This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gdtdFzkClpQKJn0-37FZXpdpbYY.roa File: gdtdFzkClpQKJn0-37FZXpdpbYY.roa (raw, json) Hash identifier: +umatFJFUvR/hVf9XUE9VsF3nH6QZMjsdFAsYvU+Yd0= Subject key identifier: 81:DB:5D:17:39:02:96:94:0A:26:7D:3E:DF:B1:59:5E:97:69:6D:86 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019BBDB38C5FA560683366265131A125B41C Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gdtdFzkClpQKJn0-37FZXpdpbYY.roa Signing time: Wed 14 Jan 2026 18:10:19 +0000 ROA not before: Wed 14 Jan 2026 18:10:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214716 IP address blocks: 2a0f:b240:e::/48 maxlen: 48 2a0f:b240:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:b3:8c:5f:a5:60:68:33:66:26:51:31:a1:25:b4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 14 18:10:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81db5d17390296940a267d3edfb1595e97696d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:29:25:12:b0:b9:ba:8d:b2:15:7a:d9:d2: e1:7f:43:af:d5:28:40:cd:34:52:f7:f9:f3:e2:62: 36:ba:ce:25:9b:8c:13:bf:90:c2:ec:91:31:f5:ce: 5f:7a:61:ad:4b:8a:29:e8:9e:a7:9f:43:89:60:03: bd:b7:fd:85:56:9c:48:df:30:4c:50:08:1d:a8:9a: 2c:81:6f:45:4f:c2:42:e7:c1:4c:a9:26:59:40:5a: fb:11:89:aa:17:67:c6:09:bc:1c:a4:70:7f:9a:94: 38:3f:54:a4:ea:b1:84:3a:ae:15:65:a9:c1:8a:39: 37:8d:ba:f7:32:e6:31:df:38:b6:92:32:8c:b4:21: 82:23:e3:2c:86:10:be:f3:5b:0b:91:5c:5c:12:17: 7e:fe:1a:f8:d0:c3:42:5c:ea:62:d2:82:7a:ee:90: cc:58:a5:e3:12:ad:4d:77:14:cc:94:52:de:73:ac: 13:51:1a:60:76:67:2b:a8:a4:48:f5:3f:34:9e:3b: a5:0f:9a:b7:a6:bc:ca:bd:b8:06:da:7e:7a:a1:fe: bc:da:ec:2d:61:d8:2f:41:b3:80:82:37:83:d3:37: a5:13:e2:1a:57:ae:0a:c0:f8:35:f9:fd:38:82:f8: fa:12:64:8a:61:08:60:25:12:8c:a8:e9:0b:92:c0: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DB:5D:17:39:02:96:94:0A:26:7D:3E:DF:B1:59:5E:97:69:6D:86 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gdtdFzkClpQKJn0-37FZXpdpbYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:e::/48 2a0f:b240:18::/48 Signature Algorithm: sha256WithRSAEncryption 77:eb:b6:ae:d6:22:6c:44:2e:74:e2:a7:ed:f5:55:e9:fb:d3: 0e:fa:60:ef:c8:c5:1c:be:e8:45:7a:57:1f:84:dc:e4:b3:73: 6a:80:e2:83:8a:72:b3:a1:80:7c:fa:26:5e:2f:b9:c1:9e:53: 53:ee:c0:b3:27:aa:b6:68:95:25:bf:54:7b:00:5e:66:be:f7: 0b:27:c7:76:56:fe:88:95:26:b0:54:2e:81:f1:d6:03:0f:44: 19:c7:77:b9:b0:b4:35:4d:81:fd:d6:f0:43:cd:2e:74:0d:2f: 0b:5a:fc:5c:d5:63:b7:b3:72:49:7c:de:3b:31:49:94:a8:c2: 8d:27:54:b8:3e:19:0d:ba:4e:e8:63:5b:54:ed:93:2c:1c:b6: 5d:dc:5d:5d:f8:6f:7f:9f:09:99:89:0e:66:13:1a:7e:94:cf: 57:75:a8:bb:f1:14:8e:ef:98:1b:3c:c3:7d:cd:8e:bf:0c:ba: 35:1b:e0:ef:5f:75:ed:5d:14:f9:ab:f8:ff:2a:3f:8d:69:e3: fd:68:d8:f2:35:e1:71:6a:39:49:57:51:ec:ca:fc:9a:60:d2: 98:af:e9:15:60:6d:63:55:95:90:ce:9f:ec:22:e4:df:3b:38: c6:16:94:be:dd:c9:23:d7:dc:aa:db:d8:7b:07:6b:3a:82:76: bf:80:42:cc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu9s4xfpWBoM2YmUTGhJbQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTE0MTgxMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWRiNWQxNzM5MDI5Njk0MGEyNjdkM2VkZmIxNTk1ZTk3Njk2ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSopJRKwubqNshV62dLhf0Ov1ShA zTRS9/nz4mI2us4lm4wTv5DC7JEx9c5femGtS4op6J6nn0OJYAO9t/2FVpxI3zBM UAgdqJosgW9FT8JC58FMqSZZQFr7EYmqF2fGCbwcpHB/mpQ4P1Sk6rGEOq4VZanB ijk3jbr3MuYx3zi2kjKMtCGCI+MshhC+81sLkVxcEhd+/hr40MNCXOpi0oJ67pDM WKXjEq1NdxTMlFLec6wTURpgdmcrqKRI9T80njulD5q3przKvbgG2n56of682uwt YdgvQbOAgjeD0zelE+IaV64KwPg1+f04gvj6EmSKYQhgJRKMqOkLksCLqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIHbXRc5ApaUCiZ9Pt+xWV6XaW2GMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvZ2R0ZEZ6a0NscFFLSm4wLTM3RlpYcGRwYllZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+yQAAO AwcAKg+yQAAYMA0GCSqGSIb3DQEBCwUAA4IBAQB367au1iJsRC504qft9VXp+9MO +mDvyMUcvuhFelcfhNzks3NqgOKDinKzoYB8+iZeL7nBnlNT7sCzJ6q2aJUlv1R7 AF5mvvcLJ8d2Vv6IlSawVC6B8dYDD0QZx3e5sLQ1TYH91vBDzS50DS8LWvxc1WO3 s3JJfN47MUmUqMKNJ1S4PhkNuk7oY1tU7ZMsHLZd3F1d+G9/nwmZiQ5mExp+lM9X dai78RSO75gbPMN9zY6/DLo1G+DvX3XtXRT5q/j/Kj+NaeP9aNjyNeFxajlJV1Hs yvyaYNKYr+kVYG1jVZWQzp/sIuTfOzjGFpS+3ckj19yq29h7B2s6gna/gELM -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:36 2026 by rpki-client