This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/enDkJX1zfv9p6pNM6IggVp87s1c.roa File: enDkJX1zfv9p6pNM6IggVp87s1c.roa (raw, json) Hash identifier: psA4aCSg5GqFsUPnLccPMlqNpzBooVkGrjJ1UUrxxcQ= Subject key identifier: 7A:70:E4:25:7D:73:7E:FF:69:EA:93:4C:E8:88:20:56:9F:3B:B3:57 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85950495FA7D729F33ED693429AEBF Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/enDkJX1zfv9p6pNM6IggVp87s1c.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204768 IP address blocks: 2a0f:b240:6a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:95:04:95:fa:7d:72:9f:33:ed:69:34:29:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a70e4257d737eff69ea934ce88820569f3bb357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:82:7f:99:c0:7a:b1:43:6b:7b:94:54:90: e6:88:00:5f:2f:7b:2c:12:5d:97:0e:6d:d5:9e:ac: 0b:44:dd:b2:dc:71:f0:37:13:74:63:6f:2f:8b:5b: c0:45:51:1a:a3:ec:1b:e5:e9:07:0c:39:b9:c0:87: 41:4a:ee:b9:9f:51:87:17:c0:22:f1:57:2d:a6:b9: 50:9c:a1:19:25:88:1e:f5:85:d2:da:0f:1b:00:91: 85:40:77:50:1d:9c:a7:cb:4d:4d:28:80:cf:e8:11: 4c:a3:60:99:1c:c9:50:38:5b:91:41:6d:38:4f:58: 9e:00:a8:89:56:c1:8c:65:dc:cc:6f:61:c3:69:f7: 5c:07:5e:89:b8:31:6a:a1:33:8d:b4:a6:49:9a:0a: 91:72:97:d3:a1:1b:23:66:3f:0a:c7:75:25:61:19: e8:50:fb:02:5b:5e:90:4d:7b:55:8e:a1:77:0f:f5: 46:c5:1f:7f:c3:1d:83:2c:d1:45:e3:59:74:b9:55: 2d:c9:95:fc:b7:f0:a2:4e:33:18:46:68:3a:aa:11: 88:07:9d:bc:2e:3b:96:a9:2b:44:2b:c3:23:61:b0: 1c:40:78:a0:a5:d5:d8:57:70:9c:0d:88:d1:c3:61: d8:32:2d:4b:01:10:42:2b:25:c0:27:5a:55:fd:d4: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:70:E4:25:7D:73:7E:FF:69:EA:93:4C:E8:88:20:56:9F:3B:B3:57 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/enDkJX1zfv9p6pNM6IggVp87s1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6a00::/40 Signature Algorithm: sha256WithRSAEncryption 7f:56:a1:62:b4:bc:83:6a:74:80:21:81:2f:87:f1:20:0f:73: b9:d2:ad:eb:d5:87:61:d8:ff:c1:c2:79:d4:c8:10:15:98:33: 4e:5b:fb:65:22:33:c2:37:df:d3:7b:9d:c8:1b:0a:a2:9a:c0: f7:7b:ca:8f:3e:2f:19:97:d6:13:b5:13:48:50:90:da:6c:1b: 76:f3:0f:3a:8c:35:f1:66:98:b8:d6:05:fd:4a:b3:e2:42:3a: d8:b7:37:fc:b4:e8:98:67:a9:de:bd:01:70:a0:96:0f:9f:98: 8b:f3:4a:d0:91:3f:09:cf:ad:b9:ae:6e:83:57:3a:09:e3:8d: bd:f7:c0:89:31:6d:00:40:35:82:a0:e6:88:f7:36:0d:1d:53: fa:0b:66:ad:4f:b5:e3:f0:07:34:ad:bf:c5:db:66:e1:2c:8d: 6c:14:90:ad:b2:eb:e1:67:5c:7b:40:42:f2:2d:d2:d8:dc:76: a5:6d:3b:a0:f3:7b:64:1b:85:23:d8:fe:62:d5:23:c4:9a:7d: c0:ad:cd:98:44:7f:63:1f:0a:41:7f:a1:23:77:11:29:48:e1: 84:cb:aa:aa:d4:48:ce:ab:b9:90:f9:7e:6a:1d:b1:0a:6c:48: b2:cf:b4:c1:19:56:ca:f0:b6:2a:fd:7d:b1:3a:fa:67:ba:ad: c6:e2:08:1d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZUElfp9cp8z7Wk0Ka6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTcwZTQyNTdkNzM3ZWZmNjllYTkzNGNlODg4MjA1NjlmM2JiMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCSCf5nAerFDa3uUVJDmiABfL3ss El2XDm3VnqwLRN2y3HHwNxN0Y28vi1vARVEao+wb5ekHDDm5wIdBSu65n1GHF8Ai 8VctprlQnKEZJYge9YXS2g8bAJGFQHdQHZyny01NKIDP6BFMo2CZHMlQOFuRQW04 T1ieAKiJVsGMZdzMb2HDafdcB16JuDFqoTONtKZJmgqRcpfToRsjZj8Kx3UlYRno UPsCW16QTXtVjqF3D/VGxR9/wx2DLNFF41l0uVUtyZX8t/CiTjMYRmg6qhGIB528 LjuWqStEK8MjYbAcQHigpdXYV3CcDYjRw2HYMi1LARBCKyXAJ1pV/dThBQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHpw5CV9c37/aeqTTOiIIFafO7NXMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvZW5Ea0pYMXpmdjlwNnBOTTZJZ2dWcDg3czFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGow DQYJKoZIhvcNAQELBQADggEBAH9WoWK0vINqdIAhgS+H8SAPc7nSrevVh2HY/8HC edTIEBWYM05b+2UiM8I339N7ncgbCqKawPd7yo8+LxmX1hO1E0hQkNpsG3bzDzqM NfFmmLjWBf1Ks+JCOti3N/y06Jhnqd69AXCglg+fmIvzStCRPwnPrbmuboNXOgnj jb33wIkxbQBANYKg5oj3Ng0dU/oLZq1PtePwBzStv8XbZuEsjWwUkK2y6+FnXHtA QvIt0tjcdqVtO6Dze2QbhSPY/mLVI8SafcCtzZhEf2MfCkF/oSN3ESlI4YTLqqrU SM6ruZD5fmodsQpsSLLPtMEZVsrwtir9fbE6+me6rcbiCB0= -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:43 2026 by rpki-client