This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/h0EIqTrgxDmcoKtv7PKk8lR-NJE.roa File: h0EIqTrgxDmcoKtv7PKk8lR-NJE.roa (raw, json) Hash identifier: WKMv8Un2/SxYxT/1kQx5w+02G2WdgKZPSkV1xE3sBl0= Subject key identifier: 87:41:08:A9:3A:E0:C4:39:9C:A0:AB:6F:EC:F2:A4:F2:54:7E:34:91 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8595B77EBAC4FCE2157D96927B4A54 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/h0EIqTrgxDmcoKtv7PKk8lR-NJE.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205163 IP address blocks: 2a0f:b240:5f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:95:b7:7e:ba:c4:fc:e2:15:7d:96:92:7b:4a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=874108a93ae0c4399ca0ab6fecf2a4f2547e3491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:af:84:93:0a:8a:4b:39:05:8c:7f:cd:d7: 54:6c:20:d8:be:f5:75:99:b5:5c:93:41:40:46:22: 9c:05:83:3e:3b:b5:cb:8a:b8:c2:b5:42:d8:8d:c6: a2:b4:fd:bf:9f:e8:b9:86:a4:32:43:12:b8:e5:5a: 0c:67:34:da:ac:af:8e:c5:9a:44:b6:62:c0:d7:15: 69:7e:15:58:24:a7:b9:32:72:4e:7b:58:69:d5:e3: c2:31:43:38:c8:8e:75:84:ba:0c:22:d3:f9:f5:80: 5a:71:7b:7c:64:35:7c:46:66:0e:e7:6b:3e:a7:32: b0:2f:3e:cd:66:1f:42:e8:bb:a3:de:30:94:18:33: 46:74:54:94:8b:e2:28:35:68:40:51:ec:31:ba:83: 9e:5f:5d:e2:65:f0:cb:22:eb:6b:97:21:3f:07:bd: 9f:af:27:80:51:36:de:71:50:e5:d7:69:f4:7e:f2: f5:47:01:07:8a:6b:f4:d5:ba:60:18:b9:f1:ce:b2: 04:cc:52:be:86:c8:b8:2d:22:0c:63:9c:d8:51:95: e0:24:77:49:82:ca:df:d0:37:60:09:be:b0:93:00: b2:18:04:69:19:22:19:9b:38:ca:bf:d2:76:b5:8e: 11:1d:7a:66:3d:39:fc:84:7e:a4:e1:1b:72:47:c0: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:08:A9:3A:E0:C4:39:9C:A0:AB:6F:EC:F2:A4:F2:54:7E:34:91 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/h0EIqTrgxDmcoKtv7PKk8lR-NJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5f00::/40 Signature Algorithm: sha256WithRSAEncryption 10:1b:63:6a:9f:a5:a2:28:ce:1d:28:14:d7:9c:b1:4a:5e:ab: f0:f4:ca:dd:e6:6e:ec:e7:43:dc:49:82:94:1e:bb:8a:55:8a: 00:0d:ea:7d:6a:04:3a:68:ed:4e:25:2c:1f:f1:21:d0:d2:e7: 7c:4d:82:94:4e:7c:b8:ef:d3:d3:b7:67:bb:b4:be:ed:e2:ac: 13:3b:2b:0a:bc:2d:39:f7:bd:71:3d:47:e9:8b:0f:ba:c6:a3: 76:86:0f:88:9d:80:c7:b5:20:b9:77:82:dd:e7:af:50:1c:ab: 0e:32:3a:dc:df:b2:2c:18:43:97:1a:37:bf:87:7e:25:cb:bd: cb:20:f1:5f:58:be:49:fc:81:9d:60:29:14:dd:44:c2:d8:6a: 48:7e:f4:3b:28:61:02:34:b3:a3:04:65:6c:cc:ae:d8:97:d6: b5:e0:67:c0:7d:ea:5b:53:1f:bf:03:4f:8c:7c:6a:ee:b4:e0: 33:91:3a:7d:cc:9a:a6:a3:c9:c7:74:3b:45:da:a1:d7:e3:05: c3:8e:a8:3c:b4:eb:ef:6d:31:da:84:9c:1d:c8:a8:e0:56:16: 33:57:a9:2e:a6:12:8b:43:db:69:a4:23:19:46:21:b9:d7:18: 84:8b:d4:ff:d1:8f:89:01:c9:da:b1:7a:9e:68:70:5a:54:e3: 3b:f8:1c:f5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZW3frrE/OIVfZaSe0pUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzQxMDhhOTNhZTBjNDM5OWNhMGFiNmZlY2YyYTRmMjU0N2UzNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlyvhJMKiks5BYx/zddUbCDYvvV1 mbVck0FARiKcBYM+O7XLirjCtULYjcaitP2/n+i5hqQyQxK45VoMZzTarK+OxZpE tmLA1xVpfhVYJKe5MnJOe1hp1ePCMUM4yI51hLoMItP59YBacXt8ZDV8RmYO52s+ pzKwLz7NZh9C6Luj3jCUGDNGdFSUi+IoNWhAUewxuoOeX13iZfDLIutrlyE/B72f ryeAUTbecVDl12n0fvL1RwEHimv01bpgGLnxzrIEzFK+hsi4LSIMY5zYUZXgJHdJ gsrf0DdgCb6wkwCyGARpGSIZmzjKv9J2tY4RHXpmPTn8hH6k4RtyR8B/fQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIdBCKk64MQ5nKCrb+zypPJUfjSRMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvaDBFSXFUcmd4RG1jb0t0djdQS2s4bFItTkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQF8w DQYJKoZIhvcNAQELBQADggEBABAbY2qfpaIozh0oFNecsUpeq/D0yt3mbuznQ9xJ gpQeu4pVigAN6n1qBDpo7U4lLB/xIdDS53xNgpROfLjv09O3Z7u0vu3irBM7Kwq8 LTn3vXE9R+mLD7rGo3aGD4idgMe1ILl3gt3nr1Acqw4yOtzfsiwYQ5caN7+HfiXL vcsg8V9Yvkn8gZ1gKRTdRMLYakh+9DsoYQI0s6MEZWzMrtiX1rXgZ8B96ltTH78D T4x8au604DOROn3Mmqajycd0O0XaodfjBcOOqDy06+9tMdqEnB3IqOBWFjNXqS6m EotD22mkIxlGIbnXGISL1P/Rj4kBydqxep5ocFpU4zv4HPU= -----END CERTIFICATE-----Generated at Wed Jan 21 12:01:08 2026 by rpki-client