This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/ey-McRgW79AZU_fzpE-27yI2jAk.roa File: ey-McRgW79AZU_fzpE-27yI2jAk.roa (raw, json) Hash identifier: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI= Subject key identifier: 7B:2F:8C:71:18:16:EF:D0:19:53:F7:F3:A4:4F:B6:EF:22:36:8C:09 Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Certificate serial: 019B797F1028A2B59985FA1D9C2D7C497D56 Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/ey-McRgW79AZU_fzpE-27yI2jAk.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a00:42e0:1000::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:10:28:a2:b5:99:85:fa:1d:9c:2d:7c:49:7d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b2f8c711816efd01953f7f3a44fb6ef22368c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:13:1b:b6:b1:eb:e9:ee:e6:a3:1d:f4:fc: 58:b3:e1:0d:be:5e:a7:9e:b5:83:f0:51:68:ff:8e: d4:04:71:50:db:f2:67:b2:ac:37:db:d2:64:8b:3d: 1b:9e:3f:2c:39:27:ae:02:4c:06:02:80:c2:95:05: 18:67:d8:0a:6e:6b:eb:b1:fd:1a:d8:2b:cd:0d:07: 09:1c:c0:0f:06:0d:1c:04:76:35:0d:4d:26:44:fd: 21:a6:f7:f0:b0:ad:7b:e4:26:32:9f:55:1a:32:24: 78:95:2e:9b:74:f9:12:e2:d6:0f:dc:89:a5:ae:6d: e6:1c:bf:1e:14:f4:f6:c9:4d:b9:f1:de:ca:10:7a: 98:5c:84:0f:92:8a:de:2f:7d:2a:17:e0:c2:a0:88: 48:4d:78:75:7b:f9:71:9e:a1:82:a9:ec:1c:2e:bc: 69:1a:d0:9b:56:5b:a3:6a:e0:7f:90:af:44:96:eb: 93:6a:66:f3:60:06:31:95:01:3a:d7:dc:6f:bc:98: 88:83:2c:7e:a1:a5:d6:89:5f:0f:18:8c:0c:cc:1c: 86:ab:0e:ef:89:a0:89:42:81:b1:fb:31:ef:44:69: 3b:20:3f:a4:10:58:42:3e:d9:1b:c7:60:e4:02:25: 14:ae:97:99:f7:ac:8d:a5:68:07:c0:4a:58:fe:0d: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2F:8C:71:18:16:EF:D0:19:53:F7:F3:A4:4F:B6:EF:22:36:8C:09 X509v3 Authority Key Identifier: keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/ey-McRgW79AZU_fzpE-27yI2jAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:42e0:1000::/36 Signature Algorithm: sha256WithRSAEncryption c3:d0:5f:8b:c3:cb:b1:b3:97:9c:e6:3e:00:e2:ba:4b:a6:3a: ed:dd:72:b6:76:11:87:9f:5b:c7:7a:d5:70:60:86:4a:88:02: b9:2e:10:03:c0:c8:29:82:6c:6c:10:d6:eb:a0:fc:2d:8f:1d: e5:96:c8:2d:23:eb:f1:b2:87:75:b5:2c:89:d7:6b:d7:69:e4: c1:49:d8:3c:8a:96:b7:ef:de:59:98:1a:e5:dd:fd:d0:4a:54: 9e:79:ce:7d:5e:4d:70:0a:c6:88:ba:ef:2a:81:14:a4:eb:26: cc:f6:77:34:fc:58:8b:e8:96:eb:6f:d0:48:a2:6b:c0:4d:99: 10:19:5a:a9:ab:00:af:ef:b3:70:09:22:99:fd:55:88:28:ae: 63:26:fe:69:17:26:a6:72:17:a1:d8:85:ce:76:bb:cd:13:76: 50:12:c6:03:65:8c:f5:b8:ee:b3:76:53:c5:5e:2d:bf:7a:05: 50:a8:82:fa:b8:29:98:89:07:8f:94:cf:e2:37:1e:4a:d9:32: f2:ff:7d:b1:b7:21:3e:5d:40:04:f6:97:a9:ee:44:97:ce:4c: 3c:43:b4:58:d8:00:bf:9f:85:4f:04:5b:8b:15:e6:9f:b3:30: 8a:88:48:f4:82:9e:94:ba:58:e7:30:ff:1e:89:8c:4a:8f:9a: d7:64:c5:5b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxAoorWZhfodnC18SX1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy ZGZlNjkwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjJmOGM3MTE4MTZlZmQwMTk1M2Y3ZjNhNDRmYjZlZjIyMzY4YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLETG7ax6+nu5qMd9PxYs+ENvl6n nrWD8FFo/47UBHFQ2/Jnsqw329Jkiz0bnj8sOSeuAkwGAoDClQUYZ9gKbmvrsf0a 2CvNDQcJHMAPBg0cBHY1DU0mRP0hpvfwsK175CYyn1UaMiR4lS6bdPkS4tYP3Iml rm3mHL8eFPT2yU258d7KEHqYXIQPkoreL30qF+DCoIhITXh1e/lxnqGCqewcLrxp GtCbVlujauB/kK9EluuTambzYAYxlQE619xvvJiIgyx+oaXWiV8PGIwMzByGqw7v iaCJQoGx+zHvRGk7ID+kEFhCPtkbx2DkAiUUrpeZ96yNpWgHwEpY/g0QwQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHsvjHEYFu/QGVP386RPtu8iNowJMB8GA1UdIwQY MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It M2JkYTM1MzljNmJjLzEvZXktTWNSZ1c3OUFaVV9menBFLTI3eUkyakFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgBC4BAw DQYJKoZIhvcNAQELBQADggEBAMPQX4vDy7Gzl5zmPgDiukumOu3dcrZ2EYefW8d6 1XBghkqIArkuEAPAyCmCbGwQ1uug/C2PHeWWyC0j6/Gyh3W1LInXa9dp5MFJ2DyK lrfv3lmYGuXd/dBKVJ55zn1eTXAKxoi67yqBFKTrJsz2dzT8WIvolutv0Eiia8BN mRAZWqmrAK/vs3AJIpn9VYgormMm/mkXJqZyF6HYhc52u80TdlASxgNljPW47rN2 U8VeLb96BVCogvq4KZiJB4+Uz+I3HkrZMvL/fbG3IT5dQAT2l6nuRJfOTDxDtFjY AL+fhU8EW4sV5p+zMIqISPSCnpS6WOcw/x6JjEqPmtdkxVs= -----END CERTIFICATE-----Generated at Fri Jan 2 16:06:26 2026 by rpki-client