This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/EqS1nZtD5q3-hD6eGWo79wyXkPI.roa File: EqS1nZtD5q3-hD6eGWo79wyXkPI.roa (raw, json) Hash identifier: EvlZqUb0IshNQRyxXXr64YjbLkvNa5sXZ6G8L2JNtcE= Subject key identifier: 12:A4:B5:9D:9B:43:E6:AD:FE:84:3E:9E:19:6A:3B:F7:0C:97:90:F2 Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Certificate serial: 019B7C8030AB0F56E8BB479D9F91853FF1EB Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/EqS1nZtD5q3-hD6eGWo79wyXkPI.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a02:ed1:cc::/48 maxlen: 48 2a02:ed1:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:30:ab:0f:56:e8:bb:47:9d:9f:91:85:3f:f1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12a4b59d9b43e6adfe843e9e196a3bf70c9790f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:3a:71:4b:79:ce:f6:51:cf:29:b3:5f:cb: cc:40:b8:eb:13:d0:43:f9:f6:c5:1a:d9:f2:72:1b: 55:7a:f2:3f:1b:8d:4a:7f:d2:2e:f7:72:aa:5d:ef: a2:f9:56:1a:c3:4a:70:0b:37:dc:3a:f1:c6:5f:cd: 60:3c:03:b3:d8:b1:79:cc:e2:68:52:f0:ff:53:0b: 66:c8:60:ae:b7:00:9d:a0:54:43:c4:74:79:72:10: 3b:44:aa:93:b1:86:01:37:a0:b1:e6:3d:06:06:70: 9d:e2:5d:89:81:50:c7:bf:c6:af:20:6b:46:56:d9: c9:a4:3a:97:ee:52:05:32:c6:69:d1:af:7d:8c:57: b5:ab:5d:ea:b2:8b:53:1d:e3:b8:38:bd:af:64:04: e3:9b:6e:c2:9a:17:9e:41:38:9d:27:f7:a9:88:53: c7:7d:47:b3:16:29:c5:c1:c2:84:92:a4:64:4c:3c: 44:e7:4a:a7:e6:e6:24:39:02:77:3d:53:b4:3d:30: 53:cd:60:c0:c9:b9:fe:86:8f:0c:45:71:cd:ed:3f: 26:22:db:8e:60:4d:8e:13:be:17:fd:dd:36:2d:60: cc:51:c6:1d:d2:97:d8:c3:c7:53:b5:aa:69:ea:9a: 9b:20:58:2d:3e:e6:fb:05:0a:2c:69:63:84:c6:9b: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A4:B5:9D:9B:43:E6:AD:FE:84:3E:9E:19:6A:3B:F7:0C:97:90:F2 X509v3 Authority Key Identifier: keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/EqS1nZtD5q3-hD6eGWo79wyXkPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ed1:cc::/48 2a02:ed1:ee::/48 Signature Algorithm: sha256WithRSAEncryption 42:b1:88:7e:c3:db:6c:9e:52:1e:82:1a:e1:8f:b7:3c:13:13: d5:c7:91:46:be:dc:6d:16:6e:92:7b:cb:cb:6f:a4:28:66:9d: 67:bb:8a:42:c5:8d:20:4e:7b:64:62:d6:9c:ea:15:ee:81:f2: 7a:61:ca:0e:57:48:95:5b:62:64:8e:fb:cf:91:82:71:a7:58: cc:5c:9f:de:fb:2d:8c:84:fe:e1:6e:fa:95:cd:5c:fd:b1:e2: 44:33:6c:08:f6:19:56:d1:4b:43:10:a2:cf:8c:71:3b:97:aa: 5b:e7:67:9c:15:ab:c8:d3:7c:8a:1c:2f:dd:68:27:48:0d:2a: be:7d:c5:d1:4e:dd:d5:b9:67:cb:50:cd:46:18:25:00:18:3c: 5d:00:5b:01:f7:cd:75:41:e0:35:71:95:21:d4:1a:de:f2:c9: 14:4d:17:b5:68:96:1c:b8:b0:a3:86:9d:72:fe:35:d6:bb:8e: c1:53:fe:66:f7:db:e7:ff:b5:9c:1a:eb:95:4c:c2:6f:2e:e5: bc:a1:ab:ed:26:29:a2:b6:1e:c7:22:e3:14:1c:e3:6f:0b:9d: ec:12:b0:80:9c:50:7b:86:6d:2d:07:fc:92:78:f0:2f:48:6e: 57:5e:a1:68:08:b1:d2:e2:b5:bf:ca:82:ee:89:e4:e2:76:b6: 23:aa:c6:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDCrD1bou0edn5GFP/HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzBhYTdiM2UzY2JmZjg4MjYyYWRkOTJiMzM5ZTM1MDUx Y2UxYTAwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmE0YjU5ZDliNDNlNmFkZmU4NDNlOWUxOTZhM2JmNzBjOTc5MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1I6cUt5zvZRzymzX8vMQLjrE9BD +fbFGtnychtVevI/G41Kf9Iu93KqXe+i+VYaw0pwCzfcOvHGX81gPAOz2LF5zOJo UvD/UwtmyGCutwCdoFRDxHR5chA7RKqTsYYBN6Cx5j0GBnCd4l2JgVDHv8avIGtG VtnJpDqX7lIFMsZp0a99jFe1q13qsotTHeO4OL2vZATjm27CmheeQTidJ/epiFPH fUezFinFwcKEkqRkTDxE50qn5uYkOQJ3PVO0PTBTzWDAybn+ho8MRXHN7T8mItuO YE2OE74X/d02LWDMUcYd0pfYw8dTtapp6pqbIFgtPub7BQosaWOExptJyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBKktZ2bQ+at/oQ+nhlqO/cMl5DyMB8GA1UdIwQY MBaAFPTAqns+PL/4gmKt2SsznjUFHOGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEt ZWE3NWRkZjQ3YjRhLzEvRXFTMW5adEQ1cTMtaEQ2ZUdXbzc5d3lYa1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEtZWE3NWRkZjQ3YjRh LzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgIO0QDM AwcAKgIO0QDuMA0GCSqGSIb3DQEBCwUAA4IBAQBCsYh+w9tsnlIeghrhj7c8ExPV x5FGvtxtFm6Se8vLb6QoZp1nu4pCxY0gTntkYtac6hXugfJ6YcoOV0iVW2JkjvvP kYJxp1jMXJ/e+y2MhP7hbvqVzVz9seJEM2wI9hlW0UtDEKLPjHE7l6pb52ecFavI 03yKHC/daCdIDSq+fcXRTt3VuWfLUM1GGCUAGDxdAFsB9811QeA1cZUh1Bre8skU TRe1aJYcuLCjhp1y/jXWu47BU/5m99vn/7WcGuuVTMJvLuW8oavtJimith7HIuMU HONvC53sErCAnFB7hm0tB/ySePAvSG5XXqFoCLHS4rW/yoLuieTidrYjqsYN -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:11 2026 by rpki-client