This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EDdxOnMqVM1Vy10tBqkLfSBIP34.roa File: EDdxOnMqVM1Vy10tBqkLfSBIP34.roa (raw, json) Hash identifier: q3TrdlpL1N4TxblDDjkPrmb0XzUhMNq/eu3slN+SXK8= Subject key identifier: 10:37:71:3A:73:2A:54:CD:55:CB:5D:2D:06:A9:0B:7D:20:48:3F:7E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CEF9013068D07D6466B28EF5708EE Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EDdxOnMqVM1Vy10tBqkLfSBIP34.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202673 IP address blocks: 2a0e:97c0:4a0::/44 maxlen: 48 2a0e:97c0:c40::/44 maxlen: 48 2a0e:97c0:c4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ef:90:13:06:8d:07:d6:46:6b:28:ef:57:08:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1037713a732a54cd55cb5d2d06a90b7d20483f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:ba:62:d6:44:ec:97:7b:72:2f:1f:e3:0b: 0f:30:7f:b6:51:d3:4d:c7:9a:56:36:47:4e:49:bd: 06:c6:5c:8d:85:75:5e:7f:69:45:32:7b:18:4e:4d: 5f:80:41:06:7c:b3:56:47:46:ad:7f:ce:46:42:26: fd:04:f8:13:89:25:cb:27:c1:a5:33:6d:5f:0b:5b: ab:f2:50:c7:c2:0d:82:c5:e1:1c:e5:85:28:e5:5d: 84:04:c4:25:9c:18:1b:e7:19:69:c6:ea:27:b0:dd: ca:11:04:92:27:a8:97:e8:b4:15:fc:60:ac:04:01: 74:6f:d8:4d:b4:c3:3c:24:84:a1:97:c0:15:8e:ad: e5:1c:1e:b8:eb:a9:ab:f3:5a:04:35:8c:7d:9d:54: 20:08:10:06:93:73:2b:99:63:09:bc:16:b8:96:e9: a6:ff:9a:59:cc:a4:93:83:15:3b:fe:b7:c6:f7:05: e9:ce:a9:26:7f:05:c7:05:ee:aa:9c:f2:82:49:cc: 91:50:df:e5:81:b0:a6:99:ac:bf:5e:8d:9f:1e:ab: 4d:e5:b2:4b:4f:49:a0:e9:7d:18:90:55:a1:25:da: 36:82:84:d3:b7:ac:2f:03:66:6d:5d:3c:cb:6b:85: 88:f3:dd:7f:1c:b1:bb:30:35:e7:d2:7a:cc:3f:20: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:37:71:3A:73:2A:54:CD:55:CB:5D:2D:06:A9:0B:7D:20:48:3F:7E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EDdxOnMqVM1Vy10tBqkLfSBIP34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:4a0::/44 2a0e:97c0:c40::/44 Signature Algorithm: sha256WithRSAEncryption 77:ff:5d:2b:ca:f8:12:d0:60:7e:fa:fd:1b:22:61:ab:b1:79: 28:f3:81:e9:62:39:a8:d3:96:8b:a8:b9:ce:66:b1:22:89:4e: 12:98:30:ba:2b:34:d7:63:7f:42:80:97:90:59:f0:98:f3:44: 9a:be:3a:a7:cd:8c:bc:b9:08:41:02:1d:b4:26:ee:49:14:e8: d5:18:d6:e2:fc:39:b2:c6:9f:94:f4:af:91:78:24:c8:1f:9d: bc:3b:4e:5e:9b:34:00:a4:fb:04:5c:57:35:f5:33:b3:d4:69: 48:c0:1d:c8:3a:91:8b:6d:5f:36:3b:c4:30:f6:9a:8d:bb:14: 18:cf:4e:16:8a:6c:43:fb:ff:97:48:8f:b4:0f:2a:5e:99:9f: 18:d2:34:08:be:e4:87:67:55:f6:48:98:85:cc:a1:46:0a:3c: f4:ea:42:6e:a8:75:f5:17:9b:24:e8:94:79:83:0f:b9:07:95: 13:c9:28:06:f6:21:ce:92:18:ed:f7:0d:ff:04:52:57:84:09: a4:32:0f:ca:38:e2:ac:fc:c7:a0:aa:2e:e3:5e:25:71:ab:c9: 7f:23:1d:9e:ac:e3:6a:cb:00:14:c2:34:06:9c:e4:9b:26:79: e5:d3:45:01:4d:61:e1:69:a1:1d:2e:ed:d0:c0:45:ae:48:67: 4d:5b:ac:b8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XO+QEwaNB9ZGayjvVwjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDM3NzEzYTczMmE1NGNkNTVjYjVkMmQwNmE5MGI3ZDIwNDgzZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7i6YtZE7Jd7ci8f4wsPMH+2UdNN x5pWNkdOSb0GxlyNhXVef2lFMnsYTk1fgEEGfLNWR0atf85GQib9BPgTiSXLJ8Gl M21fC1ur8lDHwg2CxeEc5YUo5V2EBMQlnBgb5xlpxuonsN3KEQSSJ6iX6LQV/GCs BAF0b9hNtMM8JIShl8AVjq3lHB6466mr81oENYx9nVQgCBAGk3MrmWMJvBa4lumm /5pZzKSTgxU7/rfG9wXpzqkmfwXHBe6qnPKCScyRUN/lgbCmmay/Xo2fHqtN5bJL T0mg6X0YkFWhJdo2goTTt6wvA2ZtXTzLa4WI891/HLG7MDXn0nrMPyAz7wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBA3cTpzKlTNVctdLQapC30gSD9+MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRURkeE9uTXFWTTFWeTEwdEJxa0xmU0JJUDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwASg AwcEKg6XwAxAMA0GCSqGSIb3DQEBCwUAA4IBAQB3/10ryvgS0GB++v0bImGrsXko 84HpYjmo05aLqLnOZrEiiU4SmDC6KzTXY39CgJeQWfCY80SavjqnzYy8uQhBAh20 Ju5JFOjVGNbi/Dmyxp+U9K+ReCTIH528O05emzQApPsEXFc19TOz1GlIwB3IOpGL bV82O8Qw9pqNuxQYz04WimxD+/+XSI+0DypemZ8Y0jQIvuSHZ1X2SJiFzKFGCjz0 6kJuqHX1F5sk6JR5gw+5B5UTySgG9iHOkhjt9w3/BFJXhAmkMg/KOOKs/Megqi7j XiVxq8l/Ix2erONqywAUwjQGnOSbJnnl00UBTWHhaaEdLu3QwEWuSGdNW6y4 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client