This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa File: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (raw, json) Hash identifier: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA= Subject key identifier: 12:F9:47:5A:A8:50:CE:67:63:44:6D:A4:EA:D9:3E:F4:70:FF:CC:E8 Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Certificate serial: 019B7BA3860B3085FE6E0A4836C2EAECD907 Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa Signing time: Thu 01 Jan 2026 22:17:52 +0000 ROA not before: Thu 01 Jan 2026 22:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 2001:67c:2388::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:86:0b:30:85:fe:6e:0a:48:36:c2:ea:ec:d9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Validity Not Before: Jan 1 22:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f9475aa850ce6763446da4ead93ef470ffcce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:da:42:ff:28:78:4f:2b:68:54:12:ec:f0: 74:41:c3:2c:08:de:99:3a:88:26:76:27:85:26:d5: 18:69:a8:06:25:23:8d:17:8f:65:f2:f7:a2:ad:3e: 36:36:6a:23:77:2a:9c:7a:55:59:4f:69:9d:b3:2c: 47:e3:9d:ce:93:86:5a:87:9c:2e:a3:12:78:e6:32: 4b:5e:5c:04:33:b5:75:b9:ef:50:9d:75:7d:e9:74: cc:92:35:86:ac:9c:34:1c:f1:ad:65:29:d1:2c:b9: 45:f4:0a:c5:22:76:b2:55:28:99:7d:f8:82:2a:a5: 04:9c:ad:23:35:ab:1c:0b:e2:cc:f7:88:89:21:e1: 84:1b:b8:0d:b3:0c:1d:8d:7a:d3:02:96:f6:3e:f5: cc:47:68:85:87:92:2e:18:fe:c0:91:1a:ae:c3:a9: c7:af:d8:84:7c:96:b9:b3:a5:29:f5:d5:d7:81:3e: 2f:9d:8f:a2:9f:cc:7e:f1:51:18:d3:6b:5d:4e:ae: 1e:98:52:36:74:0b:13:f7:9f:f1:58:9c:3b:bf:8f: 68:25:18:9c:02:e4:73:f7:2a:cb:65:18:79:f6:ec: 15:af:79:12:f5:c6:94:fa:16:3c:28:09:ef:32:9e: a7:aa:1d:ae:78:40:d8:5f:9e:9c:08:29:e4:4d:05: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F9:47:5A:A8:50:CE:67:63:44:6D:A4:EA:D9:3E:F4:70:FF:CC:E8 X509v3 Authority Key Identifier: keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2388::/48 Signature Algorithm: sha256WithRSAEncryption 31:27:14:2a:81:c2:75:cf:cb:68:55:65:60:1d:da:92:41:3d: 7b:8d:01:3b:00:ec:61:00:62:24:58:2d:f8:d3:12:5d:9b:d3: dc:7a:ea:17:f0:30:91:fb:ea:a8:6e:d8:3c:5c:84:6d:42:87: 2e:2f:26:de:9e:67:7f:17:f1:16:93:b4:f1:97:54:63:39:08: 33:1c:4c:b0:7d:3d:a8:d4:10:33:21:81:9b:3a:e2:a9:1b:b5: b1:ee:0f:aa:e0:20:87:43:19:4a:3a:ac:73:2d:d2:17:65:04: f7:6a:08:25:a3:1c:10:6f:ce:66:2e:66:2e:16:eb:45:f6:21: 6a:ac:d2:92:3b:20:42:27:b3:05:6c:3c:c5:f1:b4:06:e9:9e: 62:de:bd:25:38:35:5b:14:a0:97:d3:bb:f1:87:b0:4e:ef:7f: 55:4f:f4:14:e1:c2:9c:6b:05:d4:39:c0:1f:be:f8:a9:54:29: 2b:d2:78:45:09:50:aa:e7:4b:2e:d7:4c:6f:b5:ec:c7:5f:b0: 81:f7:06:b7:26:73:ee:ee:8f:9f:79:1f:3d:d9:78:77:1f:03: 43:96:60:a0:60:0a:87:c5:da:06:41:a3:7a:c9:cd:6e:85:f4: 21:b6:7c:dd:b3:8f:04:76:ed:80:04:8d:50:e4:90:c7:59:47: 98:7b:57:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o4YLMIX+bgpINsLq7NkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi NzZlYjMwHhcNMjYwMTAxMjIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmY5NDc1YWE4NTBjZTY3NjM0NDZkYTRlYWQ5M2VmNDcwZmZjY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUnaQv8oeE8raFQS7PB0QcMsCN6Z OogmdieFJtUYaagGJSONF49l8veirT42NmojdyqcelVZT2mdsyxH453Ok4Zah5wu oxJ45jJLXlwEM7V1ue9QnXV96XTMkjWGrJw0HPGtZSnRLLlF9ArFInayVSiZffiC KqUEnK0jNascC+LM94iJIeGEG7gNswwdjXrTApb2PvXMR2iFh5IuGP7AkRquw6nH r9iEfJa5s6Up9dXXgT4vnY+in8x+8VEY02tdTq4emFI2dAsT95/xWJw7v49oJRic AuRz9yrLZRh59uwVr3kS9caU+hY8KAnvMp6nqh2ueEDYX56cCCnkTQXWGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBL5R1qoUM5nY0RtpOrZPvRw/8zoMB8GA1UdIwQY MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt YmI1ODkzYTZhYzkxLzEvRXZsSFdxaFF6bWRqUkcyazZ0ay05SERfek9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCOI MA0GCSqGSIb3DQEBCwUAA4IBAQAxJxQqgcJ1z8toVWVgHdqSQT17jQE7AOxhAGIk WC340xJdm9PceuoX8DCR++qobtg8XIRtQocuLybenmd/F/EWk7Txl1RjOQgzHEyw fT2o1BAzIYGbOuKpG7Wx7g+q4CCHQxlKOqxzLdIXZQT3aggloxwQb85mLmYuFutF 9iFqrNKSOyBCJ7MFbDzF8bQG6Z5i3r0lODVbFKCX07vxh7BO739VT/QU4cKcawXU OcAfvvipVCkr0nhFCVCq50su10xvtezHX7CB9wa3JnPu7o+feR892Xh3HwNDlmCg YAqHxdoGQaN6yc1uhfQhtnzds48Edu2ABI1Q5JDHWUeYe1fA -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:47 2026 by rpki-client