This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/e_3edax3nVApnXX6Ql-HaBUFYsk.roa File: e_3edax3nVApnXX6Ql-HaBUFYsk.roa (raw, json) Hash identifier: plfv9lLAOWXkEtBe+nkrBg1kl1yDXbUCwGhl2Bs8lcI= Subject key identifier: 7B:FD:DE:75:AC:77:9D:50:29:9D:75:FA:42:5F:87:68:15:05:62:C9 Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Certificate serial: 019B7F821A7EEC189C5F2FBDE58CFEFD5BB0 Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/e_3edax3nVApnXX6Ql-HaBUFYsk.roa Signing time: Fri 02 Jan 2026 16:19:51 +0000 ROA not before: Fri 02 Jan 2026 16:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1922 IP address blocks: 2001:67c:2700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:1a:7e:ec:18:9c:5f:2f:bd:e5:8c:fe:fd:5b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Validity Not Before: Jan 2 16:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bfdde75ac779d50299d75fa425f8768150562c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:33:9b:61:8f:1d:2d:73:fb:41:21:1f:b1: 17:6e:43:3b:15:50:0d:19:1a:7d:1d:36:c3:31:76: 2b:0a:92:8b:b6:8a:d6:1d:ba:30:bc:a1:29:ce:bf: 54:21:a6:9d:2c:66:44:22:9a:eb:17:2d:1d:a0:9d: fb:4c:13:5a:ce:c8:d0:8e:7f:3d:a6:f7:c9:92:93: da:70:01:15:8c:a0:87:38:86:df:0c:3b:fd:e0:d7: 24:14:ee:40:cb:26:4f:98:01:3d:fa:69:fa:30:eb: 79:c7:08:bf:62:6a:42:d0:48:f9:81:0f:41:8c:d0: 34:0b:9b:c7:0b:60:fa:04:c5:bf:4a:50:b0:fa:d3: 78:02:19:92:10:2e:be:43:74:2b:9a:6d:6b:a9:b5: 1b:df:0f:a4:4a:3a:df:90:aa:6f:98:f4:cb:f3:58: df:77:10:f6:d4:af:12:55:95:b9:e7:9a:29:65:6c: be:66:82:a7:af:81:e1:6d:c8:3e:fd:63:4e:95:dc: f4:15:b5:d5:e0:ab:0f:6a:49:49:81:36:ed:78:df: ae:b0:6d:38:54:7f:20:3d:fa:fc:4b:4f:15:36:bd: 8f:64:7a:76:42:9f:2e:82:79:cd:74:16:13:46:ef: 67:b5:4a:71:d6:a1:1c:c8:19:4e:e6:de:c0:c6:33: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:DE:75:AC:77:9D:50:29:9D:75:FA:42:5F:87:68:15:05:62:C9 X509v3 Authority Key Identifier: keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/e_3edax3nVApnXX6Ql-HaBUFYsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2700::/48 Signature Algorithm: sha256WithRSAEncryption 5c:34:b5:1e:44:40:fd:34:ec:cb:a9:c1:a1:da:e1:6e:e3:b1: 8e:0d:52:ef:ba:57:de:c5:50:a8:9a:6c:c9:cc:e8:3f:be:28: c2:cd:55:a2:ec:75:55:35:ad:a5:35:d8:a4:42:fd:92:c1:e3: 12:6d:4c:5a:cf:4b:e9:21:fc:07:80:48:d5:3e:2f:de:cb:e3: 56:3e:6c:8a:5e:0d:4a:61:4b:f2:a0:34:53:fb:10:f5:a2:64: c9:c2:4d:a4:f6:a8:13:dc:fc:b1:44:0f:d8:10:ae:06:9b:37: 90:b3:1f:4c:0f:53:9d:d0:6f:45:16:a4:41:d4:51:cc:4a:a1: c1:d1:61:fd:1b:96:1d:42:34:a3:76:a6:52:16:56:24:67:b6: 71:42:3e:59:f3:e2:6c:17:b5:bb:cd:c4:68:7a:2e:ce:86:6a: 70:95:51:36:17:dc:cb:eb:da:f5:8c:1c:0b:9d:6f:eb:81:4e: 9d:df:81:49:a7:1b:75:ae:4b:62:64:24:4f:dc:4f:19:fd:d6: 16:25:ee:6a:51:55:41:1d:4e:7e:aa:72:37:89:2e:f4:dc:8d: 92:29:2f:cc:80:a8:9e:9c:b8:5c:28:94:01:03:dc:be:85:71: 93:c9:2a:57:36:d3:5f:2c:61:c8:22:ee:93:cc:95:fe:7f:0e: 89:e0:c6:50 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/ghp+7BicXy+95Yz+/VuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTk1NTNhOWIyYzdiY2ExMmI2ODFiYzBhNjMwNWUzM2Zi NjQwYzgwHhcNMjYwMTAyMTYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmZkZGU3NWFjNzc5ZDUwMjk5ZDc1ZmE0MjVmODc2ODE1MDU2MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr4zm2GPHS1z+0EhH7EXbkM7FVAN GRp9HTbDMXYrCpKLtorWHbowvKEpzr9UIaadLGZEIprrFy0doJ37TBNazsjQjn89 pvfJkpPacAEVjKCHOIbfDDv94NckFO5AyyZPmAE9+mn6MOt5xwi/YmpC0Ej5gQ9B jNA0C5vHC2D6BMW/SlCw+tN4AhmSEC6+Q3Qrmm1rqbUb3w+kSjrfkKpvmPTL81jf dxD21K8SVZW555opZWy+ZoKnr4Hhbcg+/WNOldz0FbXV4KsPaklJgTbteN+usG04 VH8gPfr8S08VNr2PZHp2Qp8ugnnNdBYTRu9ntUpx1qEcyBlO5t7AxjNMJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHv93nWsd51QKZ11+kJfh2gVBWLJMB8GA1UdIwQY MBaAFCzpVTqbLHvKEraBvApjBeM/tkDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUt OGJhYmFjOGE0NjVhLzEvZV8zZWRheDNuVkFwblhYNlFsLUhhQlVGWXNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUtOGJhYmFjOGE0NjVh LzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCcA MA0GCSqGSIb3DQEBCwUAA4IBAQBcNLUeRED9NOzLqcGh2uFu47GODVLvulfexVCo mmzJzOg/vijCzVWi7HVVNa2lNdikQv2SweMSbUxaz0vpIfwHgEjVPi/ey+NWPmyK Xg1KYUvyoDRT+xD1omTJwk2k9qgT3PyxRA/YEK4GmzeQsx9MD1Od0G9FFqRB1FHM SqHB0WH9G5YdQjSjdqZSFlYkZ7ZxQj5Z8+JsF7W7zcRoei7OhmpwlVE2F9zL69r1 jBwLnW/rgU6d34FJpxt1rktiZCRP3E8Z/dYWJe5qUVVBHU5+qnI3iS703I2SKS/M gKienLhcKJQBA9y+hXGTySpXNtNfLGHIIu6TzJX+fw6J4MZQ -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:43 2026 by rpki-client