This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rYuRfOyOJryEAJGRgu_AiMZaLTk.roa File: rYuRfOyOJryEAJGRgu_AiMZaLTk.roa (raw, json) Hash identifier: MwilPfKCgzoItdTQ6PkfA2qHVSGctMhDGa+Mz9YI+Mg= Subject key identifier: AD:8B:91:7C:EC:8E:26:BC:84:00:91:91:82:EF:C0:88:C6:5A:2D:39 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F859F0C07278E201AEDEBFCC61E8EAD Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rYuRfOyOJryEAJGRgu_AiMZaLTk.roa Signing time: Fri 02 Jan 2026 16:23:42 +0000 ROA not before: Fri 02 Jan 2026 16:23:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211562 IP address blocks: 2a0f:b240:5400::/40 maxlen: 48 2a0f:b241:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:9f:0c:07:27:8e:20:1a:ed:eb:fc:c6:1e:8e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad8b917cec8e26bc8400919182efc088c65a2d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:cc:d1:4d:52:31:84:25:8d:33:7f:7f:d2: 54:39:f6:ac:06:1b:e1:1a:bc:ae:a3:0d:d0:4a:81: d7:4c:8e:11:3a:a7:b7:27:16:eb:34:27:06:03:42: b4:de:a9:45:36:13:4b:76:12:17:5f:2d:ec:b6:12: ed:4a:79:d7:ae:25:53:8e:14:c0:6e:03:1d:70:9f: 23:9e:7a:ee:77:94:f1:36:ee:a8:66:a1:20:47:aa: 05:98:e9:12:f6:16:9e:f2:c7:0e:6e:eb:ea:1b:1d: db:d8:d3:35:37:d2:3d:20:b5:d2:87:63:ae:da:23: 3c:04:d5:b5:f4:d3:2e:0e:29:05:58:15:3b:3d:31: 80:7a:e0:10:11:f7:5a:94:6c:fa:93:d3:74:0c:1a: 48:f5:05:3d:11:b3:f4:18:33:81:67:21:d0:df:52: ff:93:f3:9f:b6:c0:1e:7f:6f:13:2e:3b:18:31:f9: d6:f7:84:b0:4f:9d:6c:79:9b:20:de:17:5e:a0:79: 04:07:ae:12:d0:b9:d0:2f:cd:0b:58:92:c9:ad:12: 31:f1:11:1f:9b:c6:b6:ee:e0:c2:e0:c6:c8:0f:c6: 18:bc:85:5d:d3:8f:25:04:2a:69:0f:77:cb:54:af: 8d:4a:a5:1d:d9:d2:d4:62:f0:2a:5e:ac:df:53:3a: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8B:91:7C:EC:8E:26:BC:84:00:91:91:82:EF:C0:88:C6:5A:2D:39 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rYuRfOyOJryEAJGRgu_AiMZaLTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5400::/40 2a0f:b241:4::/48 Signature Algorithm: sha256WithRSAEncryption 75:ef:d0:b6:8e:6e:6c:ca:30:79:0b:3d:df:20:c1:81:6a:ba: 5a:28:47:bd:e7:12:98:e6:1b:5d:77:ab:0f:76:0c:e4:78:f8: ee:a3:99:b8:7e:f6:53:17:77:e7:e3:35:bc:e7:d5:63:26:89: 08:ef:5f:49:bb:11:08:30:63:a2:76:30:05:1d:4b:25:10:57: f9:02:4c:87:46:49:b2:6a:d0:c0:fd:a1:66:b6:f1:d8:d2:81: 8a:76:53:57:06:bd:ff:3e:f1:39:ed:dd:06:98:37:fe:bc:d3: d6:26:90:e7:0e:31:cd:d5:9f:b1:dc:ef:63:9d:af:26:85:7e: 9d:82:a5:7c:51:3e:f8:09:5f:7b:59:e4:3d:c4:03:1d:08:56: fb:22:f5:3e:59:4c:7e:52:c9:36:9d:5e:d8:1c:d6:61:e8:1b: c8:c9:d1:fd:92:a4:01:b7:c7:89:89:93:34:71:5c:95:57:35: 91:da:de:65:0a:d3:66:cf:f1:a2:ce:89:7d:a4:65:88:9a:58: fb:3a:61:af:f7:b6:8c:ab:eb:0b:d8:2c:4c:8b:fd:d8:fc:a2: f5:2b:86:d6:c9:31:33:c6:ae:a5:60:c1:0b:64:f8:4e:b8:e3: dd:c6:20:9c:0e:f5:09:8e:c5:ad:21:6c:32:b8:01:37:0f:02: c9:8c:26:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/hZ8MByeOIBrt6/zGHo6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDhiOTE3Y2VjOGUyNmJjODQwMDkxOTE4MmVmYzA4OGM2NWEyZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YzM0U1SMYQljTN/f9JUOfasBhvh Gryuow3QSoHXTI4ROqe3JxbrNCcGA0K03qlFNhNLdhIXXy3sthLtSnnXriVTjhTA bgMdcJ8jnnrud5TxNu6oZqEgR6oFmOkS9hae8scObuvqGx3b2NM1N9I9ILXSh2Ou 2iM8BNW19NMuDikFWBU7PTGAeuAQEfdalGz6k9N0DBpI9QU9EbP0GDOBZyHQ31L/ k/OftsAef28TLjsYMfnW94SwT51seZsg3hdeoHkEB64S0LnQL80LWJLJrRIx8REf m8a27uDC4MbID8YYvIVd048lBCppD3fLVK+NSqUd2dLUYvAqXqzfUzrbOQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFK2LkXzsjia8hACRkYLvwIjGWi05MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvcll1UmZPeU9KcnlFQUpHUmd1X0FpTVphTFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg+yQFQD BwAqD7JBAAQwDQYJKoZIhvcNAQELBQADggEBAHXv0LaObmzKMHkLPd8gwYFquloo R73nEpjmG113qw92DOR4+O6jmbh+9lMXd+fjNbzn1WMmiQjvX0m7EQgwY6J2MAUd SyUQV/kCTIdGSbJq0MD9oWa28djSgYp2U1cGvf8+8Tnt3QaYN/6809YmkOcOMc3V n7Hc72OdryaFfp2CpXxRPvgJX3tZ5D3EAx0IVvsi9T5ZTH5SyTadXtgc1mHoG8jJ 0f2SpAG3x4mJkzRxXJVXNZHa3mUK02bP8aLOiX2kZYiaWPs6Ya/3toyr6wvYLEyL /dj8ovUrhtbJMTPGrqVgwQtk+E64493GIJwO9QmOxa0hbDK4ATcPAsmMJjY= -----END CERTIFICATE-----Generated at Wed Jan 21 11:59:23 2026 by rpki-client