This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/eodQO_QecDa9A4kfpjbm-rS0pPo.roa File: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (raw, json) Hash identifier: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw= Subject key identifier: 7A:87:50:3B:F4:1E:70:36:BD:03:89:1F:A6:36:E6:FA:B4:B4:A4:FA Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f Certificate serial: 019B7AC8BF2EBD837BE24C9977B7A75368FB Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/eodQO_QecDa9A4kfpjbm-rS0pPo.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1152 IP address blocks: 2a0f:d980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bf:2e:bd:83:7b:e2:4c:99:77:b7:a7:53:68:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a87503bf41e7036bd03891fa636e6fab4b4a4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:37:0a:0a:fc:48:d9:0f:49:fb:66:8f:f8: 60:32:ca:8e:db:35:a4:a4:56:d1:a0:f9:98:08:bf: 07:e2:52:02:5d:28:a4:2b:5e:2a:cc:43:ff:bd:31: d8:45:86:74:c4:c5:f2:e4:40:67:5a:63:5e:47:b2: e4:0c:fb:fc:26:3e:70:04:f4:39:b4:96:fa:11:be: 9b:fc:92:c2:6f:db:82:ad:66:a5:d7:3c:b4:81:84: 91:b9:27:3a:09:70:73:f8:9a:dd:bc:4c:9d:e2:ef: 02:6d:be:ef:f8:c0:3b:9d:cd:1c:23:06:9c:0d:14: 52:34:ee:ca:ac:c9:f6:a8:56:c0:2f:2f:b0:95:30: 71:af:d5:a4:83:ae:07:5f:1c:6e:96:2a:ed:0a:2b: 5d:2a:69:c2:1c:6c:d3:82:5c:82:1a:dc:e1:0f:25: a6:92:4b:a9:6b:0f:5c:7b:66:3c:d6:2c:6c:40:2e: 12:18:5b:a3:e2:4a:1e:46:ca:15:9f:60:6c:04:ae: 5d:dc:7f:1d:e2:dd:3a:00:02:a2:a1:33:3b:04:9b: 6a:78:b6:57:56:81:d8:37:36:f6:72:3c:f8:56:8f: 18:ca:39:d9:6d:23:ab:31:a0:79:c8:a7:09:54:33: 16:93:51:0a:74:70:e0:9b:d4:90:d1:c4:6f:af:eb: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:50:3B:F4:1E:70:36:BD:03:89:1F:A6:36:E6:FA:B4:B4:A4:FA X509v3 Authority Key Identifier: keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/eodQO_QecDa9A4kfpjbm-rS0pPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:d980::/32 Signature Algorithm: sha256WithRSAEncryption 38:a8:1e:e9:8f:79:ce:7a:98:25:b9:03:4e:21:e2:1f:2b:20: 09:c9:44:42:2d:ae:62:d4:13:db:e3:04:6e:d9:2b:55:b4:1a: 68:74:4a:41:a2:86:8c:ce:ec:f4:df:fd:58:23:54:a4:a8:a3: fd:30:b6:31:66:0a:47:ea:a2:65:a7:77:34:2a:57:ee:93:55: f6:b6:ca:ae:da:af:33:37:7d:8c:39:c1:d6:98:f2:20:e6:b4: ee:5c:cd:25:d2:7e:75:51:d4:19:e6:3c:21:48:ef:c6:6f:48: a0:3f:9a:68:62:47:fb:34:25:8f:25:d9:a1:39:88:4b:f4:e3: d0:10:78:ca:d8:87:89:32:3d:d3:d2:5f:2c:37:7d:04:b1:b5: 32:a0:a0:f1:d9:67:ae:e7:ee:ee:12:0d:ea:3e:6e:a0:53:6a: fc:09:e4:0c:59:3f:cd:34:51:6c:92:5b:ba:3d:63:8e:b3:05: 0e:8f:8d:1d:49:89:89:bd:cd:4d:55:c4:aa:fa:31:22:ac:4d: dd:4e:d3:35:f9:6e:04:30:ee:f5:e0:dc:06:f1:3a:94:96:77: cb:8c:6a:19:8e:65:38:23:34:f3:66:fe:ab:3b:20:91:0c:04: 0e:f1:ec:d0:ce:55:78:39:e1:60:3f:11:e0:ab:5c:d1:8d:55: 44:ed:15:ca -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yL8uvYN74kyZd7enU2j7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk ZTllMGYwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTg3NTAzYmY0MWU3MDM2YmQwMzg5MWZhNjM2ZTZmYWI0YjRhNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsds3Cgr8SNkPSftmj/hgMsqO2zWk pFbRoPmYCL8H4lICXSikK14qzEP/vTHYRYZ0xMXy5EBnWmNeR7LkDPv8Jj5wBPQ5 tJb6Eb6b/JLCb9uCrWal1zy0gYSRuSc6CXBz+JrdvEyd4u8Cbb7v+MA7nc0cIwac DRRSNO7KrMn2qFbALy+wlTBxr9Wkg64HXxxulirtCitdKmnCHGzTglyCGtzhDyWm kkupaw9ce2Y81ixsQC4SGFuj4koeRsoVn2BsBK5d3H8d4t06AAKioTM7BJtqeLZX VoHYNzb2cjz4Vo8YyjnZbSOrMaB5yKcJVDMWk1EKdHDgm9SQ0cRvr+uVnwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHqHUDv0HnA2vQOJH6Y25vq0tKT6MB8GA1UdIwQY MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt YzdkY2MyMzkxY2M5LzEvZW9kUU9fUWVjRGE5QTRrZnBqYm0tclMwcFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5 LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg/ZgDAN BgkqhkiG9w0BAQsFAAOCAQEAOKge6Y95znqYJbkDTiHiHysgCclEQi2uYtQT2+ME btkrVbQaaHRKQaKGjM7s9N/9WCNUpKij/TC2MWYKR+qiZad3NCpX7pNV9rbKrtqv Mzd9jDnB1pjyIOa07lzNJdJ+dVHUGeY8IUjvxm9IoD+aaGJH+zQljyXZoTmIS/Tj 0BB4ytiHiTI909JfLDd9BLG1MqCg8dlnrufu7hIN6j5uoFNq/AnkDFk/zTRRbJJb uj1jjrMFDo+NHUmJib3NTVXEqvoxIqxN3U7TNfluBDDu9eDcBvE6lJZ3y4xqGY5l OCM082b+qzsgkQwEDvHs0M5VeDnhYD8R4Ktc0Y1VRO0Vyg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:35 2026 by rpki-client