ce:eb:32:3d:b9:74:0d:47:f7:8d:c0:2f:33:a3: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D9:6E:E5:9A:F2:F5:8C:B0:7E:60:F6:BA:44:B7:DE:D1:34:FD:E7 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cdlu5Zry9YywfmD2ukS33tE0_ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:8200::/40 Signature Algorithm: sha256WithRSAEncryption 81:30:8c:3d:fc:ab:cc:e7:61:e5:75:e3:a5:be:6f:97:43:54: d2:11:e0:4a:50:51:68:cf:6b:3c:44:34:3c:be:c2:36:d4:ee: 19:ff:0a:ed:6f:1a:78:78:7a:11:b6:d1:ee:22:40:bc:ca:d1: 5f:2f:1a:1a:a5:b4:7c:b4:08:a5:3e:51:7d:ad:17:2a:aa:8b: 95:0e:46:3c:36:32:ec:c7:26:9c:86:d3:95:f8:80:d8:81:7c: 8f:f8:47:63:15:a7:9f:40:b3:4c:ab:cb:cc:e7:4e:01:0c:55: f2:ae:79:05:60:36:84:e0:86:57:62:a4:22:13:c6:c4:66:6f: fc:3d:46:27:bb:6c:a7:f5:a2:8a:f1:49:28:21:92:ed:15:41: a4:ba:8c:4d:19:e7:00:c9:68:8c:af:18:6a:42:6d:8e:f4:67: a5:c3:d6:3c:0a:84:5b:fa:83:8b:9e:22:9b:c4:53:e4:c7:2f: 24:b0:3c:7b:c7:34:d8:d1:c2:be:e0:a2:c2:a1:c3:74:ab:c1: a8:42:b6:ad:cf:9a:0e:78:1c:ce:b9:46:c9:33:fd:58:4f:7f: f4:aa:cf:2c:d0:84:58:ed:b3:89:20:a4:e4:f2:98:5b:5c:32: 68:59:84:25:4d:50:8e:66:b7:49:d7:1e:54:9a:4b:5b:c4:c1: ea:7d:a5:e9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZO3+byJyTbDh2EheKQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQ5NmVlNTlhZjJmNThjYjA3ZTYwZjZiYTQ0YjdkZWQxMzRmZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nRfTeag4s0xx2W9WCFKfvs+Lo0c I6w49GbuWWrKI/UCyaEk1wRe7SwiOLJndXX8jgQgToMZuhRiH4UbU95m/bAeOcNE i58uMT709sUW/84P1fqEbXEmOnTwpfNTnSb2h7UWek6JL5Yqg6n9RG1vMS9aY03W DezckYDUR3TkbRSq+/2KChfnVZ0gBkUuPtAESd/C7yReGfb+EwxsO8XNG23ahDTO xDtKdKTLp8KgcmzeToQhn0umuxsSU5X4dRcJttH8qTz20L0bIjQQsNU9u2niCvMf AWsLz/uN9wSwzoj3LBYKiEEo2XKCF6I3b7F4zusyPbl0DUf3jcAvM6NTKwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHHZbuWa8vWMsH5g9rpEt97RNP3nMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvY2RsdTVacnk5WXl3Zm1EMnVrUzMzdEUwX2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQIIw DQYJKoZIhvcNAQELBQADggEBAIEwjD38q8znYeV146W+b5dDVNIR4EpQUWjPazxE NDy+wjbU7hn/Cu1vGnh4ehG20e4iQLzK0V8vGhqltHy0CKU+UX2tFyqqi5UORjw2 MuzHJpyG05X4gNiBfI/4R2MVp59As0yry8znTgEMVfKueQVgNoTghldipCITxsRm b/w9Rie7bKf1oorxSSghku0VQaS6jE0Z5wDJaIyvGGpCbY70Z6XD1jwKhFv6g4ue IpvEU+THLySwPHvHNNjRwr7gosKhw3SrwahCtq3Pmg54HM65Rskz/VhPf/SqzyzQ hFjts4kgpOTymFtcMmhZhCVNUI5mt0nXHlSaS1vEwep9pek= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:08 2026 by rpki-client