This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Iwbs85Ovvv85B_zzuIRMhSl54R8.roa File: Iwbs85Ovvv85B_zzuIRMhSl54R8.roa (raw, json) Hash identifier: 0B50nHll+GsLAP0bazk6OePfyHOafRpiVmAcYfKdPcM= Subject key identifier: 23:06:EC:F3:93:AF:BE:FF:39:07:FC:F3:B8:84:4C:85:29:79:E1:1F Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B388922AD56AC35BF34C8C73FDDA1A5EE Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Iwbs85Ovvv85B_zzuIRMhSl54R8.roa Signing time: Fri 19 Dec 2025 21:34:29 +0000 ROA not before: Fri 19 Dec 2025 21:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62513 IP address blocks: 2a0f:b240::/46 maxlen: 48 2a0f:b240:8::/46 maxlen: 48 2a0f:b240:1000::/36 maxlen: 48 2a0f:b240:2000::/36 maxlen: 48 2a0f:b240:3000::/36 maxlen: 48 2a0f:b240:4000::/36 maxlen: 48 2a0f:b240:5800::/40 maxlen: 48 2a0f:b245::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:89:22:ad:56:ac:35:bf:34:c8:c7:3f:dd:a1:a5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 19 21:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2306ecf393afbeff3907fcf3b8844c852979e11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:bd:9f:35:ae:d1:00:1c:2c:a1:49:96:5d: 85:ed:9f:ae:74:fd:cb:4b:3f:28:df:18:00:0f:89: 03:80:7f:21:16:d5:52:cc:b2:bd:4c:a0:03:64:a4: c6:60:47:ec:21:d5:af:23:cd:0e:af:45:c0:1a:a6: 71:78:9f:e1:6e:ac:bd:3f:fc:ec:a2:28:c2:4f:78: 4f:d5:08:6c:e4:29:f9:83:3c:e9:ec:82:67:0f:d5: fb:6f:15:9d:8b:10:7b:f4:79:65:67:f5:b4:ab:da: 00:d1:50:84:7a:e6:27:fe:9c:14:c4:bc:10:81:ab: 52:47:7f:82:c1:0e:c1:df:9f:24:a3:fc:7b:b4:73: 95:68:6d:a6:bb:69:1f:c4:7b:2b:16:ac:6b:fd:4f: 8a:f1:92:ba:57:31:a0:4c:58:7b:1d:8a:56:a8:7e: 4c:44:3a:23:92:04:b1:8e:2c:b9:02:e1:8a:a6:d0: a3:a5:26:23:29:1b:0d:43:90:c9:78:e0:4e:af:a8: 23:31:e7:a4:30:6c:d5:29:f6:aa:25:49:2d:34:1c: 52:3e:57:33:54:6e:91:e1:71:d4:8a:4f:5c:d2:01: 2f:b2:a4:c8:cf:29:5e:f7:69:3f:7d:08:6e:67:aa: 48:74:e6:50:f8:f6:e3:76:16:d3:b9:0a:a1:90:dd: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:EC:F3:93:AF:BE:FF:39:07:FC:F3:B8:84:4C:85:29:79:E1:1F X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Iwbs85Ovvv85B_zzuIRMhSl54R8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240::/46 2a0f:b240:8::/46 2a0f:b240:1000::-2a0f:b240:4fff:ffff:ffff:ffff:ffff:ffff 2a0f:b240:5800::/40 2a0f:b245::/32 Signature Algorithm: sha256WithRSAEncryption 34:a4:e7:b0:5b:3a:d9:c0:a3:02:1e:72:94:bd:83:87:f4:e1: 87:48:ac:d3:c3:9c:d2:53:e8:f2:bb:a9:aa:3e:4d:dc:9e:4b: 35:b8:5a:90:a0:73:f4:45:2c:96:b2:b7:f1:d4:8b:1d:9f:99: e8:02:27:da:83:eb:f5:5f:5d:53:3d:14:6e:fc:c6:00:3e:69: 3f:f1:24:0d:f3:57:89:8b:07:37:b1:19:86:64:13:ef:c2:8d: 76:e0:e4:d5:e2:69:8e:a3:f9:0c:c1:a1:29:58:e2:0e:c3:49: b4:eb:d8:9d:77:f5:81:10:e8:e0:36:ff:3e:f8:7c:94:af:a2: df:71:3b:66:81:ca:3c:4c:16:c8:e3:d5:11:19:45:ae:24:75: 43:a4:19:78:95:9c:dc:f0:f4:2e:e9:b0:41:d6:73:8f:a3:90: 40:ad:b0:51:0f:da:57:89:54:b3:69:00:7a:6c:4b:ab:b6:2a: 89:a5:44:c0:da:ab:ef:36:1c:88:e3:55:5f:c6:60:e9:72:88: 7e:6b:ee:c2:b6:ab:7f:be:31:58:c9:b4:cb:15:c5:e6:f2:cc: 4f:33:cb:ca:84:fe:96:7d:3f:a7:cb:f5:5b:ce:5d:33:e5:b7: 62:b5:fa:fc:db:b7:d8:9c:6c:4d:f9:4f:17:bd:d6:a9:e3:a4: 14:6a:35:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZs4iSKtVqw1vzTIxz/doaXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjE5MjEzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzA2ZWNmMzkzYWZiZWZmMzkwN2ZjZjNiODg0NGM4NTI5NzllMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvC9nzWu0QAcLKFJll2F7Z+udP3L Sz8o3xgAD4kDgH8hFtVSzLK9TKADZKTGYEfsIdWvI80Or0XAGqZxeJ/hbqy9P/zs oijCT3hP1Qhs5Cn5gzzp7IJnD9X7bxWdixB79HllZ/W0q9oA0VCEeuYn/pwUxLwQ gatSR3+CwQ7B358ko/x7tHOVaG2mu2kfxHsrFqxr/U+K8ZK6VzGgTFh7HYpWqH5M RDojkgSxjiy5AuGKptCjpSYjKRsNQ5DJeOBOr6gjMeekMGzVKfaqJUktNBxSPlcz VG6R4XHUik9c0gEvsqTIzyle92k/fQhuZ6pIdOZQ+PbjdhbTuQqhkN0EaQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFCMG7POTr77/OQf887iETIUpeeEfMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvSXdiczg1T3Z2djg1Ql96enVJUk1oU2w1NFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAAjAzAwcCKg+yQAAA AwcCKg+yQAAIMBADBgQqD7JAEAMGBCoPskBAAwYAKg+yQFgDBQAqD7JFMA0GCSqG SIb3DQEBCwUAA4IBAQA0pOewWzrZwKMCHnKUvYOH9OGHSKzTw5zSU+jyu6mqPk3c nks1uFqQoHP0RSyWsrfx1Isdn5noAifag+v1X11TPRRu/MYAPmk/8SQN81eJiwc3 sRmGZBPvwo124OTV4mmOo/kMwaEpWOIOw0m069idd/WBEOjgNv8++HyUr6LfcTtm gco8TBbI49URGUWuJHVDpBl4lZzc8PQu6bBB1nOPo5BArbBRD9pXiVSzaQB6bEur tiqJpUTA2qvvNhyI41VfxmDpcoh+a+7Ctqt/vjFYybTLFcXm8sxPM8vKhP6WfT+n y/Vbzl0z5bditfr827fYnGxN+U8Xvdap46QUajW5 -----END CERTIFICATE-----Generated at Sat Dec 20 15:54:00 2025 by rpki-client