This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EhQLRnIEXN6biuOKTJb4CRyeYZA.roa File: EhQLRnIEXN6biuOKTJb4CRyeYZA.roa (raw, json) Hash identifier: SjFi+KDmGFw3VU2PThrpy8WVb9RidgTVPigQp8t2KXw= Subject key identifier: 12:14:0B:46:72:04:5C:DE:9B:8A:E3:8A:4C:96:F8:09:1C:9E:61:90 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B4AFC56C44DD08772AEC4025C49830F38 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EhQLRnIEXN6biuOKTJb4CRyeYZA.roa Signing time: Tue 23 Dec 2025 11:33:29 +0000 ROA not before: Tue 23 Dec 2025 11:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207907 IP address blocks: 2a0f:b240:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:fc:56:c4:4d:d0:87:72:ae:c4:02:5c:49:83:0f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 23 11:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12140b4672045cde9b8ae38a4c96f8091c9e6190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:12:76:9c:85:60:26:55:6a:85:3c:a4:4a: ed:4e:ac:fa:2b:8e:22:bb:08:9b:fc:51:33:16:d2: a7:9f:1d:83:8f:77:99:9f:63:d5:84:e6:aa:85:34: 0b:7f:b7:0e:56:2d:b0:cc:78:4f:ee:7d:ca:d6:48: 47:ba:5d:03:6d:5c:be:17:16:1a:07:9a:19:8e:1d: e2:9e:1f:e2:40:92:e3:c4:aa:d2:24:39:e0:09:2a: 97:2b:3e:bc:3c:49:98:86:6e:a6:9b:f5:8e:fc:24: f4:4b:96:39:4a:9b:e3:e9:18:c5:2c:cd:4a:25:b2: f8:23:ce:1c:0f:27:f3:cb:8e:e5:9d:4c:96:46:91: 3c:e7:be:a5:1b:51:1f:da:20:71:a2:c1:e5:df:31: 64:e2:8d:0f:f1:71:10:59:ee:8f:1d:b0:13:0c:7b: a6:bd:32:f7:b2:26:f8:06:9e:b1:59:61:d3:07:54: 61:7d:5d:1c:32:e4:f9:30:5f:89:0b:ad:1a:00:e3: 1a:4f:91:fc:ee:5d:df:3e:d9:4c:bc:24:72:63:ec: 9b:c0:99:30:30:c7:59:ae:cf:f7:d8:15:99:35:e1: 3d:07:e1:4a:23:72:3f:f5:18:f9:18:de:ed:de:b0: 54:10:1a:6b:bf:a6:0d:ca:c3:50:5a:5c:5f:fa:fa: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:14:0B:46:72:04:5C:DE:9B:8A:E3:8A:4C:96:F8:09:1C:9E:61:90 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EhQLRnIEXN6biuOKTJb4CRyeYZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:900::/40 Signature Algorithm: sha256WithRSAEncryption 4d:af:9d:fb:83:e0:59:68:d8:37:7f:b1:cc:48:75:03:09:ec: cc:9e:06:a1:e8:5f:57:e9:41:5b:18:47:35:1c:1d:0c:f8:c2: e9:d4:1b:d0:d4:ae:11:0a:1a:d1:2e:68:14:fe:b7:b7:68:f9: 7f:6b:3d:3b:19:98:1c:9f:19:52:e2:b9:18:dd:dd:13:41:24: 79:ac:46:03:a3:ad:80:e4:f2:63:a7:b6:bc:fe:13:48:98:e5: 94:e7:cc:2b:bd:aa:74:df:aa:86:f2:cd:36:da:d1:fa:76:d2: 4c:59:1e:ba:81:89:2c:fa:6c:26:80:13:6f:a2:55:1e:89:ca: 71:92:ff:38:b1:98:5c:d8:8f:3d:6d:cb:b7:72:ab:00:7f:aa: 54:a0:da:a6:ee:48:9c:ff:10:75:1b:93:f3:4f:97:b8:5c:b3: 3a:10:e2:de:97:d1:fd:4f:99:15:12:44:e9:39:d1:3e:8f:3c: 66:b4:03:c8:a8:1e:74:18:e4:48:5d:37:48:74:ac:1b:73:5a: e8:eb:e4:53:f7:46:41:5d:14:d6:9c:0f:20:51:1f:44:b9:a2: ca:55:7c:4a:78:ee:9c:56:f7:49:b9:f9:c6:5c:ee:f3:b3:a9: 4a:1d:fd:a4:00:86:b8:b3:30:51:a0:99:bd:6e:cd:b4:bc:00: 9f:1d:ce:34 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtK/FbETdCHcq7EAlxJgw84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjIzMTEzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjE0MGI0NjcyMDQ1Y2RlOWI4YWUzOGE0Yzk2ZjgwOTFjOWU2MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3wSdpyFYCZVaoU8pErtTqz6K44i uwib/FEzFtKnnx2Dj3eZn2PVhOaqhTQLf7cOVi2wzHhP7n3K1khHul0DbVy+FxYa B5oZjh3inh/iQJLjxKrSJDngCSqXKz68PEmYhm6mm/WO/CT0S5Y5Spvj6RjFLM1K JbL4I84cDyfzy47lnUyWRpE8576lG1Ef2iBxosHl3zFk4o0P8XEQWe6PHbATDHum vTL3sib4Bp6xWWHTB1RhfV0cMuT5MF+JC60aAOMaT5H87l3fPtlMvCRyY+ybwJkw MMdZrs/32BWZNeE9B+FKI3I/9Rj5GN7t3rBUEBprv6YNysNQWlxf+vrDPQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBIUC0ZyBFzem4rjikyW+AkcnmGQMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvRWhRTFJuSUVYTjZiaXVPS1RKYjRDUnllWVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAkw DQYJKoZIhvcNAQELBQADggEBAE2vnfuD4Flo2Dd/scxIdQMJ7MyeBqHoX1fpQVsY RzUcHQz4wunUG9DUrhEKGtEuaBT+t7do+X9rPTsZmByfGVLiuRjd3RNBJHmsRgOj rYDk8mOntrz+E0iY5ZTnzCu9qnTfqobyzTba0fp20kxZHrqBiSz6bCaAE2+iVR6J ynGS/zixmFzYjz1ty7dyqwB/qlSg2qbuSJz/EHUbk/NPl7hcszoQ4t6X0f1PmRUS ROk50T6PPGa0A8ioHnQY5EhdN0h0rBtzWujr5FP3RkFdFNacDyBRH0S5ospVfEp4 7pxW90m5+cZc7vOzqUod/aQAhrizMFGgmb1uzbS8AJ8dzjQ= -----END CERTIFICATE-----Generated at Wed Dec 24 13:53:56 2025 by rpki-client