This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/E2NnSe5NuOHhL4ajAD4aa5625AY.roa File: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (raw, json) Hash identifier: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E= Subject key identifier: 13:63:67:49:EE:4D:B8:E1:E1:2F:86:A3:00:3E:1A:6B:9E:B6:E4:06 Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3 Certificate serial: 019B77C66C6F685E1CEA29752B681534FFF0 Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/E2NnSe5NuOHhL4ajAD4aa5625AY.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49745 IP address blocks: 2001:678:2b8::/48 maxlen: 48 2001:678:2b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:6f:68:5e:1c:ea:29:75:2b:68:15:34:ff:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13636749ee4db8e1e12f86a3003e1a6b9eb6e406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:5f:73:19:66:f7:41:12:b9:06:8b:07:fd: 27:f2:9b:ed:cf:b4:77:da:63:e3:2c:93:dd:40:af: 4b:67:75:5e:c3:21:df:69:d5:90:ee:bb:2b:70:b0: 7a:d1:1f:bc:56:37:cd:d3:38:f7:64:c7:7d:05:5d: fd:a2:8d:73:7b:12:27:fa:ec:37:9b:93:97:51:cb: 0a:14:e5:cb:48:b3:0e:01:18:2b:7d:48:2a:d0:4d: fa:2b:25:d5:05:4a:77:7a:b0:be:c2:ae:02:a8:38: cc:19:77:49:48:56:fa:17:1e:76:49:a9:54:78:f4: 8f:47:47:03:3a:b6:23:ad:7b:af:9c:28:c4:41:48: b0:10:c6:f8:ee:fe:23:e0:fc:c6:f9:de:83:de:63: fc:d2:91:94:75:f4:44:be:e1:32:f3:45:4b:2b:50: 2c:52:4d:86:84:45:c4:81:79:ea:7c:16:b1:c3:8b: 51:91:e8:69:04:57:88:b9:fb:03:c4:58:7c:b1:8e: d9:e8:94:64:18:92:8b:17:c5:d8:82:a8:21:b2:48: fb:a0:b7:66:7a:a7:ee:92:a6:fd:9f:92:11:d5:26: 63:d6:c7:41:c8:8e:b6:55:17:47:43:47:fb:dd:62: 89:a3:ed:05:e7:01:27:93:57:93:1d:0b:68:d5:e3: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:63:67:49:EE:4D:B8:E1:E1:2F:86:A3:00:3E:1A:6B:9E:B6:E4:06 X509v3 Authority Key Identifier: keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/E2NnSe5NuOHhL4ajAD4aa5625AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:2b8::/47 Signature Algorithm: sha256WithRSAEncryption 54:ea:17:93:13:07:a3:e0:49:3a:a1:6e:f1:08:1c:20:10:8b: 3a:83:8a:42:b4:23:11:b2:ed:fc:d3:52:4b:5d:d7:66:1f:f9: f9:b4:4b:77:99:e1:10:a8:35:95:4c:aa:79:47:89:31:03:ae: 55:47:04:62:f0:6f:ed:6e:e5:b8:6d:7d:d9:70:af:1e:81:12: 86:17:ac:d0:0a:e2:ec:6a:17:34:5e:de:e1:fc:a1:bc:4b:ec: ab:12:52:97:95:62:3a:16:d7:5f:3b:5b:7e:51:7d:f4:3b:fd: a8:6f:f9:10:f3:c1:34:30:6a:66:d0:e6:53:68:da:81:cb:de: 92:22:7b:7d:4b:e1:b8:16:a7:c4:a6:b6:96:73:37:e2:f9:e3: 77:cb:63:76:d9:55:e7:e8:be:25:c7:48:a8:4c:c9:95:cf:ba: 3e:bd:0f:b0:ed:fd:82:c0:83:75:ae:ac:6c:5a:28:fb:ab:2c: 97:36:4a:f0:02:6f:e8:95:4a:64:21:77:37:73:b2:fd:56:17: aa:0a:27:bf:07:bc:8a:2a:dc:9a:59:53:15:d3:6d:ab:32:ed: 9c:25:af:8a:73:6b:20:fb:8e:73:2c:b5:b2:30:59:f0:bc:7f: 4e:b5:14:38:d2:ee:64:76:c2:c3:fb:e8:87:30:42:39:35:d4: 11:e1:44:a1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xmxvaF4c6il1K2gVNP/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4 NjVmZDMwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzYzNjc0OWVlNGRiOGUxZTEyZjg2YTMwMDNlMWE2YjllYjZlNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Bfcxlm90ESuQaLB/0n8pvtz7R3 2mPjLJPdQK9LZ3VewyHfadWQ7rsrcLB60R+8VjfN0zj3ZMd9BV39oo1zexIn+uw3 m5OXUcsKFOXLSLMOARgrfUgq0E36KyXVBUp3erC+wq4CqDjMGXdJSFb6Fx52SalU ePSPR0cDOrYjrXuvnCjEQUiwEMb47v4j4PzG+d6D3mP80pGUdfREvuEy80VLK1As Uk2GhEXEgXnqfBaxw4tRkehpBFeIufsDxFh8sY7Z6JRkGJKLF8XYgqghskj7oLdm eqfukqb9n5IR1SZj1sdByI62VRdHQ0f73WKJo+0F5wEnk1eTHQto1eMP/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBNjZ0nuTbjh4S+GowA+GmuetuQGMB8GA1UdIwQY MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt MzkyYTc1MjQ2NGIxLzEvRTJOblNlNU51T0hoTDRhakFENGFhNTYyNUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUtMzkyYTc1MjQ2NGIx LzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEGeAK4 MA0GCSqGSIb3DQEBCwUAA4IBAQBU6heTEwej4Ek6oW7xCBwgEIs6g4pCtCMRsu38 01JLXddmH/n5tEt3meEQqDWVTKp5R4kxA65VRwRi8G/tbuW4bX3ZcK8egRKGF6zQ CuLsahc0Xt7h/KG8S+yrElKXlWI6FtdfO1t+UX30O/2ob/kQ88E0MGpm0OZTaNqB y96SInt9S+G4FqfEpraWczfi+eN3y2N22VXn6L4lx0ioTMmVz7o+vQ+w7f2CwIN1 rqxsWij7qyyXNkrwAm/olUpkIXc3c7L9VheqCie/B7yKKtyaWVMV022rMu2cJa+K c2sg+45zLLWyMFnwvH9OtRQ40u5kdsLD++iHMEI5NdQR4USh -----END CERTIFICATE-----Generated at Wed Jan 21 04:41:11 2026 by rpki-client