This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Eit-LyoUR-5GtGq8lhDUVyj6vYg.roa File: Eit-LyoUR-5GtGq8lhDUVyj6vYg.roa (raw, json) Hash identifier: DKncmtlUb0OCxYScUuuJrGLgB2ocrzd84wKxEVUyx/k= Subject key identifier: 12:2B:7E:2F:2A:14:47:EE:46:B4:6A:BC:96:10:D4:57:28:FA:BD:88 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB6E35C19007CDFFBD256DAC70C7C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Eit-LyoUR-5GtGq8lhDUVyj6vYg.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50385 IP address blocks: 2a0e:97c0:8f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b6:e3:5c:19:00:7c:df:fb:d2:56:da:c7:0c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=122b7e2f2a1447ee46b46abc9610d45728fabd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:0e:66:38:2a:d4:42:21:a3:e1:7d:6c:50: 36:52:e8:81:c7:eb:64:d2:73:d9:f9:4c:73:a0:9a: 39:ad:8c:13:61:c1:9c:ea:7f:c3:94:83:33:7b:5c: 7b:ac:cb:fa:ee:e0:5e:40:d0:2f:20:f6:fd:13:46: 08:f1:b7:b0:77:34:4a:6f:c0:14:ef:06:73:33:6c: 7a:95:95:59:55:99:14:c9:2c:ac:0d:92:95:30:19: 33:f6:9d:78:a0:44:a4:d3:f2:97:b2:c2:78:f5:18: 49:16:a7:e7:e1:32:a2:87:7b:96:28:37:ab:06:a1: e6:72:43:f5:79:68:08:c3:cf:d7:d6:74:0f:e8:aa: c8:a3:61:fb:19:88:70:f5:12:a0:30:8a:59:b9:ac: b0:25:cc:84:14:e5:e8:bf:89:9f:d0:6b:a7:ef:31: 83:1f:80:8f:fd:58:62:27:9e:46:6c:47:e0:46:80: c4:21:b2:8a:26:3f:98:49:21:f1:5e:a7:67:d8:ae: 92:5a:90:54:19:24:ab:70:84:51:82:c4:c5:fb:10: dc:f9:72:29:8f:27:57:f1:3f:84:2b:1b:6f:63:fd: 65:96:2b:f0:45:a5:fb:0d:13:02:e3:ba:0e:0d:ad: 93:05:a3:57:20:09:c6:7b:ab:d4:06:6f:e2:f2:82: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:7E:2F:2A:14:47:EE:46:B4:6A:BC:96:10:D4:57:28:FA:BD:88 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Eit-LyoUR-5GtGq8lhDUVyj6vYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:8f0::/44 Signature Algorithm: sha256WithRSAEncryption a9:da:b5:54:5a:68:71:83:5f:96:9a:ba:e3:6b:cb:e1:8e:8d: 14:30:84:4c:d5:ba:4f:68:1f:2b:3c:42:6f:68:21:b5:3a:8b: 44:94:e8:2b:d7:bd:9b:62:47:37:17:7e:28:6a:ff:da:e3:bb: ca:41:4b:5c:4e:c4:d3:35:f4:ed:5d:65:fc:95:be:2b:0b:aa: d6:f4:41:2d:b8:0c:5f:65:f0:d2:cf:ff:82:df:6b:92:44:b5: 85:b3:6a:5b:82:23:4e:22:15:8c:43:8a:7a:82:14:94:ec:a7: fd:fe:ce:90:62:8f:67:c0:75:a5:c5:45:b5:43:e4:fe:aa:f8: c4:81:22:f2:e2:66:81:45:2c:ad:4f:1a:d9:ef:77:2b:b3:e6: 00:f9:fa:c1:66:23:ef:91:8a:2d:8f:1b:f8:71:c8:25:22:c7: 70:bc:6d:40:2f:9f:bf:3e:b6:40:0b:a2:41:c6:49:69:70:f5: 3e:0f:9d:50:fb:4f:18:3a:50:71:b2:b0:33:b9:31:7b:01:99: 25:0e:9d:ca:fb:1f:e3:09:7c:1a:87:3e:43:fe:d7:f6:07:c4: 89:59:e2:6e:cd:56:0c:1f:08:5a:01:8d:13:f8:84:59:ff:62: a1:c9:1f:4d:21:db:8d:55:b7:7d:df:2a:1f:a7:67:f7:49:a6: d2:5b:69:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLbjXBkAfN/70lbaxwx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjJiN2UyZjJhMTQ0N2VlNDZiNDZhYmM5NjEwZDQ1NzI4ZmFiZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCQOZjgq1EIho+F9bFA2UuiBx+tk 0nPZ+UxzoJo5rYwTYcGc6n/DlIMze1x7rMv67uBeQNAvIPb9E0YI8bewdzRKb8AU 7wZzM2x6lZVZVZkUySysDZKVMBkz9p14oESk0/KXssJ49RhJFqfn4TKih3uWKDer BqHmckP1eWgIw8/X1nQP6KrIo2H7GYhw9RKgMIpZuaywJcyEFOXov4mf0Gun7zGD H4CP/VhiJ55GbEfgRoDEIbKKJj+YSSHxXqdn2K6SWpBUGSSrcIRRgsTF+xDc+XIp jydX8T+EKxtvY/1llivwRaX7DRMC47oODa2TBaNXIAnGe6vUBm/i8oJjhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBIrfi8qFEfuRrRqvJYQ1Fco+r2IMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRWl0LUx5b1VSLTVHdEdxOGxoRFVWeWo2dllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAjw MA0GCSqGSIb3DQEBCwUAA4IBAQCp2rVUWmhxg1+Wmrrja8vhjo0UMIRM1bpPaB8r PEJvaCG1OotElOgr172bYkc3F34oav/a47vKQUtcTsTTNfTtXWX8lb4rC6rW9EEt uAxfZfDSz/+C32uSRLWFs2pbgiNOIhWMQ4p6ghSU7Kf9/s6QYo9nwHWlxUW1Q+T+ qvjEgSLy4maBRSytTxrZ73crs+YA+frBZiPvkYotjxv4ccglIsdwvG1AL5+/PrZA C6JBxklpcPU+D51Q+08YOlBxsrAzuTF7AZklDp3K+x/jCXwahz5D/tf2B8SJWeJu zVYMHwhaAY0T+IRZ/2KhyR9NIduNVbd93yofp2f3SabSW2lS -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:47 2026 by rpki-client