This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ie-3057-Ess4k-599vVA5T0K-3M.roa File: Ie-3057-Ess4k-599vVA5T0K-3M.roa (raw, json) Hash identifier: R0V6Wkk9+iqTB1KvQoI6oQ9jbKmRQlUMo7WqDWuQRbI= Subject key identifier: 21:EF:B7:D3:9E:FE:12:CB:38:93:EE:7D:F6:F5:40:E5:3D:0A:FB:73 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019AAACB1F26F22425D3808D5377F0DABC68 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ie-3057-Ess4k-599vVA5T0K-3M.roa Signing time: Sat 22 Nov 2025 09:00:29 +0000 ROA not before: Sat 22 Nov 2025 09:00:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47509 IP address blocks: 2a0f:b240:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:aa:cb:1f:26:f2:24:25:d3:80:8d:53:77:f0:da:bc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Nov 22 09:00:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=21efb7d39efe12cb3893ee7df6f540e53d0afb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:ec:59:b7:16:2a:bc:69:5b:a2:0a:51:b1: ef:4e:69:cb:45:cb:ca:b2:72:f8:89:a3:d9:a9:11: 2f:0a:b3:8e:6c:a3:87:7e:1c:14:e3:8a:b1:63:35: 98:61:ad:65:1e:70:6d:39:c1:ee:ba:74:c6:5b:87: ae:75:97:65:df:ae:68:c5:f3:de:0c:be:2c:e4:0f: 9d:a5:54:86:60:88:16:73:8b:ef:94:45:0a:04:2a: ac:1e:19:82:62:6d:dc:0b:d8:29:b2:18:7f:d3:64: fe:19:46:83:65:0e:b0:a3:dc:80:d1:f1:6f:1d:fb: d6:61:c5:08:91:1e:34:bf:52:4c:56:7c:4b:8b:bd: 0d:71:e6:03:23:a5:3f:cb:83:cc:7b:5b:41:eb:e1: 5a:38:96:06:a4:d2:29:48:cd:df:69:1d:25:8c:43: e0:a6:c4:76:ae:a5:ad:f5:48:d7:6b:82:d2:6b:2b: 7f:01:08:89:4e:55:4d:80:c0:91:81:a6:34:40:0b: 7b:b3:22:31:c5:be:d4:e9:e8:45:dc:ad:95:f5:2c: 36:e5:44:5a:fe:66:a1:65:a5:ad:3a:84:87:42:3f: b4:35:50:05:e8:5c:e1:c2:12:53:3c:08:9d:52:b6: 07:0f:84:1d:13:f5:c3:ec:98:6f:69:b2:7f:32:6c: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:B7:D3:9E:FE:12:CB:38:93:EE:7D:F6:F5:40:E5:3D:0A:FB:73 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ie-3057-Ess4k-599vVA5T0K-3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5200::/40 Signature Algorithm: sha256WithRSAEncryption 84:b2:3b:4b:7d:51:11:9f:f5:54:be:fd:31:ed:83:06:d6:a4: b4:be:2f:57:e4:d9:a1:a8:ab:06:67:3b:0e:28:14:9c:1a:b3: 0c:70:ea:e4:7a:e5:35:de:9c:b2:96:a9:db:e1:3a:98:52:0c: ee:27:3b:f4:20:e8:9d:62:fe:18:37:5b:bd:6a:8e:7f:d3:52: cd:4f:8c:16:d3:55:d1:ff:68:f7:45:d2:03:eb:84:63:6d:7a: b0:36:1d:41:f6:f9:a1:87:66:be:a3:49:0c:04:de:ef:4a:c4: 74:d8:7d:7f:ec:7b:59:77:a5:3e:0c:46:64:4d:84:0a:fc:af: a1:16:85:ba:72:3b:80:f4:19:61:e7:41:82:76:f1:f8:6c:33: 69:47:df:fc:28:f8:b7:45:2c:2a:e2:0f:4e:60:fa:86:fd:00: 54:13:73:33:97:b0:7e:bc:74:4e:c6:4c:1c:b5:8a:38:97:b0: 50:27:41:f1:4d:88:29:ac:23:33:db:51:a8:b9:fc:4c:9e:23: 7d:14:57:ff:a4:fe:6c:81:bb:56:48:e0:ea:75:05:32:dd:dd: 12:11:d6:e5:91:06:2d:be:96:d6:93:b8:fc:60:26:13:02:23: ac:78:e0:99:32:5a:0e:1b:19:50:cc:71:fb:ba:71:b5:16:00: b4:03:21:bd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZqqyx8m8iQl04CNU3fw2rxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMTIyMDkwMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWVmYjdkMzllZmUxMmNiMzg5M2VlN2RmNmY1NDBlNTNkMGFmYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhDsWbcWKrxpW6IKUbHvTmnLRcvK snL4iaPZqREvCrOObKOHfhwU44qxYzWYYa1lHnBtOcHuunTGW4eudZdl365oxfPe DL4s5A+dpVSGYIgWc4vvlEUKBCqsHhmCYm3cC9gpshh/02T+GUaDZQ6wo9yA0fFv HfvWYcUIkR40v1JMVnxLi70NceYDI6U/y4PMe1tB6+FaOJYGpNIpSM3faR0ljEPg psR2rqWt9UjXa4LSayt/AQiJTlVNgMCRgaY0QAt7syIxxb7U6ehF3K2V9Sw25URa /mahZaWtOoSHQj+0NVAF6FzhwhJTPAidUrYHD4QdE/XD7JhvabJ/Mmy8RQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCHvt9Oe/hLLOJPuffb1QOU9CvtzMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvSWUtMzA1Ny1Fc3M0ay01OTl2VkE1VDBLLTNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFIw DQYJKoZIhvcNAQELBQADggEBAISyO0t9URGf9VS+/THtgwbWpLS+L1fk2aGoqwZn Ow4oFJwaswxw6uR65TXenLKWqdvhOphSDO4nO/Qg6J1i/hg3W71qjn/TUs1PjBbT VdH/aPdF0gPrhGNterA2HUH2+aGHZr6jSQwE3u9KxHTYfX/se1l3pT4MRmRNhAr8 r6EWhbpyO4D0GWHnQYJ28fhsM2lH3/wo+LdFLCriD05g+ob9AFQTczOXsH68dE7G TBy1ijiXsFAnQfFNiCmsIzPbUai5/EyeI30UV/+k/myBu1ZI4Op1BTLd3RIR1uWR Bi2+ltaTuPxgJhMCI6x44JkyWg4bGVDMcfu6cbUWALQDIb0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:06 2025 by rpki-client