This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ekvNXNtHRYrXuQ7WX1qc03htddg.roa File: ekvNXNtHRYrXuQ7WX1qc03htddg.roa (raw, json) Hash identifier: +3sNAZGf+/lFnngX7fywUNIoFmaaa6ClzRzJ3dFEuio= Subject key identifier: 7A:4B:CD:5C:DB:47:45:8A:D7:B9:0E:D6:5F:5A:9C:D3:78:6D:75:D8 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85AA88F364DC1B07303EE13806AFBD Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ekvNXNtHRYrXuQ7WX1qc03htddg.roa Signing time: Fri 02 Jan 2026 16:23:44 +0000 ROA not before: Fri 02 Jan 2026 16:23:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215473 IP address blocks: 2a0f:b241:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:aa:88:f3:64:dc:1b:07:30:3e:e1:38:06:af:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a4bcd5cdb47458ad7b90ed65f5a9cd3786d75d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:5c:5a:32:a0:ae:8b:a0:50:42:2e:8b:99: a9:04:eb:16:42:10:0d:d6:97:35:4c:a4:38:1a:e7: c5:e2:50:06:99:c0:a1:0b:41:06:90:ee:e0:63:d7: 57:67:85:79:02:99:10:d8:a4:e0:4b:9c:6a:d3:e0: 0c:c6:20:35:e6:22:e6:eb:b0:24:49:be:b1:56:54: 3b:0d:ff:e2:bf:18:53:2c:fb:a6:19:57:84:ee:01: cf:a1:02:6d:44:17:f4:79:d9:21:7b:01:45:75:8b: 93:0b:27:ad:47:74:68:ae:2d:4b:92:d1:1d:4d:51: 75:06:58:43:77:1d:64:28:4a:80:b1:61:0c:2a:44: 3d:bf:11:a5:c5:09:65:79:33:e1:d7:12:9b:99:34: a3:27:40:98:70:f1:cb:0f:c5:71:7d:33:19:f2:b8: b2:17:17:48:9a:dd:0b:29:0c:2a:20:74:18:f7:69: 08:77:46:ba:35:2d:21:fd:51:d6:27:22:46:5e:92: b8:ea:a2:a9:87:1d:9b:8e:57:93:bd:c2:a7:bf:da: c4:df:93:ac:a9:48:5d:9e:df:4a:6e:89:59:ed:de: 23:82:15:26:81:13:fd:3f:5a:2c:69:98:8c:b9:b8: 52:66:87:64:03:91:bb:af:ae:0e:a3:05:74:e9:23: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4B:CD:5C:DB:47:45:8A:D7:B9:0E:D6:5F:5A:9C:D3:78:6D:75:D8 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ekvNXNtHRYrXuQ7WX1qc03htddg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b241:91::/48 Signature Algorithm: sha256WithRSAEncryption 83:b2:17:b3:44:4c:2b:74:3a:f8:69:8d:44:d7:8a:14:f6:12: 4b:8c:9e:82:82:1b:35:02:77:64:0a:b2:00:b3:aa:a4:2b:8d: be:39:82:6e:bf:d8:ef:f0:cc:5f:b0:84:b1:2d:6d:6e:d8:48: dd:a3:43:82:ab:5e:04:9a:9f:7e:9b:b2:7f:04:fd:b2:5e:72: ca:5b:49:36:5f:b6:60:09:ed:5d:7d:d9:ab:24:32:bf:bf:ad: 61:d9:5a:49:30:a0:ee:29:2e:fb:cc:c4:35:29:2b:98:5f:9b: 6b:d1:7f:a8:fd:e7:0c:4a:9d:a8:23:f8:ff:71:8b:3e:76:0b: 07:25:c2:15:37:37:69:f1:ab:15:6f:61:3a:5e:8f:61:54:71: 8f:b9:ee:27:df:94:00:d9:d0:12:4a:bf:44:b0:27:d1:18:60: 2a:ce:27:ea:3a:9d:fb:95:63:b4:90:9b:72:06:f0:fc:45:40: ae:3a:e7:37:71:f8:48:bd:a7:b4:23:ef:b9:06:2c:77:7d:1f: 93:4a:21:b9:b5:7b:36:64:07:80:e5:cc:89:7f:e7:fb:32:84: c1:d5:53:bf:5e:0e:3a:1c:d7:bb:78:1c:b2:1c:ea:99:23:7f: 27:84:2a:70:c9:f5:70:6f:db:be:27:8f:4c:2f:d1:62:2b:24: 4e:9e:3b:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/haqI82TcGwcwPuE4Bq+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTRiY2Q1Y2RiNDc0NThhZDdiOTBlZDY1ZjVhOWNkMzc4NmQ3NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NpcWjKgrougUEIui5mpBOsWQhAN 1pc1TKQ4GufF4lAGmcChC0EGkO7gY9dXZ4V5ApkQ2KTgS5xq0+AMxiA15iLm67Ak Sb6xVlQ7Df/ivxhTLPumGVeE7gHPoQJtRBf0edkhewFFdYuTCyetR3Rori1LktEd TVF1BlhDdx1kKEqAsWEMKkQ9vxGlxQlleTPh1xKbmTSjJ0CYcPHLD8VxfTMZ8riy FxdImt0LKQwqIHQY92kId0a6NS0h/VHWJyJGXpK46qKphx2bjleTvcKnv9rE35Os qUhdnt9KbolZ7d4jghUmgRP9P1osaZiMubhSZodkA5G7r64OowV06SP4IwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHpLzVzbR0WK17kO1l9anNN4bXXYMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvZWt2TlhOdEhSWXJYdVE3V1gxcWMwM2h0ZGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQCR MA0GCSqGSIb3DQEBCwUAA4IBAQCDshezREwrdDr4aY1E14oU9hJLjJ6Cghs1Andk CrIAs6qkK42+OYJuv9jv8MxfsISxLW1u2Ejdo0OCq14Emp9+m7J/BP2yXnLKW0k2 X7ZgCe1dfdmrJDK/v61h2VpJMKDuKS77zMQ1KSuYX5tr0X+o/ecMSp2oI/j/cYs+ dgsHJcIVNzdp8asVb2E6Xo9hVHGPue4n35QA2dASSr9EsCfRGGAqzifqOp37lWO0 kJtyBvD8RUCuOuc3cfhIvae0I++5Bix3fR+TSiG5tXs2ZAeA5cyJf+f7MoTB1VO/ Xg46HNe7eByyHOqZI38nhCpwyfVwb9u+J49ML9FiKyROnjva -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:43 2026 by rpki-client