This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ovKVEkZNNCPzH3uyN1VuTfdSBiM.roa File: ovKVEkZNNCPzH3uyN1VuTfdSBiM.roa (raw, json) Hash identifier: DRDbwxVNRcW9njG9nyD8SQUIb3FYB0zMiTatnt6Zf+8= Subject key identifier: A2:F2:95:12:46:4D:34:23:F3:1F:7B:B2:37:55:6E:4D:F7:52:06:23 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85937AF26E3380E968A5A7D50D2B94 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ovKVEkZNNCPzH3uyN1VuTfdSBiM.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200731 IP address blocks: 2a0f:b240:5e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:93:7a:f2:6e:33:80:e9:68:a5:a7:d5:0d:2b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f29512464d3423f31f7bb237556e4df7520623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:88:ed:30:03:46:9a:bb:df:21:ab:9b:89: b8:76:03:e8:52:7f:ad:32:a3:c0:b9:ce:a5:6c:20: 85:aa:5d:02:46:5e:56:6c:8e:b3:cd:d2:64:ad:a5: d8:5c:b8:df:3b:0a:dd:31:53:9f:ae:c8:eb:3d:b5: bd:ce:7c:f7:74:fc:a4:33:a7:eb:d1:1b:4f:d2:0f: d3:e7:af:32:95:c5:c2:55:55:62:3f:92:2a:a3:36: ef:94:2c:da:c3:9e:16:8e:99:bf:a8:01:6e:7a:6b: 2a:a2:23:90:f1:8a:41:1e:9a:5c:a5:d3:4d:bc:c6: 3a:91:31:e2:e5:b5:2f:fe:0c:3d:a0:30:85:4a:03: 8f:96:33:ea:ba:c4:52:03:b5:33:df:97:22:cc:42: 05:4a:bc:c8:c2:98:2d:06:b0:a3:bb:9d:62:7e:3e: 2c:75:55:67:e2:7d:09:50:f0:ec:50:09:f4:72:d4: b4:07:80:ad:fe:03:ae:fe:ce:d4:e0:bb:f6:bd:3d: f4:24:b1:38:99:37:d7:20:f4:9f:6c:36:f0:73:54: 35:40:5a:14:1f:a3:9f:55:f3:3d:7a:83:4a:8b:90: d3:0e:2e:1e:33:16:f5:88:ed:7e:6e:56:fe:f5:0d: 7b:08:77:04:8d:fd:d5:05:2b:62:03:f5:8f:8a:b4: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F2:95:12:46:4D:34:23:F3:1F:7B:B2:37:55:6E:4D:F7:52:06:23 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ovKVEkZNNCPzH3uyN1VuTfdSBiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5e00::/40 Signature Algorithm: sha256WithRSAEncryption 43:60:92:3a:4f:52:4f:29:f4:86:3c:07:44:a0:cb:61:58:5c: f4:a0:fc:ab:8d:ec:03:30:66:63:24:6a:b7:1f:39:a3:53:6f: d8:34:50:76:91:68:e2:ee:78:fc:27:d1:a8:a1:dc:41:80:bf: 92:2b:c2:0c:af:9e:f6:d7:03:7f:11:ae:dc:ad:ce:f4:cd:7f: 46:a9:e9:66:02:e9:79:df:d5:10:bf:58:d9:7f:b7:2f:59:01: c6:ac:4a:a1:40:38:61:ce:f9:14:62:0d:71:11:c9:b9:96:97: 1d:07:ce:75:90:d4:80:10:0b:39:86:57:0e:f3:36:15:60:86: b5:ff:65:98:1e:18:89:71:1e:8e:b1:36:5b:22:65:57:1c:78: b9:7b:54:10:24:a5:aa:e1:ba:7e:70:22:fe:c4:b5:6d:41:0b: 84:47:b3:27:d4:48:26:36:17:85:a6:3a:15:d2:ff:d7:c0:7f: 68:67:06:5a:72:38:6e:ac:3a:97:93:56:aa:e6:1d:59:ca:34: fa:51:00:b0:8a:f0:eb:16:ad:43:f2:2e:f3:4f:bb:db:08:d0: 21:63:5b:f5:bf:ee:ee:2a:12:d8:3c:4d:76:e4:14:4d:2d:df: 58:3a:67:c8:fe:73:c7:5f:67:7d:db:c2:ca:be:c8:12:f0:56: 36:83:0a:52 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZN68m4zgOlopafVDSuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmYyOTUxMjQ2NGQzNDIzZjMxZjdiYjIzNzU1NmU0ZGY3NTIwNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n6I7TADRpq73yGrm4m4dgPoUn+t MqPAuc6lbCCFql0CRl5WbI6zzdJkraXYXLjfOwrdMVOfrsjrPbW9znz3dPykM6fr 0RtP0g/T568ylcXCVVViP5IqozbvlCzaw54Wjpm/qAFuemsqoiOQ8YpBHppcpdNN vMY6kTHi5bUv/gw9oDCFSgOPljPqusRSA7Uz35cizEIFSrzIwpgtBrCju51ifj4s dVVn4n0JUPDsUAn0ctS0B4Ct/gOu/s7U4Lv2vT30JLE4mTfXIPSfbDbwc1Q1QFoU H6OfVfM9eoNKi5DTDi4eMxb1iO1+blb+9Q17CHcEjf3VBStiA/WPirSA1wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKLylRJGTTQj8x97sjdVbk33UgYjMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvb3ZLVkVrWk5OQ1B6SDN1eU4xVnVUZmRTQmlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQF4w DQYJKoZIhvcNAQELBQADggEBAENgkjpPUk8p9IY8B0Sgy2FYXPSg/KuN7AMwZmMk arcfOaNTb9g0UHaRaOLuePwn0aih3EGAv5IrwgyvnvbXA38RrtytzvTNf0ap6WYC 6Xnf1RC/WNl/ty9ZAcasSqFAOGHO+RRiDXERybmWlx0HznWQ1IAQCzmGVw7zNhVg hrX/ZZgeGIlxHo6xNlsiZVcceLl7VBAkparhun5wIv7EtW1BC4RHsyfUSCY2F4Wm OhXS/9fAf2hnBlpyOG6sOpeTVqrmHVnKNPpRALCK8OsWrUPyLvNPu9sI0CFjW/W/ 7u4qEtg8TXbkFE0t31g6Z8j+c8dfZ33bwsq+yBLwVjaDClI= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:48 2026 by rpki-client