This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/EO45mJpwo3EeFrckKnmDBhkeeTY.roa File: EO45mJpwo3EeFrckKnmDBhkeeTY.roa (raw, json) Hash identifier: Khku2szHPHCEtCEgn2TtWXecH2vJHsJWVn9GOGsCAsI= Subject key identifier: 10:EE:39:98:9A:70:A3:71:1E:16:B7:24:2A:79:83:06:19:1E:79:36 Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37 Certificate serial: 019B7AC8B8A28E350754AECD935C683D9467 Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/EO45mJpwo3EeFrckKnmDBhkeeTY.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214017 IP address blocks: 2001:67c:f3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b8:a2:8e:35:07:54:ae:cd:93:5c:68:3d:94:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ee39989a70a3711e16b7242a798306191e7936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:8e:0f:b7:b9:df:61:44:d5:61:e5:4b:88: 6e:69:7c:6c:35:f8:dc:c3:eb:7d:4a:15:5f:fe:e6: 53:ee:3b:2b:e5:58:f6:20:a6:cf:67:ab:9e:d5:00: 69:19:58:dd:36:93:1d:48:52:80:41:87:4a:d7:71: 24:32:73:1e:9e:34:3f:b5:bc:3c:e8:79:fa:3a:53: 6a:9e:4b:f1:0f:c3:04:f2:fc:c5:36:71:02:cf:d7: 11:b1:39:5d:4d:5d:aa:ab:e8:78:c2:cf:fa:67:8d: e3:1c:69:46:94:6b:80:bf:aa:77:d8:f9:55:2a:e7: 94:4f:d1:c7:e7:da:5f:d0:07:fc:19:1f:cd:75:38: f1:b2:ec:c5:18:79:e0:9d:c4:dd:3c:af:55:f6:7e: 80:1b:d5:40:df:20:16:af:a8:db:bb:5a:48:d8:6a: 1f:79:68:88:05:3f:8a:0d:32:d7:31:32:8c:83:27: cf:a7:5e:6a:44:94:b6:12:75:76:f2:b0:62:5a:85: 54:a1:16:f2:b3:73:65:da:0b:47:4a:c7:52:31:9b: f7:62:75:53:32:b5:70:f3:4c:9c:50:1a:35:c1:43: 08:48:87:08:af:a1:f1:9e:7b:fe:30:96:bc:76:f9: 77:43:bc:49:ab:d4:28:b1:81:2a:68:ba:15:50:ad: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EE:39:98:9A:70:A3:71:1E:16:B7:24:2A:79:83:06:19:1E:79:36 X509v3 Authority Key Identifier: keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/EO45mJpwo3EeFrckKnmDBhkeeTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f3c::/48 Signature Algorithm: sha256WithRSAEncryption 64:5e:fb:f6:32:a6:16:67:1d:ee:c4:5b:49:85:99:19:93:49: a3:1c:6a:0b:16:d5:b7:f5:93:c6:dc:da:b3:5f:49:31:0b:9a: 53:06:04:b9:21:19:25:54:29:3e:ce:74:2c:fa:9f:bc:c6:22: 22:df:2a:60:1e:d6:2e:3d:c3:55:ac:64:95:80:03:fb:04:cc: a0:40:a7:d3:0e:06:11:63:f4:78:d1:23:4d:6f:53:22:d4:54: f1:41:27:39:dc:d2:ea:f2:82:52:33:64:40:8f:59:7d:40:b0: 0b:cc:6d:5a:b9:5e:48:ca:58:b2:fc:35:b7:e7:5f:2b:92:a8: 71:f3:7f:1e:77:e8:21:d0:2d:84:0e:4d:fc:01:aa:6f:2c:e7: fd:e6:51:71:ee:a7:a2:dc:7b:53:13:61:b7:cb:22:0c:7e:17: 3d:90:43:59:d2:21:df:d3:b8:33:bd:fa:9c:b1:9a:30:91:33: b4:4c:3d:9b:f2:2d:ef:f7:2f:5b:85:c8:22:28:d8:62:df:34: c0:9c:67:96:29:3d:cc:41:d8:6a:d6:b9:18:4f:38:7b:e1:3f: 6f:86:b9:ef:40:f6:d7:58:69:fb:84:6f:63:e7:14:6b:94:88: fe:28:90:ad:e3:93:83:77:74:a0:55:e4:8c:93:b5:b1:b7:9a: 70:8d:cc:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yLiijjUHVK7Nk1xoPZRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMWE1MTk3ZDYzMjRlZWVkMjU2YjI2ODYxZTFhMjRhYzg2 MzVkMzcwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGVlMzk5ODlhNzBhMzcxMWUxNmI3MjQyYTc5ODMwNjE5MWU3OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwSOD7e532FE1WHlS4huaXxsNfjc w+t9ShVf/uZT7jsr5Vj2IKbPZ6ue1QBpGVjdNpMdSFKAQYdK13EkMnMenjQ/tbw8 6Hn6OlNqnkvxD8ME8vzFNnECz9cRsTldTV2qq+h4ws/6Z43jHGlGlGuAv6p32PlV KueUT9HH59pf0Af8GR/NdTjxsuzFGHngncTdPK9V9n6AG9VA3yAWr6jbu1pI2Gof eWiIBT+KDTLXMTKMgyfPp15qRJS2EnV28rBiWoVUoRbys3Nl2gtHSsdSMZv3YnVT MrVw80ycUBo1wUMISIcIr6Hxnnv+MJa8dvl3Q7xJq9QosYEqaLoVUK34ewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBDuOZiacKNxHha3JCp5gwYZHnk2MB8GA1UdIwQY MBaAFI8aUZfWMk7u0layaGHhokrIY103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAt YTRkZTlkZmY1ZWQyLzEvRU80NW1KcHdvM0VlRnJja0tubURCaGtlZVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAtYTRkZTlkZmY1ZWQy LzEvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA88 MA0GCSqGSIb3DQEBCwUAA4IBAQBkXvv2MqYWZx3uxFtJhZkZk0mjHGoLFtW39ZPG 3NqzX0kxC5pTBgS5IRklVCk+znQs+p+8xiIi3ypgHtYuPcNVrGSVgAP7BMygQKfT DgYRY/R40SNNb1Mi1FTxQSc53NLq8oJSM2RAj1l9QLALzG1auV5Iyliy/DW3518r kqhx838ed+gh0C2EDk38AapvLOf95lFx7qei3HtTE2G3yyIMfhc9kENZ0iHf07gz vfqcsZowkTO0TD2b8i3v9y9bhcgiKNhi3zTAnGeWKT3MQdhq1rkYTzh74T9vhrnv QPbXWGn7hG9j5xRrlIj+KJCt45ODd3SgVeSMk7Wxt5pwjcyB -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:45 2026 by rpki-client