This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EI-zrFST5hJnLBKDsxbsxc9S1w4.roa File: EI-zrFST5hJnLBKDsxbsxc9S1w4.roa (raw, json) Hash identifier: BlEwUvBSHYaYNb6xRzqKzC+DV8mSOKIdhmyEaHSeK6U= Subject key identifier: 10:8F:B3:AC:54:93:E6:12:67:2C:12:83:B3:16:EC:C5:CF:52:D7:0E Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75ED329BBA8EAEF3467AEBAC7EB61 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EI-zrFST5hJnLBKDsxbsxc9S1w4.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211330 IP address blocks: 2a0d:6f80:2a41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:d3:29:bb:a8:ea:ef:34:67:ae:ba:c7:eb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=108fb3ac5493e612672c1283b316ecc5cf52d70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:42:26:fe:a7:61:22:8b:35:d0:73:77:45: 6b:2f:25:bd:7e:cd:35:4f:70:12:d3:b2:a3:39:43: e2:a1:46:fd:a5:a3:01:dd:75:91:61:89:31:77:4d: f7:2d:d1:2f:ff:69:a9:c2:21:a5:ed:69:47:09:85: 67:67:e3:c1:34:79:ca:37:e0:c2:9c:21:cf:b3:3f: ca:ae:0e:48:be:e2:64:92:ea:98:2a:5d:88:87:5e: 5c:6f:ec:9e:93:fb:9f:f5:c6:b3:0b:7b:bd:59:e4: c6:76:9a:78:e6:40:56:9d:7e:14:d9:ac:16:42:4b: 0f:00:66:88:e5:c5:68:a8:1c:09:cc:3b:9a:5c:ed: 93:74:18:e0:2b:d7:2e:26:eb:94:4c:e5:ca:47:c9: bd:ce:57:f7:53:f4:d8:25:49:a0:69:52:6e:26:35: db:31:12:06:4e:ac:3e:08:3d:5c:88:0d:ec:02:27: 8f:0e:fe:13:1c:43:a2:57:ae:4c:b8:4d:91:92:60: 5c:ad:f2:c7:1f:e5:67:a2:60:6f:e0:93:bf:e7:2e: 6c:f8:75:48:81:1e:39:1c:1c:5e:07:cd:d2:55:86: 89:74:31:0b:53:d7:94:43:6b:35:99:3d:ee:42:2e: 60:21:6c:a1:ee:c2:b2:ff:1b:c9:c3:62:5c:ce:78: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:B3:AC:54:93:E6:12:67:2C:12:83:B3:16:EC:C5:CF:52:D7:0E X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EI-zrFST5hJnLBKDsxbsxc9S1w4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:2a41::/48 Signature Algorithm: sha256WithRSAEncryption 69:a8:15:30:32:24:cd:63:80:68:96:37:be:02:57:96:2b:4c: a5:51:09:c9:7f:53:40:26:e6:ab:18:db:07:dd:83:b8:fd:f3: b6:27:62:1f:f1:f1:f6:da:27:f5:6f:99:c9:70:9d:3d:ce:5b: 50:75:ee:25:d5:7a:55:37:a8:7c:b7:a3:3a:b8:58:84:bd:41: 7b:c1:35:9d:da:ce:d2:88:9d:9c:1f:2f:63:85:33:f5:b2:16: 7f:0b:78:bf:4c:21:64:f6:f2:a2:f1:bb:32:76:c5:c8:d5:69: 52:49:33:ed:93:45:ff:22:89:6c:96:05:05:e1:4e:78:96:a6: 29:35:95:2a:b0:fc:4b:a7:37:86:d7:78:f9:11:68:c6:92:2f: f3:e4:95:78:60:2b:3b:43:f3:ab:ee:29:a0:cf:dd:ed:1e:0b: 31:b6:93:14:1f:7b:41:3f:24:fe:0a:3d:67:34:39:49:af:98: 39:ca:77:c1:3b:40:d2:34:4a:b2:41:4b:6f:52:d5:ce:5e:02: a3:1a:c5:49:91:7b:15:7e:62:62:d9:fc:90:ce:d7:79:ee:b6: 51:6b:91:b1:ff:f3:a1:04:82:34:ea:89:34:29:d8:b1:bb:e7: 3c:7f:8a:40:b5:44:de:6c:0c:89:e6:d0:c3:a4:8a:5d:b5:0a: 0f:28:39:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p17TKbuo6u80Z666x+thMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDhmYjNhYzU0OTNlNjEyNjcyYzEyODNiMzE2ZWNjNWNmNTJkNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO9CJv6nYSKLNdBzd0VrLyW9fs01 T3AS07KjOUPioUb9paMB3XWRYYkxd033LdEv/2mpwiGl7WlHCYVnZ+PBNHnKN+DC nCHPsz/Krg5IvuJkkuqYKl2Ih15cb+yek/uf9cazC3u9WeTGdpp45kBWnX4U2awW QksPAGaI5cVoqBwJzDuaXO2TdBjgK9cuJuuUTOXKR8m9zlf3U/TYJUmgaVJuJjXb MRIGTqw+CD1ciA3sAiePDv4THEOiV65MuE2RkmBcrfLHH+VnomBv4JO/5y5s+HVI gR45HBxeB83SVYaJdDELU9eUQ2s1mT3uQi5gIWyh7sKy/xvJw2JcznhQAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBCPs6xUk+YSZywSg7MW7MXPUtcOMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvRUktenJGU1Q1aEpuTEJLRHN4YnN4YzlTMXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgCpB MA0GCSqGSIb3DQEBCwUAA4IBAQBpqBUwMiTNY4Bolje+AleWK0ylUQnJf1NAJuar GNsH3YO4/fO2J2If8fH22if1b5nJcJ09zltQde4l1XpVN6h8t6M6uFiEvUF7wTWd 2s7SiJ2cHy9jhTP1shZ/C3i/TCFk9vKi8bsydsXI1WlSSTPtk0X/IolslgUF4U54 lqYpNZUqsPxLpzeG13j5EWjGki/z5JV4YCs7Q/Or7imgz93tHgsxtpMUH3tBPyT+ Cj1nNDlJr5g5ynfBO0DSNEqyQUtvUtXOXgKjGsVJkXsVfmJi2fyQztd57rZRa5Gx //OhBII06ok0Kdixu+c8f4pAtUTebAyJ5tDDpIpdtQoPKDnw -----END CERTIFICATE-----Generated at Sat Jan 3 18:58:52 2026 by rpki-client