This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s6umnF9s0BCncDczoWjLW9upmMY.roa File: s6umnF9s0BCncDczoWjLW9upmMY.roa (raw, json) Hash identifier: uyE8v5xF3OKOEc7V5nNqI8PH7Jrc6cpopSNzsqeFBJM= Subject key identifier: B3:AB:A6:9C:5F:6C:D0:10:A7:70:37:33:A1:68:CB:5B:DB:A9:98:C6 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019BB31C4B384B068BC6898B51957F23AD12 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s6umnF9s0BCncDczoWjLW9upmMY.roa Signing time: Mon 12 Jan 2026 16:48:54 +0000 ROA not before: Mon 12 Jan 2026 16:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213413 IP address blocks: 2a0f:b240:13::/48 maxlen: 48 2a0f:b240:14::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:1c:4b:38:4b:06:8b:c6:89:8b:51:95:7f:23:ad:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 12 16:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3aba69c5f6cd010a7703733a168cb5bdba998c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:60:20:b8:9e:6e:49:41:00:56:ee:bb:2e: 07:a4:04:ab:49:10:e4:37:45:23:d0:34:39:1d:97: 1a:e7:50:11:8e:21:ae:f0:c2:bc:7d:44:8c:4e:ea: 89:76:da:c4:13:ef:cc:ea:7d:12:3b:e7:8e:0b:5c: ea:54:3a:ae:53:92:a3:fd:31:9c:c1:fd:b8:26:ac: e1:73:cd:32:64:03:1f:62:a9:8b:3e:6e:8d:b5:0e: fb:9b:e5:b9:bd:70:13:42:3b:d2:04:69:1c:b0:2d: 24:f3:48:74:f9:0c:21:0e:a2:7d:de:eb:ff:db:f0: a5:38:af:af:a1:9e:ae:54:3f:6d:54:0a:5c:c1:40: 7b:59:6a:57:24:62:ee:48:34:a1:b8:18:22:b9:05: 90:36:94:e3:51:a7:d6:05:79:09:d8:90:8a:fd:ad: 1b:0e:3c:78:0c:50:9c:34:fd:3a:74:22:d4:f0:a1: 2d:a1:cc:6e:aa:c8:f9:81:79:85:58:88:2d:e3:03: a7:71:dc:32:7e:02:d8:7a:ff:93:18:b4:82:fd:b9: 6c:36:17:99:ad:14:81:a2:22:7a:c2:00:6b:d0:8e: cb:0e:62:45:f6:c4:bd:72:05:12:d3:44:20:b1:75: 99:a3:85:ef:97:53:23:79:49:58:24:6b:11:d7:43: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:A6:9C:5F:6C:D0:10:A7:70:37:33:A1:68:CB:5B:DB:A9:98:C6 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s6umnF9s0BCncDczoWjLW9upmMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:13::-2a0f:b240:17:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3b:2d:2f:aa:fc:78:1e:29:5e:54:78:fb:25:e3:7a:12:cd:ad: b6:b1:62:c4:f4:60:b4:4f:34:4a:69:1e:f2:b2:76:8c:f5:12: 4b:2f:a3:d0:6b:54:b2:01:1e:a3:4f:c3:2a:82:d2:c9:aa:ae: cb:d3:6a:78:ee:a8:b9:4b:44:f1:04:8a:3b:05:29:1d:18:b1: 0c:be:97:e8:c0:22:fb:9d:05:a5:2e:b6:46:31:ee:7d:e5:d0: 79:12:b9:d4:33:78:48:34:0f:a6:e6:0d:17:4e:1b:0c:67:f4: c1:8b:99:44:6c:b3:97:78:f8:df:b7:c0:4e:1b:31:1e:75:24: 8f:58:2f:9e:6e:36:cf:2c:e7:bb:db:03:92:eb:87:33:71:4c: 44:47:00:e9:82:1c:af:cb:dc:4b:ec:5b:58:f0:b2:89:4e:99: a5:99:db:91:76:bd:db:d7:5c:a1:1f:e8:e8:73:ea:f1:04:f5: 63:23:dd:e3:65:7a:06:16:9a:50:a0:4d:54:69:f0:74:93:cc: 12:4c:a3:fe:e1:ae:43:e9:72:a7:a8:34:1a:b2:56:20:c6:00: 31:6e:12:05:aa:7e:d6:6c:32:4d:34:0c:46:d0:ea:b2:c7:3d: f1:9d:a3:68:35:92:66:ee:ac:8d:69:18:d1:c2:fc:0e:39:df: 56:a2:8c:f5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuzHEs4SwaLxomLUZV/I60SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTEyMTY0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2FiYTY5YzVmNmNkMDEwYTc3MDM3MzNhMTY4Y2I1YmRiYTk5OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXxgILiebklBAFbuuy4HpASrSRDk N0Uj0DQ5HZca51ARjiGu8MK8fUSMTuqJdtrEE+/M6n0SO+eOC1zqVDquU5Kj/TGc wf24Jqzhc80yZAMfYqmLPm6NtQ77m+W5vXATQjvSBGkcsC0k80h0+QwhDqJ93uv/ 2/ClOK+voZ6uVD9tVApcwUB7WWpXJGLuSDShuBgiuQWQNpTjUafWBXkJ2JCK/a0b Djx4DFCcNP06dCLU8KEtocxuqsj5gXmFWIgt4wOncdwyfgLYev+TGLSC/blsNheZ rRSBoiJ6wgBr0I7LDmJF9sS9cgUS00QgsXWZo4Xvl1MjeUlYJGsR10N1JwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLOrppxfbNAQp3A3M6Foy1vbqZjGMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvczZ1bW5GOXMwQkNuY0Rjem9XakxXOXVwbU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqD7JA ABMDBwMqD7JAABAwDQYJKoZIhvcNAQELBQADggEBADstL6r8eB4pXlR4+yXjehLN rbaxYsT0YLRPNEppHvKydoz1Eksvo9BrVLIBHqNPwyqC0smqrsvTanjuqLlLRPEE ijsFKR0YsQy+l+jAIvudBaUutkYx7n3l0HkSudQzeEg0D6bmDRdOGwxn9MGLmURs s5d4+N+3wE4bMR51JI9YL55uNs8s57vbA5LrhzNxTERHAOmCHK/L3EvsW1jwsolO maWZ25F2vdvXXKEf6Ohz6vEE9WMj3eNlegYWmlCgTVRp8HSTzBJMo/7hrkPpcqeo NBqyViDGADFuEgWqftZsMk00DEbQ6rLHPfGdo2g1kmburI1pGNHC/A4531aijPU= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:36 2026 by rpki-client