This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/EYicsUpHakuVJ85rHI3z9ChbOyE.roa File: EYicsUpHakuVJ85rHI3z9ChbOyE.roa (raw, json) Hash identifier: +iUcQNM+1WS62zr3/+AkENonSCdw/nmYbxbfMIf3eUE= Subject key identifier: 11:88:9C:B1:4A:47:6A:4B:95:27:CE:6B:1C:8D:F3:F4:28:5B:3B:21 Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Certificate serial: 019AE992E25A16AC667DF75B83F41BDD13D4 Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/EYicsUpHakuVJ85rHI3z9ChbOyE.roa Signing time: Thu 04 Dec 2025 13:35:08 +0000 ROA not before: Thu 04 Dec 2025 13:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214088 IP address blocks: 2001:30c0:30c0::/48 maxlen: 48 2001:30c0:fffd::/48 maxlen: 48 2001:30c0:ffff::/48 maxlen: 48 2001:30c1:30c1::/48 maxlen: 48 2001:30c2:30c2::/48 maxlen: 48 2001:30c3:30c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:92:e2:5a:16:ac:66:7d:f7:5b:83:f4:1b:dd:13:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Validity Not Before: Dec 4 13:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11889cb14a476a4b9527ce6b1c8df3f4285b3b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:cb:b4:46:17:98:ff:5d:4d:bc:8f:37:09: 02:5e:0b:22:7b:99:28:81:c3:4e:3f:37:25:e5:12: a5:b4:9b:17:d2:42:68:5d:63:01:6c:cd:8a:20:a6: 15:b0:ba:a3:14:01:e6:46:98:7b:39:43:d8:b3:5b: af:e1:f2:df:37:ec:67:b5:ad:83:e7:87:04:e6:41: 7b:fb:b5:dc:5c:88:aa:04:f4:9f:be:47:1e:1f:77: ec:be:90:79:48:d5:72:d6:43:e2:3d:9b:06:e7:65: 15:21:67:24:5d:1e:8d:80:fe:16:4e:51:1a:f4:48: c5:e4:ff:00:77:87:b5:49:ee:b7:9f:1b:5c:08:1d: 45:92:6e:63:d3:2f:51:cc:76:8b:1e:78:8b:6f:db: fb:51:90:ec:0c:77:d8:9a:d5:26:67:d3:0b:e7:9e: ad:88:c5:66:6b:f9:5c:1c:91:28:f4:e0:8e:1e:b1: 9c:4b:1a:7c:45:f6:51:21:c9:c9:e5:06:97:97:70: db:19:5e:2b:84:9d:83:25:95:c0:65:f1:2b:0d:01: 1e:1c:fb:fd:89:63:db:9b:04:77:3d:f2:88:08:d7: ae:90:ac:bf:c2:98:ec:27:c7:cb:dd:63:e8:84:85: 16:a0:72:d0:e5:0a:b5:01:dc:7c:25:b8:05:dc:cb: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:9C:B1:4A:47:6A:4B:95:27:CE:6B:1C:8D:F3:F4:28:5B:3B:21 X509v3 Authority Key Identifier: keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/EYicsUpHakuVJ85rHI3z9ChbOyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c0:30c0::/48 2001:30c0:fffd::/48 2001:30c0:ffff::/48 2001:30c1:30c1::/48 2001:30c2:30c2::/48 2001:30c3:30c3::/48 Signature Algorithm: sha256WithRSAEncryption 1c:9d:99:f5:44:00:02:7b:07:09:14:54:a4:2b:60:dc:c0:f1: d2:04:a6:81:0f:9f:52:9f:98:eb:88:63:04:7a:38:06:60:4b: 3c:7a:5f:29:d2:22:51:73:24:21:64:57:7c:fc:01:c2:85:cf: 0f:90:bb:73:bf:56:02:2e:6c:d0:87:bc:0f:f7:ee:22:c5:f4: 15:db:48:c8:94:44:b1:01:af:68:5a:8d:e7:37:a6:8e:dd:2e: 20:a6:51:2c:55:33:24:c4:b4:ca:5d:47:2c:a1:0a:e8:bf:8e: 09:1a:ab:e5:6b:3b:c5:30:37:eb:f3:00:7b:cd:94:40:21:31: 11:46:7e:71:dd:7b:1a:46:cf:1e:f1:12:d4:6d:13:6f:1e:94: 8d:f7:9c:51:ea:c0:93:7f:87:83:fe:6b:88:e6:e9:92:5d:b6: 70:27:4f:41:10:ea:16:3e:0f:df:72:45:54:25:ec:32:75:7a: d7:e5:7d:a2:45:55:91:b4:09:ac:3b:52:95:0d:ea:ee:91:80: d9:f4:a6:0f:27:cf:8b:f2:7b:a0:f0:31:ef:55:3d:5f:85:00: 08:d9:82:11:11:ad:e5:92:2b:b5:e6:d4:b7:16:a4:a0:87:49: 74:2b:76:c4:45:20:17:9d:42:c7:e5:3f:21:cf:31:fd:1e:dd: 93:c1:42:14 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZrpkuJaFqxmffdbg/Qb3RPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi YjllODEwHhcNMjUxMjA0MTMzNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTg4OWNiMTRhNDc2YTRiOTUyN2NlNmIxYzhkZjNmNDI4NWIzYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGbLtEYXmP9dTbyPNwkCXgsie5ko gcNOPzcl5RKltJsX0kJoXWMBbM2KIKYVsLqjFAHmRph7OUPYs1uv4fLfN+xnta2D 54cE5kF7+7XcXIiqBPSfvkceH3fsvpB5SNVy1kPiPZsG52UVIWckXR6NgP4WTlEa 9EjF5P8Ad4e1Se63nxtcCB1Fkm5j0y9RzHaLHniLb9v7UZDsDHfYmtUmZ9ML556t iMVma/lcHJEo9OCOHrGcSxp8RfZRIcnJ5QaXl3DbGV4rhJ2DJZXAZfErDQEeHPv9 iWPbmwR3PfKICNeukKy/wpjsJ8fL3WPohIUWoHLQ5Qq1Adx8JbgF3Mu6vwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFBGInLFKR2pLlSfOaxyN8/QoWzshMB8GA1UdIwQY MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct YjM0ZDY0OWNmYjdiLzEvRVlpY3NVcEhha3VWSjg1ckhJM3o5Q2hiT3lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEwwDDA AwcAIAEwwP/9AwcAIAEwwP//AwcAIAEwwTDBAwcAIAEwwjDCAwcAIAEwwzDDMA0G CSqGSIb3DQEBCwUAA4IBAQAcnZn1RAACewcJFFSkK2DcwPHSBKaBD59Sn5jriGME ejgGYEs8el8p0iJRcyQhZFd8/AHChc8PkLtzv1YCLmzQh7wP9+4ixfQV20jIlESx Aa9oWo3nN6aO3S4gplEsVTMkxLTKXUcsoQrov44JGqvlazvFMDfr8wB7zZRAITER Rn5x3XsaRs8e8RLUbRNvHpSN95xR6sCTf4eD/muI5umSXbZwJ09BEOoWPg/fckVU JewydXrX5X2iRVWRtAmsO1KVDerukYDZ9KYPJ8+L8nug8DHvVT1fhQAI2YIREa3l kiu15tS3FqSgh0l0K3bERSAXnULH5T8hzzH9Ht2TwUIU -----END CERTIFICATE-----Generated at Wed Dec 10 18:32:04 2025 by rpki-client