This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/u5bHyJ3R3UHShaq93waGpGgWTkg.roa File: u5bHyJ3R3UHShaq93waGpGgWTkg.roa (raw, json) Hash identifier: fW1kic1H4fDYtRDvXfRNLEUD6p+vvhEvnsf0sx+Dp/w= Subject key identifier: BB:96:C7:C8:9D:D1:DD:41:D2:85:AA:BD:DF:06:86:A4:68:16:4E:48 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F858C664319158A5C39B82549817434 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/u5bHyJ3R3UHShaq93waGpGgWTkg.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44822 IP address blocks: 2a0f:b240:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8c:66:43:19:15:8a:5c:39:b8:25:49:81:74:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb96c7c89dd1dd41d285aabddf0686a468164e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:de:3a:94:3a:3b:ce:f0:bb:c1:26:c2:c3: 17:3b:72:88:a4:d6:2a:58:86:de:5a:26:35:e3:6b: 16:d8:d5:87:f5:02:70:27:d0:2f:22:c6:15:ff:b3: 4f:04:ed:f3:9d:ea:5d:3a:7c:0f:d2:a7:26:40:e8: 1a:2a:e8:99:72:cd:35:b0:2b:4f:a1:15:79:3d:96: c1:62:e6:10:2e:60:ad:37:08:55:79:d6:66:30:50: 2c:d0:84:43:d0:10:dd:07:e8:8d:95:e0:c2:d3:80: e4:67:14:ec:20:df:8e:1d:e8:94:a6:67:91:bd:ba: 5b:70:80:f8:16:e1:66:5c:70:5a:3f:db:5b:d0:e4: ba:24:04:9b:b1:51:5c:76:82:51:f3:a2:bb:6d:0f: 57:88:84:ee:f1:9a:ca:0a:40:81:13:47:d7:96:dc: 49:06:50:68:5d:9b:6e:ae:6e:8d:f1:4f:9d:d6:14: 33:0f:7a:9c:3e:de:30:43:63:33:c4:02:e2:c1:7a: ee:23:79:0b:ad:f8:38:53:04:5b:ec:8b:87:e3:6a: 16:01:56:06:e2:83:0b:c5:48:2f:6c:54:ca:f5:9e: 50:f1:17:44:e4:a8:34:5c:c2:61:23:30:0e:0b:bf: f8:e9:75:69:45:53:ef:6e:13:ed:a1:17:ed:7b:43: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:96:C7:C8:9D:D1:DD:41:D2:85:AA:BD:DF:06:86:A4:68:16:4E:48 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/u5bHyJ3R3UHShaq93waGpGgWTkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 09:33:96:29:25:3c:06:25:d0:df:98:cf:c3:c0:98:16:25:45: 60:a0:84:d4:71:34:d9:33:d0:0c:35:ab:70:a7:38:d9:15:d8: cc:33:60:73:3a:d5:a0:ab:8f:f6:ec:d3:50:63:1d:3c:db:33: 91:4e:fa:bf:09:78:31:b2:32:3b:c7:e3:25:8a:73:f4:13:85: 9d:2d:4a:6f:ea:9c:95:a1:fe:83:a1:6a:01:56:3f:37:3d:cd: e8:8d:5b:45:62:83:b3:02:4a:b3:ca:77:4e:8e:c6:5f:c7:cc: d1:a3:41:1a:e8:76:7f:a0:f2:b0:1d:c0:fa:6d:25:f7:4d:84: b5:66:0a:a8:e2:f8:c1:5d:63:0d:d8:9e:d4:a2:94:14:19:54: 84:a5:46:cb:28:9f:f8:ef:9d:22:21:fb:22:3a:75:cf:8f:4d: 17:88:3a:79:c9:8e:58:61:0c:c2:92:e1:c9:97:83:00:e1:3a: a6:50:6d:25:6c:27:2f:ce:9b:cc:ca:fc:47:77:6d:a9:5f:86: 9a:41:fe:65:c0:29:f6:e5:b5:46:69:b7:31:71:a8:4f:8b:77: 2a:4e:84:29:3a:8a:bd:2b:2c:12:81:8b:52:f6:b2:3a:ed:41: e8:56:77:a2:7b:08:70:d3:f3:d1:7c:e6:6b:d6:60:cd:83:96: 48:f3:47:f1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hYxmQxkVilw5uCVJgXQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjk2YzdjODlkZDFkZDQxZDI4NWFhYmRkZjA2ODZhNDY4MTY0ZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD3eOpQ6O87wu8EmwsMXO3KIpNYq WIbeWiY142sW2NWH9QJwJ9AvIsYV/7NPBO3znepdOnwP0qcmQOgaKuiZcs01sCtP oRV5PZbBYuYQLmCtNwhVedZmMFAs0IRD0BDdB+iNleDC04DkZxTsIN+OHeiUpmeR vbpbcID4FuFmXHBaP9tb0OS6JASbsVFcdoJR86K7bQ9XiITu8ZrKCkCBE0fXltxJ BlBoXZturm6N8U+d1hQzD3qcPt4wQ2MzxALiwXruI3kLrfg4UwRb7IuH42oWAVYG 4oMLxUgvbFTK9Z5Q8RdE5Kg0XMJhIzAOC7/46XVpRVPvbhPtoRfte0NlIwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLuWx8id0d1B0oWqvd8GhqRoFk5IMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvdTViSHlKM1IzVUhTaGFxOTN3YUdwR2dXVGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQH4w DQYJKoZIhvcNAQELBQADggEBAAkzliklPAYl0N+Yz8PAmBYlRWCghNRxNNkz0Aw1 q3CnONkV2MwzYHM61aCrj/bs01BjHTzbM5FO+r8JeDGyMjvH4yWKc/QThZ0tSm/q nJWh/oOhagFWPzc9zeiNW0Vig7MCSrPKd06Oxl/HzNGjQRrodn+g8rAdwPptJfdN hLVmCqji+MFdYw3YntSilBQZVISlRsson/jvnSIh+yI6dc+PTReIOnnJjlhhDMKS 4cmXgwDhOqZQbSVsJy/Om8zK/Ed3balfhppB/mXAKfbltUZptzFxqE+LdypOhCk6 ir0rLBKBi1L2sjrtQehWd6J7CHDT89F85mvWYM2DlkjzR/E= -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:44 2026 by rpki-client