This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EKxJ6HmXbiaPgfbntmygQl4cEf0.roa File: EKxJ6HmXbiaPgfbntmygQl4cEf0.roa (raw, json) Hash identifier: mmpUM5LstBlVWV3j/qAEMmYoVfG2Db3ryWYrcPOEIgQ= Subject key identifier: 10:AC:49:E8:79:97:6E:26:8F:81:F6:E7:B6:6C:A0:42:5E:1C:11:FD Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133233E37D4405A01777A51CBEFCCA Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EKxJ6HmXbiaPgfbntmygQl4cEf0.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208695 IP address blocks: 2a0a:e9c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:33:e3:7d:44:05:a0:17:77:a5:1c:be:fc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ac49e879976e268f81f6e7b66ca0425e1c11fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:24:60:45:92:17:f6:04:2b:99:e4:d9:57: fb:c4:05:b4:94:d1:b2:7c:e2:45:24:ae:a7:40:cc: 27:2f:af:3e:55:75:41:6e:3e:39:c6:e5:b6:ed:93: 1e:7d:2d:2c:0a:50:9a:38:af:b5:9c:a1:b1:4c:40: 4f:f7:ac:91:fe:9d:92:21:62:df:17:40:19:f0:ea: a1:fd:52:35:62:2b:ba:b9:65:22:a0:ca:0e:99:1a: 6c:6c:e5:20:d7:f4:b3:5c:64:1d:3b:a6:4a:27:19: fe:dd:a0:d7:7d:15:32:76:52:87:5e:94:fd:2b:d6: d4:30:59:ab:b6:eb:e1:88:53:18:b9:56:c2:5d:1a: d8:1e:e0:c5:c2:ca:bc:e7:1f:e7:81:96:82:4b:53: 2e:93:8d:cb:57:99:f3:35:dc:ec:d1:d9:6b:8f:0e: cb:68:03:28:33:77:38:f4:47:71:1d:be:a8:43:4a: 90:c4:58:97:fb:2a:18:54:c5:d1:28:2c:f3:15:52: e9:94:18:05:ee:1a:43:be:72:c3:54:9a:68:5a:59: 65:a1:5c:d2:28:4b:99:26:c6:be:f7:69:51:49:d6: d5:06:39:e3:25:6c:fd:3d:08:f3:d3:b2:3b:9c:72: 55:fc:aa:3f:a7:f4:a0:ea:59:a5:7d:af:83:c6:51: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:49:E8:79:97:6E:26:8F:81:F6:E7:B6:6C:A0:42:5E:1C:11:FD X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EKxJ6HmXbiaPgfbntmygQl4cEf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e9c1::/32 Signature Algorithm: sha256WithRSAEncryption c0:84:13:86:db:a6:ad:80:9a:d0:b3:2a:10:fa:a3:dc:b7:77: c9:40:e2:61:a1:cf:94:6a:d3:1f:cc:ed:6f:9a:b5:cd:c6:e7: ed:38:85:b7:bf:77:73:a2:3b:cf:f4:1f:69:c4:fd:65:f2:a2: 4d:68:85:c4:fb:fc:d3:9f:9d:7e:24:32:30:1f:0f:af:d1:5a: 5c:f1:fd:3a:80:73:11:3f:dc:cf:8e:41:cb:3b:5b:44:74:d4: be:dc:65:80:80:12:a5:6d:a3:0b:a0:31:7d:2b:45:69:d6:9a: 04:0c:1a:75:e6:32:58:bf:23:57:74:66:b9:58:1b:e8:ff:36: 92:5f:79:c8:21:d2:8a:32:95:6b:fc:84:c3:bd:ea:15:23:6a: 42:ef:66:ec:3b:63:ae:b0:f9:20:53:ee:85:9a:6c:7c:4b:24: e0:0a:16:bd:db:9b:40:89:34:1f:d0:2c:4d:f2:61:cd:3e:0e: 1d:8c:29:8b:25:5d:5b:be:e8:56:a7:f8:a1:f3:3d:8b:2c:1b: c4:31:a4:b2:75:26:56:af:98:48:d2:0a:6f:b3:36:aa:08:30: 35:9e:a3:19:10:a2:ed:e1:04:78:3c:b9:73:03:06:3f:63:3f: b8:e2:bd:a6:77:20:4f:45:ab:b3:3e:e2:f2:6b:ce:34:88:79: c2:84:96:44 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EzIz431EBaAXd6UcvvzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFjNDllODc5OTc2ZTI2OGY4MWY2ZTdiNjZjYTA0MjVlMWMxMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqEkYEWSF/YEK5nk2Vf7xAW0lNGy fOJFJK6nQMwnL68+VXVBbj45xuW27ZMefS0sClCaOK+1nKGxTEBP96yR/p2SIWLf F0AZ8Oqh/VI1Yiu6uWUioMoOmRpsbOUg1/SzXGQdO6ZKJxn+3aDXfRUydlKHXpT9 K9bUMFmrtuvhiFMYuVbCXRrYHuDFwsq85x/ngZaCS1Muk43LV5nzNdzs0dlrjw7L aAMoM3c49EdxHb6oQ0qQxFiX+yoYVMXRKCzzFVLplBgF7hpDvnLDVJpoWllloVzS KEuZJsa+92lRSdbVBjnjJWz9PQjz07I7nHJV/Ko/p/Sg6lmlfa+DxlFipQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBCsSeh5l24mj4H257ZsoEJeHBH9MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvRUt4SjZIbVhiaWFQZ2ZibnRteWdRbDRjRWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrpwTAN BgkqhkiG9w0BAQsFAAOCAQEAwIQThtumrYCa0LMqEPqj3Ld3yUDiYaHPlGrTH8zt b5q1zcbn7TiFt793c6I7z/QfacT9ZfKiTWiFxPv805+dfiQyMB8Pr9FaXPH9OoBz ET/cz45ByztbRHTUvtxlgIASpW2jC6AxfStFadaaBAwadeYyWL8jV3RmuVgb6P82 kl95yCHSijKVa/yEw73qFSNqQu9m7DtjrrD5IFPuhZpsfEsk4AoWvdubQIk0H9As TfJhzT4OHYwpiyVdW77oVqf4ofM9iywbxDGksnUmVq+YSNIKb7M2qggwNZ6jGRCi 7eEEeDy5cwMGP2M/uOK9pncgT0Wrsz7i8mvONIh5woSWRA== -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:40 2026 by rpki-client