This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EDw81Ndf8QM0hI3Du2-BtictZc8.roa File: EDw81Ndf8QM0hI3Du2-BtictZc8.roa (raw, json) Hash identifier: 0Ie5QPEH8aozKhvRoPlTgN3mrJZoJ2Kdz74uU/Dg7yE= Subject key identifier: 10:3C:3C:D4:D7:5F:F1:03:34:84:8D:C3:BB:6F:81:B6:27:2D:65:CF Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78344D3FECAC0F2AD5ACBF212961600B Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EDw81Ndf8QM0hI3Du2-BtictZc8.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41767 IP address blocks: 2a09:7:2005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4d:3f:ec:ac:0f:2a:d5:ac:bf:21:29:61:60:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=103c3cd4d75ff10334848dc3bb6f81b6272d65cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:d7:22:25:e7:33:3c:32:67:04:74:3c:3a: 96:19:55:51:7c:6e:a4:63:8d:8b:0f:7e:68:30:40: b0:eb:aa:77:05:ee:bb:c9:ee:c9:27:40:f2:61:35: 0f:04:c7:f6:25:68:40:8d:be:ba:5b:25:aa:61:1c: a1:e6:3b:e8:fd:71:be:a9:4e:d2:ce:9b:dd:a7:cd: c9:99:49:41:59:1e:be:ea:de:0d:62:15:4c:d6:d9: 7c:0d:1a:bb:f2:e3:ff:04:5e:26:a4:5f:14:a4:dc: 52:62:02:28:4e:6a:cc:0c:c0:04:3b:2d:a2:4c:34: 40:78:08:67:84:25:49:ab:cc:a8:d3:c5:ab:4a:81: 23:b3:a7:bf:f6:9d:cc:5e:41:c0:38:33:a9:5f:3d: 31:f6:23:e6:5e:87:48:9a:16:28:c8:c3:8d:f0:af: 99:0b:04:ae:2a:b7:c0:9f:ea:aa:66:e3:83:92:b7: f1:6b:b2:90:55:b7:37:91:cb:41:08:c8:c6:55:4d: 55:fe:c1:94:e4:bd:2a:6a:cc:c6:e3:cd:a3:95:34: 94:77:9f:64:3d:63:af:62:0f:45:12:34:70:eb:0c: 6e:1c:de:76:27:5c:cc:31:65:20:7c:ef:8c:6c:8e: 6b:50:cd:d8:86:14:39:6b:09:be:35:e4:89:57:5b: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:3C:D4:D7:5F:F1:03:34:84:8D:C3:BB:6F:81:B6:27:2D:65:CF X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EDw81Ndf8QM0hI3Du2-BtictZc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:7:2005::/48 Signature Algorithm: sha256WithRSAEncryption 1d:40:56:3d:02:c7:98:42:e8:7f:d2:57:75:fa:02:92:ea:2e: 1c:c7:03:67:dd:9c:c2:94:0d:d6:4f:46:87:4c:05:82:a2:e0: 0a:67:7b:27:b0:b3:d8:25:da:c1:67:17:74:db:33:76:be:a3: 55:cd:89:5d:ef:c0:eb:aa:ed:aa:40:d9:f7:56:81:da:6a:af: c6:b5:cd:ca:37:24:98:e4:47:31:13:57:83:f6:9b:47:72:36: a7:ae:65:db:74:81:63:60:71:35:2d:11:c9:d9:7e:c4:b8:b8: bd:67:a3:8d:b4:50:0c:3d:e2:2e:83:75:01:0f:2e:3e:24:40: 02:fb:cc:70:29:70:c4:c4:fc:d8:e3:89:2d:c6:b6:ef:81:3a: 4a:a7:9a:0f:26:61:09:ee:d5:f6:3b:ce:43:6d:6b:a6:3a:b8: 72:a4:4a:3e:72:52:1a:0f:0a:24:28:7b:cc:c1:d3:4c:02:0d: 1e:f4:d3:f8:6e:1f:1c:aa:a4:d3:51:5a:b6:d6:34:3d:73:dc: dd:c3:e3:5e:3a:fe:6f:41:c5:83:eb:4d:0d:12:86:b4:dd:5d: 51:0b:79:ef:9c:dc:56:50:31:3e:e3:5e:69:b1:f1:70:a0:f9: e5:8a:1c:96:83:b4:27:80:d5:eb:fa:13:b2:80:d0:f7:bc:97: a8:66:03:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NE0/7KwPKtWsvyEpYWALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNjM2NkNGQ3NWZmMTAzMzQ4NDhkYzNiYjZmODFiNjI3MmQ2NWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UDXIiXnMzwyZwR0PDqWGVVRfG6k Y42LD35oMECw66p3Be67ye7JJ0DyYTUPBMf2JWhAjb66WyWqYRyh5jvo/XG+qU7S zpvdp83JmUlBWR6+6t4NYhVM1tl8DRq78uP/BF4mpF8UpNxSYgIoTmrMDMAEOy2i TDRAeAhnhCVJq8yo08WrSoEjs6e/9p3MXkHAODOpXz0x9iPmXodImhYoyMON8K+Z CwSuKrfAn+qqZuODkrfxa7KQVbc3kctBCMjGVU1V/sGU5L0qaszG482jlTSUd59k PWOvYg9FEjRw6wxuHN52J1zMMWUgfO+MbI5rUM3YhhQ5awm+NeSJV1u0+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBA8PNTXX/EDNISNw7tvgbYnLWXPMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvRUR3ODFOZGY4UU0waEkzRHUyLUJ0aWN0WmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkAByAF MA0GCSqGSIb3DQEBCwUAA4IBAQAdQFY9AseYQuh/0ld1+gKS6i4cxwNn3ZzClA3W T0aHTAWCouAKZ3snsLPYJdrBZxd02zN2vqNVzYld78Drqu2qQNn3VoHaaq/Gtc3K NySY5EcxE1eD9ptHcjanrmXbdIFjYHE1LRHJ2X7EuLi9Z6ONtFAMPeIug3UBDy4+ JEAC+8xwKXDExPzY44ktxrbvgTpKp5oPJmEJ7tX2O85DbWumOrhypEo+clIaDwok KHvMwdNMAg0e9NP4bh8cqqTTUVq21jQ9c9zdw+NeOv5vQcWD600NEoa03V1RC3nv nNxWUDE+415psfFwoPnlihyWg7QngNXr+hOygND3vJeoZgNz -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client