This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/teH5Lre9zCPHBomxaT93HMqtjhI.roa File: teH5Lre9zCPHBomxaT93HMqtjhI.roa (raw, json) Hash identifier: 1i3HQKd3MKsL8dezQd84AGwzy3RnLZ269Co2SGt6QMQ= Subject key identifier: B5:E1:F9:2E:B7:BD:CC:23:C7:06:89:B1:69:3F:77:1C:CA:AD:8E:12 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8590F8D674DCF0479E0447A46E9F19 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/teH5Lre9zCPHBomxaT93HMqtjhI.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198804 IP address blocks: 2a0f:b240:7a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:90:f8:d6:74:dc:f0:47:9e:04:47:a4:6e:9f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5e1f92eb7bdcc23c70689b1693f771ccaad8e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:29:c6:02:31:d8:3c:b0:0d:3c:db:ff:b9: 39:2e:6f:13:8e:28:c1:aa:8e:68:16:4f:8b:e2:c6: 6d:a7:8f:b3:59:e3:81:ca:7b:be:15:68:03:22:a4: 15:69:a0:c5:14:b5:51:6b:f2:c5:48:f0:59:a2:98: 90:9e:77:07:2e:5a:c6:01:28:00:91:9e:b9:84:f7: 73:14:5d:0f:3f:45:6d:ca:b5:a1:0f:bf:16:d7:71: 76:58:f5:fe:ea:23:96:0a:25:a7:5f:6c:54:2f:8c: ad:05:59:0d:e6:1b:43:f3:02:00:4d:9f:64:b1:2f: 4c:48:52:4e:43:f2:63:97:b0:48:2f:8b:95:a0:a1: 53:f0:7d:cd:88:54:08:32:c1:a3:8d:44:64:28:77: a7:8b:f7:96:24:af:49:bc:0a:c6:1b:5f:a1:3b:10: c5:a5:cb:c8:9f:13:eb:2d:5c:36:5f:6c:d1:e4:4d: 8d:81:0b:b3:af:eb:60:c5:f9:2e:71:05:0a:dd:15: 39:f0:51:ef:ed:b1:e8:94:26:4b:fc:87:18:a1:14: 8f:38:ac:00:9c:96:1c:b3:34:fe:bb:39:f8:c5:c2: f5:96:96:c2:97:03:25:a9:e6:af:05:27:17:84:bd: f6:cf:fd:dd:6a:68:a2:1b:ec:c6:2b:19:72:b2:e4: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:F9:2E:B7:BD:CC:23:C7:06:89:B1:69:3F:77:1C:CA:AD:8E:12 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/teH5Lre9zCPHBomxaT93HMqtjhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7a00::/40 Signature Algorithm: sha256WithRSAEncryption 3b:5e:8d:b3:86:0e:5c:ad:a4:52:04:e0:23:79:28:f6:2f:3d: 90:1d:77:81:4b:ff:e0:c1:5c:a4:d2:be:af:80:4f:43:ef:aa: 25:7f:0a:26:38:74:40:10:d5:c5:89:45:b5:eb:f4:e2:ff:6b: 0b:d6:e8:79:bf:68:97:6d:c8:fe:8e:09:a9:d5:ce:e5:21:3d: 59:3e:5a:81:5b:6d:eb:ce:75:83:3f:47:c6:7d:37:15:d2:69: f3:26:15:d6:87:b3:5f:7d:6d:12:a2:e7:44:8c:e9:39:3e:27: fc:5f:38:33:4d:6b:1f:71:ac:b7:c1:00:8f:ab:9b:3e:f7:2f: f6:89:33:50:a8:12:89:c3:d9:70:a0:d2:6b:80:af:f5:de:1a: f2:42:0e:6a:5d:79:1a:6d:92:da:17:1d:de:bc:e6:eb:47:d1: 96:f8:49:45:58:fa:c9:8c:f3:c3:e1:6f:04:7e:98:3b:9b:7b: b0:60:d0:56:e6:0e:30:8c:4c:bc:b7:c1:5a:5d:9c:14:79:3c: 2a:e4:7d:11:da:82:0f:1e:16:0e:d8:3f:c0:bb:9f:7f:59:be: c1:6b:05:b7:f0:e6:fb:13:4e:ce:0b:e1:35:22:89:5c:77:2e: 2f:0a:73:3b:34:f5:7a:5e:1f:c3:49:aa:11:c5:ca:3a:da:87: 1f:04:2a:55 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZD41nTc8EeeBEekbp8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWUxZjkyZWI3YmRjYzIzYzcwNjg5YjE2OTNmNzcxY2NhYWQ4ZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o4pxgIx2DywDTzb/7k5Lm8TjijB qo5oFk+L4sZtp4+zWeOBynu+FWgDIqQVaaDFFLVRa/LFSPBZopiQnncHLlrGASgA kZ65hPdzFF0PP0VtyrWhD78W13F2WPX+6iOWCiWnX2xUL4ytBVkN5htD8wIATZ9k sS9MSFJOQ/Jjl7BIL4uVoKFT8H3NiFQIMsGjjURkKHeni/eWJK9JvArGG1+hOxDF pcvInxPrLVw2X2zR5E2NgQuzr+tgxfkucQUK3RU58FHv7bHolCZL/IcYoRSPOKwA nJYcszT+uzn4xcL1lpbClwMlqeavBScXhL32z/3damiiG+zGKxlysuRdzwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLXh+S63vcwjxwaJsWk/dxzKrY4SMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvdGVINUxyZTl6Q1BIQm9teGFUOTNITXF0amhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQHow DQYJKoZIhvcNAQELBQADggEBADtejbOGDlytpFIE4CN5KPYvPZAdd4FL/+DBXKTS vq+AT0PvqiV/CiY4dEAQ1cWJRbXr9OL/awvW6Hm/aJdtyP6OCanVzuUhPVk+WoFb bevOdYM/R8Z9NxXSafMmFdaHs199bRKi50SM6Tk+J/xfODNNax9xrLfBAI+rmz73 L/aJM1CoEonD2XCg0muAr/XeGvJCDmpdeRptktoXHd685utH0Zb4SUVY+smM88Ph bwR+mDube7Bg0FbmDjCMTLy3wVpdnBR5PCrkfRHagg8eFg7YP8C7n39ZvsFrBbfw 5vsTTs4L4TUiiVx3Li8Kczs09XpeH8NJqhHFyjrahx8EKlU= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:47 2026 by rpki-client