This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EDzOHvmgTp08ldhQC-7NBJuc5ps.roa File: EDzOHvmgTp08ldhQC-7NBJuc5ps.roa (raw, json) Hash identifier: RMpYBSlCbn1ExN4Baj2KgV3K1G/S0WCWXcm4SV/nTZA= Subject key identifier: 10:3C:CE:1E:F9:A0:4E:9D:3C:95:D8:50:0B:EE:CD:04:9B:9C:E6:9B Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA767E67D4A637B15EA5D9D94C55BD8 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EDzOHvmgTp08ldhQC-7NBJuc5ps.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216387 IP address blocks: 2a0d:6f80:587a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:67:e6:7d:4a:63:7b:15:ea:5d:9d:94:c5:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=103cce1ef9a04e9d3c95d8500beecd049b9ce69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:34:85:6c:4a:f9:e4:e3:b8:23:92:33:c9:d5: bc:59:42:81:c6:a8:ee:6b:18:bb:4c:02:61:ae:ac: cd:cf:e8:31:eb:a5:e7:d0:f3:84:cd:4d:61:9d:c1: 6c:35:93:f7:58:c8:d0:93:9b:8a:ee:be:b9:de:2a: 6d:7f:c7:ff:1f:0b:62:fd:90:bd:fc:ba:27:a4:fa: 95:de:41:8d:9a:1a:40:72:ad:54:72:3c:23:48:eb: b3:9a:d1:a8:3f:60:96:4f:9b:95:e3:b9:89:1d:b2: 14:03:78:a6:c4:ff:1e:77:e8:86:8f:7d:79:d0:83: f7:31:52:bd:aa:7d:ff:45:55:86:9e:70:03:98:07: 7c:60:ec:90:a2:1c:57:4e:20:86:1e:4b:97:52:42: 7b:36:28:63:8b:70:4d:d1:09:42:5c:ef:67:08:c8: 00:2c:bb:a2:d0:ac:15:97:7a:eb:e6:18:52:99:1c: a1:b5:32:c9:02:6b:05:03:a2:7a:84:fc:bd:15:1c: 7c:c4:52:c6:8f:00:3f:b5:9b:55:6c:df:46:97:28: ff:46:07:ff:3a:9e:a3:8f:63:6e:5f:64:c8:68:48: 63:00:03:1c:fd:4b:ca:06:a5:35:f8:71:81:d9:84: 85:06:f5:d1:52:d2:e3:db:78:96:83:2e:f0:c6:8d: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:CE:1E:F9:A0:4E:9D:3C:95:D8:50:0B:EE:CD:04:9B:9C:E6:9B X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EDzOHvmgTp08ldhQC-7NBJuc5ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:587a::/48 Signature Algorithm: sha256WithRSAEncryption a9:b6:c1:d0:29:c3:66:29:79:9b:71:9e:cc:7f:66:2a:60:80: 2b:a8:dd:1c:de:ad:ec:76:e1:2a:28:61:a8:e0:5f:62:e6:28: bd:bc:93:84:20:79:8c:22:c6:49:39:9c:47:27:71:ef:7f:26: c0:bc:f5:44:49:a3:88:6e:10:ad:9e:4c:3d:6e:4c:37:eb:89: 10:44:05:e1:e7:5f:78:1e:36:e3:e4:25:cd:ea:f6:36:f1:08: c5:71:5c:9f:80:bc:f2:0a:9d:46:66:f3:b3:3b:ae:90:99:d0: dc:d5:88:9b:86:16:45:c0:59:4f:cb:46:d0:94:37:9c:ac:ee: 08:41:c0:89:b0:8c:a2:1c:a0:4f:9d:2b:34:5f:39:e8:84:c8: c5:f1:7b:cb:64:26:70:72:ca:fc:28:50:46:cc:2a:e1:0b:f3: 22:62:5b:4c:3f:5a:ab:58:87:6c:af:64:6d:fd:ca:4c:ad:13: da:9f:78:a4:a4:db:a4:90:53:9c:69:84:ea:e5:f7:c2:1c:12: d6:22:75:4c:8a:13:f8:60:17:b6:85:77:e7:86:8e:49:24:76: 47:99:31:fc:19:e2:34:54:81:b6:61:55:0c:9a:a2:73:db:20: 92:91:23:a2:20:29:48:4c:91:29:d0:cf:79:b1:f5:f9:f5:1e: af:c0:eb:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2fmfUpjexXqXZ2UxVvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNjY2UxZWY5YTA0ZTlkM2M5NWQ4NTAwYmVlY2QwNDliOWNlNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zSFbEr55OO4I5IzydW8WUKBxqju axi7TAJhrqzNz+gx66Xn0POEzU1hncFsNZP3WMjQk5uK7r653iptf8f/Hwti/ZC9 /LonpPqV3kGNmhpAcq1UcjwjSOuzmtGoP2CWT5uV47mJHbIUA3imxP8ed+iGj315 0IP3MVK9qn3/RVWGnnADmAd8YOyQohxXTiCGHkuXUkJ7Nihji3BN0QlCXO9nCMgA LLui0KwVl3rr5hhSmRyhtTLJAmsFA6J6hPy9FRx8xFLGjwA/tZtVbN9Glyj/Rgf/ Op6jj2NuX2TIaEhjAAMc/UvKBqU1+HGB2YSFBvXRUtLj23iWgy7wxo03CQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBA8zh75oE6dPJXYUAvuzQSbnOabMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvRUR6T0h2bWdUcDA4bGRoUUMtN05CSnVjNXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgFh6 MA0GCSqGSIb3DQEBCwUAA4IBAQCptsHQKcNmKXmbcZ7Mf2YqYIArqN0c3q3sduEq KGGo4F9i5ii9vJOEIHmMIsZJOZxHJ3HvfybAvPVESaOIbhCtnkw9bkw364kQRAXh 5194Hjbj5CXN6vY28QjFcVyfgLzyCp1GZvOzO66QmdDc1YibhhZFwFlPy0bQlDec rO4IQcCJsIyiHKBPnSs0XznohMjF8XvLZCZwcsr8KFBGzCrhC/MiYltMP1qrWIds r2Rt/cpMrRPan3ikpNukkFOcaYTq5ffCHBLWInVMihP4YBe2hXfnho5JJHZHmTH8 GeI0VIG2YVUMmqJz2yCSkSOiIClITJEp0M95sfX59R6vwOuH -----END CERTIFICATE-----Generated at Sat Jan 3 18:59:58 2026 by rpki-client