This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rV0BW2q8FoJVzDy6NIpG5S5Hwpo.roa File: rV0BW2q8FoJVzDy6NIpG5S5Hwpo.roa (raw, json) Hash identifier: OVI4L+fQqba63cNJBDc7JE3k+Jr2Pl3uJefkx50Ma6U= Subject key identifier: AD:5D:01:5B:6A:BC:16:82:55:CC:3C:BA:34:8A:46:E5:2E:47:C2:9A Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A051034CB4B4E22CB4C76EA7FE4E Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rV0BW2q8FoJVzDy6NIpG5S5Hwpo.roa Signing time: Fri 02 Jan 2026 16:23:42 +0000 ROA not before: Fri 02 Jan 2026 16:23:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212149 IP address blocks: 2a0f:b241:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a0:51:03:4c:b4:b4:e2:2c:b4:c7:6e:a7:fe:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad5d015b6abc168255cc3cba348a46e52e47c29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:ca:dd:b9:96:d0:e0:9b:8d:be:39:a6:ec: a3:98:3b:04:f4:b3:95:67:03:a4:c0:2d:72:5b:00: 79:65:95:66:61:86:65:0a:01:50:07:a0:82:16:c9: 38:9e:8c:91:08:ea:d5:27:ab:3c:26:00:16:a7:a7: 0c:d8:cf:89:d3:32:6a:cc:7d:47:8e:e0:d2:67:d7: 22:ab:63:3b:e8:fb:67:20:18:56:0b:d6:c6:49:5c: 6d:82:0b:e8:1d:ce:ae:e5:93:8b:7b:5a:c1:da:e9: 51:5d:fb:58:fa:f3:35:75:94:20:ad:25:53:43:5a: 21:20:da:79:82:3f:17:18:60:b3:78:90:48:d7:1a: 8a:4f:32:11:06:b2:ea:5a:c0:09:77:53:0d:06:e9: e2:41:19:e5:ea:4e:b2:d8:5b:f1:b0:f7:27:b9:89: 0b:2d:9b:bf:d5:43:0d:74:99:a1:cf:90:72:1d:4d: ab:ad:a2:d3:42:42:24:1a:8f:67:6a:38:24:56:49: 79:84:99:88:18:b8:64:73:e3:e5:d9:af:68:06:ef: 54:61:61:86:e2:d0:d1:3e:bd:94:f9:fc:46:3e:9f: 0c:d0:09:96:95:8a:cd:b8:cb:7a:ca:8f:5b:18:f5: be:3b:be:97:9b:9b:d9:9f:c8:13:10:cd:5f:fd:d3: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:01:5B:6A:BC:16:82:55:CC:3C:BA:34:8A:46:E5:2E:47:C2:9A X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rV0BW2q8FoJVzDy6NIpG5S5Hwpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b241:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 26:83:82:58:65:25:8e:cb:7b:5d:ca:cb:43:21:72:2d:7b:10: 80:5e:9c:cd:45:e3:2b:c0:6a:5f:a3:1e:e7:82:d6:17:42:9a: 7b:b8:ef:e6:f3:2c:b9:d7:9c:4f:d2:22:64:90:c6:eb:54:6f: e9:8a:48:58:f3:04:64:0d:c7:e6:a0:6a:f4:19:07:91:32:83: bf:10:a4:3e:46:1d:ff:0f:3b:76:27:f7:8e:55:c5:f0:ef:a9: 2f:04:da:46:b9:3c:04:f8:16:d5:3b:c5:d3:4d:1b:20:34:98: 36:6a:a4:0e:2c:90:55:d7:90:cd:e9:30:7d:6a:46:e3:26:fb: 0c:07:3b:f1:73:d8:3b:eb:d7:4d:d2:b3:4b:4e:df:62:0b:18: da:3b:98:40:62:03:1e:cb:63:56:9e:94:e7:cb:55:59:34:ad: 62:74:06:b2:9f:56:3a:4a:ff:75:ef:00:99:94:fe:69:fb:e2: 96:bd:b0:f2:1a:e0:5a:79:06:81:e0:19:6e:71:da:8d:38:b4: 03:fb:e9:ab:84:dc:39:8a:3a:61:49:28:9d:d9:fd:63:bc:1c: 8a:c9:c2:af:d5:a9:85:5d:f8:84:a5:07:5f:96:4d:5c:a8:a9: b9:88:51:1b:85:d6:5e:5e:bc:71:7c:27:99:2f:67:d5:80:dd: 1b:e1:17:a7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/haBRA0y0tOIstMdup/5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDVkMDE1YjZhYmMxNjgyNTVjYzNjYmEzNDhhNDZlNTJlNDdjMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrTK3bmW0OCbjb45puyjmDsE9LOV ZwOkwC1yWwB5ZZVmYYZlCgFQB6CCFsk4noyRCOrVJ6s8JgAWp6cM2M+J0zJqzH1H juDSZ9ciq2M76PtnIBhWC9bGSVxtggvoHc6u5ZOLe1rB2ulRXftY+vM1dZQgrSVT Q1ohINp5gj8XGGCzeJBI1xqKTzIRBrLqWsAJd1MNBuniQRnl6k6y2FvxsPcnuYkL LZu/1UMNdJmhz5ByHU2rraLTQkIkGo9najgkVkl5hJmIGLhkc+Pl2a9oBu9UYWGG 4tDRPr2U+fxGPp8M0AmWlYrNuMt6yo9bGPW+O76Xm5vZn8gTEM1f/dNOlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK1dAVtqvBaCVcw8ujSKRuUuR8KaMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvclYwQlcycThGb0pWekR5Nk5JcEc1UzVId3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQbAL MA0GCSqGSIb3DQEBCwUAA4IBAQAmg4JYZSWOy3tdystDIXItexCAXpzNReMrwGpf ox7ngtYXQpp7uO/m8yy515xP0iJkkMbrVG/pikhY8wRkDcfmoGr0GQeRMoO/EKQ+ Rh3/Dzt2J/eOVcXw76kvBNpGuTwE+BbVO8XTTRsgNJg2aqQOLJBV15DN6TB9akbj JvsMBzvxc9g769dN0rNLTt9iCxjaO5hAYgMey2NWnpTny1VZNK1idAayn1Y6Sv91 7wCZlP5p++KWvbDyGuBaeQaB4BlucdqNOLQD++mrhNw5ijphSSid2f1jvByKycKv 1amFXfiEpQdflk1cqKm5iFEbhdZeXrxxfCeZL2fVgN0b4Ren -----END CERTIFICATE-----Generated at Wed Jan 21 12:01:16 2026 by rpki-client