This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/EboQ4nMXI48WwaHSZ15OkVHDyAI.roa File: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (raw, json) Hash identifier: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc= Subject key identifier: 11:BA:10:E2:73:17:23:8F:16:C1:A1:D2:67:5E:4E:91:51:C3:C8:02 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019B7A5B730576DF851DA70A1A02240BA1EF Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/EboQ4nMXI48WwaHSZ15OkVHDyAI.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211380 IP address blocks: 2a0c:5707:ff00::/40 maxlen: 48 2a0c:5707:ff01::/48 maxlen: 48 2a0c:5707:ff02::/48 maxlen: 48 2a0c:5707:ff04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:73:05:76:df:85:1d:a7:0a:1a:02:24:0b:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11ba10e27317238f16c1a1d2675e4e9151c3c802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:12:d5:44:45:39:7c:3d:3e:ac:8d:a2:6b: 3c:4b:c4:64:e8:3c:ac:e4:b1:21:ca:ed:00:26:38: 0c:c0:f4:0f:d3:12:93:f2:44:d0:d9:67:fa:7f:b5: 01:ac:e7:e7:2f:65:14:ee:97:8c:9d:6a:83:6b:aa: 5c:06:fd:c2:c1:4d:53:93:cf:c7:d4:08:36:8b:95: d9:42:0b:e2:4f:27:b0:2c:a2:6d:5d:0b:bf:cc:b2: 5f:94:68:a9:65:d3:81:ae:a7:f3:e3:f0:eb:5b:df: c6:42:2f:98:d0:1c:73:0f:42:07:6f:f3:00:e0:a9: 36:19:2d:d4:31:83:a5:60:aa:85:c6:91:c4:37:4f: a1:12:63:fc:9e:81:2c:e5:a2:06:fa:26:4d:0d:a5: bc:af:11:a2:07:c0:1e:30:e1:6a:f1:11:4e:0a:61: 85:3f:8c:ca:c7:d2:2d:40:35:4a:36:c2:9b:ff:dc: aa:b2:e5:67:9e:c0:1f:c6:88:02:e2:57:20:54:74: b0:38:71:81:cd:0e:9c:75:b6:fe:05:d1:cf:af:2e: 6d:29:ab:29:73:b4:18:8b:ee:a4:95:98:61:87:bb: 44:fd:56:5d:51:9f:ea:d2:f2:6c:09:b7:08:c0:43: 47:05:8f:1a:ac:c5:9b:44:91:fa:a4:e9:02:34:52: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BA:10:E2:73:17:23:8F:16:C1:A1:D2:67:5E:4E:91:51:C3:C8:02 X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/EboQ4nMXI48WwaHSZ15OkVHDyAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:5707:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 5b:9a:71:5f:d1:d5:4b:c5:b7:7f:a6:37:ce:76:86:ac:e8:c2: 9e:ba:12:fc:87:cf:d1:c0:37:b4:b1:ac:1b:99:3d:51:81:ba: 58:40:23:a7:f0:d9:1f:e4:9e:05:f4:dc:4d:e6:e7:6e:cd:0d: c3:ee:e3:52:6b:0c:5a:51:49:d4:85:4f:fe:34:8d:c1:36:9f: b0:49:51:dc:cb:ee:d8:cd:91:4b:b8:e8:86:d6:cc:a4:50:e8: ec:ca:c5:b4:4f:45:7f:75:28:a9:c8:e3:68:09:44:d7:84:fd: 13:a5:c9:ee:0f:51:22:f6:bc:cb:7d:4f:01:5b:f5:9b:8c:f5: 4b:d1:45:1d:c7:0b:99:5a:0f:5d:48:cf:b1:e2:00:42:af:36: 79:c2:8d:a0:b5:4b:ad:a2:a9:14:a1:c2:c1:b8:a7:e3:46:dc: 4f:0e:48:af:e8:9e:d1:cf:02:ad:9b:18:b8:0a:14:a9:b3:ff: 78:e6:4c:17:bd:f6:9f:90:b2:ed:aa:4c:f5:39:07:ec:81:ed: a2:fa:c7:c8:4f:10:6f:c2:d4:5d:89:e3:cb:6d:b8:86:4f:a4: a1:dd:24:bb:3a:b2:2e:ca:a4:53:72:13:8b:0f:4c:b2:33:a3: cd:45:24:fc:01:01:e9:4a:1d:d1:01:a5:83:c6:83:4e:bd:d9: bd:28:a3:de -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W3MFdt+FHacKGgIkC6HvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWJhMTBlMjczMTcyMzhmMTZjMWExZDI2NzVlNGU5MTUxYzNjODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDIS1URFOXw9PqyNoms8S8Rk6Dys 5LEhyu0AJjgMwPQP0xKT8kTQ2Wf6f7UBrOfnL2UU7peMnWqDa6pcBv3CwU1Tk8/H 1Ag2i5XZQgviTyewLKJtXQu/zLJflGipZdOBrqfz4/DrW9/GQi+Y0BxzD0IHb/MA 4Kk2GS3UMYOlYKqFxpHEN0+hEmP8noEs5aIG+iZNDaW8rxGiB8AeMOFq8RFOCmGF P4zKx9ItQDVKNsKb/9yqsuVnnsAfxogC4lcgVHSwOHGBzQ6cdbb+BdHPry5tKasp c7QYi+6klZhhh7tE/VZdUZ/q0vJsCbcIwENHBY8arMWbRJH6pOkCNFLf3QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBG6EOJzFyOPFsGh0mdeTpFRw8gCMB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvRWJvUTRuTVhJNDhXd2FIU1oxNU9rVkhEeUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgxXB/8w DQYJKoZIhvcNAQELBQADggEBAFuacV/R1UvFt3+mN852hqzowp66EvyHz9HAN7Sx rBuZPVGBulhAI6fw2R/kngX03E3m527NDcPu41JrDFpRSdSFT/40jcE2n7BJUdzL 7tjNkUu46IbWzKRQ6OzKxbRPRX91KKnI42gJRNeE/ROlye4PUSL2vMt9TwFb9ZuM 9UvRRR3HC5laD11Iz7HiAEKvNnnCjaC1S62iqRShwsG4p+NG3E8OSK/ontHPAq2b GLgKFKmz/3jmTBe99p+Qsu2qTPU5B+yB7aL6x8hPEG/C1F2J48ttuIZPpKHdJLs6 si7KpFNyE4sPTLIzo81FJPwBAelKHdEBpYPGg0692b0oo94= -----END CERTIFICATE-----Generated at Wed Jan 21 20:34:46 2026 by rpki-client