This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8kkmqt_PW2ZVtXPFfTKCFc8WZrY.roa File: 8kkmqt_PW2ZVtXPFfTKCFc8WZrY.roa (raw, json) Hash identifier: 8tLm4JvW/VQ5+9PKO0vhOJImT5ZLsPf4kHw6vcUnpfo= Subject key identifier: F2:49:26:AA:DF:CF:5B:66:55:B5:73:C5:7D:32:82:15:CF:16:66:B6 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B2D55B4FB97A93EBC5DE3CCEEC74D6F16 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8kkmqt_PW2ZVtXPFfTKCFc8WZrY.roa Signing time: Wed 17 Dec 2025 17:22:29 +0000 ROA not before: Wed 17 Dec 2025 17:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202758 IP address blocks: 2a0f:b240:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:55:b4:fb:97:a9:3e:bc:5d:e3:cc:ee:c7:4d:6f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 17 17:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f24926aadfcf5b6655b573c57d328215cf1666b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:dd:04:85:89:76:c6:22:67:92:5e:97:0a: 4d:ce:8e:1c:87:24:91:2a:96:40:55:83:b3:90:7f: a7:9a:25:f1:b3:15:5a:35:30:f4:82:b9:3c:d3:83: 82:0b:81:de:bc:a3:d1:15:61:7a:11:f6:bb:aa:2e: 87:f3:e6:ca:6b:f7:42:c9:5f:aa:0c:3c:ee:d2:73: 09:ac:d6:ec:88:2e:0e:86:13:ce:db:a1:9e:e1:d1: e4:7f:0d:f5:42:8f:d7:10:23:75:80:10:aa:d4:2b: d0:ae:a9:a2:00:bb:33:33:4a:0d:17:39:7d:2e:6f: 46:2c:f8:7a:b9:13:9b:83:24:b7:cf:a4:3d:17:6c: 82:f4:f6:a5:81:5a:1c:18:13:c6:85:7f:74:85:3d: 47:46:ae:85:34:1e:a5:6b:cb:9c:14:d5:1e:72:d3: b4:cc:3b:e2:83:04:c2:94:c8:c0:d9:5e:b1:c0:70: 20:a0:36:49:d9:a9:53:f6:2f:68:79:88:4a:23:73: 55:0b:5f:c2:b9:93:9b:8c:20:f5:c3:11:46:0b:5f: c7:85:c9:b1:7b:4c:39:7a:b3:f7:2c:6f:12:a8:c8: 79:47:e4:c4:32:28:51:80:2c:4d:a0:f7:cc:19:c9: b3:3b:0b:15:8d:60:d6:f6:00:73:b6:50:a0:97:49: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:26:AA:DF:CF:5B:66:55:B5:73:C5:7D:32:82:15:CF:16:66:B6 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8kkmqt_PW2ZVtXPFfTKCFc8WZrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:100::/40 Signature Algorithm: sha256WithRSAEncryption 71:43:00:4c:78:66:41:25:1d:10:7b:14:3a:ee:34:a4:08:81: e8:04:95:8c:88:f4:79:a5:3a:b7:e2:69:2c:40:aa:ba:16:26: 60:7f:1e:f3:82:3c:95:de:91:73:a0:f2:d1:94:9b:42:9e:e7: 09:9e:4b:ab:e5:3d:fa:f2:19:a7:c7:03:e1:66:d8:21:c5:9f: 89:a1:7f:b5:f8:81:c0:2f:c0:7d:73:7e:4b:50:36:a2:90:cc: 2e:9c:c8:df:8f:d4:33:f4:ea:a4:1c:e9:11:bb:e4:1e:b2:51: a7:b1:32:ea:6b:60:36:4c:87:4a:03:f7:44:c0:49:df:49:f7: 1f:02:ff:e1:3c:23:e3:82:dd:dd:ae:89:dc:fb:bf:15:b0:6a: 09:fb:b4:71:de:8f:3e:30:5b:24:51:fa:3d:91:aa:9a:c1:73: 06:23:f2:80:e2:8e:ed:85:1f:4d:b7:50:c9:19:2a:fb:9f:b9: ed:8d:0f:ac:5e:30:bd:8d:e1:c5:59:6c:a4:ad:75:8c:29:d4: 51:a2:a6:71:6a:f5:33:09:2e:9c:a7:41:c0:42:01:15:57:61: bc:e8:db:7f:80:c6:ff:bc:a1:12:93:29:85:6d:b7:2e:f9:c3: 16:80:00:59:60:75:38:d2:c6:26:eb:99:1a:9b:35:5a:9c:b3: 60:52:92:00 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZstVbT7l6k+vF3jzO7HTW8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjE3MTcyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjQ5MjZhYWRmY2Y1YjY2NTViNTczYzU3ZDMyODIxNWNmMTY2NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU7dBIWJdsYiZ5JelwpNzo4chySR KpZAVYOzkH+nmiXxsxVaNTD0grk804OCC4HevKPRFWF6Efa7qi6H8+bKa/dCyV+q DDzu0nMJrNbsiC4OhhPO26Ge4dHkfw31Qo/XECN1gBCq1CvQrqmiALszM0oNFzl9 Lm9GLPh6uRObgyS3z6Q9F2yC9PalgVocGBPGhX90hT1HRq6FNB6la8ucFNUectO0 zDvigwTClMjA2V6xwHAgoDZJ2alT9i9oeYhKI3NVC1/CuZObjCD1wxFGC1/Hhcmx e0w5erP3LG8SqMh5R+TEMihRgCxNoPfMGcmzOwsVjWDW9gBztlCgl0mItQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPJJJqrfz1tmVbVzxX0yghXPFma2MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvOGtrbXF0X1BXMlpWdFhQRmZUS0NGYzhXWnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAEw DQYJKoZIhvcNAQELBQADggEBAHFDAEx4ZkElHRB7FDruNKQIgegElYyI9HmlOrfi aSxAqroWJmB/HvOCPJXekXOg8tGUm0Ke5wmeS6vlPfryGafHA+Fm2CHFn4mhf7X4 gcAvwH1zfktQNqKQzC6cyN+P1DP06qQc6RG75B6yUaexMuprYDZMh0oD90TASd9J 9x8C/+E8I+OC3d2uidz7vxWwagn7tHHejz4wWyRR+j2RqprBcwYj8oDiju2FH023 UMkZKvufue2ND6xeML2N4cVZbKStdYwp1FGipnFq9TMJLpynQcBCARVXYbzo23+A xv+8oRKTKYVtty75wxaAAFlgdTjSxibrmRqbNVqcs2BSkgA= -----END CERTIFICATE-----Generated at Fri Dec 19 17:18:41 2025 by rpki-client