This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/eXDqAVaIQyjrBekMkhiLLXazNGo.roa File: eXDqAVaIQyjrBekMkhiLLXazNGo.roa (raw, json) Hash identifier: mx0bQziTxDdXw4zJxmPWo837bOwGLkOKhTyelVbdF1g= Subject key identifier: 79:70:EA:01:56:88:43:28:EB:05:E9:0C:92:18:8B:2D:76:B3:34:6A Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d Certificate serial: 019B7AC8E6F068882C5B6CD6563E54D87BE4 Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/eXDqAVaIQyjrBekMkhiLLXazNGo.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56997 IP address blocks: 2001:67c:a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e6:f0:68:88:2c:5b:6c:d6:56:3e:54:d8:7b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7970ea0156884328eb05e90c92188b2d76b3346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:d1:35:eb:10:4e:f9:f2:90:55:80:5e:80: 6b:67:8b:65:71:02:35:74:23:d7:3a:35:03:c0:36: 8b:3d:2d:f9:be:21:9a:cc:2f:d3:9f:99:e3:0b:89: 42:4e:ab:28:a3:40:94:4e:46:a1:17:cc:f5:c3:06: 24:a7:35:c9:68:de:f7:ea:0c:b7:c3:fd:47:2b:d6: da:41:67:75:3f:99:12:e1:b2:ec:56:98:48:85:36: e6:b7:df:8c:56:b4:c4:e0:48:b0:89:5c:14:61:11: 42:48:55:50:2b:7f:e9:44:dd:31:bf:80:89:73:d0: fc:08:01:ee:ee:cb:ac:26:08:40:0f:4b:8a:94:3c: 81:dc:75:85:96:b0:22:4c:c3:2d:fd:02:76:98:19: a8:aa:3d:22:92:57:0c:51:d1:f7:51:00:7f:80:dc: 0e:ee:c5:42:a8:3e:c0:c5:4c:25:12:96:93:95:48: fb:3f:31:b6:f3:3b:87:a0:7a:6e:ee:e2:85:2d:7a: 79:59:e3:94:d4:3f:9c:79:11:80:1a:9a:2b:2f:21: 59:7c:98:ae:c9:20:32:0e:a5:12:f8:d1:ec:20:76: a2:a6:c1:a8:f9:de:1f:fd:7e:9d:8b:fc:61:be:5e: b5:5a:82:b5:5a:88:a2:bc:1f:67:1c:a5:4f:f5:bc: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:70:EA:01:56:88:43:28:EB:05:E9:0C:92:18:8B:2D:76:B3:34:6A X509v3 Authority Key Identifier: keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/eXDqAVaIQyjrBekMkhiLLXazNGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a00::/48 Signature Algorithm: sha256WithRSAEncryption 9b:62:cf:64:b9:95:25:c4:be:5c:fb:03:d9:3d:39:81:3d:e5: 0a:ae:65:74:85:c5:29:ce:21:42:77:da:2d:7a:15:e6:18:bd: 47:d4:50:b7:ff:4b:64:0f:1c:bd:4c:70:eb:be:89:9b:cd:2a: a2:60:5a:ab:b3:ed:00:a0:7b:8f:10:1c:0e:fe:a1:c8:b1:2d: 48:f3:bb:67:7f:79:d8:3f:7e:81:b8:88:81:55:2d:38:f0:bb: 1c:a3:fd:e0:4c:db:9d:69:fc:a7:d4:9a:d0:4d:e3:55:1f:58: 18:d0:67:8a:0d:4e:65:bf:60:a1:33:3b:0d:bc:4f:22:72:f3: dd:5f:c4:06:49:73:a3:85:c1:48:01:d6:01:25:0d:62:96:eb: f8:0f:5d:ba:ca:33:e2:49:e2:f3:c6:4a:88:12:56:a4:80:19: b9:ad:be:d4:b2:bc:af:1e:83:ff:f0:ee:d0:f8:a2:1b:aa:2b: 59:b5:ac:c8:42:dd:1c:ca:03:c3:e2:bb:9d:ad:5f:be:e4:95: 9c:ae:51:9e:10:38:84:22:8e:a1:2f:86:ef:85:3b:fa:37:bc: ff:a1:2e:34:51:85:b3:b7:67:6a:a5:0c:78:79:74:b0:9a:8a: 9c:69:b2:8c:bd:8f:dd:41:ef:1d:41:ad:34:a3:bb:58:34:b7: a6:97:88:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yObwaIgsW2zWVj5U2HvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTEwYjY1MWJmYmRmMDljODQ4NmE4MTM2MjAwMDA1YmVm YjQ5N2QwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTcwZWEwMTU2ODg0MzI4ZWIwNWU5MGM5MjE4OGIyZDc2YjMzNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv/RNesQTvnykFWAXoBrZ4tlcQI1 dCPXOjUDwDaLPS35viGazC/Tn5njC4lCTqsoo0CUTkahF8z1wwYkpzXJaN736gy3 w/1HK9baQWd1P5kS4bLsVphIhTbmt9+MVrTE4EiwiVwUYRFCSFVQK3/pRN0xv4CJ c9D8CAHu7susJghAD0uKlDyB3HWFlrAiTMMt/QJ2mBmoqj0iklcMUdH3UQB/gNwO 7sVCqD7AxUwlEpaTlUj7PzG28zuHoHpu7uKFLXp5WeOU1D+ceRGAGporLyFZfJiu ySAyDqUS+NHsIHaipsGo+d4f/X6di/xhvl61WoK1WoiivB9nHKVP9byBdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHlw6gFWiEMo6wXpDJIYiy12szRqMB8GA1UdIwQY MBaAFLdRC2Ub+98JyEhqgTYgAAW++0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjct MmNiODg3N2ZkOTcwLzEvZVhEcUFWYUlReWpyQmVrTWtoaUxMWGF6TkdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjctMmNiODg3N2ZkOTcw LzEvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAoA MA0GCSqGSIb3DQEBCwUAA4IBAQCbYs9kuZUlxL5c+wPZPTmBPeUKrmV0hcUpziFC d9otehXmGL1H1FC3/0tkDxy9THDrvombzSqiYFqrs+0AoHuPEBwO/qHIsS1I87tn f3nYP36BuIiBVS048Lsco/3gTNudafyn1JrQTeNVH1gY0GeKDU5lv2ChMzsNvE8i cvPdX8QGSXOjhcFIAdYBJQ1iluv4D126yjPiSeLzxkqIElakgBm5rb7UsryvHoP/ 8O7Q+KIbqitZtazIQt0cygPD4rudrV++5JWcrlGeEDiEIo6hL4bvhTv6N7z/oS40 UYWzt2dqpQx4eXSwmoqcabKMvY/dQe8dQa00o7tYNLeml4iC -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:07 2026 by rpki-client