This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eiaI1-hJNAgrmp0gE_umAxWn1sI.roa File: eiaI1-hJNAgrmp0gE_umAxWn1sI.roa (raw, json) Hash identifier: 0+nXI30Kx9KhbtXb4L+JY50O7XiXe8UjeNblohyYrj0= Subject key identifier: 7A:26:88:D7:E8:49:34:08:2B:9A:9D:20:13:FB:A6:03:15:A7:D6:C2 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55AFBF9F16A03CC22EE1BA9636C05 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eiaI1-hJNAgrmp0gE_umAxWn1sI.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205021 IP address blocks: 2a10:4646:1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5a:fb:f9:f1:6a:03:cc:22:ee:1b:a9:63:6c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a2688d7e84934082b9a9d2013fba60315a7d6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:f6:c8:eb:41:81:d0:eb:75:d9:39:ae:05: f3:0e:ef:ab:b1:7b:26:54:6f:86:f5:04:c6:22:28: d8:db:85:ea:ef:47:d2:e9:37:a1:23:db:fe:9f:8d: 03:70:f8:46:e1:ee:95:aa:77:64:ad:26:e5:76:d1: 2e:9c:fd:b4:4e:6b:7d:53:81:4c:72:66:27:8e:82: fd:a5:4d:59:f2:3e:09:86:63:76:b4:f0:83:4e:99: aa:ab:35:30:ca:09:4b:8f:49:3f:0a:e4:cb:5f:f0: 51:16:84:b7:91:d2:99:53:b7:27:9e:d5:56:34:41: e7:63:bf:f1:ff:27:42:53:26:63:4e:22:e5:8a:3f: 97:1d:17:5c:79:e3:48:b4:e3:6f:bb:ca:67:ba:10: de:c7:22:c7:5a:e7:c9:43:c3:f4:f5:db:3e:d5:b8: 16:a9:67:c0:46:cb:a5:60:bd:58:09:91:41:97:43: 49:cc:cd:ba:ed:ce:c8:e1:99:b4:db:6b:5d:1e:3d: 30:bd:fe:81:b7:33:84:ed:75:e5:e6:44:31:2a:c0: 4f:23:1d:4f:64:d2:77:f5:f4:f0:b8:2b:cc:2a:19: 2f:a6:db:27:7b:10:cf:a7:52:47:1a:f8:46:36:fa: 89:a2:2a:5e:51:3d:37:c4:a6:02:a5:fd:06:df:7e: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:26:88:D7:E8:49:34:08:2B:9A:9D:20:13:FB:A6:03:15:A7:D6:C2 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/eiaI1-hJNAgrmp0gE_umAxWn1sI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:1e0::/44 Signature Algorithm: sha256WithRSAEncryption 34:fb:58:ac:93:60:f1:c0:38:93:33:42:40:57:71:18:49:f8: 40:9b:4e:e1:37:11:c9:e3:00:cd:48:65:a3:e4:c4:99:39:5a: 67:7d:79:23:73:88:c8:89:55:1e:25:6b:63:2b:e3:03:56:08: 6b:29:3f:7e:1e:ef:c2:aa:47:7d:83:41:e3:53:5d:4e:30:ac: 28:0a:26:da:0c:84:0d:b0:75:59:b1:a4:b1:fc:6a:26:1b:68: 0a:c3:54:a3:af:1f:6d:71:d5:b6:cd:e2:8c:2f:4a:da:0b:7d: 8b:38:7c:85:d9:32:ae:17:f9:c9:7c:3b:8d:5f:9a:7d:36:6b: 8b:94:c2:50:a0:be:4a:88:6f:cc:fd:44:37:f2:c3:44:57:d4: 9b:f4:b9:42:c5:7c:fe:21:e7:04:3a:bb:a4:f1:c5:45:5a:9a: 7d:85:5c:17:7b:6f:10:b6:17:72:e9:a7:d6:21:34:ec:ca:39: f9:a0:14:68:fb:85:0e:33:e3:26:e0:64:cb:ad:98:d8:85:9d: 89:3e:2c:35:05:6d:5a:e1:dd:ef:39:c8:9c:24:bb:8e:f7:44: 67:c9:2d:7b:db:1f:c7:a7:a8:18:34:39:a7:f3:ab:dd:c4:b7: 33:43:ec:2f:8d:e6:72:0f:3d:6b:b3:05:7b:74:a7:fd:a8:13: e8:ac:30:b5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVr7+fFqA8wi7hupY2wFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTI2ODhkN2U4NDkzNDA4MmI5YTlkMjAxM2ZiYTYwMzE1YTdkNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9P2yOtBgdDrddk5rgXzDu+rsXsm VG+G9QTGIijY24Xq70fS6TehI9v+n40DcPhG4e6VqndkrSbldtEunP20Tmt9U4FM cmYnjoL9pU1Z8j4JhmN2tPCDTpmqqzUwyglLj0k/CuTLX/BRFoS3kdKZU7cnntVW NEHnY7/x/ydCUyZjTiLlij+XHRdceeNItONvu8pnuhDexyLHWufJQ8P09ds+1bgW qWfARsulYL1YCZFBl0NJzM267c7I4Zm022tdHj0wvf6BtzOE7XXl5kQxKsBPIx1P ZNJ39fTwuCvMKhkvptsnexDPp1JHGvhGNvqJoipeUT03xKYCpf0G336KhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHomiNfoSTQIK5qdIBP7pgMVp9bCMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvZWlhSTEtaEpOQWdybXAwZ0VfdW1BeFduMXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgHg MA0GCSqGSIb3DQEBCwUAA4IBAQA0+1isk2DxwDiTM0JAV3EYSfhAm07hNxHJ4wDN SGWj5MSZOVpnfXkjc4jIiVUeJWtjK+MDVghrKT9+Hu/Cqkd9g0HjU11OMKwoCiba DIQNsHVZsaSx/GomG2gKw1Sjrx9tcdW2zeKML0raC32LOHyF2TKuF/nJfDuNX5p9 NmuLlMJQoL5KiG/M/UQ38sNEV9Sb9LlCxXz+IecEOruk8cVFWpp9hVwXe28Qthdy 6afWITTsyjn5oBRo+4UOM+Mm4GTLrZjYhZ2JPiw1BW1a4d3vOcicJLuO90RnyS17 2x/Hp6gYNDmn86vdxLczQ+wvjeZyDz1rswV7dKf9qBPorDC1 -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:07 2026 by rpki-client