This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eIpleKuOfZq1bPfCT2L77KdKRYg.roa File: eIpleKuOfZq1bPfCT2L77KdKRYg.roa (raw, json) Hash identifier: czjz3eTpWUJaPaJtmnQVcyeyF+Dq4AtmQioUJnZMjK8= Subject key identifier: 78:8A:65:78:AB:8E:7D:9A:B5:6C:F7:C2:4F:62:FB:EC:A7:4A:45:88 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA56738E9DB7E0743A67731EE866899 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eIpleKuOfZq1bPfCT2L77KdKRYg.roa Signing time: Fri 02 Jan 2026 12:18:47 +0000 ROA not before: Fri 02 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216187 IP address blocks: 2a10:4646:3a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:67:38:e9:db:7e:07:43:a6:77:31:ee:86:68:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788a6578ab8e7d9ab56cf7c24f62fbeca74a4588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:c9:91:53:eb:44:8e:cb:51:15:2b:e6:7b: f0:fe:59:e9:54:58:44:bc:df:e4:06:e5:ca:1f:28: dd:08:57:1c:e8:6f:83:87:fc:58:7a:6f:8b:f9:01: 89:35:0e:4f:90:fc:23:18:d2:a8:8b:9b:e9:12:a5: a8:8c:d7:58:ec:dc:53:e9:28:0e:ae:47:f8:24:f9: 13:7b:13:dc:aa:70:97:e8:1d:ef:27:f4:86:c3:6c: 02:5b:6d:6e:13:44:86:94:7c:08:64:72:59:c9:ca: 6c:bc:37:d2:9c:d4:8f:c0:19:58:2d:be:c1:7c:e9: 7a:d9:ba:f2:8b:1b:ba:7f:57:3d:76:68:c3:56:25: ed:ee:5b:34:92:b6:97:ba:46:ea:fb:6c:25:c7:cd: db:3c:1c:6e:d0:24:22:b3:15:88:07:77:7f:33:2d: 7c:e0:4b:05:20:4c:c7:c4:56:45:c0:25:92:a1:be: 1b:d7:06:37:77:2a:ad:35:c8:62:cb:31:d1:2f:d4: 89:5b:0a:41:86:d9:f6:e7:c0:8b:7b:73:56:dd:95: 78:03:79:28:d0:d3:da:7b:ef:99:3f:e7:1e:a3:db: c2:6f:16:c0:b1:ae:e0:18:2f:ab:10:7f:3e:66:6c: ed:64:a9:79:7d:d1:e5:16:a3:46:c2:3d:59:75:63: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8A:65:78:AB:8E:7D:9A:B5:6C:F7:C2:4F:62:FB:EC:A7:4A:45:88 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eIpleKuOfZq1bPfCT2L77KdKRYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:3a0::/44 Signature Algorithm: sha256WithRSAEncryption 8f:16:06:3e:fe:6d:d8:8b:8d:ad:44:10:27:94:bd:08:ba:87: 79:1d:60:25:e8:79:c6:91:ef:c6:1c:78:38:5b:b9:31:d9:0e: 8e:03:db:98:29:1c:3f:66:ed:5a:fc:08:04:e8:c0:31:e9:23: 04:7a:f9:92:68:36:63:c7:bb:af:7e:6d:f5:17:28:9f:ad:fe: 1d:03:88:4f:7b:2c:6c:52:49:df:2d:e9:91:ac:27:cb:e1:4b: 3c:a8:6c:cd:83:7e:97:00:1d:ee:4f:c3:fb:d9:42:59:d3:3f: a1:77:2f:fb:71:bb:38:91:c8:42:41:be:98:eb:ad:d3:d3:d8: e3:2a:27:29:e2:97:ac:03:a9:0b:71:8f:03:df:56:94:57:75: 49:80:8d:e6:17:d8:a7:89:82:b1:f2:89:53:52:ac:15:d0:64: 49:31:ea:ac:86:a2:14:eb:57:66:8f:4d:29:fb:88:0b:e4:58: 25:70:cb:b8:8b:65:f5:f1:bd:2e:17:21:41:8e:db:7f:f6:5e: ec:88:36:4d:c1:08:64:b9:f0:25:f4:59:c3:74:5a:34:ab:a5: 9e:ad:92:1a:c6:c9:be:1d:55:86:ad:5d:1d:d0:e6:4e:7f:79: c3:b3:06:9b:e6:a5:a0:fa:92:33:bb:81:5e:cf:4e:6e:61:b9: ad:74:d3:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWc46dt+B0OmdzHuhmiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhhNjU3OGFiOGU3ZDlhYjU2Y2Y3YzI0ZjYyZmJlY2E3NGE0NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV/JkVPrRI7LURUr5nvw/lnpVFhE vN/kBuXKHyjdCFcc6G+Dh/xYem+L+QGJNQ5PkPwjGNKoi5vpEqWojNdY7NxT6SgO rkf4JPkTexPcqnCX6B3vJ/SGw2wCW21uE0SGlHwIZHJZycpsvDfSnNSPwBlYLb7B fOl62bryixu6f1c9dmjDViXt7ls0kraXukbq+2wlx83bPBxu0CQisxWIB3d/My18 4EsFIEzHxFZFwCWSob4b1wY3dyqtNchiyzHRL9SJWwpBhtn258CLe3NW3ZV4A3ko 0NPae++ZP+ceo9vCbxbAsa7gGC+rEH8+ZmztZKl5fdHlFqNGwj1ZdWOs7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHiKZXirjn2atWz3wk9i++ynSkWIMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvZUlwbGVLdU9mWnExYlBmQ1QyTDc3S2RLUllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgOg MA0GCSqGSIb3DQEBCwUAA4IBAQCPFgY+/m3Yi42tRBAnlL0Iuod5HWAl6HnGke/G HHg4W7kx2Q6OA9uYKRw/Zu1a/AgE6MAx6SMEevmSaDZjx7uvfm31Fyifrf4dA4hP eyxsUknfLemRrCfL4Us8qGzNg36XAB3uT8P72UJZ0z+hdy/7cbs4kchCQb6Y663T 09jjKicp4pesA6kLcY8D31aUV3VJgI3mF9iniYKx8olTUqwV0GRJMeqshqIU61dm j00p+4gL5FglcMu4i2X18b0uFyFBjtt/9l7siDZNwQhkufAl9FnDdFo0q6WerZIa xsm+HVWGrV0d0OZOf3nDswab5qWg+pIzu4Fez05uYbmtdNP9 -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:38 2026 by rpki-client