This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/epUEByvctUQFdD6x8uykLVw28K4.roa File: epUEByvctUQFdD6x8uykLVw28K4.roa (raw, json) Hash identifier: mbKHV+YI3RW2KrL8/aMhBlFmfvhswGZcacqDnNW/6l8= Subject key identifier: 7A:95:04:07:2B:DC:B5:44:05:74:3E:B1:F2:EC:A4:2D:5C:36:F0:AE Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5641BCB97DC3BE9AABFD503E97E8F Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/epUEByvctUQFdD6x8uykLVw28K4.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215663 IP address blocks: 2a10:4646:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:64:1b:cb:97:dc:3b:e9:aa:bf:d5:03:e9:7e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a9504072bdcb54405743eb1f2eca42d5c36f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:58:0f:5a:98:98:5d:02:84:5b:52:fc:ac: 56:74:92:8c:56:e8:ca:50:10:d1:56:84:8a:b1:86: 03:e1:82:0d:b7:33:b3:d6:35:08:9a:0d:0b:ff:8f: 33:2b:68:95:ca:11:da:8f:4d:d5:40:ad:11:20:88: 9e:51:56:55:bf:c1:28:a0:f6:35:35:f0:6f:11:c7: d4:c3:c7:fa:2d:34:a2:b1:56:07:a5:cb:0f:b4:16: 87:63:c0:ed:fa:3e:45:77:9a:a8:bb:d0:59:d1:73: 4b:f7:ee:7a:0e:d9:94:d3:8b:d1:36:86:f3:33:fc: a2:ac:10:7d:6f:16:53:ce:7d:d0:53:71:05:43:71: 1c:73:5d:88:73:d5:0b:3b:61:b0:e9:f1:88:49:a6: b7:e1:24:67:7e:88:61:94:7a:ed:ca:0d:61:5d:99: 1b:52:54:cd:64:85:55:8b:4a:3b:f0:36:8d:e7:df: 6b:c6:03:71:7e:8b:5f:64:b6:ea:46:e1:74:4d:8a: b8:5b:b6:9c:c0:e9:e3:65:70:d4:5b:09:4d:6f:ca: f9:39:a2:77:a8:3a:75:b6:81:c0:95:33:6b:a0:bf: 21:22:fe:d4:97:47:19:9b:ce:4f:7c:1d:e3:e1:92: 76:09:0e:56:bb:4f:ca:32:d1:cb:e0:1a:ed:87:b7: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:95:04:07:2B:DC:B5:44:05:74:3E:B1:F2:EC:A4:2D:5C:36:F0:AE X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/epUEByvctUQFdD6x8uykLVw28K4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:400::/44 Signature Algorithm: sha256WithRSAEncryption 32:04:3f:6d:db:d1:9d:9a:51:59:76:47:45:4e:87:ce:98:10: 86:0a:42:f2:eb:1a:b9:0f:de:cb:23:21:f9:65:85:0b:7f:db: 40:9b:94:07:a3:04:98:7d:88:ca:4d:4a:3c:b6:75:ed:e8:fc: 9c:2a:de:2e:dc:1f:08:b6:04:70:e9:30:18:8b:ac:9b:ce:1d: 14:e7:73:44:80:eb:3f:bb:39:eb:59:6b:96:4f:bc:c4:c0:df: ed:b5:28:2a:35:63:8f:2e:87:00:af:c0:59:fa:07:4f:82:69: 2e:fd:82:82:d7:a2:e7:83:e5:99:ef:af:ed:6e:63:89:f6:2e: 7f:90:d4:aa:72:06:1a:bf:d1:74:4c:a7:a1:91:3b:5c:3a:a2: 49:71:eb:4c:e0:0b:f5:74:30:84:ad:16:9c:03:21:53:3c:ba: 8f:7c:00:e0:a8:8e:2b:c4:7a:dc:46:6f:f8:7c:c5:1c:d0:97: 59:7d:d7:2a:ad:23:15:dd:25:b5:38:36:95:61:ee:7b:b5:5e: d0:a6:80:26:ec:ff:2c:1a:7d:61:0c:fd:7b:41:1d:83:15:83: be:06:46:55:12:bd:22:cd:6c:97:f4:c0:60:68:43:be:6f:8c: c5:de:b7:8f:23:fe:6e:07:2b:e4:33:e0:20:26:37:f5:69:d6: 96:03:37:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWQby5fcO+mqv9UD6X6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk1MDQwNzJiZGNiNTQ0MDU3NDNlYjFmMmVjYTQyZDVjMzZmMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrBYD1qYmF0ChFtS/KxWdJKMVujK UBDRVoSKsYYD4YINtzOz1jUImg0L/48zK2iVyhHaj03VQK0RIIieUVZVv8EooPY1 NfBvEcfUw8f6LTSisVYHpcsPtBaHY8Dt+j5Fd5qou9BZ0XNL9+56DtmU04vRNobz M/yirBB9bxZTzn3QU3EFQ3Ecc12Ic9ULO2Gw6fGISaa34SRnfohhlHrtyg1hXZkb UlTNZIVVi0o78DaN599rxgNxfotfZLbqRuF0TYq4W7acwOnjZXDUWwlNb8r5OaJ3 qDp1toHAlTNroL8hIv7Ul0cZm85PfB3j4ZJ2CQ5Wu0/KMtHL4Brth7fL/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHqVBAcr3LVEBXQ+sfLspC1cNvCuMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvZXBVRUJ5dmN0VVFGZEQ2eDh1eWtMVncyOEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgQA MA0GCSqGSIb3DQEBCwUAA4IBAQAyBD9t29GdmlFZdkdFTofOmBCGCkLy6xq5D97L IyH5ZYULf9tAm5QHowSYfYjKTUo8tnXt6PycKt4u3B8ItgRw6TAYi6ybzh0U53NE gOs/uznrWWuWT7zEwN/ttSgqNWOPLocAr8BZ+gdPgmku/YKC16Lng+WZ76/tbmOJ 9i5/kNSqcgYav9F0TKehkTtcOqJJcetM4Av1dDCErRacAyFTPLqPfADgqI4rxHrc Rm/4fMUc0JdZfdcqrSMV3SW1ODaVYe57tV7QpoAm7P8sGn1hDP17QR2DFYO+BkZV Er0izWyX9MBgaEO+b4zF3rePI/5uByvkM+AgJjf1adaWAzf4 -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:35 2026 by rpki-client