This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pLo9X5WFvm0cEPkp4TAm7j28CvQ.roa File: pLo9X5WFvm0cEPkp4TAm7j28CvQ.roa (raw, json) Hash identifier: 7H4tTg7OhOoKH6LRyQK7wD40ozsLfUux4E2IXz1sOeg= Subject key identifier: A4:BA:3D:5F:95:85:BE:6D:1C:10:F9:29:E1:30:26:EE:3D:BC:0A:F4 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85989008B0B7D1F7E5DDA41CBFA28D Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pLo9X5WFvm0cEPkp4TAm7j28CvQ.roa Signing time: Fri 02 Jan 2026 16:23:40 +0000 ROA not before: Fri 02 Jan 2026 16:23:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206193 IP address blocks: 2a0f:b240:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:98:90:08:b0:b7:d1:f7:e5:dd:a4:1c:bf:a2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ba3d5f9585be6d1c10f929e13026ee3dbc0af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:7c:46:ef:eb:12:fe:20:16:da:1a:1f:71: bd:01:17:6e:70:e6:86:d1:cd:9c:13:f9:ac:4a:42: df:14:54:d8:cc:e2:71:7f:1a:8f:7b:70:50:33:4c: 3d:9e:ee:c9:cf:7f:73:8e:b6:52:fb:9b:5c:35:8d: a8:c3:0c:0f:cf:7e:84:fc:c5:a1:33:98:b3:4c:ff: 40:13:15:be:e3:c4:eb:3a:10:f6:2e:bf:03:88:f9: 3a:29:2b:77:37:58:c2:98:5d:17:66:47:ad:f9:9a: fb:76:26:70:f2:b6:30:b1:cc:bb:54:96:32:15:cb: f0:db:c3:7e:46:02:14:37:4d:c3:e2:32:fa:ab:15: e0:40:0c:7a:0f:f0:b2:e4:07:c5:9d:2c:aa:f4:56: 83:fa:11:b0:93:84:c7:24:9a:4e:87:1a:87:a0:1f: bf:38:7f:d3:f4:a0:89:a5:44:04:f3:2e:64:aa:3d: 60:c1:2c:81:cb:a8:bf:62:47:69:d7:3e:bd:7c:b5: a1:a4:ec:4b:14:17:37:27:b6:69:84:0a:a0:c1:b8: 61:30:b5:f6:c0:e6:37:51:7b:86:8c:8d:26:da:d4: 2a:57:88:e3:37:81:00:25:c0:85:1e:8b:92:c3:14: 1c:84:1d:bd:38:a2:04:b1:99:8d:79:56:0c:c8:b7: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BA:3D:5F:95:85:BE:6D:1C:10:F9:29:E1:30:26:EE:3D:BC:0A:F4 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pLo9X5WFvm0cEPkp4TAm7j28CvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:c00::/40 Signature Algorithm: sha256WithRSAEncryption 7c:65:15:7d:d3:87:52:f2:70:7c:16:33:2c:80:64:52:4d:b0: dd:89:29:e6:1c:e7:63:58:1d:f1:a7:7c:d1:32:5a:7e:4d:69: e0:74:af:4e:39:ed:48:d4:07:3d:b2:86:c0:0d:d8:6c:46:1b: 94:23:69:7e:08:10:a3:83:dc:13:ca:7e:6c:01:ab:98:ac:f0: e3:ec:09:57:d8:3b:c1:88:fd:c5:78:53:51:df:a1:ce:ad:f7: 75:3f:79:2f:8c:2d:e4:1a:e1:69:bc:e0:32:f1:08:e9:73:6c: c4:04:bf:bf:19:a6:36:43:13:b0:c1:81:7e:09:22:ef:8d:b6: 3c:6a:42:8d:1b:34:3c:85:ef:2e:8a:6a:44:64:0b:6d:a8:45: 19:60:30:4e:59:6d:fb:7b:b4:2d:fe:a0:9c:6d:ea:81:86:b9: 07:02:ee:ce:17:f1:65:ab:42:53:a0:d0:37:2b:31:35:57:50: aa:b5:e2:d5:33:56:36:5f:eb:c1:d8:97:35:c7:df:a3:0d:14: 42:64:3f:43:67:61:ae:2f:e9:de:f5:94:e1:46:7b:60:2f:81: 63:35:87:0c:a7:48:9a:92:a7:c9:69:30:eb:6f:83:28:46:11: 9a:91:e7:52:62:ec:e5:22:f0:eb:ec:85:0e:d2:8a:14:2f:b3: 03:dc:1c:e6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZiQCLC30ffl3aQcv6KNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGJhM2Q1Zjk1ODViZTZkMWMxMGY5MjllMTMwMjZlZTNkYmMwYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeB8Ru/rEv4gFtoaH3G9ARducOaG 0c2cE/msSkLfFFTYzOJxfxqPe3BQM0w9nu7Jz39zjrZS+5tcNY2owwwPz36E/MWh M5izTP9AExW+48TrOhD2Lr8DiPk6KSt3N1jCmF0XZket+Zr7diZw8rYwscy7VJYy Fcvw28N+RgIUN03D4jL6qxXgQAx6D/Cy5AfFnSyq9FaD+hGwk4THJJpOhxqHoB+/ OH/T9KCJpUQE8y5kqj1gwSyBy6i/Ykdp1z69fLWhpOxLFBc3J7ZphAqgwbhhMLX2 wOY3UXuGjI0m2tQqV4jjN4EAJcCFHouSwxQchB29OKIEsZmNeVYMyLdWwwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKS6PV+Vhb5tHBD5KeEwJu49vAr0MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvcExvOVg1V0Z2bTBjRVBrcDRUQW03ajI4Q3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAww DQYJKoZIhvcNAQELBQADggEBAHxlFX3Th1LycHwWMyyAZFJNsN2JKeYc52NYHfGn fNEyWn5NaeB0r0457UjUBz2yhsAN2GxGG5QjaX4IEKOD3BPKfmwBq5is8OPsCVfY O8GI/cV4U1Hfoc6t93U/eS+MLeQa4Wm84DLxCOlzbMQEv78ZpjZDE7DBgX4JIu+N tjxqQo0bNDyF7y6KakRkC22oRRlgME5Zbft7tC3+oJxt6oGGuQcC7s4X8WWrQlOg 0DcrMTVXUKq14tUzVjZf68HYlzXH36MNFEJkP0NnYa4v6d71lOFGe2AvgWM1hwyn SJqSp8lpMOtvgyhGEZqR51Ji7OUi8OvshQ7SihQvswPcHOY= -----END CERTIFICATE-----Generated at Tue Jan 20 00:27:45 2026 by rpki-client