This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vr9JehOPUgUxTVLg94Nh6WYSarE.roa File: vr9JehOPUgUxTVLg94Nh6WYSarE.roa (raw, json) Hash identifier: nWqIeE6fT7TZfGOQmmWHjsN0OqQ2+FWUSyjHmghlsks= Subject key identifier: BE:BF:49:7A:13:8F:52:05:31:4D:52:E0:F7:83:61:E9:66:12:6A:B1 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019A341946A77AF07E0997F0A0CE29925032 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vr9JehOPUgUxTVLg94Nh6WYSarE.roa Signing time: Thu 30 Oct 2025 07:51:03 +0000 ROA not before: Thu 30 Oct 2025 07:51:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215916 IP address blocks: 2a0f:b240:7d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:34:19:46:a7:7a:f0:7e:09:97:f0:a0:ce:29:92:50:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Oct 30 07:51:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bebf497a138f5205314d52e0f78361e966126ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:20:08:da:a4:e5:c5:1c:de:3b:5d:68:36: 9b:82:0e:39:a1:29:97:00:cb:aa:dd:73:16:54:a1: 6f:24:7f:02:2c:96:c0:30:61:e7:d1:e6:31:77:31: 67:fb:f3:ae:c1:d3:b0:98:3a:f1:c3:71:5b:cc:eb: 92:6c:3d:24:a8:d2:62:ed:fa:6a:f5:8c:f6:a6:f3: 5d:50:9d:e5:9f:3e:fb:54:3e:72:c1:05:da:06:88: 0a:0c:d5:5e:32:4f:6a:39:12:d0:ea:6a:7e:da:cb: 60:56:06:4e:89:13:3e:ab:7c:c6:6c:9d:b4:85:12: 74:5a:07:55:b5:89:64:95:14:52:51:d5:11:30:56: e8:27:71:aa:e2:cc:e6:af:54:fb:7a:71:57:6b:6d: 80:ff:a7:9b:72:a9:88:cf:4f:3e:b0:14:2e:16:1a: cf:b7:92:1b:be:6b:0c:4f:6e:53:f8:82:ac:44:4c: 8c:a2:79:8a:0c:b0:78:a7:6e:22:fa:ea:a9:77:ef: 68:0a:bc:f3:f0:3c:ba:30:41:4e:d3:89:41:72:b8: 17:be:db:f8:46:58:c0:00:a0:34:03:3b:09:60:d6: f1:04:a1:96:98:1a:1f:83:14:1e:59:f3:97:c6:4b: 26:07:a3:9d:05:c3:b5:d7:69:35:0d:95:81:b0:d7: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BF:49:7A:13:8F:52:05:31:4D:52:E0:F7:83:61:E9:66:12:6A:B1 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vr9JehOPUgUxTVLg94Nh6WYSarE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:7d00::/40 Signature Algorithm: sha256WithRSAEncryption 65:4a:a4:83:38:41:1c:7f:82:1e:c6:67:9e:45:93:1e:6f:8f: fa:e1:9f:ea:fd:ac:7d:ec:ab:ba:7e:99:29:10:57:bb:75:64: be:0a:85:ef:2b:c0:cb:43:8e:13:74:b5:52:b4:26:4c:98:7a: 10:bc:7b:b3:5c:f5:8d:6f:bf:34:f0:0b:5c:59:74:6c:d1:e3: 42:6c:dd:a6:4c:90:6f:a3:e9:15:cc:d9:97:97:28:96:7d:9b: c7:ef:7b:d1:6d:ed:33:2c:84:8c:de:57:d4:83:0e:2f:c0:51: 14:d6:30:70:96:d0:99:71:f1:bf:82:b2:e0:5d:60:e2:ac:96: 2f:16:7c:84:fd:13:7f:08:9e:a9:0e:6c:e2:cc:3a:b7:9d:10: 7b:ca:e5:6a:c6:a5:7d:a3:79:1a:94:f7:e1:47:28:b3:d4:a8: 32:6a:c6:f0:f9:7d:f2:2e:41:b7:d0:11:a8:f2:2c:a7:78:ca: bb:f6:42:82:f7:08:a7:cd:92:41:90:3b:7e:27:97:d0:a4:54: 9d:0d:fc:81:98:e3:9c:ab:31:e6:f0:86:7f:33:1a:13:5c:5e: 6a:32:93:66:9e:37:65:79:0a:5b:39:26:5f:0e:6e:4c:6d:e7: d5:e4:f5:b9:38:cd:ec:b7:89:09:d8:d6:f4:2f:51:d1:b1:d8: ed:d7:4f:69 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZo0GUanevB+CZfwoM4pklAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMDMwMDc1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWJmNDk3YTEzOGY1MjA1MzE0ZDUyZTBmNzgzNjFlOTY2MTI2YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKIgCNqk5cUc3jtdaDabgg45oSmX AMuq3XMWVKFvJH8CLJbAMGHn0eYxdzFn+/OuwdOwmDrxw3FbzOuSbD0kqNJi7fpq 9Yz2pvNdUJ3lnz77VD5ywQXaBogKDNVeMk9qORLQ6mp+2stgVgZOiRM+q3zGbJ20 hRJ0WgdVtYlklRRSUdURMFboJ3Gq4szmr1T7enFXa22A/6ebcqmIz08+sBQuFhrP t5IbvmsMT25T+IKsREyMonmKDLB4p24i+uqpd+9oCrzz8Dy6MEFO04lBcrgXvtv4 RljAAKA0AzsJYNbxBKGWmBofgxQeWfOXxksmB6OdBcO112k1DZWBsNfBtwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFL6/SXoTj1IFMU1S4PeDYelmEmqxMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvdnI5SmVoT1BVZ1V4VFZMZzk0Tmg2V1lTYXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQH0w DQYJKoZIhvcNAQELBQADggEBAGVKpIM4QRx/gh7GZ55Fkx5vj/rhn+r9rH3sq7p+ mSkQV7t1ZL4Khe8rwMtDjhN0tVK0JkyYehC8e7Nc9Y1vvzTwC1xZdGzR40Js3aZM kG+j6RXM2ZeXKJZ9m8fve9Ft7TMshIzeV9SDDi/AURTWMHCW0Jlx8b+CsuBdYOKs li8WfIT9E38InqkObOLMOredEHvK5WrGpX2jeRqU9+FHKLPUqDJqxvD5ffIuQbfQ EajyLKd4yrv2QoL3CKfNkkGQO34nl9CkVJ0N/IGY45yrMebwhn8zGhNcXmoyk2ae N2V5Cls5Jl8Obkxt59Xk9bk4zey3iQnY1vQvUdGx2O3XT2k= -----END CERTIFICATE-----Generated at Sat Nov 22 22:15:33 2025 by rpki-client