This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lEW910iwj1iJe3he_qWUOGs4OSs.roa File: lEW910iwj1iJe3he_qWUOGs4OSs.roa (raw, json) Hash identifier: XR57sqGZl3ueCAYUbD5isFdBozJXwExMIKUIGr1qR2o= Subject key identifier: 94:45:BD:D7:48:B0:8F:58:89:7B:78:5E:FE:A5:94:38:6B:38:39:2B Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019ADA357755353D54AC46B4A3B180461063 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lEW910iwj1iJe3he_qWUOGs4OSs.roa Signing time: Mon 01 Dec 2025 13:58:48 +0000 ROA not before: Mon 01 Dec 2025 13:58:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215607 IP address blocks: 2a0f:b240:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:35:77:55:35:3d:54:ac:46:b4:a3:b1:80:46:10:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 1 13:58:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9445bdd748b08f58897b785efea594386b38392b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ff:40:d9:86:04:02:f7:54:66:de:38:07:c5: d3:6f:56:1e:23:1a:d9:2c:93:cd:63:34:dd:14:d1: 83:03:a3:5e:8c:03:e7:00:93:29:f9:d2:c2:ad:5f: 7e:90:8d:8c:7c:18:26:fd:32:2f:d1:ad:7d:42:20: 19:3c:99:50:75:7f:43:53:9b:d4:e2:88:42:26:e8: cb:bf:ec:c3:6d:29:42:0e:f3:fb:9b:cc:df:ef:66: f5:51:f8:5d:be:ab:87:fc:80:cb:72:e7:fe:3b:bc: b8:d2:7e:70:ee:ac:42:d5:f0:4c:6d:2b:00:17:51: 47:68:5d:03:d5:51:64:c8:c8:a1:c7:b0:b3:11:5c: 2c:e2:1b:05:46:e4:c9:c8:d0:1b:b7:9b:7a:c8:f0: 6c:0c:27:b9:40:82:fd:32:70:29:ed:9f:25:24:5c: f8:88:4a:67:7c:4e:85:2d:41:0e:8b:5a:c1:21:74: 6b:b9:34:d9:68:e5:56:43:8d:b8:36:cf:e6:2c:c9: ff:54:ea:d8:f2:d1:90:2d:27:02:0b:dd:84:89:98: 28:44:ea:6a:cb:af:e8:0a:5c:4c:9d:7a:e4:ed:80: 2b:8f:2c:e7:c1:27:46:5b:8e:8a:63:ec:e5:99:cc: b5:23:6f:99:e4:b7:1a:a1:22:3c:3b:de:e3:58:0a: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:45:BD:D7:48:B0:8F:58:89:7B:78:5E:FE:A5:94:38:6B:38:39:2B X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lEW910iwj1iJe3he_qWUOGs4OSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:12::/48 Signature Algorithm: sha256WithRSAEncryption 00:04:20:df:8e:0c:af:47:4f:a5:9a:93:ae:fd:bc:37:7d:ae: 90:3b:fd:95:42:d4:a9:fe:a8:a0:d9:b9:99:87:a9:71:ae:f5: 63:9d:6e:e6:02:cf:64:75:d6:b6:38:8a:84:a9:06:fc:25:5b: ba:82:e0:7a:bb:df:4b:cf:4c:1a:be:5e:56:fe:3f:e9:9d:fd: f9:fa:72:7e:bf:b0:c7:88:21:20:37:66:a3:10:1c:b0:9b:ef: d8:43:96:2e:7f:20:1f:d0:67:ad:c6:3f:10:73:0e:6d:11:8a: 14:e1:26:56:68:4b:16:be:82:d2:24:18:cd:0e:a2:9a:c2:a8: e6:d4:1b:46:e3:e2:75:df:35:f8:69:1f:55:6e:4c:b8:3d:fe: 8b:74:36:9c:97:2b:3b:c2:a2:fe:5b:80:f9:37:60:6d:98:75: 76:a9:23:f6:41:ed:b7:e3:07:37:a8:f1:72:90:12:eb:12:a8: d0:e4:c2:49:9f:52:c9:cb:ee:e6:f6:84:49:99:12:56:23:98: ac:42:54:3b:ce:41:79:77:a2:08:d4:35:7b:91:0f:82:4a:e9: b6:60:40:24:fc:57:5b:9d:3d:c4:e7:3e:66:e4:59:cf:c6:34: 61:d2:a2:1f:22:bc:1f:56:52:b0:19:6f:20:18:e4:bc:25:6c: 02:de:c8:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZraNXdVNT1UrEa0o7GARhBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjAxMTM1ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ1YmRkNzQ4YjA4ZjU4ODk3Yjc4NWVmZWE1OTQzODZiMzgzOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P9A2YYEAvdUZt44B8XTb1YeIxrZ LJPNYzTdFNGDA6NejAPnAJMp+dLCrV9+kI2MfBgm/TIv0a19QiAZPJlQdX9DU5vU 4ohCJujLv+zDbSlCDvP7m8zf72b1UfhdvquH/IDLcuf+O7y40n5w7qxC1fBMbSsA F1FHaF0D1VFkyMihx7CzEVws4hsFRuTJyNAbt5t6yPBsDCe5QIL9MnAp7Z8lJFz4 iEpnfE6FLUEOi1rBIXRruTTZaOVWQ424Ns/mLMn/VOrY8tGQLScCC92EiZgoROpq y6/oClxMnXrk7YArjyznwSdGW46KY+zlmcy1I2+Z5LcaoSI8O97jWAp8rwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJRFvddIsI9YiXt4Xv6llDhrODkrMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvbEVXOTEwaXdqMWlKZTNoZV9xV1VPR3M0T1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQAAS MA0GCSqGSIb3DQEBCwUAA4IBAQAABCDfjgyvR0+lmpOu/bw3fa6QO/2VQtSp/qig 2bmZh6lxrvVjnW7mAs9kdda2OIqEqQb8JVu6guB6u99Lz0wavl5W/j/pnf35+nJ+ v7DHiCEgN2ajEBywm+/YQ5YufyAf0Getxj8Qcw5tEYoU4SZWaEsWvoLSJBjNDqKa wqjm1BtG4+J13zX4aR9Vbky4Pf6LdDaclys7wqL+W4D5N2BtmHV2qSP2Qe234wc3 qPFykBLrEqjQ5MJJn1LJy+7m9oRJmRJWI5isQlQ7zkF5d6II1DV7kQ+CSum2YEAk /FdbnT3E5z5m5FnPxjRh0qIfIrwfVlKwGW8gGOS8JWwC3sim -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:53 2025 by rpki-client