This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa File: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (raw, json) Hash identifier: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno= Subject key identifier: 10:DC:6B:CE:51:C4:9A:84:3A:A3:6B:B4:62:69:A3:1A:20:9E:1C:B1 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019B7E377632E8E9D906D44707B2A59A3D04 Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa Signing time: Fri 02 Jan 2026 10:18:42 +0000 ROA not before: Fri 02 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211595 IP address blocks: 2001:678:f10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:76:32:e8:e9:d9:06:d4:47:07:b2:a5:9a:3d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Jan 2 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10dc6bce51c49a843aa36bb46269a31a209e1cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:35:91:67:61:51:53:85:05:c8:ae:b8:19: c8:82:92:50:ba:5a:72:12:7c:18:c3:7a:20:e9:a9: ab:74:90:43:5e:98:ab:62:33:ee:35:49:ff:e3:10: 60:d1:9f:ca:5a:90:e1:a2:37:f7:fe:a7:98:fe:6f: 88:e3:91:55:c1:8b:a0:51:73:f2:de:7b:c2:e6:b8: 7e:52:87:15:17:0e:60:cf:3f:c7:ca:76:20:58:19: 1e:86:67:0b:cc:c3:28:c8:4b:f6:82:21:9e:9c:fc: ed:29:20:28:57:b0:8c:a5:7a:b1:23:9a:4f:4b:57: e6:7c:a4:f4:c0:8a:fe:5a:3f:93:b9:b0:9e:9e:e9: 5b:ca:2b:99:c7:21:04:37:e1:3a:00:4b:5b:a0:5f: c3:d3:d6:9f:06:48:93:e3:c7:c6:b4:e6:2e:31:1b: f1:1b:df:77:35:ae:b0:a2:66:0c:3b:d1:4f:61:f3: d8:28:a2:93:71:22:0e:08:89:b1:cd:ed:e5:3c:d0: 03:50:8b:2a:6f:ff:a9:c5:d1:55:2b:42:9f:7c:b2: 21:a6:ef:74:4d:67:4a:c8:cf:1f:24:43:cd:1a:85: a9:d2:ba:c3:6b:b8:81:15:bd:56:3a:04:de:22:4f: 88:b7:4b:1b:12:56:57:d1:fa:00:3e:a6:55:c2:e1: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:6B:CE:51:C4:9A:84:3A:A3:6B:B4:62:69:A3:1A:20:9E:1C:B1 X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f10::/48 Signature Algorithm: sha256WithRSAEncryption 73:96:a9:a1:46:c7:39:ec:f6:5e:99:96:d8:67:6e:fc:80:c3: dd:83:7c:2f:45:4d:ea:4a:4f:f1:07:43:aa:14:a1:e6:a8:a5: 05:f2:1f:af:72:47:86:bf:15:6d:e6:b2:ff:f3:88:e3:5c:49: 33:bf:00:b9:c3:06:08:63:57:f2:a2:0d:c7:db:1d:af:d3:4b: 4f:97:c5:2d:72:fa:5d:02:f3:06:ef:67:72:93:16:a7:97:ed: b0:17:97:4c:be:e6:da:39:0b:1a:9a:4e:36:0f:5c:07:91:4c: 7b:8c:b0:f2:a1:a5:e8:5f:93:51:06:33:c4:11:d0:5c:50:a4: d4:58:98:1b:4f:4b:69:17:af:ed:c7:94:77:1d:20:80:d4:1a: 8d:d7:13:dc:87:75:ce:7c:25:d7:c4:46:c8:4d:90:63:24:1a: be:ee:43:2c:58:95:37:a3:a6:31:39:59:a2:96:ad:6f:f3:c1: 23:5c:15:46:13:a4:d7:81:37:0d:62:86:2d:7b:24:cd:f4:8d: 0a:eb:8a:7a:c8:75:d8:1f:26:26:ac:91:68:27:6e:b0:a7:ca: ba:38:d0:eb:08:1c:d0:48:ec:5d:25:e2:f9:9c:8f:e1:9c:5e: cd:92:46:a8:8e:8d:42:19:d4:41:99:2f:6b:15:4e:25:6f:1a: b4:94:b1:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N3Yy6OnZBtRHB7Klmj0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjYwMTAyMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRjNmJjZTUxYzQ5YTg0M2FhMzZiYjQ2MjY5YTMxYTIwOWUxY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/s1kWdhUVOFBciuuBnIgpJQulpy EnwYw3og6amrdJBDXpirYjPuNUn/4xBg0Z/KWpDhojf3/qeY/m+I45FVwYugUXPy 3nvC5rh+UocVFw5gzz/HynYgWBkehmcLzMMoyEv2giGenPztKSAoV7CMpXqxI5pP S1fmfKT0wIr+Wj+TubCenulbyiuZxyEEN+E6AEtboF/D09afBkiT48fGtOYuMRvx G993Na6womYMO9FPYfPYKKKTcSIOCImxze3lPNADUIsqb/+pxdFVK0KffLIhpu90 TWdKyM8fJEPNGoWp0rrDa7iBFb1WOgTeIk+It0sbElZX0foAPqZVwuGb4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBDca85RxJqEOqNrtGJpoxognhyxMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvRU54cnpsSEVtb1E2bzJ1MFltbWpHaUNlSExFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA8Q MA0GCSqGSIb3DQEBCwUAA4IBAQBzlqmhRsc57PZemZbYZ278gMPdg3wvRU3qSk/x B0OqFKHmqKUF8h+vckeGvxVt5rL/84jjXEkzvwC5wwYIY1fyog3H2x2v00tPl8Ut cvpdAvMG72dykxanl+2wF5dMvubaOQsamk42D1wHkUx7jLDyoaXoX5NRBjPEEdBc UKTUWJgbT0tpF6/tx5R3HSCA1BqN1xPch3XOfCXXxEbITZBjJBq+7kMsWJU3o6Yx OVmilq1v88EjXBVGE6TXgTcNYoYteyTN9I0K64p6yHXYHyYmrJFoJ26wp8q6ONDr CBzQSOxdJeL5nI/hnF7Nkkaojo1CGdRBmS9rFU4lbxq0lLFe -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:59 2026 by rpki-client