This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-ECQ0KdNN4F7qonrmTUV8BHmzws.roa File: 1-ECQ0KdNN4F7qonrmTUV8BHmzws.roa (raw, json) Hash identifier: ieHeUoHpqTt/cWrV0lLsd8xX4M5jxYiGKj0aYxXvci8= Subject key identifier: F8:40:90:D0:A7:4D:37:81:7B:AA:89:EB:99:35:15:F0:11:E6:CF:0B Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B495E83FB91D839D839CABD7B4699F7CB Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-ECQ0KdNN4F7qonrmTUV8BHmzws.roa Signing time: Tue 23 Dec 2025 04:01:29 +0000 ROA not before: Tue 23 Dec 2025 04:01:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62513 IP address blocks: 2a0f:b240::/46 maxlen: 48 2a0f:b240:8::/46 maxlen: 48 2a0f:b240:1000::/36 maxlen: 48 2a0f:b240:2000::/36 maxlen: 48 2a0f:b240:3000::/36 maxlen: 48 2a0f:b240:4000::/36 maxlen: 48 2a0f:b240:5800::/40 maxlen: 48 2a0f:b245::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:83:fb:91:d8:39:d8:39:ca:bd:7b:46:99:f7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 23 04:01:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f84090d0a74d37817baa89eb993515f011e6cf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:2c:a8:f9:1e:95:ec:19:75:a1:04:30:62: c0:ee:96:83:32:4a:99:a2:7f:17:ee:a5:e5:cb:6c: 7c:99:5f:57:4b:47:6e:84:d3:9a:a0:cd:dc:b2:88: b7:7c:8b:44:9f:b1:9a:46:26:6e:09:2b:5b:02:06: 01:f8:ab:7b:6a:18:9d:ee:c3:ff:1f:1a:c4:48:df: 02:b3:7c:11:2b:99:2f:6e:dc:13:a1:22:df:48:51: 43:dd:90:ce:3c:81:e4:08:27:ca:2f:b6:62:62:07: 1a:e5:65:92:99:ac:75:0a:1c:35:f6:ba:9a:3a:18: 18:e5:5b:01:2a:46:cc:ed:3f:9e:85:61:61:78:1a: 81:6f:a3:0c:60:0a:39:88:76:02:f5:ac:b2:04:51: 77:77:bd:b0:2e:99:96:ee:51:99:14:cb:98:04:eb: 9e:2d:d3:ac:fe:9f:f5:9f:bd:79:e1:7d:02:40:e2: 6e:7a:29:72:42:7d:9f:2d:9c:a7:1d:d9:47:b5:19: 80:99:a6:86:43:24:5e:6a:31:bb:68:c8:98:31:c9: d3:e6:b6:fb:1e:19:71:28:cd:9a:0b:21:cc:5a:26: ac:0a:a6:8d:66:c7:ab:3f:e0:fa:28:44:a8:71:1d: 77:ba:df:50:f5:b4:f2:28:e5:a8:bd:2d:42:51:85: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:40:90:D0:A7:4D:37:81:7B:AA:89:EB:99:35:15:F0:11:E6:CF:0B X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-ECQ0KdNN4F7qonrmTUV8BHmzws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240::/46 2a0f:b240:8::/46 2a0f:b240:1000::-2a0f:b240:4fff:ffff:ffff:ffff:ffff:ffff 2a0f:b240:5800::/40 2a0f:b245::/32 Signature Algorithm: sha256WithRSAEncryption 4a:cc:0b:c0:9c:4b:93:21:ad:28:ca:f5:9f:bf:4e:93:2a:94: 16:71:08:84:09:e2:87:25:ab:9f:59:f0:e9:c2:9b:e2:37:9c: 02:30:e7:e1:4c:90:76:40:22:a3:bd:d5:2f:7d:4f:a3:7e:1d: 76:b4:0c:59:8e:86:5f:e3:5b:94:49:c4:9b:b8:c7:f4:f6:b9: 11:e5:30:fe:38:64:0e:58:b9:e4:b3:52:19:29:f7:59:49:57: 2b:67:95:20:89:79:86:d8:1a:9d:c7:06:9a:c4:0b:61:47:95: d1:42:36:35:19:2e:1a:45:72:3a:cc:2d:b1:79:2f:32:3b:0f: d7:fa:60:be:91:bd:e9:d5:a2:52:64:a9:e7:39:5e:1c:e4:36: 33:52:84:b0:7a:39:03:7c:e3:55:6f:46:99:77:c3:35:e8:99: 25:e2:28:78:61:ec:18:54:eb:e4:a2:1c:2b:43:83:e4:bb:2f: 23:b1:2d:6d:06:e6:82:fc:1d:7e:b7:35:95:97:f1:52:9b:44: 33:11:43:2b:b7:b1:ca:69:b7:b9:5e:a1:92:ba:5e:7c:f5:15: bd:48:7d:c5:9a:df:46:05:dc:5d:b5:0f:35:18:70:21:e2:0d: 2d:ff:1b:ad:6c:93:d8:b5:f4:45:85:d1:52:f8:ae:76:37:f0: 09:08:81:80 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZtJXoP7kdg52DnKvXtGmffLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjIzMDQwMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODQwOTBkMGE3NGQzNzgxN2JhYTg5ZWI5OTM1MTVmMDExZTZjZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCssqPkelewZdaEEMGLA7paDMkqZ on8X7qXly2x8mV9XS0duhNOaoM3csoi3fItEn7GaRiZuCStbAgYB+Kt7ahid7sP/ HxrESN8Cs3wRK5kvbtwToSLfSFFD3ZDOPIHkCCfKL7ZiYgca5WWSmax1Chw19rqa OhgY5VsBKkbM7T+ehWFheBqBb6MMYAo5iHYC9ayyBFF3d72wLpmW7lGZFMuYBOue LdOs/p/1n7154X0CQOJueilyQn2fLZynHdlHtRmAmaaGQyReajG7aMiYMcnT5rb7 HhlxKM2aCyHMWiasCqaNZserP+D6KESocR13ut9Q9bTyKOWovS1CUYXGcwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPhAkNCnTTeBe6qJ65k1FfAR5s8LMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvMS1FQ1EwS2ROTjRGN3FvbnJtVFVWOEJIbXp3cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDMvYjg3ZWMwLWY3NWEtNGJiZS1iMDY3LWI3MTc5ODBlNGFk Ni8xL2JvY1FTazIweEdOeHBfaTJwRUg4TU96ZjRnOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswOQQCAAIwMwMHAioPskAA AAMHAioPskAACDAQAwYEKg+yQBADBgQqD7JAQAMGACoPskBYAwUAKg+yRTANBgkq hkiG9w0BAQsFAAOCAQEASswLwJxLkyGtKMr1n79OkyqUFnEIhAnihyWrn1nw6cKb 4jecAjDn4UyQdkAio73VL31Po34ddrQMWY6GX+NblEnEm7jH9Pa5EeUw/jhkDli5 5LNSGSn3WUlXK2eVIIl5htganccGmsQLYUeV0UI2NRkuGkVyOswtsXkvMjsP1/pg vpG96dWiUmSp5zleHOQ2M1KEsHo5A3zjVW9GmXfDNeiZJeIoeGHsGFTr5KIcK0OD 5LsvI7EtbQbmgvwdfrc1lZfxUptEMxFDK7exymm3uV6hkrpefPUVvUh9xZrfRgXc XbUPNRhwIeINLf8brWyT2LX0RYXRUviudjfwCQiBgA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:31:17 2025 by rpki-client