This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/Ey3m-lZEA987v9BNrn8LK_J0g00.roa File: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (raw, json) Hash identifier: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w= Subject key identifier: 13:2D:E6:FA:56:44:03:DF:3B:BF:D0:4D:AE:7F:0B:2B:F2:74:83:4D Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Certificate serial: 019B7834F96ED626BE9F5B6F52C6C1EC1556 Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/Ey3m-lZEA987v9BNrn8LK_J0g00.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 2a0c:1141::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f9:6e:d6:26:be:9f:5b:6f:52:c6:c1:ec:15:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=132de6fa564403df3bbfd04dae7f0b2bf274834d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:16:8c:e3:c8:60:25:72:ae:16:63:14:b3: 0e:bd:3d:55:b0:f8:2a:18:32:16:29:db:59:f3:14: b3:8d:d0:d5:6f:c1:77:17:98:18:b9:92:30:c7:9a: d6:ed:3c:47:7d:fb:36:6c:ee:25:ac:00:fd:77:49: 6b:1a:bf:4a:3e:e8:1f:fd:bd:bd:1b:eb:54:cf:66: bf:65:37:57:d2:3d:87:77:03:c8:a6:4d:2b:3b:2c: 59:b5:17:f0:e7:00:51:2b:b9:0a:78:93:35:f8:d0: 26:3b:9d:23:85:5e:1a:88:16:cd:f6:9c:df:53:d9: d9:d1:79:95:8d:b6:1f:76:6e:38:dd:c2:6f:2c:12: 85:ce:b5:d1:8f:1b:81:9f:91:0c:46:97:d5:a0:7b: 2e:e8:32:ff:eb:23:9c:ec:1a:56:c1:eb:b2:af:0e: 16:f1:7d:09:ad:d4:12:82:05:7a:cc:ac:0b:f5:93: fb:24:bd:4a:3a:d7:fe:0c:7a:74:78:df:54:99:81: c5:5f:c6:5f:c7:94:3a:91:8d:f9:f0:a6:3c:dd:7e: b8:32:65:cb:ea:18:ed:7f:61:f1:1e:b5:80:9f:2b: 58:ec:e0:af:f2:8b:6d:26:32:a5:2f:fc:3a:71:43: 4c:6e:d4:a9:3c:04:4d:8a:0b:8b:31:18:c6:df:0a: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:E6:FA:56:44:03:DF:3B:BF:D0:4D:AE:7F:0B:2B:F2:74:83:4D X509v3 Authority Key Identifier: keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/Ey3m-lZEA987v9BNrn8LK_J0g00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:1141::/32 Signature Algorithm: sha256WithRSAEncryption 3c:b9:84:a2:e1:fd:f5:7c:6e:a2:8d:a0:3e:97:4b:6d:f5:63: 12:44:de:b6:ad:c2:62:07:eb:41:3c:19:4b:bf:5f:44:21:bc: 2f:30:61:69:2a:59:c8:72:54:3d:35:0b:ca:47:7f:8b:56:32: 5e:0c:af:12:ce:05:0f:ed:02:c2:dd:22:c2:96:ed:03:24:c4: 5e:61:a5:30:9c:38:58:62:5a:f9:0c:e5:07:82:c0:b7:56:4d: a6:41:23:31:f2:24:ea:2c:14:b7:ef:30:51:a8:9a:23:11:f6: 73:96:9f:43:21:c7:08:53:36:ab:b9:d4:98:1d:b9:87:46:e5: 34:85:db:54:01:23:8f:c9:79:55:29:01:0d:5a:17:5e:82:8a: 4f:bc:29:a5:4a:46:7c:bb:9d:9d:8a:e0:00:a8:38:0e:f7:7e: 1c:9c:c2:f3:96:86:6d:99:79:5d:79:6e:39:30:6e:1b:66:3f: 64:65:0b:79:a6:d0:ee:b5:38:b3:46:bc:3f:f8:05:99:37:5f: ad:0a:ac:03:0d:45:79:9d:d8:c6:7c:b0:42:89:ca:ec:c9:d2: 04:a9:25:bf:84:c1:54:3a:73:68:0f:d6:b9:10:01:d3:76:c7: 33:c1:62:d6:8c:f2:cb:f0:23:d4:f8:a2:88:7f:5a:51:d4:09: 64:21:67:3f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NPlu1ia+n1tvUsbB7BVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz YzFkNTAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzJkZTZmYTU2NDQwM2RmM2JiZmQwNGRhZTdmMGIyYmYyNzQ4MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAgWjOPIYCVyrhZjFLMOvT1VsPgq GDIWKdtZ8xSzjdDVb8F3F5gYuZIwx5rW7TxHffs2bO4lrAD9d0lrGr9KPugf/b29 G+tUz2a/ZTdX0j2HdwPIpk0rOyxZtRfw5wBRK7kKeJM1+NAmO50jhV4aiBbN9pzf U9nZ0XmVjbYfdm443cJvLBKFzrXRjxuBn5EMRpfVoHsu6DL/6yOc7BpWweuyrw4W 8X0JrdQSggV6zKwL9ZP7JL1KOtf+DHp0eN9UmYHFX8Zfx5Q6kY358KY83X64MmXL 6hjtf2HxHrWAnytY7OCv8ottJjKlL/w6cUNMbtSpPARNiguLMRjG3wpsxQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBMt5vpWRAPfO7/QTa5/CyvydINNMB8GA1UdIwQY MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt NDUzNzc0MThmYmIyLzEvRXkzbS1sWkVBOTg3djlCTnJuOExLX0owZzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgwRQTAN BgkqhkiG9w0BAQsFAAOCAQEAPLmEouH99Xxuoo2gPpdLbfVjEkTetq3CYgfrQTwZ S79fRCG8LzBhaSpZyHJUPTULykd/i1YyXgyvEs4FD+0Cwt0iwpbtAyTEXmGlMJw4 WGJa+QzlB4LAt1ZNpkEjMfIk6iwUt+8wUaiaIxH2c5afQyHHCFM2q7nUmB25h0bl NIXbVAEjj8l5VSkBDVoXXoKKT7wppUpGfLudnYrgAKg4Dvd+HJzC85aGbZl5XXlu OTBuG2Y/ZGULeabQ7rU4s0a8P/gFmTdfrQqsAw1FeZ3YxnywQonK7MnSBKklv4TB VDpzaA/WuRAB03bHM8Fi1ozyy/Aj1PiiiH9aUdQJZCFnPw== -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:32 2026 by rpki-client