This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ecmYzeloBMaC1Z8saujvt-Bo77U.roa File: ecmYzeloBMaC1Z8saujvt-Bo77U.roa (raw, json) Hash identifier: GnXjju+vONnuvWCIKSgbBqWDcImXj4nDGqV9ObkeZuo= Subject key identifier: 79:C9:98:CD:E9:68:04:C6:82:D5:9F:2C:6A:E8:EF:B7:E0:68:EF:B5 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82DFA5AF61DA57892F883525F7D5BB Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ecmYzeloBMaC1Z8saujvt-Bo77U.roa Signing time: Fri 02 Jan 2026 16:20:41 +0000 ROA not before: Fri 02 Jan 2026 16:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212831 IP address blocks: 2a0b:b87:ffbb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:df:a5:af:61:da:57:89:2f:88:35:25:f7:d5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c998cde96804c682d59f2c6ae8efb7e068efb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:06:48:04:f1:a6:2e:ff:3f:74:7d:12:dd: f2:48:ed:bf:4c:22:d4:4d:12:41:91:f7:aa:36:71: 3a:9b:56:8e:82:1a:2d:27:3f:15:52:be:a9:c4:8b: 37:d3:5a:b2:79:d6:02:29:d8:fb:8d:8f:c6:95:dd: dc:08:32:73:ed:d1:32:69:97:cf:17:6f:cc:4c:e5: fd:dd:6a:06:9c:8e:5d:e1:95:cf:38:b8:1e:83:13: 17:5b:5c:b3:fe:bd:06:81:32:0a:d0:c2:0d:e7:01: e5:c5:3c:b5:06:37:55:fc:a7:1f:27:0d:6c:85:84: ee:c2:55:ee:67:34:c4:41:eb:75:aa:94:af:88:79: 5c:4d:e4:36:63:e3:8d:c6:b8:de:5f:f9:51:cd:e1: 97:02:c2:1a:18:03:4e:cd:8f:84:90:7e:1c:8b:67: 85:a0:d3:2c:4b:d9:6e:7d:d8:f0:be:b0:5b:21:87: 3b:2c:51:40:84:7f:f2:33:b3:53:f2:8b:b4:8e:e9: 9f:6d:77:e5:84:a0:e6:c5:30:6f:96:76:d8:99:25: d6:83:ed:fe:05:72:7d:59:45:0c:04:b2:ee:28:3c: 3a:8e:04:7d:1b:ca:28:65:ee:0f:47:0d:86:19:b4: e0:9a:31:a2:64:98:5f:70:b5:eb:e3:04:ba:c5:89: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C9:98:CD:E9:68:04:C6:82:D5:9F:2C:6A:E8:EF:B7:E0:68:EF:B5 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ecmYzeloBMaC1Z8saujvt-Bo77U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffbb::/48 Signature Algorithm: sha256WithRSAEncryption 17:98:37:d6:f6:52:ae:4e:07:53:28:d5:ac:ba:64:9f:d0:ff: e2:98:bf:42:d2:67:16:99:51:7c:42:9d:1e:0a:5d:7d:99:49: f7:8c:f4:f3:4c:75:7c:d6:4c:32:57:5a:92:95:57:d5:db:b8: 6a:ae:f7:85:f7:31:44:07:e5:b2:53:f7:0c:2d:39:58:d6:7f: c8:f5:69:32:22:d3:b6:d8:79:1c:5d:4b:c7:50:ba:0f:9a:66: bf:af:b7:de:75:67:01:be:d5:cf:c7:5e:33:cd:81:47:eb:55: 3e:f5:92:60:82:4b:c6:c9:0e:ab:bf:21:06:c0:35:60:7b:44: b5:e3:8c:18:f6:9c:63:b4:4d:6b:d2:ed:68:a5:c6:32:61:37: 31:4b:15:8c:d8:ff:6a:6a:4d:c8:c0:bf:81:dc:77:da:34:a7: 77:0a:bd:7b:a2:32:10:b9:8d:0c:55:5a:81:96:c7:4b:5b:5f: d2:64:9d:55:c5:2c:9f:51:30:85:cb:bc:00:77:c1:10:6e:ec: 15:27:e8:b4:38:2b:2a:f8:c6:40:da:37:17:b6:e3:cd:3e:fc: 9e:c2:f0:ee:57:15:19:46:02:ff:b4:51:33:bd:d7:d0:42:17: f0:3d:e6:8d:e1:4c:8a:11:57:22:be:1f:95:6f:13:77:c1:32: e3:35:05:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gt+lr2HaV4kviDUl99W7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWM5OThjZGU5NjgwNGM2ODJkNTlmMmM2YWU4ZWZiN2UwNjhlZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYYGSATxpi7/P3R9Et3ySO2/TCLU TRJBkfeqNnE6m1aOghotJz8VUr6pxIs301qyedYCKdj7jY/Gld3cCDJz7dEyaZfP F2/MTOX93WoGnI5d4ZXPOLgegxMXW1yz/r0GgTIK0MIN5wHlxTy1BjdV/KcfJw1s hYTuwlXuZzTEQet1qpSviHlcTeQ2Y+ONxrjeX/lRzeGXAsIaGANOzY+EkH4ci2eF oNMsS9lufdjwvrBbIYc7LFFAhH/yM7NT8ou0jumfbXflhKDmxTBvlnbYmSXWg+3+ BXJ9WUUMBLLuKDw6jgR9G8ooZe4PRw2GGbTgmjGiZJhfcLXr4wS6xYmbeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHnJmM3paATGgtWfLGro77fgaO+1MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZWNtWXplbG9CTWFDMVo4c2F1anZ0LUJvNzdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+7 MA0GCSqGSIb3DQEBCwUAA4IBAQAXmDfW9lKuTgdTKNWsumSf0P/imL9C0mcWmVF8 Qp0eCl19mUn3jPTzTHV81kwyV1qSlVfV27hqrveF9zFEB+WyU/cMLTlY1n/I9Wky ItO22HkcXUvHULoPmma/r7fedWcBvtXPx14zzYFH61U+9ZJggkvGyQ6rvyEGwDVg e0S144wY9pxjtE1r0u1opcYyYTcxSxWM2P9qak3IwL+B3HfaNKd3Cr17ojIQuY0M VVqBlsdLW1/SZJ1VxSyfUTCFy7wAd8EQbuwVJ+i0OCsq+MZA2jcXtuPNPvyewvDu VxUZRgL/tFEzvdfQQhfwPeaN4UyKEVcivh+VbxN3wTLjNQXQ -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:40 2026 by rpki-client