This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/Eej9gskQ6HpjrksLpwx0h-HAY8A.roa File: Eej9gskQ6HpjrksLpwx0h-HAY8A.roa (raw, json) Hash identifier: t+XOMLEKB4RSNhae5plY45B83yXeeY3zAfFByAEFTUI= Subject key identifier: 11:E8:FD:82:C9:10:E8:7A:63:AE:4B:0B:A7:0C:74:87:E1:C0:63:C0 Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131 Certificate serial: 019B7A5B9B9B76D0BBCB001E91C52EC6D602 Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/Eej9gskQ6HpjrksLpwx0h-HAY8A.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198902 IP address blocks: 2001:678:f7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:9b:76:d0:bb:cb:00:1e:91:c5:2e:c6:d6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11e8fd82c910e87a63ae4b0ba70c7487e1c063c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:b2:49:5e:ab:a8:6a:ce:96:7f:e5:4f:88: cb:94:7a:26:b1:99:b7:e3:41:a6:06:e0:f2:8b:cd: 57:e4:df:32:b9:97:72:2f:17:89:57:c1:be:1d:1b: 05:0e:61:89:07:f2:5f:b8:f2:fc:bb:00:45:6a:3c: b7:87:ad:ea:49:a2:5f:d8:72:24:1a:0f:0a:89:a6: 75:8a:66:03:46:31:be:ea:d7:46:df:96:e4:ef:9d: 42:85:a2:38:1e:94:d7:3f:b7:bb:b6:c8:cd:7e:5e: 8a:45:d8:9b:68:f0:fc:b9:ee:c6:a6:24:af:57:8a: 73:e3:62:a7:17:e6:c7:1c:04:a6:70:0f:70:ca:e9: 6c:26:fa:aa:84:da:9c:60:09:fd:3e:e3:fc:13:2c: 9b:e2:85:58:02:e1:9d:c1:e0:ab:35:7a:a2:82:87: 8e:9a:73:6c:00:99:12:54:29:d1:86:6f:1e:1e:f5: f8:2e:56:81:43:1c:20:fe:d0:0d:ef:6e:11:77:74: e3:cc:7f:d6:f3:3a:c1:68:ef:69:ec:88:46:88:2c: 30:a9:56:e3:bf:12:c8:44:48:e8:da:76:f0:c4:82: c7:f8:1a:c4:d6:50:c7:1e:dc:fe:79:d8:c7:08:95: d6:8e:d5:cd:b4:94:31:17:c1:65:82:99:13:74:d3: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E8:FD:82:C9:10:E8:7A:63:AE:4B:0B:A7:0C:74:87:E1:C0:63:C0 X509v3 Authority Key Identifier: keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/Eej9gskQ6HpjrksLpwx0h-HAY8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f7c::/48 Signature Algorithm: sha256WithRSAEncryption 2c:3e:96:df:da:9b:a3:4b:0b:fa:44:67:1b:19:36:e4:6f:60: f2:45:a4:15:af:a7:a8:4a:e3:be:87:33:8a:06:85:65:20:6b: 18:56:3f:89:9b:59:22:95:ea:37:92:78:2c:8a:3b:a6:e4:c8: 60:51:aa:45:a0:fc:6e:df:d6:cf:03:3f:ff:d5:3f:6d:f2:43: ee:82:33:22:89:06:dd:97:99:22:97:51:46:f6:7c:84:1f:38: 90:9a:ab:20:b5:a8:b4:91:53:2a:43:ae:b9:50:83:1f:a4:b7: 22:c0:25:dc:6c:64:46:a1:6e:6d:69:c9:be:e4:7f:8b:cf:88: 2b:91:d9:70:d8:59:f1:4c:93:eb:33:70:09:6d:1e:e4:11:a7: 74:e1:2d:ca:9d:12:5a:06:76:d3:9c:7b:65:4c:82:ff:41:f3: ba:05:f7:5a:16:c9:64:b6:f9:b2:ec:26:29:da:6d:d6:7d:65: 22:6c:62:55:4a:6d:8d:16:3c:44:28:9f:94:53:29:7e:d5:81: c0:74:c6:82:79:b7:ce:b6:50:ad:bc:42:1e:6d:85:b6:35:27: 97:56:94:c9:23:ab:fd:0e:10:96:17:5c:79:72:c3:aa:f0:57: 0d:0b:95:95:20:8b:d4:2b:95:7a:8b:49:45:b1:20:d2:9b:87: b3:d6:27:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W5ubdtC7ywAekcUuxtYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4 MjYxMzEwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWU4ZmQ4MmM5MTBlODdhNjNhZTRiMGJhNzBjNzQ4N2UxYzA2M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxuySV6rqGrOln/lT4jLlHomsZm3 40GmBuDyi81X5N8yuZdyLxeJV8G+HRsFDmGJB/JfuPL8uwBFajy3h63qSaJf2HIk Gg8KiaZ1imYDRjG+6tdG35bk751ChaI4HpTXP7e7tsjNfl6KRdibaPD8ue7GpiSv V4pz42KnF+bHHASmcA9wyulsJvqqhNqcYAn9PuP8Eyyb4oVYAuGdweCrNXqigoeO mnNsAJkSVCnRhm8eHvX4LlaBQxwg/tAN724Rd3TjzH/W8zrBaO9p7IhGiCwwqVbj vxLIREjo2nbwxILH+BrE1lDHHtz+edjHCJXWjtXNtJQxF8FlgpkTdNP6lwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBHo/YLJEOh6Y65LC6cMdIfhwGPAMB8GA1UdIwQY MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt ODVjMzA1ZjlmZTZmLzEvRWVqOWdza1E2SHBqcmtzTHB3eDBoLUhBWThBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA98 MA0GCSqGSIb3DQEBCwUAA4IBAQAsPpbf2pujSwv6RGcbGTbkb2DyRaQVr6eoSuO+ hzOKBoVlIGsYVj+Jm1kileo3kngsijum5MhgUapFoPxu39bPAz//1T9t8kPugjMi iQbdl5kil1FG9nyEHziQmqsgtai0kVMqQ665UIMfpLciwCXcbGRGoW5tacm+5H+L z4grkdlw2FnxTJPrM3AJbR7kEad04S3KnRJaBnbTnHtlTIL/QfO6BfdaFslktvmy 7CYp2m3WfWUibGJVSm2NFjxEKJ+UUyl+1YHAdMaCebfOtlCtvEIebYW2NSeXVpTJ I6v9DhCWF1x5csOq8FcNC5WVIIvUK5V6i0lFsSDSm4ez1iet -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:36 2026 by rpki-client