This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/ETi6rBv0jmHDZMdhavHXc91w57c.roa File: ETi6rBv0jmHDZMdhavHXc91w57c.roa (raw, json) Hash identifier: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo= Subject key identifier: 11:38:BA:AC:1B:F4:8E:61:C3:64:C7:61:6A:F1:D7:73:DD:70:E7:B7 Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019B7D5B3D9D0DA1CC4479C01AE68DAEC573 Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/ETi6rBv0jmHDZMdhavHXc91w57c.roa Signing time: Fri 02 Jan 2026 06:18:10 +0000 ROA not before: Fri 02 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60505 IP address blocks: 2a11:a500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3d:9d:0d:a1:cc:44:79:c0:1a:e6:8d:ae:c5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Jan 2 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1138baac1bf48e61c364c7616af1d773dd70e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:06:76:05:e9:25:9e:6a:41:be:ad:e9:8c: 38:9f:bb:d9:1a:6d:11:e1:97:1d:6e:4b:df:1e:e3: 1f:b6:05:4e:0a:bf:01:18:0b:62:18:60:8a:05:d1: 49:ae:da:86:74:78:eb:bf:f8:e8:76:dc:0d:b2:87: 1b:e0:dd:71:39:6b:cb:f5:2a:dc:cb:cb:d5:95:9c: 7b:fd:6e:86:26:93:57:10:3d:93:20:42:45:be:10: 9e:35:aa:e5:22:b3:63:66:fc:df:4f:e5:e4:58:27: 22:bc:35:fa:db:a5:20:e5:df:cf:4b:f3:e9:b1:97: 5a:8b:68:e1:85:ad:1e:40:b7:13:a4:89:9d:86:1a: 08:21:0e:4f:17:64:f5:7b:ff:f3:d7:21:ef:23:d3: 32:f4:8a:cd:a6:82:60:a2:47:c0:35:d5:54:9b:d3: ec:3b:b5:7d:79:41:48:76:a9:a1:9f:51:cd:36:24: 9b:30:70:7d:32:b5:35:5b:68:25:61:7d:15:e7:40: 1b:0e:40:3e:98:28:73:2a:90:30:80:cf:3f:b4:72: 44:b5:a3:81:0f:16:7f:d9:2e:c1:3d:df:52:94:4a: 8e:19:33:17:db:58:d9:fe:23:c9:40:23:7f:b5:c0: d2:57:d9:d0:12:68:05:ca:49:08:e1:ab:3d:7c:9b: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:BA:AC:1B:F4:8E:61:C3:64:C7:61:6A:F1:D7:73:DD:70:E7:B7 X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/ETi6rBv0jmHDZMdhavHXc91w57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:a500::/32 Signature Algorithm: sha256WithRSAEncryption 39:d0:c6:ff:77:bb:c1:c3:23:20:42:a6:da:0a:91:88:c7:fa: d9:91:c6:4d:ad:7a:33:82:15:5f:5f:ee:95:26:8e:a7:6e:b6: f5:67:f2:b8:35:70:94:a2:e9:51:c4:0f:63:3a:bc:12:ba:e8: 79:d8:b9:8d:e9:ab:18:7b:85:73:e2:57:7f:5e:e2:3c:c8:63: e8:8c:0d:ef:7b:61:c2:fb:26:d3:52:99:42:da:4d:99:f9:e3: 00:35:4b:f5:cd:cb:bd:f5:6c:67:b9:d7:6b:52:9c:c9:f2:7f: c4:ba:a6:46:90:cd:20:ed:4f:31:b1:f4:42:77:c5:1c:53:d3: a1:34:21:88:58:c0:bc:af:41:70:7a:f4:7a:b2:85:bb:c9:f8: 91:d7:bd:72:bc:38:c7:94:7e:86:8f:8a:a4:09:50:ea:75:49: 3d:dd:5d:2a:1f:88:f6:5d:32:bc:b0:23:e4:ce:3b:29:c6:09: f8:b9:09:87:39:81:f5:7c:ee:02:5e:e1:32:5e:d0:10:88:90: a7:87:d0:6b:53:a7:38:c2:0f:7e:df:89:99:5b:e0:92:11:ea: b1:c1:27:52:e2:1d:09:d2:60:b2:c7:4c:75:69:eb:84:f7:8b: ae:a3:66:7a:b3:fb:6b:0e:51:42:f6:3c:cd:b5:f6:72:65:28: eb:c9:5e:d0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9Wz2dDaHMRHnAGuaNrsVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjYwMTAyMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTM4YmFhYzFiZjQ4ZTYxYzM2NGM3NjE2YWYxZDc3M2RkNzBlN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QkGdgXpJZ5qQb6t6Yw4n7vZGm0R 4ZcdbkvfHuMftgVOCr8BGAtiGGCKBdFJrtqGdHjrv/jodtwNsocb4N1xOWvL9Src y8vVlZx7/W6GJpNXED2TIEJFvhCeNarlIrNjZvzfT+XkWCcivDX626Ug5d/PS/Pp sZdai2jhha0eQLcTpImdhhoIIQ5PF2T1e//z1yHvI9My9IrNpoJgokfANdVUm9Ps O7V9eUFIdqmhn1HNNiSbMHB9MrU1W2glYX0V50AbDkA+mChzKpAwgM8/tHJEtaOB DxZ/2S7BPd9SlEqOGTMX21jZ/iPJQCN/tcDSV9nQEmgFykkI4as9fJsglwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBE4uqwb9I5hw2THYWrx13PdcOe3MB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvRVRpNnJCdjBqbUhEWk1kaGF2SFhjOTF3NTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGlADAN BgkqhkiG9w0BAQsFAAOCAQEAOdDG/3e7wcMjIEKm2gqRiMf62ZHGTa16M4IVX1/u lSaOp2629WfyuDVwlKLpUcQPYzq8Erroedi5jemrGHuFc+JXf17iPMhj6IwN73th wvsm01KZQtpNmfnjADVL9c3LvfVsZ7nXa1KcyfJ/xLqmRpDNIO1PMbH0QnfFHFPT oTQhiFjAvK9BcHr0erKFu8n4kde9crw4x5R+ho+KpAlQ6nVJPd1dKh+I9l0yvLAj 5M47KcYJ+LkJhzmB9XzuAl7hMl7QEIiQp4fQa1OnOMIPft+JmVvgkhHqscEnUuId CdJgssdMdWnrhPeLrqNmerP7aw5RQvY8zbX2cmUo68le0A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:54 2026 by rpki-client