This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/EK7og_r9H_ffSIUUiem5NEk6UL8.roa File: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (raw, json) Hash identifier: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4= Subject key identifier: 10:AE:E8:83:FA:FD:1F:F7:DF:48:85:14:89:E9:B9:34:49:3A:50:BF Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5 Certificate serial: 019B79EC3317431C8B99629C7FC6E1C480AB Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/EK7og_r9H_ffSIUUiem5NEk6UL8.roa Signing time: Thu 01 Jan 2026 14:18:01 +0000 ROA not before: Thu 01 Jan 2026 14:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:678:4b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:33:17:43:1c:8b:99:62:9c:7f:c6:e1:c4:80:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10aee883fafd1ff7df48851489e9b934493a50bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:35:13:dc:73:ff:80:50:15:69:ac:e0:a5: 55:e1:8f:02:70:4e:51:f1:ba:ad:fb:cb:33:e1:28: dd:8f:a6:f3:7f:4f:52:e0:c0:fe:cb:27:02:0c:d6: ca:d2:b9:1c:9d:9a:7b:e3:c9:1c:f5:9a:4f:dd:fd: 87:68:2c:23:e0:d2:ff:49:5a:44:cb:61:97:b5:25: 34:3b:e8:a2:5f:1b:f4:c8:3d:4c:9b:74:00:e4:fb: 12:0b:ae:20:80:5c:4f:5c:de:c1:4b:ab:db:39:0f: 9b:97:72:65:4a:e2:99:59:b0:ab:38:57:8b:d4:64: 38:cd:c0:18:2c:7d:d8:7b:cb:8a:84:7d:b3:2a:48: 11:7e:55:6a:61:72:73:09:18:ed:4c:5c:60:ac:2e: 9d:28:a5:d4:1b:c0:2e:30:89:88:04:9f:21:d3:1c: 92:c4:9c:b8:09:e7:55:7c:8b:60:c3:4b:27:d1:75: 8c:09:11:1f:e9:66:f1:a5:c1:4f:71:2b:b7:2e:bb: c2:81:1e:38:9d:81:bd:0e:d0:dd:d3:9d:9d:f8:27: 12:23:fd:b9:26:05:8e:94:9f:53:5d:58:8a:55:40: 5d:a2:f9:8d:72:39:be:dc:78:be:f8:23:73:79:32: 2f:20:a1:52:a0:45:83:1c:b4:e2:da:d5:2e:2c:53: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AE:E8:83:FA:FD:1F:F7:DF:48:85:14:89:E9:B9:34:49:3A:50:BF X509v3 Authority Key Identifier: keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/EK7og_r9H_ffSIUUiem5NEk6UL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:4b0::/48 Signature Algorithm: sha256WithRSAEncryption 0f:5c:46:dc:5e:35:d9:99:f3:bc:02:57:1f:7c:bc:5e:c7:bc: 63:d8:70:8f:0a:9f:13:e6:d9:a4:6f:f7:92:34:26:9a:af:6e: 06:bf:fc:0a:a8:5e:ff:b1:24:ab:43:b9:e5:84:a2:73:c1:fd: 8d:91:c6:f8:d9:bb:f6:dc:c6:6b:fd:c2:40:af:24:40:c2:ae: 52:7e:b5:a2:15:91:77:72:75:b0:b2:6d:c3:fb:9b:b1:4a:d9: 10:51:0a:7a:75:a8:05:8d:89:2e:d8:ac:d1:d9:fd:5d:a6:46: 86:a0:05:fc:bc:c1:8e:5a:9c:fc:03:98:e5:91:52:e9:1d:bf: ea:3d:1d:d4:98:0c:1b:7e:4f:fd:42:cc:8d:7e:74:a0:eb:53: ee:84:62:ea:d2:c6:0b:b8:be:5e:4d:b5:95:22:45:90:fe:3e: df:26:d3:88:a9:3c:83:a5:f9:fa:36:5d:fb:3b:f6:72:98:d9: ed:b4:de:65:43:bf:ae:10:ec:83:19:bd:a1:f2:46:40:be:5d: 5b:e0:25:bf:b7:4f:72:a9:bb:c1:d9:92:82:b7:b3:03:7d:56: d8:8d:9f:53:4d:15:28:f4:d4:c1:d4:22:79:9f:a1:a3:d5:a0: 63:bb:5f:f7:80:30:28:81:47:28:5f:a2:33:98:c6:ae:d2:70: 73:52:77:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57DMXQxyLmWKcf8bhxICrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTY1MzQ4ZGMxM2M4NTQ5OWM3Nzc0ZDE1NjYxNGMxMjAx MThhYjUwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFlZTg4M2ZhZmQxZmY3ZGY0ODg1MTQ4OWU5YjkzNDQ5M2E1MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB81E9xz/4BQFWms4KVV4Y8CcE5R 8bqt+8sz4Sjdj6bzf09S4MD+yycCDNbK0rkcnZp748kc9ZpP3f2HaCwj4NL/SVpE y2GXtSU0O+iiXxv0yD1Mm3QA5PsSC64ggFxPXN7BS6vbOQ+bl3JlSuKZWbCrOFeL 1GQ4zcAYLH3Ye8uKhH2zKkgRflVqYXJzCRjtTFxgrC6dKKXUG8AuMImIBJ8h0xyS xJy4CedVfItgw0sn0XWMCREf6WbxpcFPcSu3LrvCgR44nYG9DtDd052d+CcSI/25 JgWOlJ9TXViKVUBdovmNcjm+3Hi++CNzeTIvIKFSoEWDHLTi2tUuLFNAxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBCu6IP6/R/330iFFInpuTRJOlC/MB8GA1UdIwQY MBaAFNDmU0jcE8hUmcd3TRVmFMEgEYq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYt MGRiMGVjMWU5NDVjLzEvRUs3b2dfcjlIX2ZmU0lVVWllbTVORWs2VUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYtMGRiMGVjMWU5NDVj LzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeASw MA0GCSqGSIb3DQEBCwUAA4IBAQAPXEbcXjXZmfO8AlcffLxex7xj2HCPCp8T5tmk b/eSNCaar24Gv/wKqF7/sSSrQ7nlhKJzwf2Nkcb42bv23MZr/cJAryRAwq5SfrWi FZF3cnWwsm3D+5uxStkQUQp6dagFjYku2KzR2f1dpkaGoAX8vMGOWpz8A5jlkVLp Hb/qPR3UmAwbfk/9QsyNfnSg61PuhGLq0sYLuL5eTbWVIkWQ/j7fJtOIqTyDpfn6 Nl37O/ZymNnttN5lQ7+uEOyDGb2h8kZAvl1b4CW/t09yqbvB2ZKCt7MDfVbYjZ9T TRUo9NTB1CJ5n6Gj1aBju1/3gDAogUcoX6IzmMau0nBzUneq -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:24 2026 by rpki-client