This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/b-G-n76UplLDML9ZYaCG4jf9KfY.roa File: b-G-n76UplLDML9ZYaCG4jf9KfY.roa (raw, json) Hash identifier: 0zoirdXafxrobAC7OR+ynQby1MZQpAcCBCyGFMfHAQs= Subject key identifier: 6F:E1:BE:9F:BE:94:A6:52:C3:30:BF:59:61:A0:86:E2:37:FD:29:F6 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019BC75D4E1302D4B9BCC06FF7D9F421570C Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/b-G-n76UplLDML9ZYaCG4jf9KfY.roa Signing time: Fri 16 Jan 2026 15:12:19 +0000 ROA not before: Fri 16 Jan 2026 15:12:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207416 IP address blocks: 2a01:ecc0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:5d:4e:13:02:d4:b9:bc:c0:6f:f7:d9:f4:21:57:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 16 15:12:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fe1be9fbe94a652c330bf5961a086e237fd29f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:f0:a8:86:61:3d:79:df:bb:67:1f:3d:68: ba:a3:a6:71:dd:5b:cf:8a:ee:92:f9:c6:39:20:d1: 7f:ea:89:20:58:18:2e:09:9c:45:25:88:d8:a7:a6: c0:f6:53:5e:53:bd:b3:95:75:8a:31:e8:b3:94:1c: 53:30:d3:54:4b:10:8c:2a:46:11:2d:39:b5:83:ed: 62:7d:d4:c7:3a:af:37:90:4e:c8:25:1a:a4:ae:50: 08:78:f0:9b:5d:f2:65:2a:85:4e:a2:9e:88:a5:b9: e9:86:ed:81:bd:2b:e9:fd:ca:52:34:bb:6f:70:16: 6c:6a:40:d7:7e:0e:0b:03:ac:bd:ae:e8:46:1e:57: 12:92:5f:69:b0:04:e6:92:7a:a4:86:e4:2e:31:b7: f4:33:81:7b:1f:21:9c:33:7d:17:06:8f:a1:d6:20: 4f:db:50:b0:fc:94:35:d9:bc:e6:d5:94:6f:02:0e: e5:39:8c:32:f3:91:63:ef:61:54:d9:65:ff:01:7c: 51:7f:59:f2:b9:1e:7b:4c:d7:79:e0:9a:67:b6:d8: 05:f0:fc:0d:e1:8b:fc:26:61:88:af:1f:9d:d0:fe: 11:a0:b7:41:0d:5d:ac:60:2d:92:4d:0c:b1:53:83: da:94:7c:50:c5:9a:8c:c3:aa:9e:6d:bc:07:e4:d6: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E1:BE:9F:BE:94:A6:52:C3:30:BF:59:61:A0:86:E2:37:FD:29:F6 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/b-G-n76UplLDML9ZYaCG4jf9KfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 4e:1e:74:6e:ed:19:0b:30:25:4c:03:64:b2:d2:9e:3f:44:57: f4:ff:5b:59:6f:8b:f7:4c:55:36:30:cd:9f:bb:81:f7:d1:b5: 75:82:e3:07:ab:d7:50:c6:ce:b0:34:db:2b:86:06:b4:82:18: 34:d9:db:7f:fb:6a:67:19:f6:f6:eb:d0:97:8f:7f:f1:63:dc: 4b:3b:03:b7:2e:04:62:88:85:5d:9c:95:9f:34:91:42:c2:cf: 0f:f1:44:56:b9:57:37:36:13:2b:96:ea:b6:15:aa:59:73:13: 5e:6a:21:4e:5e:1e:1c:8d:98:d4:ae:bb:40:b6:4f:e2:1d:6c: 6b:0e:30:e1:86:6a:15:92:e5:fb:d7:a6:02:01:5d:e5:a2:e1: 36:48:df:04:72:f8:46:bf:0b:17:6e:9d:d7:fa:9d:8e:54:b5: 7b:98:ed:0f:a8:5c:e2:7d:39:b9:aa:94:37:1d:23:34:48:ed: 6d:c8:a7:bb:08:cd:46:4d:65:56:b0:b3:f0:b2:7f:10:c8:e6: 2b:36:cd:99:45:af:dc:63:c9:14:51:75:61:06:0c:de:3c:5a: 4b:69:86:51:d5:1f:c7:94:8e:d9:72:0e:b9:59:47:64:88:38: 30:dd:0f:a6:79:5d:80:f9:e9:f5:d6:51:95:60:19:8c:31:2f: 7c:89:2a:de -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvHXU4TAtS5vMBv99n0IVcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTE2MTUxMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmUxYmU5ZmJlOTRhNjUyYzMzMGJmNTk2MWEwODZlMjM3ZmQyOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLvwqIZhPXnfu2cfPWi6o6Zx3VvP iu6S+cY5INF/6okgWBguCZxFJYjYp6bA9lNeU72zlXWKMeizlBxTMNNUSxCMKkYR LTm1g+1ifdTHOq83kE7IJRqkrlAIePCbXfJlKoVOop6Ipbnphu2BvSvp/cpSNLtv cBZsakDXfg4LA6y9ruhGHlcSkl9psATmknqkhuQuMbf0M4F7HyGcM30XBo+h1iBP 21Cw/JQ12bzm1ZRvAg7lOYwy85Fj72FU2WX/AXxRf1nyuR57TNd54JpnttgF8PwN 4Yv8JmGIrx+d0P4RoLdBDV2sYC2STQyxU4PalHxQxZqMw6qebbwH5NaTJQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG/hvp++lKZSwzC/WWGghuI3/Sn2MB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvYi1HLW43NlVwbExETUw5WllhQ0c0amY5S2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHswDAw DQYJKoZIhvcNAQELBQADggEBAE4edG7tGQswJUwDZLLSnj9EV/T/W1lvi/dMVTYw zZ+7gffRtXWC4wer11DGzrA02yuGBrSCGDTZ23/7amcZ9vbr0JePf/Fj3Es7A7cu BGKIhV2clZ80kULCzw/xRFa5Vzc2EyuW6rYVqllzE15qIU5eHhyNmNSuu0C2T+Id bGsOMOGGahWS5fvXpgIBXeWi4TZI3wRy+Ea/Cxdundf6nY5UtXuY7Q+oXOJ9Obmq lDcdIzRI7W3Ip7sIzUZNZVaws/CyfxDI5is2zZlFr9xjyRRRdWEGDN48WktphlHV H8eUjtlyDrlZR2SIODDdD6Z5XYD56fXWUZVgGYwxL3yJKt4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:11 2026 by rpki-client