This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vwGEw_X_F1mqSSlpzjVKbkulA0I.roa File: vwGEw_X_F1mqSSlpzjVKbkulA0I.roa (raw, json) Hash identifier: x1qpoDkgocHUBCrM8b8rhKQ03Hzhgvijq2OzHyC0Vg0= Subject key identifier: BF:01:84:C3:F5:FF:17:59:AA:49:29:69:CE:35:4A:6E:4B:A5:03:42 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A4800813C35D8875DBBEA7BFEB2B Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vwGEw_X_F1mqSSlpzjVKbkulA0I.roa Signing time: Fri 02 Jan 2026 16:23:43 +0000 ROA not before: Fri 02 Jan 2026 16:23:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214323 IP address blocks: 2a0f:b240:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a4:80:08:13:c3:5d:88:75:db:be:a7:bf:eb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf0184c3f5ff1759aa492969ce354a6e4ba50342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:9b:65:8f:9a:13:86:b8:24:9d:ed:99:17: af:ba:69:73:c6:60:fe:e7:12:9d:cd:46:1a:22:5b: 84:ce:0b:e1:f1:34:e6:29:c1:a7:cd:f9:0b:6b:e0: 12:9d:6b:8c:3a:f4:f1:01:ee:22:46:14:8c:23:64: 09:a7:bd:c8:d2:08:89:91:a5:b3:fa:cb:b5:e8:13: 73:06:01:21:10:43:ce:e7:d0:4b:f3:7d:3f:4f:0f: 10:a1:43:b2:12:c4:82:06:c9:75:fe:a1:87:86:33: 35:b3:07:a8:14:a9:15:ba:ba:ab:28:2d:80:e2:15: c7:76:4d:43:83:ae:7f:12:19:0d:d8:a9:44:0e:39: ff:26:09:c2:b7:63:72:73:79:57:98:ea:20:78:c1: 2b:6a:96:b8:aa:12:04:db:b3:3e:7f:2e:b6:17:f7: 38:2b:13:aa:76:c8:39:e3:5a:08:4a:49:41:36:5a: e6:a7:74:44:c7:df:92:59:51:e7:be:87:97:56:5a: e1:7a:98:fc:d5:84:ca:f0:b0:1f:9d:1e:e3:1a:0a: fb:af:26:ca:85:fa:c8:8f:0a:7a:ce:25:2d:4c:81: 02:ae:e0:db:bf:6b:55:52:22:bd:f4:68:96:02:1e: fd:17:71:d8:69:ca:e0:9c:4b:00:ae:e0:c3:ca:b2: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:01:84:C3:F5:FF:17:59:AA:49:29:69:CE:35:4A:6E:4B:A5:03:42 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vwGEw_X_F1mqSSlpzjVKbkulA0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7100::/40 Signature Algorithm: sha256WithRSAEncryption 1f:85:24:94:b1:f0:fc:77:ea:70:f9:6a:e9:8e:d0:91:f2:1d: 74:3b:ef:91:f9:26:1f:5c:07:6b:7e:11:53:f1:88:20:c0:e4: 5a:3b:3d:34:80:23:83:b0:36:91:03:00:9e:aa:30:6c:63:65: 86:8e:0e:d7:28:f3:10:51:fa:a3:85:fc:cd:ec:b3:a6:80:1a: 49:d8:c8:6d:ce:53:2b:ac:30:9b:71:29:08:f5:bd:58:43:60: 0b:d1:7e:bb:69:f1:d2:0e:e1:40:ef:3a:19:88:ed:d9:0a:c5: 28:09:69:de:1c:24:bb:87:0e:67:fe:9d:3b:4a:62:81:19:c4: 3d:8a:39:76:d5:a0:6d:71:67:3d:a7:9b:62:55:2f:f2:06:33: f2:c4:68:e0:c7:f3:e8:f7:27:ba:3b:f6:17:78:53:1c:47:9f: 43:10:02:94:81:27:fd:d8:19:ca:e9:37:e6:33:e7:aa:fe:c2: b4:6a:91:bb:4e:1b:cb:8b:3b:a2:90:76:d6:a1:97:30:03:53: 99:06:c2:12:70:2b:57:6a:fc:de:0a:6d:09:bf:c0:8b:78:d5: 87:11:35:fd:2e:9e:c0:c1:1f:f9:b1:eb:21:dc:50:a7:60:0a: 04:6a:5d:75:dd:8e:c5:e4:6e:59:bb:32:d3:88:bc:79:1b:fc: 95:9b:1a:0a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/haSACBPDXYh1276nv+srMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjAxODRjM2Y1ZmYxNzU5YWE0OTI5NjljZTM1NGE2ZTRiYTUwMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOabZY+aE4a4JJ3tmRevumlzxmD+ 5xKdzUYaIluEzgvh8TTmKcGnzfkLa+ASnWuMOvTxAe4iRhSMI2QJp73I0giJkaWz +su16BNzBgEhEEPO59BL830/Tw8QoUOyEsSCBsl1/qGHhjM1sweoFKkVurqrKC2A 4hXHdk1Dg65/EhkN2KlEDjn/JgnCt2Nyc3lXmOogeMErapa4qhIE27M+fy62F/c4 KxOqdsg541oISklBNlrmp3REx9+SWVHnvoeXVlrhepj81YTK8LAfnR7jGgr7rybK hfrIjwp6ziUtTIECruDbv2tVUiK99GiWAh79F3HYacrgnEsAruDDyrJVTwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFL8BhMP1/xdZqkkpac41Sm5LpQNCMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvdndHRXdfWF9GMW1xU1NscHpqVktia3VsQTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQHEw DQYJKoZIhvcNAQELBQADggEBAB+FJJSx8Px36nD5aumO0JHyHXQ775H5Jh9cB2t+ EVPxiCDA5Fo7PTSAI4OwNpEDAJ6qMGxjZYaODtco8xBR+qOF/M3ss6aAGknYyG3O UyusMJtxKQj1vVhDYAvRfrtp8dIO4UDvOhmI7dkKxSgJad4cJLuHDmf+nTtKYoEZ xD2KOXbVoG1xZz2nm2JVL/IGM/LEaODH8+j3J7o79hd4UxxHn0MQApSBJ/3YGcrp N+Yz56r+wrRqkbtOG8uLO6KQdtahlzADU5kGwhJwK1dq/N4KbQm/wIt41YcRNf0u nsDBH/mx6yHcUKdgCgRqXXXdjsXkblm7MtOIvHkb/JWbGgo= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:07 2026 by rpki-client