This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nNL7m4cFIn3AsW-_2LWm3CqcFso.roa File: nNL7m4cFIn3AsW-_2LWm3CqcFso.roa (raw, json) Hash identifier: Piisxe1oWuKePVD0DABl8ilZZnMBhOuTuszhtaX6Gqg= Subject key identifier: 9C:D2:FB:9B:87:05:22:7D:C0:B1:6F:BF:D8:B5:A6:DC:2A:9C:16:CA Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F859DB037D261C97EE33F451A6F4012 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nNL7m4cFIn3AsW-_2LWm3CqcFso.roa Signing time: Fri 02 Jan 2026 16:23:41 +0000 ROA not before: Fri 02 Jan 2026 16:23:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210578 IP address blocks: 2a0f:b240:7700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:9d:b0:37:d2:61:c9:7e:e3:3f:45:1a:6f:40:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cd2fb9b8705227dc0b16fbfd8b5a6dc2a9c16ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:58:5d:4a:10:33:7c:4e:38:ee:61:c4:bd: 2a:2f:b1:34:c9:34:a3:96:10:ef:d4:21:83:73:20: 51:3c:a6:ba:f3:dd:fc:89:46:3d:fe:f0:c9:7a:a1: 39:13:e6:96:83:b0:45:c8:42:5f:49:e7:97:1f:34: 5f:03:6f:98:65:cd:9c:1c:82:af:41:7d:19:9c:7b: a8:7c:21:d0:7d:2e:f9:3f:e7:11:d2:69:07:49:bd: 70:e4:79:46:b6:92:3e:29:29:df:4d:d6:c9:52:1f: b6:6e:b6:bd:56:d3:a7:03:c3:6f:e3:06:03:56:f0: 58:c3:b5:ac:8d:1d:d5:2b:2e:9e:39:4f:13:a2:77: ab:0c:f2:ac:c7:f9:d4:65:38:ed:33:9b:df:96:c3: 85:8c:01:ef:a6:a7:12:6d:5d:6b:98:36:45:00:cb: b2:40:b1:b4:27:7c:7f:82:56:8f:49:22:e1:a9:ef: 1b:d8:e9:75:86:fa:5d:bd:30:ec:8d:fd:6f:71:0f: bb:be:45:a2:4c:0a:32:d5:5a:ab:fd:3d:b4:81:84: 5b:9d:9a:27:69:bd:b7:1b:26:73:42:e9:dd:d5:df: b3:fe:60:4a:16:eb:fb:9e:da:bd:f8:d7:f0:ad:95: d5:59:74:cf:a7:45:40:b9:ab:b4:94:c7:1e:ac:10: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D2:FB:9B:87:05:22:7D:C0:B1:6F:BF:D8:B5:A6:DC:2A:9C:16:CA X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nNL7m4cFIn3AsW-_2LWm3CqcFso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7700::/40 Signature Algorithm: sha256WithRSAEncryption 36:64:86:2b:a7:d8:c1:54:1c:f3:35:1d:29:f3:da:08:c0:fe: c2:c0:dc:34:26:40:08:ac:4f:88:26:ca:13:29:77:a4:c7:da: 74:04:f5:15:3c:4a:0b:5a:e2:22:cd:3f:e9:00:6c:68:b8:55: df:0b:d2:23:4a:d1:9d:ca:31:d7:8e:60:36:ee:ac:fa:5c:ad: c3:d8:dd:c0:cf:de:4f:e1:e3:69:a6:90:79:6e:56:97:25:f0: 76:ee:fa:de:9b:ca:80:b2:55:43:02:6f:c9:17:02:6f:76:84: 8e:63:ea:a9:5b:17:7b:67:6b:47:a0:42:f6:e4:63:f4:bb:c5: 33:90:75:48:25:d4:31:81:5c:03:a4:83:e0:b1:52:6b:42:ac: 22:7c:43:2e:e2:e3:0c:ad:4c:fc:87:3e:d8:69:f7:9d:0d:e5: cd:ec:0e:9a:d7:fd:09:14:4e:7f:95:36:1b:8b:05:c0:0e:4a: 81:da:70:b4:0c:e0:33:ba:9c:32:0c:86:b7:e3:ec:29:d8:44: 8e:09:11:54:05:83:35:54:28:3d:af:86:cc:4c:86:15:ea:24: a9:93:61:fd:7f:3d:01:56:03:f2:10:df:ab:2a:f1:cb:c3:f7: 44:b5:e2:fe:08:bf:0c:50:f0:39:8c:99:1a:de:82:cc:8f:a4: 4b:ff:b3:0f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZ2wN9JhyX7jP0Uab0ASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2QyZmI5Yjg3MDUyMjdkYzBiMTZmYmZkOGI1YTZkYzJhOWMxNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0JYXUoQM3xOOO5hxL0qL7E0yTSj lhDv1CGDcyBRPKa68938iUY9/vDJeqE5E+aWg7BFyEJfSeeXHzRfA2+YZc2cHIKv QX0ZnHuofCHQfS75P+cR0mkHSb1w5HlGtpI+KSnfTdbJUh+2bra9VtOnA8Nv4wYD VvBYw7WsjR3VKy6eOU8TonerDPKsx/nUZTjtM5vflsOFjAHvpqcSbV1rmDZFAMuy QLG0J3x/glaPSSLhqe8b2Ol1hvpdvTDsjf1vcQ+7vkWiTAoy1Vqr/T20gYRbnZon ab23GyZzQund1d+z/mBKFuv7ntq9+NfwrZXVWXTPp0VAuau0lMcerBCwBQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJzS+5uHBSJ9wLFvv9i1ptwqnBbKMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvbk5MN200Y0ZJbjNBc1ctXzJMV20zQ3FjRnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQHcw DQYJKoZIhvcNAQELBQADggEBADZkhiun2MFUHPM1HSnz2gjA/sLA3DQmQAisT4gm yhMpd6TH2nQE9RU8Sgta4iLNP+kAbGi4Vd8L0iNK0Z3KMdeOYDburPpcrcPY3cDP 3k/h42mmkHluVpcl8Hbu+t6byoCyVUMCb8kXAm92hI5j6qlbF3tna0egQvbkY/S7 xTOQdUgl1DGBXAOkg+CxUmtCrCJ8Qy7i4wytTPyHPthp950N5c3sDprX/QkUTn+V NhuLBcAOSoHacLQM4DO6nDIMhrfj7CnYRI4JEVQFgzVUKD2vhsxMhhXqJKmTYf1/ PQFWA/IQ36sq8cvD90S14v4IvwxQ8DmMmRregsyPpEv/sw8= -----END CERTIFICATE-----Generated at Tue Jan 20 00:27:05 2026 by rpki-client