This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eSFc-jrx02A_dWByF1qGRiDKKWw.roa File: eSFc-jrx02A_dWByF1qGRiDKKWw.roa (raw, json) Hash identifier: I6Kx+g6HRJvl92E2ZUTTlvthedWJjMU1Cjwr0YGI0s8= Subject key identifier: 79:21:5C:FA:3A:F1:D3:60:3F:75:60:72:17:5A:86:46:20:CA:29:6C Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA552B636FB1E722AF8ED37F56FBD4F Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eSFc-jrx02A_dWByF1qGRiDKKWw.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47400 IP address blocks: 2a10:4640:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:52:b6:36:fb:1e:72:2a:f8:ed:37:f5:6f:bd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79215cfa3af1d3603f756072175a864620ca296c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:de:3b:ab:ae:97:c5:aa:5e:b8:e6:7a:33: 9f:f5:6c:e8:1b:40:02:98:f5:b7:1f:1c:5d:7c:0f: d5:5d:54:d5:60:d5:7d:9c:0b:c2:b5:2e:b7:ec:64: 7b:e7:22:6e:21:e2:de:e5:61:f6:8b:bd:6e:90:84: 9d:f2:dd:2e:79:41:e5:b2:90:40:e5:2b:cb:e0:37: 82:5f:88:00:44:ac:71:0a:ed:f0:27:db:ec:d3:23: 10:85:20:b4:ed:3a:65:69:d5:5a:a8:b3:84:b6:6c: 73:91:6a:29:e4:78:eb:09:e8:69:0b:14:78:06:25: c1:db:31:3a:46:9e:14:a0:02:22:30:22:7a:7b:0b: fe:94:ff:8e:b9:9b:c4:2a:3d:7b:53:b5:4e:0d:ac: 13:fd:0e:23:e5:db:f6:55:d5:c6:2f:86:23:70:e1: 66:07:d8:d1:e0:50:4f:c7:11:78:90:5e:76:f0:f7: 54:6a:57:b8:14:bd:b8:6f:a7:54:18:12:97:b3:f6: 77:3c:82:b4:dd:d4:8c:6f:b9:58:35:06:77:96:de: fe:0a:90:6a:2b:45:69:9d:79:8a:3a:b6:57:b2:62: f9:50:11:1d:b2:75:87:3f:29:38:38:d3:5e:05:24: 07:1e:56:9c:03:0b:12:58:bc:e1:f2:03:cd:9e:3c: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:5C:FA:3A:F1:D3:60:3F:75:60:72:17:5A:86:46:20:CA:29:6C X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eSFc-jrx02A_dWByF1qGRiDKKWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4640:7::/48 Signature Algorithm: sha256WithRSAEncryption b4:bf:5a:9a:a4:ec:0a:46:eb:16:3c:d3:d2:ed:d8:b4:06:8f: 03:78:16:96:ca:44:e7:4f:ae:12:57:d9:d5:82:31:1d:d6:c9: 51:ed:13:19:5b:b7:ee:ee:a3:42:80:73:0f:79:f1:a9:44:a5: 64:7f:ad:71:eb:5d:7f:09:31:de:46:9a:0d:ad:08:45:a1:ab: bc:05:3d:fc:81:0b:45:72:c0:03:b1:dc:60:67:aa:44:c1:f3: a2:cd:40:79:30:aa:ad:a1:42:19:61:35:c1:3d:10:ee:02:83: 03:5c:42:76:8c:01:e4:d2:9c:36:4d:7c:fe:64:d9:83:ca:01: 1f:87:9b:4c:4d:d4:71:08:85:10:6d:cc:e8:3e:4c:e9:5f:49: b1:fd:da:6f:7f:c7:9e:44:a1:e1:47:8a:39:e6:ab:10:34:f7: cb:8d:da:0c:85:c4:8b:10:a3:38:f7:18:48:9c:8d:a5:42:c0: de:f8:b3:11:28:18:21:6c:56:07:40:c9:a2:2c:46:e7:43:79: c3:ed:5b:1b:df:45:a0:35:73:00:72:35:aa:b6:44:c0:a2:89: 3c:12:23:03:45:a6:3d:70:4e:a8:db:02:9d:43:d7:7c:ae:4e: 65:a3:55:28:c9:fe:c0:b4:34:fc:57:2a:72:cb:79:42:a3:30: b6:e6:b9:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVK2Nvsecir47Tf1b71PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTIxNWNmYTNhZjFkMzYwM2Y3NTYwNzIxNzVhODY0NjIwY2EyOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NLeO6uul8WqXrjmejOf9WzoG0AC mPW3HxxdfA/VXVTVYNV9nAvCtS637GR75yJuIeLe5WH2i71ukISd8t0ueUHlspBA 5SvL4DeCX4gARKxxCu3wJ9vs0yMQhSC07TpladVaqLOEtmxzkWop5HjrCehpCxR4 BiXB2zE6Rp4UoAIiMCJ6ewv+lP+OuZvEKj17U7VODawT/Q4j5dv2VdXGL4YjcOFm B9jR4FBPxxF4kF528PdUale4FL24b6dUGBKXs/Z3PIK03dSMb7lYNQZ3lt7+CpBq K0VpnXmKOrZXsmL5UBEdsnWHPyk4ONNeBSQHHlacAwsSWLzh8gPNnjwO4QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHkhXPo68dNgP3VgchdahkYgyilsMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvZVNGYy1qcngwMkFfZFdCeUYxcUdSaURLS1d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGQAAH MA0GCSqGSIb3DQEBCwUAA4IBAQC0v1qapOwKRusWPNPS7di0Bo8DeBaWykTnT64S V9nVgjEd1slR7RMZW7fu7qNCgHMPefGpRKVkf61x611/CTHeRpoNrQhFoau8BT38 gQtFcsADsdxgZ6pEwfOizUB5MKqtoUIZYTXBPRDuAoMDXEJ2jAHk0pw2TXz+ZNmD ygEfh5tMTdRxCIUQbczoPkzpX0mx/dpvf8eeRKHhR4o55qsQNPfLjdoMhcSLEKM4 9xhInI2lQsDe+LMRKBghbFYHQMmiLEbnQ3nD7Vsb30WgNXMAcjWqtkTAook8EiMD RaY9cE6o2wKdQ9d8rk5lo1Uoyf7AtDT8Vypyy3lCozC25rlc -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:38 2026 by rpki-client