This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/edSoTvXMXq7sSXyKRk7bMmjXJj4.roa File: edSoTvXMXq7sSXyKRk7bMmjXJj4.roa (raw, json) Hash identifier: CYNnGEOLRVfsNSOHOGvPRaEIFEpmSCpDAPsAyC/g5CA= Subject key identifier: 79:D4:A8:4E:F5:CC:5E:AE:EC:49:7C:8A:46:4E:DB:32:68:D7:26:3E Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758EE000CE12EBBDC7D6C9CBEAAA6D3 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/edSoTvXMXq7sSXyKRk7bMmjXJj4.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211579 IP address blocks: 2a0f:5707:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ee:00:0c:e1:2e:bb:dc:7d:6c:9c:be:aa:a6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79d4a84ef5cc5eaeec497c8a464edb3268d7263e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:49:99:d5:5c:92:8a:c3:38:e1:af:65:04:57: 3c:9e:9a:ca:4e:ea:9e:17:35:65:ef:01:9e:96:bb: f3:22:5b:51:7a:a3:5a:b4:3e:95:1b:80:05:0f:ee: 14:7c:92:0c:ae:58:b2:ff:9a:d8:37:2c:48:56:48: 28:09:50:70:ac:41:09:87:c7:11:49:63:d5:1b:af: f9:38:cc:87:e5:37:fc:f1:99:45:0a:57:c0:0c:95: 46:18:13:9f:71:72:62:ac:4d:df:9b:aa:18:38:e2: 66:91:4e:56:c8:de:00:1b:95:77:a2:8f:18:7d:69: b7:da:a7:a6:f9:d9:38:34:b0:dd:39:43:6c:50:af: 3f:e2:f1:2d:3b:14:a4:9c:cc:37:0e:ba:f1:ae:46: 8c:58:8b:87:8e:ad:e2:eb:e7:f3:55:3d:36:83:f4: f3:90:7a:f0:e8:96:b9:8d:0b:ad:d4:74:09:67:3a: 4b:f0:b4:f5:1e:a1:7c:70:e9:c6:1b:bc:dd:b7:d5: f1:4a:ca:7c:00:cd:fd:76:ef:15:ce:69:c8:16:2c: 15:10:3b:87:50:66:f5:0c:ab:92:e3:50:e3:87:44: 24:62:f0:8e:79:d0:d4:85:63:12:d5:42:d8:f9:6d: f9:a7:df:fd:f3:63:b2:93:e5:44:6f:7d:65:17:64: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D4:A8:4E:F5:CC:5E:AE:EC:49:7C:8A:46:4E:DB:32:68:D7:26:3E X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/edSoTvXMXq7sSXyKRk7bMmjXJj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:24::/48 Signature Algorithm: sha256WithRSAEncryption 1c:4a:4d:9f:57:30:90:9c:d8:ce:5d:7b:d6:af:4f:57:7d:7f: 30:4a:bd:84:d5:c1:25:5d:10:df:07:dd:d9:7a:b7:dc:5a:21: 77:77:2e:b0:7e:06:f8:8d:cd:9c:36:d2:70:ff:3b:5c:eb:55: bd:a9:64:17:e3:6e:f1:6a:62:ca:00:ec:44:10:6f:57:6e:8a: 62:ba:9c:6b:4d:25:a4:a2:c2:8b:9b:d5:56:f7:aa:5a:f3:64: 72:f4:2d:43:b7:2a:fe:4b:df:11:24:99:bd:e1:ce:d9:87:e1: 82:53:45:2a:31:15:20:1d:38:9a:2a:0c:ba:75:d2:ec:75:c2: ca:6e:d8:9c:75:60:0f:7d:d7:8c:5f:62:2d:45:98:45:fe:20: c1:33:12:a9:96:5c:ee:21:70:3a:ed:99:6c:b6:ac:df:d0:ad: 14:6f:27:04:6b:5d:9e:7c:09:4f:07:7c:e1:11:14:b3:b7:c6: 9c:a1:ad:7c:e5:03:f7:a7:6e:dc:c0:7d:6a:16:08:6a:b3:c6: 1a:f3:f1:c9:94:68:80:6a:d4:b0:31:f7:38:40:a9:a5:0f:b3: ad:f9:e3:ac:76:26:ce:42:eb:ed:58:51:17:94:c8:3c:c0:3a: 8b:16:77:f0:f0:13:88:81:cc:71:48:59:e8:15:c1:89:99:84: bc:0e:d1:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WO4ADOEuu9x9bJy+qqbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWQ0YTg0ZWY1Y2M1ZWFlZWM0OTdjOGE0NjRlZGIzMjY4ZDcyNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUmZ1VySisM44a9lBFc8nprKTuqe FzVl7wGelrvzIltReqNatD6VG4AFD+4UfJIMrliy/5rYNyxIVkgoCVBwrEEJh8cR SWPVG6/5OMyH5Tf88ZlFClfADJVGGBOfcXJirE3fm6oYOOJmkU5WyN4AG5V3oo8Y fWm32qem+dk4NLDdOUNsUK8/4vEtOxSknMw3DrrxrkaMWIuHjq3i6+fzVT02g/Tz kHrw6Ja5jQut1HQJZzpL8LT1HqF8cOnGG7zdt9XxSsp8AM39du8VzmnIFiwVEDuH UGb1DKuS41Djh0QkYvCOedDUhWMS1ULY+W35p9/982Oyk+VEb31lF2Rh/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHnUqE71zF6u7El8ikZO2zJo1yY+MB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvZWRTb1R2WE1YcTdzU1h5S1JrN2JNbWpYSmo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XBwAk MA0GCSqGSIb3DQEBCwUAA4IBAQAcSk2fVzCQnNjOXXvWr09XfX8wSr2E1cElXRDf B93ZerfcWiF3dy6wfgb4jc2cNtJw/ztc61W9qWQX427xamLKAOxEEG9Xbopiupxr TSWkosKLm9VW96pa82Ry9C1Dtyr+S98RJJm94c7Zh+GCU0UqMRUgHTiaKgy6ddLs dcLKbticdWAPfdeMX2ItRZhF/iDBMxKpllzuIXA67Zlstqzf0K0UbycEa12efAlP B3zhERSzt8acoa185QP3p27cwH1qFghqs8Ya8/HJlGiAatSwMfc4QKmlD7Ot+eOs dibOQuvtWFEXlMg8wDqLFnfw8BOIgcxxSFnoFcGJmYS8DtHc -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:38 2026 by rpki-client