This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eEplHCNMYsnF24TP8b4X8T7WAXQ.roa File: eEplHCNMYsnF24TP8b4X8T7WAXQ.roa (raw, json) Hash identifier: x6Rf4SLzDKTPmY6GLlMQDjs/q5qy/d4ph3HYdrwWHYU= Subject key identifier: 78:4A:65:1C:23:4C:62:C9:C5:DB:84:CF:F1:BE:17:F1:3E:D6:01:74 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C641BE8C20CC92727030D6FA0EB9 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eEplHCNMYsnF24TP8b4X8T7WAXQ.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216072 IP address blocks: 2a12:bec0:e30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c6:41:be:8c:20:cc:92:72:70:30:d6:fa:0e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784a651c234c62c9c5db84cff1be17f13ed60174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:e2:5e:21:83:08:0d:88:4a:8a:65:d2:5f: 7e:8e:b1:38:26:04:d5:cb:c0:1f:58:6b:33:a8:a1: 14:f0:d4:61:01:46:fb:7e:46:48:cb:9a:06:cb:e8: 36:e1:bb:c3:d7:55:3c:db:bd:0b:1b:af:c5:f7:7e: 56:92:4a:fb:ea:99:ba:4f:73:da:d2:38:bd:a4:78: 4d:44:41:5d:01:11:5b:bf:00:3e:3f:7b:9e:85:70: e1:4e:8b:9a:82:47:ea:45:d9:e6:86:e8:e6:7b:dc: 31:86:fb:d0:48:a6:9d:63:f6:c2:f2:17:ea:90:9a: 8e:63:90:7d:17:78:57:b6:c0:82:a0:04:33:66:b5: 41:45:95:3b:05:88:2b:ed:7f:bc:2b:24:d2:ab:50: 97:c5:86:56:60:89:df:7e:7f:32:72:82:b4:79:de: 12:5c:15:57:c9:b2:1c:82:75:a9:bd:b7:1f:99:e9: c5:97:2b:da:b5:bc:b9:cb:02:c7:f8:42:bd:b6:39: 02:2a:1e:cc:47:6d:8f:1a:f4:5f:8d:2e:f3:a2:53: bb:1a:da:29:21:04:06:28:49:5f:cb:27:9f:7b:7c: 64:92:8e:7a:12:b8:6b:cd:14:7e:db:8e:6c:1d:87: e9:2c:5c:08:5c:9d:51:7d:f5:31:51:85:5c:14:69: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:65:1C:23:4C:62:C9:C5:DB:84:CF:F1:BE:17:F1:3E:D6:01:74 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eEplHCNMYsnF24TP8b4X8T7WAXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:e30::/44 Signature Algorithm: sha256WithRSAEncryption 84:66:03:49:94:89:9c:74:da:3c:f6:be:05:2b:6c:f9:60:e2: 59:fd:84:49:26:be:a5:41:b3:a9:d5:2a:e4:03:ae:59:68:db: 1e:ba:88:48:40:da:3b:c9:a1:3f:50:69:cf:41:e9:37:8c:6f: a8:a7:ae:64:cc:23:93:7d:02:ae:69:92:bc:9b:35:12:15:1e: f1:4a:2c:d8:01:4f:6d:d4:86:ae:e1:8b:60:c0:3c:59:1a:fb: c7:58:4b:7c:19:38:09:66:e6:4f:d4:6e:42:8f:9e:be:de:55: 20:57:31:c7:77:ed:27:d4:d5:5e:5b:28:e2:a8:43:d3:8a:3a: eb:64:ef:33:38:90:b6:a2:11:75:3b:9b:d0:6f:ef:d3:c0:e3: a5:51:d6:cd:5c:f9:6a:3b:5f:60:76:82:fe:42:60:fe:c9:99: 01:0c:3d:41:df:87:08:8f:46:cb:e7:a3:b1:d9:21:fa:3c:2f: 86:21:22:5a:c5:3c:db:12:2d:2c:84:56:1b:39:3c:85:b7:ad: b3:2a:41:26:b4:ca:e5:51:cd:a7:f8:82:19:64:18:65:c4:09: 97:f8:3d:42:6f:1f:1d:24:ca:86:7f:03:9f:1d:03:7c:da:bb: 0e:81:d0:6a:ba:ea:47:82:6e:5e:b2:8e:40:c1:b3:04:7c:44: 25:a7:ec:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMZBvowgzJJycDDW+g65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRhNjUxYzIzNGM2MmM5YzVkYjg0Y2ZmMWJlMTdmMTNlZDYwMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0LiXiGDCA2ISopl0l9+jrE4JgTV y8AfWGszqKEU8NRhAUb7fkZIy5oGy+g24bvD11U8270LG6/F935Wkkr76pm6T3Pa 0ji9pHhNREFdARFbvwA+P3uehXDhTouagkfqRdnmhujme9wxhvvQSKadY/bC8hfq kJqOY5B9F3hXtsCCoAQzZrVBRZU7BYgr7X+8KyTSq1CXxYZWYInffn8ycoK0ed4S XBVXybIcgnWpvbcfmenFlyvatby5ywLH+EK9tjkCKh7MR22PGvRfjS7zolO7Gtop IQQGKElfyyefe3xkko56ErhrzRR+245sHYfpLFwIXJ1RffUxUYVcFGmsnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHhKZRwjTGLJxduEz/G+F/E+1gF0MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvZUVwbEhDTk1Zc25GMjRUUDhiNFg4VDdXQVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wA4w MA0GCSqGSIb3DQEBCwUAA4IBAQCEZgNJlImcdNo89r4FK2z5YOJZ/YRJJr6lQbOp 1SrkA65ZaNseuohIQNo7yaE/UGnPQek3jG+op65kzCOTfQKuaZK8mzUSFR7xSizY AU9t1Iau4YtgwDxZGvvHWEt8GTgJZuZP1G5Cj56+3lUgVzHHd+0n1NVeWyjiqEPT ijrrZO8zOJC2ohF1O5vQb+/TwOOlUdbNXPlqO19gdoL+QmD+yZkBDD1B34cIj0bL 56Ox2SH6PC+GISJaxTzbEi0shFYbOTyFt62zKkEmtMrlUc2n+IIZZBhlxAmX+D1C bx8dJMqGfwOfHQN82rsOgdBquupHgm5eso5AwbMEfEQlp+ws -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:08 2026 by rpki-client