This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eU-BZ1378hOXrfGy_nP2QpBg5Wk.roa File: eU-BZ1378hOXrfGy_nP2QpBg5Wk.roa (raw, json) Hash identifier: 9qFgTUxqOpuA+qXYfQDxAnK8DJvbJSO0a5FavReubqI= Subject key identifier: 79:4F:81:67:5D:FB:F2:13:97:AD:F1:B2:FE:73:F6:42:90:60:E5:69 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D149BB997A09846D438A435C079E8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eU-BZ1378hOXrfGy_nP2QpBg5Wk.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208679 IP address blocks: 2a0e:b107:178c::/48 maxlen: 48 2a0e:b107:178d::/48 maxlen: 48 2a0e:b107:178e::/48 maxlen: 48 2a0e:b107:178f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:9b:b9:97:a0:98:46:d4:38:a4:35:c0:79:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=794f81675dfbf21397adf1b2fe73f6429060e569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:7f:d9:ae:21:2e:9d:83:cc:19:76:c7:31: 7b:20:21:52:ba:b2:11:80:42:d5:7f:b8:3e:4e:f4: 11:f4:80:e7:81:0b:85:e9:ea:92:3e:a1:f3:f4:da: 40:5b:f8:70:8c:e3:08:39:c2:07:02:71:a4:68:40: 83:cf:d1:e8:ca:30:4a:96:d9:73:a4:e2:37:01:ab: e5:ba:2d:18:c9:e4:81:c2:9b:cc:31:89:1b:8f:20: 9a:52:2a:01:0c:9c:f2:e2:29:a9:5d:45:ba:94:ac: 5e:ff:0e:25:32:ed:a5:b2:e4:c3:a3:f2:47:2e:db: 3e:cc:91:c2:5e:a9:26:fa:cb:78:32:73:72:5e:38: 57:72:d8:4a:55:5a:50:cf:03:49:6c:46:66:a9:2f: fa:8e:07:66:06:dd:72:16:0e:3b:d4:22:73:b4:13: d6:66:70:30:29:d0:0a:9f:b2:b0:21:16:c0:a3:ee: c9:76:39:dd:97:be:2c:a7:54:13:2a:30:42:37:50: 8e:b4:f7:74:44:3e:e1:37:f1:3f:76:ba:0d:7a:5a: 6c:99:4b:ea:3a:46:ec:fc:01:d5:9b:3b:d3:7e:39: 3c:43:28:eb:6f:77:47:ce:0c:1e:31:b0:0c:5f:cf: c3:ad:77:a6:44:44:ad:0f:36:ec:ea:00:50:14:5a: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:81:67:5D:FB:F2:13:97:AD:F1:B2:FE:73:F6:42:90:60:E5:69 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eU-BZ1378hOXrfGy_nP2QpBg5Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:178c::/46 Signature Algorithm: sha256WithRSAEncryption 27:42:09:c0:f0:4c:e2:28:33:39:fd:db:5e:88:1f:3f:dd:c2: 55:e8:51:45:86:9e:9e:fe:7f:11:c7:b0:49:c5:09:3e:6f:8d: f4:5a:3a:bc:af:4f:c2:ff:ce:23:24:9c:2d:4c:47:84:06:0f: cf:a5:35:d2:c3:94:41:b0:56:aa:fa:98:9f:13:6f:2d:d2:d1: 7d:78:2d:ac:47:fd:1a:21:c8:35:d2:f0:5a:fb:af:26:ed:68: 9b:61:3d:32:b6:5b:95:5c:8a:a6:07:23:3e:10:90:78:22:89: d5:8e:76:0b:31:a8:8a:da:6e:96:9c:24:0b:22:9d:1f:96:26: 21:ca:ac:f0:6a:ef:63:7d:61:fb:db:79:7a:84:35:10:04:2b: 8e:01:19:16:fa:60:3d:98:8d:7d:b9:39:27:a4:fe:1b:9d:74: ad:03:86:7a:98:04:ca:3d:ab:d1:66:c0:2c:ab:23:53:03:fc: fc:34:3c:e7:da:e1:bc:64:4f:35:0c:b1:d2:09:d4:88:11:ff: 81:ed:b9:60:96:6e:00:6e:2f:9b:95:2e:18:cf:c4:27:55:34: 94:da:4d:d4:13:a1:9b:cd:05:5b:d4:43:6b:56:db:9c:44:52: e4:6c:da:d3:8c:a8:30:76:dc:fa:de:a0:ae:b0:56:7f:63:45: c8:80:67:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRSbuZegmEbUOKQ1wHnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTRmODE2NzVkZmJmMjEzOTdhZGYxYjJmZTczZjY0MjkwNjBlNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bp/2a4hLp2DzBl2xzF7ICFSurIR gELVf7g+TvQR9IDngQuF6eqSPqHz9NpAW/hwjOMIOcIHAnGkaECDz9HoyjBKltlz pOI3Aavlui0YyeSBwpvMMYkbjyCaUioBDJzy4impXUW6lKxe/w4lMu2lsuTDo/JH Lts+zJHCXqkm+st4MnNyXjhXcthKVVpQzwNJbEZmqS/6jgdmBt1yFg471CJztBPW ZnAwKdAKn7KwIRbAo+7Jdjndl74sp1QTKjBCN1COtPd0RD7hN/E/droNelpsmUvq Okbs/AHVmzvTfjk8Qyjrb3dHzgweMbAMX8/DrXemREStDzbs6gBQFFrVYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHlPgWdd+/ITl63xsv5z9kKQYOVpMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZVUtQloxMzc4aE9YcmZHeV9uUDJRcEJnNVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg6xBxeM MA0GCSqGSIb3DQEBCwUAA4IBAQAnQgnA8EziKDM5/dteiB8/3cJV6FFFhp6e/n8R x7BJxQk+b430Wjq8r0/C/84jJJwtTEeEBg/PpTXSw5RBsFaq+pifE28t0tF9eC2s R/0aIcg10vBa+68m7WibYT0ytluVXIqmByM+EJB4IonVjnYLMaiK2m6WnCQLIp0f liYhyqzwau9jfWH723l6hDUQBCuOARkW+mA9mI19uTknpP4bnXStA4Z6mATKPavR ZsAsqyNTA/z8NDzn2uG8ZE81DLHSCdSIEf+B7blglm4Abi+blS4Yz8QnVTSU2k3U E6GbzQVb1ENrVtucRFLkbNrTjKgwdtz63qCusFZ/Y0XIgGeB -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:21 2026 by rpki-client