This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa File: E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa (raw, json) Hash identifier: SDa/tg7mYNNs8Ig1oDFyYQAMW6ncyRIYSQRc76ZseiQ= Subject key identifier: 13:73:EC:FF:56:34:44:FC:93:B9:F7:FB:BE:CA:6A:5E:CF:07:25:DD Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e Certificate serial: 019B7BA3BF3EF272E3F6D9473ABDCDDC43F2 Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215273 IP address blocks: 2a09:6000:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:bf:3e:f2:72:e3:f6:d9:47:3a:bd:cd:dc:43:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1373ecff563444fc93b9f7fbbeca6a5ecf0725dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:2b:8d:ff:12:d8:2d:40:fe:14:a6:e3:53: 25:3e:32:b4:46:bc:57:93:ae:88:7e:f7:a1:3a:36: 17:1a:6e:be:ac:4a:41:c1:b2:11:8b:27:16:e7:0c: 94:36:65:74:25:85:df:83:93:85:0a:de:6d:d9:10: 4a:7d:94:49:88:72:d2:85:65:2d:e2:69:84:34:cd: fd:49:ca:35:c2:70:66:72:28:8a:d3:76:f3:57:74: 69:90:3d:a5:e9:ce:80:3d:ae:85:3b:b2:b3:31:30: d2:3c:08:71:39:4f:d5:7c:0e:b5:4f:a5:72:39:97: 81:4a:d2:6b:0d:f2:61:bd:8b:b2:5b:e5:c8:65:ac: a7:fb:1b:1f:4c:e1:fe:b6:7a:2a:3c:24:27:ed:85: ba:01:48:ae:d4:c4:59:f8:fa:b4:08:d5:bc:22:42: c9:6e:60:9f:72:09:37:79:8a:16:87:0c:70:a4:99: 8e:95:01:e7:1a:67:aa:2d:fd:a8:e4:bc:a9:1f:a6: a4:86:1a:81:71:21:12:f1:71:e2:b8:ea:0f:2e:65: 1c:37:50:11:6b:ce:e4:8d:d9:bf:16:dc:45:f2:7a: 3b:94:a0:87:66:9c:68:8e:e2:30:93:70:26:6f:34: a7:73:cc:95:91:1c:d4:dd:06:dc:2a:92:c6:e3:4f: 5b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:EC:FF:56:34:44:FC:93:B9:F7:FB:BE:CA:6A:5E:CF:07:25:DD X509v3 Authority Key Identifier: keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:6000:1::/48 Signature Algorithm: sha256WithRSAEncryption 85:85:7c:cb:26:7e:d7:3f:df:e0:5c:7b:7e:f2:18:b2:5f:9e: 07:4e:a5:2b:c6:52:b6:ec:fb:6b:43:0d:17:bc:46:af:46:21: 38:52:26:2e:c8:73:05:23:2f:2f:97:1e:23:a0:d2:9d:98:e9: 45:ae:ed:3b:64:63:1e:b5:3c:1f:38:d6:7e:c9:1b:51:99:f8: c6:fb:e4:92:c3:4e:cc:af:6c:c0:f6:22:13:a3:cd:9a:55:e4: 61:3a:26:b3:40:e4:63:ab:e0:4a:c9:b0:77:6f:c7:cb:33:e1: 0c:e2:db:89:58:b4:1f:23:cb:1f:2d:d3:bb:5e:99:30:2d:1b: 7b:bd:7a:52:57:e6:ba:9e:a6:a5:46:20:db:5a:60:6e:72:88: fc:13:db:cd:54:b2:9d:21:aa:f3:66:27:3b:bf:ff:7a:18:9a: 8d:35:98:23:3b:8f:b9:39:ac:af:ab:79:a7:df:c5:25:99:a5: 7c:58:6b:9d:f4:82:95:a0:8e:3f:54:dd:b2:2f:2d:68:0c:c0: 87:d3:06:43:d9:a1:30:25:7b:b3:1d:c1:93:21:ab:68:f4:54: 73:0e:67:13:4e:74:d5:14:d3:be:7d:35:a3:ac:0c:df:b4:49: e9:96:aa:53:23:0f:c0:b3:65:42:a4:8d:21:5f:8e:5d:fa:63: 60:d4:8b:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o78+8nLj9tlHOr3N3EPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYmY2YjM3Yjk0Zjk1YjQ5MDVjZjhjNmEyMWQ4ODAzZWFi ZmE3N2UwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzczZWNmZjU2MzQ0NGZjOTNiOWY3ZmJiZWNhNmE1ZWNmMDcyNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Mrjf8S2C1A/hSm41MlPjK0RrxX k66IfvehOjYXGm6+rEpBwbIRiycW5wyUNmV0JYXfg5OFCt5t2RBKfZRJiHLShWUt 4mmENM39Sco1wnBmciiK03bzV3RpkD2l6c6APa6FO7KzMTDSPAhxOU/VfA61T6Vy OZeBStJrDfJhvYuyW+XIZayn+xsfTOH+tnoqPCQn7YW6AUiu1MRZ+Pq0CNW8IkLJ bmCfcgk3eYoWhwxwpJmOlQHnGmeqLf2o5LypH6akhhqBcSES8XHiuOoPLmUcN1AR a87kjdm/FtxF8no7lKCHZpxojuIwk3AmbzSnc8yVkRzU3QbcKpLG409bfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBNz7P9WNET8k7n3+77Kal7PByXdMB8GA1UdIwQY MBaAFE6/aze5T5W0kFz4xqIdiAPqv6d+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2Yt ZTdlNzRkYjcyMWQyLzEvRTNQc18xWTBSUHlUdWZmN3ZzcHFYczhISmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2YtZTdlNzRkYjcyMWQy LzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKglgAAAB MA0GCSqGSIb3DQEBCwUAA4IBAQCFhXzLJn7XP9/gXHt+8hiyX54HTqUrxlK27Ptr Qw0XvEavRiE4UiYuyHMFIy8vlx4joNKdmOlFru07ZGMetTwfONZ+yRtRmfjG++SS w07Mr2zA9iITo82aVeRhOiazQORjq+BKybB3b8fLM+EM4tuJWLQfI8sfLdO7Xpkw LRt7vXpSV+a6nqalRiDbWmBucoj8E9vNVLKdIarzZic7v/96GJqNNZgjO4+5Oayv q3mn38UlmaV8WGud9IKVoI4/VN2yLy1oDMCH0wZD2aEwJXuzHcGTIato9FRzDmcT TnTVFNO+fTWjrAzftEnplqpTIw/As2VCpI0hX45d+mNg1Iv8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:03 2026 by rpki-client