This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7z3y0b3d10RzcLT42RZrYfHXVAA.roa File: 7z3y0b3d10RzcLT42RZrYfHXVAA.roa (raw, json) Hash identifier: 80hPD19WaLcKskmmNAmIJY0gJBLwjW20toFCFcuL4Og= Subject key identifier: EF:3D:F2:D1:BD:DD:D7:44:73:70:B4:F8:D9:16:6B:61:F1:D7:54:00 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B49A419B3B9F66F1FC889CB31A963ED4C Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7z3y0b3d10RzcLT42RZrYfHXVAA.roa Signing time: Tue 23 Dec 2025 05:17:29 +0000 ROA not before: Tue 23 Dec 2025 05:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52210 IP address blocks: 2a0f:b240:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:a4:19:b3:b9:f6:6f:1f:c8:89:cb:31:a9:63:ed:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 23 05:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef3df2d1bdddd7447370b4f8d9166b61f1d75400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:5f:07:c4:de:c5:9e:bb:d4:bd:80:8f:9b: 2c:0e:7e:bb:ba:b7:b6:d8:ec:13:27:d2:cd:c5:35: b8:36:42:68:80:3f:2c:f6:db:38:01:1e:f2:fc:b3: de:95:c0:1e:79:1d:de:d3:b3:d0:b4:5f:37:f4:de: 86:8e:c1:b9:3d:18:12:ae:a6:44:cb:aa:9e:4d:92: a1:81:6a:31:be:81:3d:2a:5e:97:cb:0f:dd:a5:c7: 76:7d:06:47:2f:be:85:f0:a2:e1:10:b2:b5:e9:6e: 41:81:7c:63:c1:8a:8a:9c:ce:f1:d6:26:fd:54:c6: 31:67:b0:2c:36:39:b6:96:27:af:93:f8:e2:f8:4b: db:39:ed:2d:46:7c:fc:56:6b:b6:97:e5:99:79:bf: 6a:43:5d:5b:e9:bb:f0:de:8f:97:a4:50:c9:fe:f4: 38:8b:b5:5c:b8:72:0d:70:84:95:d4:68:e8:e8:95: d7:d4:77:9c:70:4b:c3:bd:fa:c5:cc:3e:ae:07:fb: 3d:33:10:0d:40:5f:d9:dc:04:c4:2a:0a:2a:8a:ad: d4:da:a5:c7:18:5d:c6:8d:c6:58:46:2d:db:b8:a5: da:6a:a7:69:36:ea:ed:a3:c0:ba:06:59:4f:59:b5: b7:51:10:cc:86:79:7f:43:91:08:7c:6a:67:9f:5f: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3D:F2:D1:BD:DD:D7:44:73:70:B4:F8:D9:16:6B:61:F1:D7:54:00 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7z3y0b3d10RzcLT42RZrYfHXVAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:40::/44 Signature Algorithm: sha256WithRSAEncryption 54:dc:74:e5:bc:69:09:86:3f:03:33:46:f5:14:eb:4c:ae:09: 8e:28:be:f0:ad:ff:b7:0d:44:34:b9:c2:f6:1b:b7:df:a5:63: 74:77:40:c1:94:d4:0e:2f:f8:72:03:08:56:52:84:f1:55:c6: cf:43:73:ff:e8:e3:2e:d0:51:df:f1:47:b8:95:c2:cb:11:84: 31:ee:36:ac:6b:63:fe:32:c4:11:7a:5d:30:8b:9f:5a:7d:ea: 36:a1:74:aa:a4:0f:e8:91:0d:64:15:ed:f3:50:b3:9e:22:ee: 2c:b0:ef:e7:9c:53:30:cd:07:03:a9:57:ae:04:62:c8:39:76: 80:f1:ca:52:9c:f2:2d:7b:e6:ca:ed:c1:dd:84:67:c8:08:0b: 4d:9e:a0:d9:3b:99:70:25:6a:c7:23:2a:1d:ec:05:dd:1d:19: bb:36:fb:42:4c:84:60:e7:8e:ea:25:1f:f0:e7:32:8a:0d:b9: a3:db:02:45:63:fe:c1:39:67:85:d9:a0:ac:0c:0f:3b:aa:c7: 89:39:bc:d3:4e:2c:9b:f6:4e:08:37:ea:e0:ea:e0:7d:6a:54: a6:5f:71:67:e2:b7:0d:52:8d:c6:e7:98:59:8a:60:fc:39:74: 97:21:93:dc:19:24:d4:88:29:0f:5c:cf:51:ae:bf:39:cc:b1: e9:73:d1:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtJpBmzufZvH8iJyzGpY+1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjIzMDUxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjNkZjJkMWJkZGRkNzQ0NzM3MGI0ZjhkOTE2NmI2MWYxZDc1NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGBfB8TexZ671L2Aj5ssDn67ure2 2OwTJ9LNxTW4NkJogD8s9ts4AR7y/LPelcAeeR3e07PQtF839N6GjsG5PRgSrqZE y6qeTZKhgWoxvoE9Kl6Xyw/dpcd2fQZHL76F8KLhELK16W5BgXxjwYqKnM7x1ib9 VMYxZ7AsNjm2lievk/ji+EvbOe0tRnz8Vmu2l+WZeb9qQ11b6bvw3o+XpFDJ/vQ4 i7VcuHINcISV1Gjo6JXX1HeccEvDvfrFzD6uB/s9MxANQF/Z3ATEKgoqiq3U2qXH GF3GjcZYRi3buKXaaqdpNurto8C6BllPWbW3URDMhnl/Q5EIfGpnn18o3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO898tG93ddEc3C0+NkWa2Hx11QAMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvN3ozeTBiM2QxMFJ6Y0xUNDJSWnJZZkhYVkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+yQABA MA0GCSqGSIb3DQEBCwUAA4IBAQBU3HTlvGkJhj8DM0b1FOtMrgmOKL7wrf+3DUQ0 ucL2G7ffpWN0d0DBlNQOL/hyAwhWUoTxVcbPQ3P/6OMu0FHf8Ue4lcLLEYQx7jas a2P+MsQRel0wi59afeo2oXSqpA/okQ1kFe3zULOeIu4ssO/nnFMwzQcDqVeuBGLI OXaA8cpSnPIte+bK7cHdhGfICAtNnqDZO5lwJWrHIyod7AXdHRm7NvtCTIRg547q JR/w5zKKDbmj2wJFY/7BOWeF2aCsDA87qseJObzTTiyb9k4IN+rg6uB9alSmX3Fn 4rcNUo3G55hZimD8OXSXIZPcGSTUiCkPXM9Rrr85zLHpc9FT -----END CERTIFICATE-----Generated at Wed Dec 24 13:53:55 2025 by rpki-client