This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/e0CW_4oZRrryGAZlyRnhpcoXNPo.roa File: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (raw, json) Hash identifier: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE= Subject key identifier: 7B:40:96:FF:8A:19:46:BA:F2:18:06:65:C9:19:E1:A5:CA:17:34:FA Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0CDF235472CA45B7BB8EAAFA4708 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/e0CW_4oZRrryGAZlyRnhpcoXNPo.roa Signing time: Thu 01 Jan 2026 14:17:51 +0000 ROA not before: Thu 01 Jan 2026 14:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216164 IP address blocks: 2a05:4142::/32 maxlen: 32 2a05:4143::/32 maxlen: 32 2a05:4144::/32 maxlen: 32 2a11:e100::/29 maxlen: 48 2a11:e106::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0c:df:23:54:72:ca:45:b7:bb:8e:aa:fa:47:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b4096ff8a1946baf2180665c919e1a5ca1734fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:73:3e:43:b5:0f:b5:b6:3f:ac:9d:6d:c7: f3:6a:c0:07:06:f0:ed:a6:03:f6:11:16:dc:83:56: 2a:6b:85:73:7e:b9:64:51:e1:7b:7a:57:c0:06:4d: 9c:93:0d:ac:48:41:44:79:21:28:5a:d9:01:3f:5f: 1f:f7:99:a6:a6:69:2b:bb:9a:95:b9:2a:27:e1:95: cb:1b:6f:8c:55:5d:0e:df:fd:08:52:29:09:ef:f7: cb:9b:57:63:74:c5:71:66:d0:43:eb:32:39:37:a2: df:4a:99:1b:6b:8e:79:a3:c4:c4:e0:f3:75:aa:20: 34:30:0e:2f:25:8b:b2:ec:3c:92:8a:de:20:0a:fd: 88:c2:5e:73:d8:2c:05:8e:20:79:66:cf:61:b6:f2: b9:88:29:76:7c:15:2d:b6:2c:77:dc:6f:18:f6:18: f7:e0:6e:e4:b6:e0:5d:35:4b:84:fe:e9:4d:93:6a: b9:6f:1a:de:8d:7d:6c:4e:db:19:7c:81:e7:2e:0f: a4:83:84:23:ee:aa:25:38:e8:99:d7:bf:76:b0:86: 44:74:48:78:84:64:8f:62:5f:30:5b:ca:a2:97:6c: 96:29:6c:f5:ed:cf:15:e2:b4:25:98:93:a9:95:0e: 18:0b:ea:29:96:ed:d1:8f:fb:4e:e1:95:21:89:f9: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:40:96:FF:8A:19:46:BA:F2:18:06:65:C9:19:E1:A5:CA:17:34:FA X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/e0CW_4oZRrryGAZlyRnhpcoXNPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4142::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff 2a11:e100::/29 Signature Algorithm: sha256WithRSAEncryption 54:ac:d3:2a:8b:7e:6c:1a:cd:0c:fa:a5:f0:75:1c:b9:f1:90: a4:7e:02:0a:65:28:28:b5:52:0c:78:b9:ef:67:72:86:6e:d1: 75:0e:0c:91:f2:74:b4:b6:d1:38:f9:02:65:9b:b1:4a:31:59: bf:04:c1:64:a0:f0:64:2d:d7:4a:10:33:5f:fa:d6:23:98:f7: ae:61:01:d2:3a:05:96:63:c8:65:c4:93:ed:0f:5c:f9:26:96: ba:fd:e6:a3:1e:dd:53:b3:9c:01:cb:e1:5b:be:df:b7:8e:c2: ff:df:36:54:79:0d:aa:14:9b:59:76:39:74:24:7e:bb:10:eb: e9:3d:b8:ed:29:e0:14:e6:0d:2d:57:5e:75:c6:d7:34:31:ec: b9:11:f0:87:30:0e:72:a3:48:62:ea:6f:be:9d:c9:5a:b7:81: ae:27:60:fa:67:c1:bb:24:70:8c:50:d7:94:eb:57:84:17:e3: 16:36:65:93:a0:5b:29:08:65:ae:6a:e9:62:28:cd:98:f5:14: ba:2b:30:6b:94:cb:37:14:bf:4a:fa:df:9b:e4:f4:30:d4:84: e6:24:75:a7:19:16:7c:be:2c:a4:a0:da:01:95:ac:ee:6d:0c: 11:3f:c6:fe:39:b0:a6:77:cc:ce:0d:32:fc:34:b4:12:5b:cd: 9a:3b:eb:8e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57AzfI1RyykW3u46q+kcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjQwOTZmZjhhMTk0NmJhZjIxODA2NjVjOTE5ZTFhNWNhMTczNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb5zPkO1D7W2P6ydbcfzasAHBvDt pgP2ERbcg1Yqa4VzfrlkUeF7elfABk2ckw2sSEFEeSEoWtkBP18f95mmpmkru5qV uSon4ZXLG2+MVV0O3/0IUikJ7/fLm1djdMVxZtBD6zI5N6LfSpkba455o8TE4PN1 qiA0MA4vJYuy7DySit4gCv2Iwl5z2CwFjiB5Zs9htvK5iCl2fBUttix33G8Y9hj3 4G7ktuBdNUuE/ulNk2q5bxrejX1sTtsZfIHnLg+kg4Qj7qolOOiZ1792sIZEdEh4 hGSPYl8wW8qil2yWKWz17c8V4rQlmJOplQ4YC+oplu3Rj/tO4ZUhifkUlwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHtAlv+KGUa68hgGZckZ4aXKFzT6MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvZTBDV180b1pScnJ5R0FabHlSbmhwY29YTlBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXMA4DBQEqBUFC AwUAKgVBRAMFAyoR4QAwDQYJKoZIhvcNAQELBQADggEBAFSs0yqLfmwazQz6pfB1 HLnxkKR+AgplKCi1Ugx4ue9ncoZu0XUODJHydLS20Tj5AmWbsUoxWb8EwWSg8GQt 10oQM1/61iOY965hAdI6BZZjyGXEk+0PXPkmlrr95qMe3VOznAHL4Vu+37eOwv/f NlR5DaoUm1l2OXQkfrsQ6+k9uO0p4BTmDS1XXnXG1zQx7LkR8IcwDnKjSGLqb76d yVq3ga4nYPpnwbskcIxQ15TrV4QX4xY2ZZOgWykIZa5q6WIozZj1FLorMGuUyzcU v0r635vk9DDUhOYkdacZFny+LKSg2gGVrO5tDBE/xv45sKZ3zM4NMvw0tBJbzZo7 644= -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:59 2026 by rpki-client