This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/v87ZUP1XTgasVh88EN46wTrsBZg.roa File: v87ZUP1XTgasVh88EN46wTrsBZg.roa (raw, json) Hash identifier: uRZm0hISkYWNu14D9Qw+0OM+7kTA6fG1OueMIUGHh3M= Subject key identifier: BF:CE:D9:50:FD:57:4E:06:AC:56:1F:3C:10:DE:3A:C1:3A:EC:05:98 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8599761CA38E83715A01BBB3987891 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/v87ZUP1XTgasVh88EN46wTrsBZg.roa Signing time: Fri 02 Jan 2026 16:23:40 +0000 ROA not before: Fri 02 Jan 2026 16:23:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207196 IP address blocks: 2a0f:b240:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:99:76:1c:a3:8e:83:71:5a:01:bb:b3:98:78:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfced950fd574e06ac561f3c10de3ac13aec0598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:76:3c:06:41:8b:62:de:89:6e:99:e1:a2: a2:5d:71:59:8f:3c:9a:7a:e7:03:e7:8a:cd:6f:66: ef:e0:fc:8d:c0:20:4a:cd:48:35:ce:6f:90:cd:eb: d9:48:ac:b3:92:1a:3a:a1:04:47:a9:21:e7:27:d0: 3e:46:64:5d:95:5c:ec:98:7c:36:ec:ef:8e:42:65: ca:7d:17:0e:34:e9:2d:61:2d:d0:30:c5:7f:76:4b: 40:c1:c5:67:40:2d:e4:2a:59:15:6c:f1:8f:61:e3: fd:85:ef:29:2a:0f:0e:5b:0f:4e:ee:a3:45:a1:b6: 20:2b:f4:a3:74:a9:61:7b:6c:5d:af:5f:80:88:e2: 74:d5:ae:69:93:0c:fa:45:17:5d:e8:5f:08:11:01: 99:9d:4d:b6:09:96:8c:1b:9a:62:28:83:02:91:49: 16:03:93:34:80:1c:4e:51:15:02:ae:41:e1:6e:0f: f3:2a:fb:e8:0d:ef:d0:57:5c:1c:18:1e:ec:5c:1c: 0d:a0:fd:65:44:80:f3:a3:d4:50:92:7d:d1:f6:c2: 6f:cc:70:24:63:29:2a:4b:5c:38:11:6b:69:fe:91: 85:08:1c:f9:3e:63:ac:71:06:40:f7:94:b0:2b:23: d6:a2:f6:10:ec:bb:77:9d:bd:4e:f4:54:98:b1:2d: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:D9:50:FD:57:4E:06:AC:56:1F:3C:10:DE:3A:C1:3A:EC:05:98 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/v87ZUP1XTgasVh88EN46wTrsBZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6000::/40 Signature Algorithm: sha256WithRSAEncryption 59:67:d6:62:0f:ac:fb:7c:77:20:a2:19:b0:6a:dc:1d:da:e2: c4:dd:53:85:bc:83:5a:51:11:7e:26:9b:52:54:a7:aa:4a:bf: 44:6d:51:8d:de:00:ac:1e:4f:07:01:22:b0:67:d1:ed:c2:1a: cb:a5:c0:4d:b1:e2:bc:b5:6f:6a:c0:88:14:ae:a5:2c:31:d5: 89:f3:a3:b8:c0:92:ab:fe:13:df:c8:4f:90:f5:14:64:19:9c: 18:06:a9:53:92:0e:c8:99:18:b2:af:3e:69:e7:9d:84:d7:70: d4:bd:5f:f8:ab:3f:fd:5d:bc:70:67:cc:5c:f3:65:83:b0:67: f7:e8:fd:8f:10:88:c1:a4:d7:07:76:54:ec:1a:95:ed:8f:3d: ad:2c:a1:e3:41:11:e9:47:82:32:ea:86:ea:7c:29:6b:d1:f1: 7c:c8:c5:f0:9a:1f:07:46:9c:07:d6:ac:1e:d9:8f:30:ac:4d: 1d:14:8a:a8:b6:a1:83:18:0f:19:52:41:7d:e3:f6:5c:96:65: 98:2d:b6:61:82:c1:eb:09:13:3e:e1:10:cf:6a:f8:88:b4:ad: 56:77:19:ee:ad:e9:a1:e5:93:32:17:71:f9:c8:6a:2a:4d:3f: da:08:29:2b:fb:3f:05:85:49:65:21:2d:97:ce:f8:9e:40:0e: b6:86:8b:eb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hZl2HKOOg3FaAbuzmHiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNlZDk1MGZkNTc0ZTA2YWM1NjFmM2MxMGRlM2FjMTNhZWMwNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPB2PAZBi2LeiW6Z4aKiXXFZjzya eucD54rNb2bv4PyNwCBKzUg1zm+QzevZSKyzkho6oQRHqSHnJ9A+RmRdlVzsmHw2 7O+OQmXKfRcONOktYS3QMMV/dktAwcVnQC3kKlkVbPGPYeP9he8pKg8OWw9O7qNF obYgK/SjdKlhe2xdr1+AiOJ01a5pkwz6RRdd6F8IEQGZnU22CZaMG5piKIMCkUkW A5M0gBxOURUCrkHhbg/zKvvoDe/QV1wcGB7sXBwNoP1lRIDzo9RQkn3R9sJvzHAk YykqS1w4EWtp/pGFCBz5PmOscQZA95SwKyPWovYQ7Lt3nb1O9FSYsS3sOwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFL/O2VD9V04GrFYfPBDeOsE67AWYMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvdjg3WlVQMVhUZ2FzVmg4OEVONDZ3VHJzQlpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGAw DQYJKoZIhvcNAQELBQADggEBAFln1mIPrPt8dyCiGbBq3B3a4sTdU4W8g1pREX4m m1JUp6pKv0RtUY3eAKweTwcBIrBn0e3CGsulwE2x4ry1b2rAiBSupSwx1Ynzo7jA kqv+E9/IT5D1FGQZnBgGqVOSDsiZGLKvPmnnnYTXcNS9X/irP/1dvHBnzFzzZYOw Z/fo/Y8QiMGk1wd2VOwale2PPa0soeNBEelHgjLqhup8KWvR8XzIxfCaHwdGnAfW rB7ZjzCsTR0Uiqi2oYMYDxlSQX3j9lyWZZgttmGCwesJEz7hEM9q+Ii0rVZ3Ge6t 6aHlkzIXcfnIaipNP9oIKSv7PwWFSWUhLZfO+J5ADraGi+s= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:12 2026 by rpki-client