This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa File: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (raw, json) Hash identifier: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q= Subject key identifier: 78:4D:90:41:1C:06:76:48:42:61:A1:1E:53:B5:FC:06:63:64:F8:42 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A376AAE6C07A165B36AAB471D736FC Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8961 IP address blocks: 2001:8f8:d002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:76:aa:e6:c0:7a:16:5b:36:aa:b4:71:d7:36:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784d90411c0676484261a11e53b5fc066364f842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:15:f2:a8:d3:5b:b6:f9:66:a1:43:71:ac: 11:6c:e7:1a:d6:a3:9a:86:ff:7d:3d:52:81:c2:fc: 73:bf:5e:28:d1:06:fc:37:60:5f:4f:22:fe:ed:a7: ae:80:fe:1c:b4:23:f7:1e:0d:3c:3b:08:b2:44:45: 62:1a:79:9d:55:3b:c3:5f:6b:bb:c6:4c:5c:2e:6a: c5:1a:a6:0c:a9:ba:d0:0c:15:52:b3:f5:d9:e8:3e: 1d:70:ba:d0:5c:04:00:7e:86:86:bb:34:f2:01:10: 43:7e:db:82:52:da:92:a1:07:b8:9b:69:75:5f:9e: 0a:a6:04:f9:3b:78:37:a8:3b:23:85:d8:3e:b9:81: 48:a2:7d:37:ee:00:4c:e8:9b:77:c4:ec:a3:f6:3a: 2e:3a:00:94:94:82:20:32:cd:b1:4f:f7:8b:44:32: 14:e5:0c:e2:dc:5e:7f:af:90:7e:7d:c9:ee:cf:e7: ae:6d:a5:a9:88:6e:e5:4f:f4:af:2c:6b:b7:12:4a: 03:84:f2:4b:19:49:ce:47:79:42:02:e0:06:96:d6: a6:9e:08:39:14:25:44:99:c7:e6:de:8d:88:31:83: a8:ee:0e:f5:b4:0b:79:a5:74:4c:64:ba:3e:16:55: 38:aa:a1:74:d1:68:da:18:f4:10:8a:f8:5f:e2:73: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4D:90:41:1C:06:76:48:42:61:A1:1E:53:B5:FC:06:63:64:F8:42 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:8f8:d002::/48 Signature Algorithm: sha256WithRSAEncryption a0:af:9d:c2:98:c4:d4:76:6e:30:24:79:ab:b4:50:b9:26:23: 94:a2:db:29:cc:d8:61:38:f7:51:c0:3a:18:bc:f6:e8:76:4a: a4:cf:80:c0:fc:e1:52:76:43:57:48:df:19:f0:0e:dd:e6:77: 54:ca:0f:4a:da:e0:28:be:37:15:c2:f6:ba:b4:77:85:68:6e: 57:d7:9d:ad:cc:3b:bd:26:04:2e:60:49:db:0d:a9:ee:34:32: 40:3a:2b:99:ec:ce:8d:0c:93:7a:0d:6e:e2:1f:16:e5:12:10: 06:b4:eb:8f:82:90:43:d7:23:a6:1a:2d:77:13:3e:1d:60:12: 84:50:76:45:82:33:ff:20:e7:f5:4e:ad:45:93:b9:6b:a0:af: a3:7f:1e:40:50:68:64:86:c7:7a:d0:5b:a2:92:c3:03:c3:d9: 8c:c9:b0:06:52:6f:81:d1:71:da:06:de:b8:91:b4:79:54:0b: e5:d8:c4:84:96:4e:0c:80:f9:64:11:b6:e4:21:ba:de:39:33: d1:29:88:14:1f:d6:99:6d:e7:48:7e:17:c8:6d:6a:46:a5:08: f9:6c:dc:66:65:d9:8a:50:fc:ee:d4:04:76:ca:ba:c4:22:63: ee:ce:17:ab:be:6b:76:37:0b:d3:35:7f:1b:39:99:cf:17:52: 0f:0a:6e:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3aq5sB6Fls2qrRx1zb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRkOTA0MTFjMDY3NjQ4NDI2MWExMWU1M2I1ZmMwNjYzNjRmODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxsV8qjTW7b5ZqFDcawRbOca1qOa hv99PVKBwvxzv14o0Qb8N2BfTyL+7aeugP4ctCP3Hg08OwiyREViGnmdVTvDX2u7 xkxcLmrFGqYMqbrQDBVSs/XZ6D4dcLrQXAQAfoaGuzTyARBDftuCUtqSoQe4m2l1 X54KpgT5O3g3qDsjhdg+uYFIon037gBM6Jt3xOyj9jouOgCUlIIgMs2xT/eLRDIU 5Qzi3F5/r5B+fcnuz+eubaWpiG7lT/SvLGu3EkoDhPJLGUnOR3lCAuAGltamngg5 FCVEmcfm3o2IMYOo7g71tAt5pXRMZLo+FlU4qqF00WjaGPQQivhf4nOEoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHhNkEEcBnZIQmGhHlO1/AZjZPhCMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvZUUyUVFSd0dka2hDWWFFZVU3WDhCbU5rLUVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEI+NAC MA0GCSqGSIb3DQEBCwUAA4IBAQCgr53CmMTUdm4wJHmrtFC5JiOUotspzNhhOPdR wDoYvPbodkqkz4DA/OFSdkNXSN8Z8A7d5ndUyg9K2uAovjcVwva6tHeFaG5X152t zDu9JgQuYEnbDanuNDJAOiuZ7M6NDJN6DW7iHxblEhAGtOuPgpBD1yOmGi13Ez4d YBKEUHZFgjP/IOf1Tq1Fk7lroK+jfx5AUGhkhsd60FuiksMDw9mMybAGUm+B0XHa Bt64kbR5VAvl2MSElk4MgPlkEbbkIbreOTPRKYgUH9aZbedIfhfIbWpGpQj5bNxm ZdmKUPzu1AR2yrrEImPuzhervmt2NwvTNX8bOZnPF1IPCm78 -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:01 2026 by rpki-client