This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa File: eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa (raw, json) Hash identifier: QNLHJqr8ttA6xtAj36HlfXnNbTxSaTW1D7qSizduEGo= Subject key identifier: 78:6F:64:B5:24:CF:8B:FA:D7:28:9F:33:4B:B2:5B:E8:F4:17:1A:77 Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Certificate serial: 019B7BA390C1D361EBA69D33ED4F5179B202 Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa Signing time: Thu 01 Jan 2026 22:17:55 +0000 ROA not before: Thu 01 Jan 2026 22:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a01:ea00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:90:c1:d3:61:eb:a6:9d:33:ed:4f:51:79:b2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Validity Not Before: Jan 1 22:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=786f64b524cf8bfad7289f334bb25be8f4171a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:8d:11:1e:66:b5:12:b6:a9:3f:10:dd:b7: 97:fd:91:5d:7b:56:d5:76:e2:0b:84:5f:c7:ac:cb: c8:44:e1:76:1e:26:39:f6:f4:b1:87:50:43:70:13: bf:ba:1f:b3:46:f6:e9:6a:8a:35:84:1a:e1:51:37: ea:d1:90:55:df:98:3f:8d:7a:83:57:06:f8:f1:66: f1:75:0f:64:e0:76:af:8f:88:02:ea:bd:0f:96:de: dd:7b:8d:20:0a:1b:b9:e1:e4:a6:fe:44:d5:c9:e5: 7d:87:8d:c0:22:7c:26:a8:14:e4:af:b8:8c:c3:95: ca:6e:90:b8:a6:28:5f:23:bc:08:4d:e2:01:e0:fd: 1e:4d:06:40:2d:d9:00:b5:71:21:b5:30:93:db:7a: a7:72:ca:8a:a7:f8:f2:1e:b9:59:f8:18:d8:85:e5: d9:0c:f2:da:c7:66:a4:7f:33:a3:4c:3d:b8:8c:c9: f1:6d:ca:b5:ca:62:a1:97:0e:d9:3d:c3:3c:3c:40: 84:45:08:7f:e1:de:6e:ee:19:55:3e:d3:5d:7a:ce: f4:1b:3d:6c:03:a0:f6:f3:f6:05:1b:44:a6:3e:62: ff:ff:33:2c:ab:00:e9:52:bf:89:5a:d1:be:5b:36: f9:c7:14:21:68:50:d7:26:4d:f2:f4:96:e1:85:58: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6F:64:B5:24:CF:8B:FA:D7:28:9F:33:4B:B2:5B:E8:F4:17:1A:77 X509v3 Authority Key Identifier: keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ea00:1::/48 Signature Algorithm: sha256WithRSAEncryption 0c:58:13:2b:7a:80:0c:eb:ab:4c:cd:a1:59:39:65:c7:ef:6b: 8b:ee:0e:9f:f8:13:38:56:3e:24:11:7f:7f:aa:27:fb:e7:78: 50:73:09:f1:d1:fa:1d:be:22:ed:3c:6d:e9:f2:71:a2:a9:db: 78:62:19:f6:61:26:66:ca:b8:38:36:ef:95:39:be:a0:da:41: 1b:b2:49:ed:61:86:dd:47:bc:e4:22:76:82:10:e1:aa:1e:c3: 1a:d8:b7:dc:62:9f:fe:0e:1e:c2:20:7d:b0:2f:91:72:ba:28: 4d:27:bc:11:82:d8:38:94:c8:2b:e7:38:db:6e:ec:03:55:d1: fa:18:83:91:b0:1e:93:9b:90:4b:e8:f9:ad:4b:bf:f1:77:3a: 65:ff:66:42:26:e2:ad:5c:b9:05:69:17:56:8c:4b:51:ba:f5: 18:1d:23:5f:ec:b0:68:0f:72:aa:18:89:9a:8d:f7:ee:15:71: 4b:d5:55:a0:5b:af:2a:dd:2d:aa:19:7d:da:53:50:a8:8b:42: e1:93:4e:b5:d9:9d:83:19:ff:5e:b7:34:47:1e:1d:49:3d:3a: 29:df:d0:ce:1d:a9:6c:cd:89:ae:c1:78:bd:c5:74:6e:13:2b: e6:75:16:27:50:99:51:a3:f1:dc:22:c4:38:38:1b:28:63:fb: d1:44:98:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o5DB02Hrpp0z7U9RebICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4 NDdmNTUwHhcNMjYwMTAxMjIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODZmNjRiNTI0Y2Y4YmZhZDcyODlmMzM0YmIyNWJlOGY0MTcxYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZaNER5mtRK2qT8Q3beX/ZFde1bV duILhF/HrMvIROF2HiY59vSxh1BDcBO/uh+zRvbpaoo1hBrhUTfq0ZBV35g/jXqD Vwb48WbxdQ9k4Havj4gC6r0Plt7de40gChu54eSm/kTVyeV9h43AInwmqBTkr7iM w5XKbpC4pihfI7wITeIB4P0eTQZALdkAtXEhtTCT23qncsqKp/jyHrlZ+BjYheXZ DPLax2akfzOjTD24jMnxbcq1ymKhlw7ZPcM8PECERQh/4d5u7hlVPtNdes70Gz1s A6D28/YFG0SmPmL//zMsqwDpUr+JWtG+Wzb5xxQhaFDXJk3y9JbhhVjaowIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHhvZLUkz4v61yifM0uyW+j0Fxp3MB8GA1UdIwQY MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt MDA4OTk0NDk4MGNhLzEvZUc5a3RTVFBpX3JYS0o4elM3SmI2UFFYR25jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHqAAAB MA0GCSqGSIb3DQEBCwUAA4IBAQAMWBMreoAM66tMzaFZOWXH72uL7g6f+BM4Vj4k EX9/qif753hQcwnx0fodviLtPG3p8nGiqdt4Yhn2YSZmyrg4Nu+VOb6g2kEbsknt YYbdR7zkInaCEOGqHsMa2LfcYp/+Dh7CIH2wL5FyuihNJ7wRgtg4lMgr5zjbbuwD VdH6GIORsB6Tm5BL6PmtS7/xdzpl/2ZCJuKtXLkFaRdWjEtRuvUYHSNf7LBoD3Kq GImajffuFXFL1VWgW68q3S2qGX3aU1Coi0Lhk0612Z2DGf9etzRHHh1JPTop39DO HalszYmuwXi9xXRuEyvmdRYnUJlRo/HcIsQ4OBsoY/vRRJjr -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:56 2026 by rpki-client