This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/egvt_keJJNtlbckAP-LqRFwCFLg.roa File: egvt_keJJNtlbckAP-LqRFwCFLg.roa (raw, json) Hash identifier: c1u82yeIMMSUrY4JftXkhtiUwhkn9BZ3ycDiFo0cdz0= Subject key identifier: 7A:0B:ED:FE:47:89:24:DB:65:6D:C9:00:3F:E2:EA:44:5C:02:14:B8 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC87E36A43B5131EBF4C4E50338DA45 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/egvt_keJJNtlbckAP-LqRFwCFLg.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213529 IP address blocks: 2a0d:d940:2008::/48 maxlen: 48 2a0d:d940:9006::/48 maxlen: 48 2a0d:d940:900e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7e:36:a4:3b:51:31:eb:f4:c4:e5:03:38:da:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0bedfe478924db656dc9003fe2ea445c0214b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:63:e6:a8:72:e8:53:e8:9b:2c:1a:d1:40: e1:6f:47:87:df:8d:f6:b7:ce:d6:23:f9:26:90:93: c4:06:62:8b:5d:20:1f:8b:41:4a:b4:b5:15:71:3f: d8:98:5e:aa:2b:a5:c3:88:53:06:ff:a8:52:e5:8e: f4:dc:e7:76:53:4c:a4:ab:ac:7d:9e:c0:f8:f0:93: d0:60:4b:7d:d8:ec:0e:d3:6a:dd:d3:d8:db:b6:de: cc:79:19:46:56:d1:18:10:01:fb:82:b9:6f:4d:5a: 49:c7:45:73:58:17:0a:84:66:19:09:5a:c9:ea:e6: e0:3b:df:68:f5:48:79:79:c0:8e:f9:ce:5a:fb:18: 92:65:20:74:f6:e0:98:1f:fa:f9:a9:01:db:66:2e: 49:2a:93:b8:a5:55:6f:fc:8f:66:56:64:8a:b0:23: 6c:fa:3a:01:85:99:ed:84:1a:79:f3:95:7d:c4:f8: 07:1b:51:8a:6a:9d:ca:c1:d6:45:dd:7e:5b:e7:1f: ca:09:20:3a:2f:4b:ee:f8:90:bc:5f:df:68:68:50: 7d:56:cf:d2:1f:8e:56:79:85:cd:5d:67:68:69:9e: c3:a1:e4:f0:c8:a4:02:d7:a2:3c:1c:61:a3:66:70: d2:8c:82:e4:fc:59:e4:b1:18:5f:cd:db:83:71:da: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0B:ED:FE:47:89:24:DB:65:6D:C9:00:3F:E2:EA:44:5C:02:14:B8 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/egvt_keJJNtlbckAP-LqRFwCFLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:2008::/48 2a0d:d940:9006::/48 2a0d:d940:900e::/48 Signature Algorithm: sha256WithRSAEncryption 47:09:3d:81:c9:05:5d:65:30:3f:ec:e6:f5:01:d7:50:cc:5e: a6:d1:29:3e:cb:96:70:a5:f9:e1:73:d4:4b:8a:87:6d:c2:20: 4c:2f:a1:bd:e1:9f:2f:ed:7f:fa:07:51:3e:50:f3:ee:cb:ae: 88:10:86:c6:ad:5a:7b:10:cd:4c:60:3e:66:fe:f5:26:af:60: 7f:79:5b:da:dc:a8:13:9b:72:83:63:d1:17:9e:28:e8:f0:0f: b4:88:ec:49:41:0b:71:b6:b0:88:ee:ec:aa:a9:7c:88:40:c9: 69:2a:cd:c3:57:89:17:a0:dd:d1:e3:0e:3c:25:7b:f2:74:04: da:04:28:ec:72:d7:e7:47:9d:f0:0e:57:7e:5b:53:68:de:63: 80:93:68:5d:76:0a:41:24:4e:b6:c9:6b:f7:9b:f7:d6:81:53: 62:d9:94:92:83:ba:07:c9:5a:d0:c7:96:ec:67:96:ba:6c:c4: d3:47:a8:67:7b:92:ab:bf:68:83:f5:f0:26:90:19:f0:3d:07: 22:1b:d0:1f:f2:a9:0e:ab:b0:80:46:5b:52:ce:dd:99:a9:95: 2a:3e:23:f2:66:87:a6:65:72:15:fc:d4:2e:77:18:c3:55:7f: 2d:0c:24:03:e8:5d:bc:8a:cf:65:a7:d1:6e:e6:55:82:f0:aa: 68:77:90:4d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yH42pDtRMev0xOUDONpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBiZWRmZTQ3ODkyNGRiNjU2ZGM5MDAzZmUyZWE0NDVjMDIxNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ5j5qhy6FPomywa0UDhb0eH3432 t87WI/kmkJPEBmKLXSAfi0FKtLUVcT/YmF6qK6XDiFMG/6hS5Y703Od2U0ykq6x9 nsD48JPQYEt92OwO02rd09jbtt7MeRlGVtEYEAH7grlvTVpJx0VzWBcKhGYZCVrJ 6ubgO99o9Uh5ecCO+c5a+xiSZSB09uCYH/r5qQHbZi5JKpO4pVVv/I9mVmSKsCNs +joBhZnthBp585V9xPgHG1GKap3KwdZF3X5b5x/KCSA6L0vu+JC8X99oaFB9Vs/S H45WeYXNXWdoaZ7DoeTwyKQC16I8HGGjZnDSjILk/FnksRhfzduDcdrPnwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHoL7f5HiSTbZW3JAD/i6kRcAhS4MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvZWd2dF9rZUpKTnRsYmNrQVAtTHFSRndDRkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg3ZQCAI AwcAKg3ZQJAGAwcAKg3ZQJAOMA0GCSqGSIb3DQEBCwUAA4IBAQBHCT2ByQVdZTA/ 7Ob1AddQzF6m0Sk+y5Zwpfnhc9RLiodtwiBML6G94Z8v7X/6B1E+UPPuy66IEIbG rVp7EM1MYD5m/vUmr2B/eVva3KgTm3KDY9EXnijo8A+0iOxJQQtxtrCI7uyqqXyI QMlpKs3DV4kXoN3R4w48JXvydATaBCjsctfnR53wDld+W1No3mOAk2hddgpBJE62 yWv3m/fWgVNi2ZSSg7oHyVrQx5bsZ5a6bMTTR6hne5Krv2iD9fAmkBnwPQciG9Af 8qkOq7CARltSzt2ZqZUqPiPyZoemZXIV/NQudxjDVX8tDCQD6F28is9lp9Fu5lWC 8Kpod5BN -----END CERTIFICATE-----Generated at Thu Jan 1 21:55:11 2026 by rpki-client