This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/duBFUx95Bo_FDIdalVdvCLuugM8.roa File: duBFUx95Bo_FDIdalVdvCLuugM8.roa (raw, json) Hash identifier: E07eqcjDGW5fpPiQsaHIBhaKWwZ83Wa/I8LQKam97ZA= Subject key identifier: 76:E0:45:53:1F:79:06:8F:C5:0C:87:5A:95:57:6F:08:BB:AE:80:CF Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B5104D59C1042F952F2E8161C10A3EB59 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/duBFUx95Bo_FDIdalVdvCLuugM8.roa Signing time: Wed 24 Dec 2025 15:40:29 +0000 ROA not before: Wed 24 Dec 2025 15:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202758 IP address blocks: 2a0f:b240:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:04:d5:9c:10:42:f9:52:f2:e8:16:1c:10:a3:eb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 24 15:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=76e045531f79068fc50c875a95576f08bbae80cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:2c:aa:13:7c:9d:eb:d1:a2:b7:13:b0:7e: 33:54:c5:fa:a6:14:cb:e2:0c:66:0e:68:a3:58:7f: 63:b0:b7:b5:49:c5:0e:e2:2c:89:a7:58:a1:b8:b8: 97:ad:72:6f:08:6c:e7:2c:fe:1a:60:46:29:49:a9: 32:6a:70:8e:20:74:55:1c:be:13:59:ee:56:df:b2: d6:a0:c9:d4:06:6d:f1:e4:49:03:c1:98:f0:9d:73: e1:f9:e7:90:8a:bb:4f:23:2a:9d:52:2a:96:f5:ed: 65:c2:77:0c:d3:56:bb:fb:dd:cc:e2:b4:8f:6d:34: 7d:1b:a2:d5:f3:92:a7:11:7a:98:3a:c8:3e:66:b1: fd:d2:68:27:49:b6:81:c8:ac:19:65:18:93:1c:ca: dc:04:f5:fc:f1:b8:df:d7:eb:4b:c2:53:d7:7c:1c: fd:91:bd:ea:21:8a:ae:46:1a:c7:9a:b6:ce:12:0a: 8f:3f:d1:dc:f5:67:d0:06:20:d7:a9:3b:a8:32:4e: 83:48:e7:53:88:e8:49:1a:43:97:59:77:78:c7:3b: 7d:3c:b8:df:ba:e2:14:32:e5:ea:b4:69:b2:3d:d3: 78:7a:36:29:91:a5:76:75:16:41:af:d3:1c:8f:f0: e6:b3:85:38:19:bc:af:79:05:bf:10:cc:96:7f:55: 51:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E0:45:53:1F:79:06:8F:C5:0C:87:5A:95:57:6F:08:BB:AE:80:CF X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/duBFUx95Bo_FDIdalVdvCLuugM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:100::/40 Signature Algorithm: sha256WithRSAEncryption 4c:05:6e:63:db:fa:44:ca:cb:ee:23:41:fa:a5:9e:f1:3d:04: 5c:7b:6a:a6:7b:5f:07:b8:ea:79:26:ab:99:e9:82:3f:8b:5f: f4:50:18:14:63:8d:25:b8:0a:25:5a:8e:e1:49:72:cd:9d:c6: 27:3c:7d:ae:eb:63:5f:8f:3b:7d:f3:9c:f6:e8:c0:26:44:52: 71:90:04:e9:a3:3e:d1:ed:39:3d:4d:53:5e:65:49:44:87:a9: 8d:67:b6:8e:d9:49:5b:f5:3a:83:c2:90:a5:d3:56:9d:86:3c: b0:7d:94:26:ab:08:ce:b0:00:66:c3:2a:eb:91:64:30:91:28: 16:7a:21:42:70:25:f1:d8:f8:1e:74:d2:ef:e8:a3:2a:35:c5: 21:e4:8d:79:37:26:4e:7e:03:3b:b5:38:2d:c3:e0:63:88:de: 7e:fa:f6:62:4b:d9:91:56:71:c3:92:2c:1a:fc:7c:b6:af:59: 28:41:0e:22:07:15:5a:65:64:f8:1f:d9:5b:1d:b0:7f:ec:26: e3:97:36:66:14:bd:e2:88:dd:c2:9d:60:e5:63:fb:8e:4e:1e: c7:cc:80:b4:bc:71:79:05:77:61:da:99:8f:ab:bd:9b:bd:e5: e5:04:4d:99:7a:2a:fa:78:43:58:3f:e1:e2:c3:ff:c4:f1:32: 5c:f5:67:2d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtRBNWcEEL5UvLoFhwQo+tZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjI0MTU0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmUwNDU1MzFmNzkwNjhmYzUwYzg3NWE5NTU3NmYwOGJiYWU4MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv38sqhN8nevRorcTsH4zVMX6phTL 4gxmDmijWH9jsLe1ScUO4iyJp1ihuLiXrXJvCGznLP4aYEYpSakyanCOIHRVHL4T We5W37LWoMnUBm3x5EkDwZjwnXPh+eeQirtPIyqdUiqW9e1lwncM01a7+93M4rSP bTR9G6LV85KnEXqYOsg+ZrH90mgnSbaByKwZZRiTHMrcBPX88bjf1+tLwlPXfBz9 kb3qIYquRhrHmrbOEgqPP9Hc9WfQBiDXqTuoMk6DSOdTiOhJGkOXWXd4xzt9PLjf uuIUMuXqtGmyPdN4ejYpkaV2dRZBr9Mcj/Dms4U4GbyveQW/EMyWf1VRoQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHbgRVMfeQaPxQyHWpVXbwi7roDPMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvZHVCRlV4OTVCb19GRElkYWxWZHZDTHV1Z004LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAEw DQYJKoZIhvcNAQELBQADggEBAEwFbmPb+kTKy+4jQfqlnvE9BFx7aqZ7Xwe46nkm q5npgj+LX/RQGBRjjSW4CiVajuFJcs2dxic8fa7rY1+PO33znPbowCZEUnGQBOmj PtHtOT1NU15lSUSHqY1nto7ZSVv1OoPCkKXTVp2GPLB9lCarCM6wAGbDKuuRZDCR KBZ6IUJwJfHY+B500u/ooyo1xSHkjXk3Jk5+Azu1OC3D4GOI3n769mJL2ZFWccOS LBr8fLavWShBDiIHFVplZPgf2VsdsH/sJuOXNmYUveKI3cKdYOVj+45OHsfMgLS8 cXkFd2HamY+rvZu95eUETZl6Kvp4Q1g/4eLD/8TxMlz1Zy0= -----END CERTIFICATE-----Generated at Thu Dec 25 04:51:56 2025 by rpki-client