This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/EidzJCWNUyQpfWwfT7scfsDvqbQ.roa File: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (raw, json) Hash identifier: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU= Subject key identifier: 12:27:73:24:25:8D:53:24:29:7D:6C:1F:4F:BB:1C:7E:C0:EF:A9:B4 Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Certificate serial: 019B7EA4F8775BC2B564A79AF7BD635720B8 Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/EidzJCWNUyQpfWwfT7scfsDvqbQ.roa Signing time: Fri 02 Jan 2026 12:18:19 +0000 ROA not before: Fri 02 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 2001:67c:c2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f8:77:5b:c2:b5:64:a7:9a:f7:bd:63:57:20:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Validity Not Before: Jan 2 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12277324258d5324297d6c1f4fbb1c7ec0efa9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c4:08:6d:96:3f:fb:a1:c0:04:c8:51:6c:7c: 93:26:22:25:7e:2c:63:ef:ac:d7:61:64:55:d5:5a: 77:6b:c8:a1:6a:d6:5f:94:5a:ed:81:ec:df:a1:92: 8a:37:f3:8d:a4:61:9f:30:aa:6e:eb:bc:c0:f9:0c: 24:77:df:82:76:fa:14:32:15:47:3b:cc:4b:ea:0b: e2:01:16:ce:02:a6:c0:02:81:3b:95:85:c4:ee:1e: 28:d3:8d:e3:42:0a:85:cf:0a:d8:cb:a6:e3:a6:e3: f7:ea:18:b2:6f:7d:cc:36:44:c6:00:45:9e:55:93: 6f:7f:e6:0d:a2:62:50:80:2b:85:16:8b:f9:ba:16: 14:f3:7c:d5:df:a4:4d:49:f7:c5:92:a6:b6:11:70: 76:95:14:78:8d:21:bb:2c:25:ea:6a:47:c9:29:97: 08:aa:31:cb:37:a1:12:4e:cb:62:bb:e4:ef:ee:00: bf:ec:4e:b2:a9:fb:71:78:a5:6c:90:ca:ed:b7:34: 4d:3f:ef:7e:e3:d1:01:56:d8:0d:8f:08:80:67:77: f5:15:72:aa:55:3f:74:83:f7:66:bc:fa:75:fb:3c: 22:94:61:cc:02:19:a9:b2:e8:6a:3d:f2:20:d8:1a: f1:77:5c:2b:34:2f:c1:31:0f:53:84:ec:aa:e5:0d: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:73:24:25:8D:53:24:29:7D:6C:1F:4F:BB:1C:7E:C0:EF:A9:B4 X509v3 Authority Key Identifier: keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/EidzJCWNUyQpfWwfT7scfsDvqbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c2c::/48 Signature Algorithm: sha256WithRSAEncryption 74:f2:1e:1b:f3:f3:85:8a:c6:e8:ce:46:44:75:98:d2:35:25: 2c:7e:ba:ec:47:4e:79:89:cf:9b:a9:bb:5c:5f:16:2d:96:cf: 60:29:09:bb:a0:5a:14:67:9b:27:de:96:5b:e0:0d:8c:92:c7: 5d:33:a8:46:5b:36:21:05:fd:59:34:1c:5c:2c:ad:1b:e7:43: 92:d5:85:6d:42:82:c9:19:dd:d5:01:e6:97:7f:ce:5d:b6:ac: 1b:52:3c:93:3b:fc:1e:d5:53:19:2f:ae:8a:e2:58:fc:da:70: 05:d5:35:4b:a3:76:ff:a7:5d:59:4d:e5:c9:e7:51:20:a7:e9: f2:54:8c:9f:2c:e0:7d:e9:d9:b9:33:8b:d8:a3:78:7e:bf:fa: 0f:e1:3a:12:c2:e6:91:f0:77:46:26:08:d7:62:aa:bd:61:4b: 22:0a:d5:c2:91:bb:68:29:39:bc:69:d1:0c:c9:99:35:2f:24: 5a:0d:3a:d5:83:8b:81:f8:6e:b6:e6:6d:f7:d6:fd:ed:22:1e: 2f:3f:f7:0a:ff:e4:41:19:c3:ed:9e:6f:03:c4:06:04:eb:61: e4:33:79:af:46:3a:97:2f:1f:d0:f1:fa:36:11:9e:d8:74:db: ff:cf:1e:e8:98:d5:1f:f4:44:ae:e4:9f:ec:93:7d:55:c8:2b: 37:13:c1:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pPh3W8K1ZKea971jVyC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4 YmQwNGYwHhcNMjYwMTAyMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjI3NzMyNDI1OGQ1MzI0Mjk3ZDZjMWY0ZmJiMWM3ZWMwZWZhOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98QIbZY/+6HABMhRbHyTJiIlfixj 76zXYWRV1Vp3a8ihatZflFrtgezfoZKKN/ONpGGfMKpu67zA+Qwkd9+CdvoUMhVH O8xL6gviARbOAqbAAoE7lYXE7h4o043jQgqFzwrYy6bjpuP36hiyb33MNkTGAEWe VZNvf+YNomJQgCuFFov5uhYU83zV36RNSffFkqa2EXB2lRR4jSG7LCXqakfJKZcI qjHLN6ESTstiu+Tv7gC/7E6yqftxeKVskMrttzRNP+9+49EBVtgNjwiAZ3f1FXKq VT90g/dmvPp1+zwilGHMAhmpsuhqPfIg2Brxd1wrNC/BMQ9ThOyq5Q3DmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBIncyQljVMkKX1sH0+7HH7A76m0MB8GA1UdIwQY MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt ZTRiNmE5ZGY5YTM0LzEvRWlkekpDV05VeVFwZld3ZlQ3c2Nmc0R2cWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0 LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAws MA0GCSqGSIb3DQEBCwUAA4IBAQB08h4b8/OFisbozkZEdZjSNSUsfrrsR055ic+b qbtcXxYtls9gKQm7oFoUZ5sn3pZb4A2MksddM6hGWzYhBf1ZNBxcLK0b50OS1YVt QoLJGd3VAeaXf85dtqwbUjyTO/we1VMZL66K4lj82nAF1TVLo3b/p11ZTeXJ51Eg p+nyVIyfLOB96dm5M4vYo3h+v/oP4ToSwuaR8HdGJgjXYqq9YUsiCtXCkbtoKTm8 adEMyZk1LyRaDTrVg4uB+G625m331v3tIh4vP/cK/+RBGcPtnm8DxAYE62HkM3mv RjqXLx/Q8fo2EZ7YdNv/zx7omNUf9ESu5J/sk31VyCs3E8Fz -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:48 2026 by rpki-client