This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/0l3jXxOUk3ox5jeThu6HwEBTnYM.roa File: 0l3jXxOUk3ox5jeThu6HwEBTnYM.roa (raw, json) Hash identifier: ezdpUMz8+l2SPN4UZ7KF4uUE3cAvIShKrnmcjhRrPT8= Subject key identifier: D2:5D:E3:5F:13:94:93:7A:31:E6:37:93:86:EE:87:C0:40:53:9D:83 Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136 Certificate serial: 019B94D9C68FA18B2B9869C82750B2BBE35E Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/0l3jXxOUk3ox5jeThu6HwEBTnYM.roa Signing time: Tue 06 Jan 2026 19:47:38 +0000 ROA not before: Tue 06 Jan 2026 19:47:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209857 IP address blocks: 2a06:8ac0:10::/48 maxlen: 48 2a06:8ac0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:d9:c6:8f:a1:8b:2b:98:69:c8:27:50:b2:bb:e3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136 Validity Not Before: Jan 6 19:47:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25de35f1394937a31e6379386ee87c040539d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:50:dc:14:2c:d0:8c:13:f8:4a:e1:01:40: 47:1e:81:3a:ed:fa:9e:67:e6:15:67:81:26:a1:96: 98:97:12:19:d8:cb:79:9b:19:7b:a6:2f:c7:3c:6e: 76:41:a9:4b:15:ec:30:17:f1:9b:d6:e0:45:aa:8b: f8:37:7d:b8:24:b6:bd:fd:cc:77:90:1f:c5:4c:eb: f5:5c:a0:d6:bc:cb:92:56:66:60:d8:22:15:d6:3c: 5d:c4:3f:f4:c9:99:57:96:df:ae:bb:14:ea:61:bd: 19:6c:c7:fc:e7:85:4d:46:b7:95:95:63:b4:24:75: 4e:1b:e2:25:45:06:ce:b6:a9:99:96:68:4a:f8:58: 18:e1:6e:65:30:ea:4b:9a:a8:48:57:82:e4:a2:87: 26:41:5b:80:fa:ac:38:cc:0a:24:c9:54:87:c4:72: a9:52:f5:fd:5b:e9:dc:f8:07:67:68:b1:97:02:e9: 52:74:95:38:34:ab:cd:0b:64:27:a5:ae:a7:ce:c8: ab:5f:0b:62:3f:39:a2:c5:8d:ff:e6:c2:61:ef:23: 36:20:9e:ca:6a:a2:ab:f8:07:ef:71:7e:b3:45:f3: 34:1c:4f:7c:3d:16:87:bc:b6:f8:2c:e9:61:25:91: 99:42:ee:0e:d7:ee:22:16:8e:73:c1:79:03:7c:a6: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5D:E3:5F:13:94:93:7A:31:E6:37:93:86:EE:87:C0:40:53:9D:83 X509v3 Authority Key Identifier: keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/0l3jXxOUk3ox5jeThu6HwEBTnYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:8ac0:10::/47 Signature Algorithm: sha256WithRSAEncryption 1c:84:8f:f9:7a:16:98:9d:ec:10:83:1d:f4:51:64:28:68:99: a7:ef:3e:5f:45:7e:b0:cd:e4:f8:96:10:8f:d3:e8:7e:39:62: 58:6b:c3:c1:34:0e:75:21:33:91:ed:28:89:02:5d:5e:f3:44: 16:1a:d6:86:b2:52:98:d7:07:7a:01:f2:a7:fb:d8:e1:4d:62: a1:15:ac:11:e0:80:cd:9f:ac:06:e7:d9:27:b2:e8:82:95:90: 63:48:d7:6c:c0:53:8c:f4:21:c5:80:80:54:1b:e7:1c:18:bc: ab:6e:a2:cf:c9:51:85:4c:1c:44:46:b1:0d:29:d3:f1:b5:4e: 3a:33:2d:21:73:4a:7b:39:d4:03:8a:36:40:84:05:66:e1:18: 3d:0c:7d:32:e2:cd:4f:b8:53:3d:12:ad:6c:1d:0d:28:2b:25: 67:e3:4f:46:5d:02:be:fc:91:b3:7b:4e:e8:23:af:1d:60:fc: cf:1e:5e:bd:34:dd:8a:ca:7e:81:af:98:1d:73:d7:fb:42:6b: e9:99:05:ed:b7:30:ba:d8:49:e4:62:84:e5:e5:4c:13:b7:35: 57:28:a0:37:be:40:57:9e:8c:4e:57:ad:22:c9:3d:c0:48:21: 17:12:7e:32:e7:6d:e6:a8:78:95:fa:88:93:a8:70:d2:33:cd: d1:d6:3c:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuU2caPoYsrmGnIJ1Cyu+NeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj YzExMzYwHhcNMjYwMTA2MTk0NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjVkZTM1ZjEzOTQ5MzdhMzFlNjM3OTM4NmVlODdjMDQwNTM5ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3whQ3BQs0IwT+ErhAUBHHoE67fqe Z+YVZ4EmoZaYlxIZ2Mt5mxl7pi/HPG52QalLFewwF/Gb1uBFqov4N324JLa9/cx3 kB/FTOv1XKDWvMuSVmZg2CIV1jxdxD/0yZlXlt+uuxTqYb0ZbMf854VNRreVlWO0 JHVOG+IlRQbOtqmZlmhK+FgY4W5lMOpLmqhIV4LkoocmQVuA+qw4zAokyVSHxHKp UvX9W+nc+AdnaLGXAulSdJU4NKvNC2Qnpa6nzsirXwtiPzmixY3/5sJh7yM2IJ7K aqKr+AfvcX6zRfM0HE98PRaHvLb4LOlhJZGZQu4O1+4iFo5zwXkDfKY28QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNJd418TlJN6MeY3k4buh8BAU52DMB8GA1UdIwQY MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt Zjc0Y2NjYzRlMGExLzEvMGwzalh4T1VrM294NWplVGh1Nkh3RUJUbllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgaKwAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQAchI/5ehaYnewQgx30UWQoaJmn7z5fRX6wzeT4 lhCP0+h+OWJYa8PBNA51ITOR7SiJAl1e80QWGtaGslKY1wd6AfKn+9jhTWKhFawR 4IDNn6wG59knsuiClZBjSNdswFOM9CHFgIBUG+ccGLyrbqLPyVGFTBxERrENKdPx tU46My0hc0p7OdQDijZAhAVm4Rg9DH0y4s1PuFM9Eq1sHQ0oKyVn409GXQK+/JGz e07oI68dYPzPHl69NN2Kyn6Br5gdc9f7QmvpmQXttzC62EnkYoTl5UwTtzVXKKA3 vkBXnoxOV60iyT3ASCEXEn4y523mqHiV+oiTqHDSM83R1jxh -----END CERTIFICATE-----Generated at Tue Jan 20 04:31:53 2026 by rpki-client