This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/i9z9N--_xP4G-07eL20TJ23kHgg.roa File: i9z9N--_xP4G-07eL20TJ23kHgg.roa (raw, json) Hash identifier: VBctUFOWmYGGT4kYr0DiOgHfI8x0nN8c2z8chTo/1uA= Subject key identifier: 8B:DC:FD:37:EF:BF:C4:FE:06:FB:4E:DE:2F:6D:13:27:6D:E4:1E:08 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85AA092536764F50F71D42C6796268 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/i9z9N--_xP4G-07eL20TJ23kHgg.roa Signing time: Fri 02 Jan 2026 16:23:44 +0000 ROA not before: Fri 02 Jan 2026 16:23:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215472 IP address blocks: 2a0f:b240:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:aa:09:25:36:76:4f:50:f7:1d:42:c6:79:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdcfd37efbfc4fe06fb4ede2f6d13276de41e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:42:7b:a8:c2:d6:dd:3b:27:2b:b7:74:be: 60:f0:7c:df:38:eb:85:85:8b:22:14:db:48:8c:00: dd:98:c5:cb:bb:a5:a8:75:a3:a4:70:40:01:8d:f8: 72:32:f6:56:f9:63:d2:84:53:90:b3:23:f6:7c:5b: b1:4e:f6:ca:5a:4c:35:12:f4:0a:ad:4a:13:18:63: c8:6b:ef:70:b2:67:7a:37:0d:26:87:59:67:81:9f: 48:46:0f:ed:0f:86:b9:f8:1e:94:db:7b:53:b6:fb: 7c:81:6c:62:b1:4b:20:9e:3a:43:f5:58:9e:21:01: e1:9b:99:e9:45:3d:0f:0f:3e:c1:1b:d9:fb:df:5d: 1c:2f:21:69:4d:51:8b:5e:84:35:f8:45:3d:09:44: b6:59:35:67:1c:ba:6d:f5:96:00:01:8e:4d:77:2f: 2d:c7:68:f9:1c:e8:c1:bf:e9:a0:59:64:78:e9:0b: 8c:ee:94:91:e3:01:23:2d:5e:7c:27:d7:c8:96:84: dc:a4:c9:1e:fe:3c:b8:f0:fb:4e:fb:78:c0:1b:5a: a6:47:95:30:09:b6:e1:f4:7f:3f:19:64:cc:f3:27: a2:1f:a4:42:b9:f2:d5:9c:89:a1:9d:08:53:93:77: 11:4a:d5:86:8c:3e:40:59:5c:fb:98:8b:e3:0d:a1: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:FD:37:EF:BF:C4:FE:06:FB:4E:DE:2F:6D:13:27:6D:E4:1E:08 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/i9z9N--_xP4G-07eL20TJ23kHgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:a00::/40 Signature Algorithm: sha256WithRSAEncryption 5b:b9:d0:a6:a6:ee:18:90:71:68:00:80:9c:51:39:49:07:40: e0:2c:38:ea:d9:2c:37:d2:7c:5d:2f:c2:1f:5b:73:ac:2c:8e: 25:45:eb:bb:9e:f7:0d:81:f2:71:ca:cf:04:a8:cb:a4:01:57: 44:80:04:3c:6a:c8:6b:1b:52:98:df:0e:14:49:ee:f5:ba:2b: e9:c1:52:93:fd:40:96:4e:cd:46:9e:30:f4:84:c8:99:90:28: 5c:b7:f3:f7:1a:69:b5:5c:99:f8:9d:f7:03:8d:f4:ed:67:6f: b4:c0:c4:86:44:d2:35:73:4c:80:e9:35:67:c2:e9:b7:9b:cf: ee:4d:c4:bc:6a:9d:34:ad:3a:97:54:91:c4:7b:fc:f4:33:d3: c2:2c:0d:cd:fd:8f:3f:88:68:d4:76:16:90:4d:25:71:36:27: bd:dc:53:b2:01:72:4b:6f:19:03:7c:d2:23:b7:db:aa:8e:10: 79:31:94:df:fd:f9:18:1f:1f:e6:4f:e5:89:6c:79:43:3d:fe: 49:c2:0a:98:4f:9b:e1:59:c1:fb:d5:65:20:3e:3a:fd:c1:86: 80:0f:1b:7c:27:54:03:a3:7e:9c:c8:55:a8:4b:12:c9:18:38: a2:2f:73:7d:dd:61:67:08:a7:3c:96:83:6b:3a:28:05:9b:9f: 51:f8:2e:d5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/haoJJTZ2T1D3HULGeWJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRjZmQzN2VmYmZjNGZlMDZmYjRlZGUyZjZkMTMyNzZkZTQxZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9lCe6jC1t07Jyu3dL5g8HzfOOuF hYsiFNtIjADdmMXLu6WodaOkcEABjfhyMvZW+WPShFOQsyP2fFuxTvbKWkw1EvQK rUoTGGPIa+9wsmd6Nw0mh1lngZ9IRg/tD4a5+B6U23tTtvt8gWxisUsgnjpD9Vie IQHhm5npRT0PDz7BG9n7310cLyFpTVGLXoQ1+EU9CUS2WTVnHLpt9ZYAAY5Ndy8t x2j5HOjBv+mgWWR46QuM7pSR4wEjLV58J9fIloTcpMke/jy48PtO+3jAG1qmR5Uw Cbbh9H8/GWTM8yeiH6RCufLVnImhnQhTk3cRStWGjD5AWVz7mIvjDaF3CQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIvc/Tfvv8T+BvtO3i9tEydt5B4IMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvaTl6OU4tLV94UDRHLTA3ZUwyMFRKMjNrSGdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAow DQYJKoZIhvcNAQELBQADggEBAFu50Kam7hiQcWgAgJxROUkHQOAsOOrZLDfSfF0v wh9bc6wsjiVF67ue9w2B8nHKzwSoy6QBV0SABDxqyGsbUpjfDhRJ7vW6K+nBUpP9 QJZOzUaeMPSEyJmQKFy38/caabVcmfid9wON9O1nb7TAxIZE0jVzTIDpNWfC6beb z+5NxLxqnTStOpdUkcR7/PQz08IsDc39jz+IaNR2FpBNJXE2J73cU7IBcktvGQN8 0iO326qOEHkxlN/9+RgfH+ZP5YlseUM9/knCCphPm+FZwfvVZSA+Ov3BhoAPG3wn VAOjfpzIVahLEskYOKIvc33dYWcIpzyWg2s6KAWbn1H4LtU= -----END CERTIFICATE-----Generated at Wed Jan 21 11:59:25 2026 by rpki-client