This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa File: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (raw, json) Hash identifier: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI= Subject key identifier: F9:EA:02:FC:63:76:61:B6:1E:E1:7A:82:43:77:50:50:35:8B:30:65 Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Certificate serial: 019B7C8055C758F778461289DFE4CF2F5F7E Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214564 IP address blocks: 2001:67c:ef8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:c7:58:f7:78:46:12:89:df:e4:cf:2f:5f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9ea02fc637661b61ee17a8243775050358b3065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:90:c4:62:8a:b6:ac:f8:02:b0:28:f0:10: 2a:5b:71:da:40:b3:ea:6f:80:8c:a1:3b:23:d1:e3: ba:a7:98:06:d5:ed:18:ad:02:d7:77:db:e4:9f:d8: 95:49:ca:2b:0f:05:c0:9c:68:fe:85:5b:e1:71:ac: 7c:a9:88:d6:10:c6:d9:61:62:eb:3f:b4:2e:5e:63: ca:57:94:d2:57:5a:f3:f5:ab:77:22:49:63:47:8d: 4b:c1:85:8d:24:21:f5:2d:7c:87:2b:ca:46:10:ae: 47:2a:e5:fd:ae:50:76:97:64:7e:06:43:b6:ea:56: 98:7e:36:f4:2b:89:36:f5:5d:7f:3c:28:a7:6d:01: 0e:14:21:3c:2c:5c:12:db:9b:74:02:ba:9f:43:07: d9:8b:eb:e5:14:3f:b2:fa:24:28:9b:d1:54:55:57: 9a:13:b6:17:86:c8:b9:c0:ed:ef:c2:60:52:fd:78: ed:03:49:5d:02:38:34:4e:bf:8c:ac:1e:04:d4:4f: da:73:0c:1b:e2:76:fe:ab:55:d7:50:52:5f:77:b4: 70:1d:51:21:4b:c9:ad:fe:ec:22:a7:74:8b:88:77: 49:bc:27:61:82:b4:22:47:8c:f9:61:25:7d:07:96: d5:10:97:16:63:8e:82:27:69:16:49:f1:1c:87:dd: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:02:FC:63:76:61:B6:1E:E1:7A:82:43:77:50:50:35:8B:30:65 X509v3 Authority Key Identifier: keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ef8::/48 Signature Algorithm: sha256WithRSAEncryption 92:c7:66:bc:43:ea:b6:b7:5c:08:47:60:ae:bb:5f:e4:27:d6: 3f:60:8c:c5:7a:fc:33:73:c7:7a:73:57:d5:f0:6a:42:4d:59: 58:d7:51:a1:bf:f5:ef:cd:08:22:db:26:c4:fb:c2:ae:bd:1e: c2:00:0f:00:cc:37:2c:ab:88:21:e9:9a:6c:ff:24:b2:7f:73: 9b:03:81:dc:75:2b:45:92:69:85:12:05:18:7a:8a:f5:48:18: ea:e3:05:5a:5e:1c:dc:a4:8d:4d:99:08:25:17:6e:04:42:2d: b7:f3:33:51:ab:91:d5:f0:b3:ac:62:22:28:d3:52:a7:bc:93: c9:6b:85:af:d8:03:12:59:56:c7:72:96:72:c6:b7:76:08:7a: e5:37:47:10:54:15:ef:3e:df:7f:f9:1d:50:d3:2c:0a:2e:1b: c3:b3:b3:45:54:1b:2c:8b:ac:7f:3d:8b:83:b2:12:96:36:76: c4:a4:eb:82:64:ee:2c:9c:0b:4f:4b:03:12:00:27:1a:a6:f5: ea:47:f9:66:dc:d0:c6:bf:a1:ad:f0:1e:f2:ef:b2:6b:91:e2: fa:8f:57:d0:da:ef:f0:b2:0a:13:58:c4:7b:68:71:c0:16:fe: 20:ff:79:ec:85:3d:c5:f0:0d:4e:d4:bb:05:3d:0c:a2:ce:56: 11:59:f6:86 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt8gFXHWPd4RhKJ3+TPL19+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZGM4YzYyMzkxZWZkZDRkZDE4ZTQ2ODE5ZTE3NzgwMDJh OWExODcwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWVhMDJmYzYzNzY2MWI2MWVlMTdhODI0Mzc3NTA1MDM1OGIzMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGeQxGKKtqz4ArAo8BAqW3HaQLPq b4CMoTsj0eO6p5gG1e0YrQLXd9vkn9iVScorDwXAnGj+hVvhcax8qYjWEMbZYWLr P7QuXmPKV5TSV1rz9at3IkljR41LwYWNJCH1LXyHK8pGEK5HKuX9rlB2l2R+BkO2 6laYfjb0K4k29V1/PCinbQEOFCE8LFwS25t0ArqfQwfZi+vlFD+y+iQom9FUVVea E7YXhsi5wO3vwmBS/XjtA0ldAjg0Tr+MrB4E1E/acwwb4nb+q1XXUFJfd7RwHVEh S8mt/uwip3SLiHdJvCdhgrQiR4z5YSV9B5bVEJcWY46CJ2kWSfEch92A1wIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPnqAvxjdmG2HuF6gkN3UFA1izBlMB8GA1UdIwQY MBaAFAPcjGI5Hv3U3RjkaBnhd4ACqaGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMt MGVmOGMwMzZiNjE2LzEvMS1lb0NfR04yWWJZZTRYcUNRM2RRVURXTE1HVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvZDA4MGM3LWNlZTYtNGI0MS04YzFjLTBlZjhjMDM2YjYx Ni8xL0E5eU1ZamtlX2RUZEdPUm9HZUYzZ0FLcG9ZYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwO +DANBgkqhkiG9w0BAQsFAAOCAQEAksdmvEPqtrdcCEdgrrtf5CfWP2CMxXr8M3PH enNX1fBqQk1ZWNdRob/1780IItsmxPvCrr0ewgAPAMw3LKuIIemabP8ksn9zmwOB 3HUrRZJphRIFGHqK9UgY6uMFWl4c3KSNTZkIJRduBEItt/MzUauR1fCzrGIiKNNS p7yTyWuFr9gDEllWx3KWcsa3dgh65TdHEFQV7z7ff/kdUNMsCi4bw7OzRVQbLIus fz2Lg7ISljZ2xKTrgmTuLJwLT0sDEgAnGqb16kf5ZtzQxr+hrfAe8u+ya5Hi+o9X 0Nrv8LIKE1jEe2hxwBb+IP957IU9xfANTtS7BT0Mos5WEVn2hg== -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:44 2026 by rpki-client