This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/eFneRI8NVirY9FXkrSGjf8r8DIg.roa File: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (raw, json) Hash identifier: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0= Subject key identifier: 78:59:DE:44:8F:0D:56:2A:D8:F4:55:E4:AD:21:A3:7F:CA:FC:0C:88 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B79EBB7842DCE55D28AA37BA756150B43 Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/eFneRI8NVirY9FXkrSGjf8r8DIg.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29035 IP address blocks: 2a0c:29c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b7:84:2d:ce:55:d2:8a:a3:7b:a7:56:15:0b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7859de448f0d562ad8f455e4ad21a37fcafc0c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:c1:d2:de:d4:c8:e6:86:1f:5d:fc:ca:1a: b6:76:9b:c3:d4:60:29:a5:b3:51:11:2e:69:c2:a7: 29:19:2a:63:d3:d6:ec:65:40:ce:ba:c6:dc:88:48: d4:e4:5b:a3:fd:b1:a5:59:d5:79:4a:54:45:a7:63: 7a:05:08:2a:d1:51:b0:07:5e:a6:31:a6:31:08:2f: 3e:02:45:4e:cb:ca:0c:67:01:32:53:a8:ec:4d:88: 64:22:7e:52:be:7c:be:11:89:eb:3f:96:12:1c:cb: 7b:b7:c4:71:73:15:4a:a0:a3:bb:57:82:bd:0d:2f: c3:cd:f7:56:56:d4:fb:09:cc:d3:03:b3:ac:c0:22: 8e:91:83:ad:c6:a6:21:19:17:f8:ed:d1:be:58:ec: 7f:09:08:d1:88:3f:d1:1e:6b:f6:a4:30:b3:88:75: 55:41:15:9f:e1:60:f0:53:50:63:8e:6d:ce:d0:db: f2:ae:a9:b5:ac:89:28:db:e5:76:70:47:22:77:43: da:04:33:88:7c:ad:a6:62:3c:0f:a7:02:1e:a5:65: d0:89:e9:9f:6d:42:e9:0d:6b:5f:52:02:b7:27:78: 8c:69:4f:65:6c:03:07:2c:7d:a9:3c:bf:55:b8:1c: f4:21:7b:8c:ee:3e:a5:7b:c1:bf:2e:51:0b:4f:43: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:59:DE:44:8F:0D:56:2A:D8:F4:55:E4:AD:21:A3:7F:CA:FC:0C:88 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/eFneRI8NVirY9FXkrSGjf8r8DIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:29c3::/32 Signature Algorithm: sha256WithRSAEncryption 64:a5:53:29:7d:14:e2:88:9a:aa:16:78:16:2f:50:9e:f1:c6: 85:39:0a:f1:71:9e:c9:f4:4e:da:51:7e:ca:1b:bc:e8:8c:46: d4:d5:5a:21:1e:6f:9a:68:85:4a:66:ed:93:b9:34:18:73:a6: 27:71:2c:a4:78:b0:8e:38:61:5b:ea:dc:bc:70:47:7b:a8:33: ab:35:a4:83:33:66:89:a1:88:da:eb:06:8c:ef:76:d1:8d:e3: cb:de:a9:b1:a1:34:df:0d:d0:36:84:5c:1c:3a:bf:e3:0f:43: 9e:c0:e1:5f:b7:8c:cc:92:b6:d8:8e:38:eb:ca:30:a2:e3:3e: 25:46:eb:f2:71:0c:f9:15:a4:59:74:e1:5f:15:7a:5b:7e:6f: d1:d8:89:42:21:38:58:c2:24:9d:49:34:a0:19:6d:c2:3b:7a: 5d:ef:d2:6c:c7:d8:af:34:cd:fb:40:44:06:09:59:38:18:1d: ad:bf:93:c4:81:31:09:3b:75:b1:2a:dc:ce:95:5e:ae:ac:62: 59:01:1a:5f:fc:89:b5:84:ba:08:5c:84:b3:da:be:14:a7:e5: e1:eb:c6:cd:9b:c1:8e:01:b9:9e:71:0e:4a:52:bb:a5:d9:24: 09:bb:bd:04:d7:60:07:80:c5:92:1d:0b:97:80:45:7e:fe:a0: 61:21:03:1d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt567eELc5V0oqje6dWFQtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODU5ZGU0NDhmMGQ1NjJhZDhmNDU1ZTRhZDIxYTM3ZmNhZmMwYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMPB0t7UyOaGH138yhq2dpvD1GAp pbNRES5pwqcpGSpj09bsZUDOusbciEjU5Fuj/bGlWdV5SlRFp2N6BQgq0VGwB16m MaYxCC8+AkVOy8oMZwEyU6jsTYhkIn5Svny+EYnrP5YSHMt7t8RxcxVKoKO7V4K9 DS/DzfdWVtT7CczTA7OswCKOkYOtxqYhGRf47dG+WOx/CQjRiD/RHmv2pDCziHVV QRWf4WDwU1Bjjm3O0Nvyrqm1rIko2+V2cEcid0PaBDOIfK2mYjwPpwIepWXQiemf bULpDWtfUgK3J3iMaU9lbAMHLH2pPL9VuBz0IXuM7j6le8G/LlELT0N6QwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHhZ3kSPDVYq2PRV5K0ho3/K/AyIMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvZUZuZVJJOE5WaXJZOUZYa3JTR2pmOHI4RElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgwpwzAN BgkqhkiG9w0BAQsFAAOCAQEAZKVTKX0U4oiaqhZ4Fi9QnvHGhTkK8XGeyfRO2lF+ yhu86IxG1NVaIR5vmmiFSmbtk7k0GHOmJ3EspHiwjjhhW+rcvHBHe6gzqzWkgzNm iaGI2usGjO920Y3jy96psaE03w3QNoRcHDq/4w9DnsDhX7eMzJK22I4468owouM+ JUbr8nEM+RWkWXThXxV6W35v0diJQiE4WMIknUk0oBltwjt6Xe/SbMfYrzTN+0BE BglZOBgdrb+TxIExCTt1sSrczpVerqxiWQEaX/yJtYS6CFyEs9q+FKfl4evGzZvB jgG5nnEOSlK7pdkkCbu9BNdgB4DFkh0Ll4BFfv6gYSEDHQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:31 2026 by rpki-client