This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ezz-XowRCtO8kLa2l8_dlr2jRFw.roa File: Ezz-XowRCtO8kLa2l8_dlr2jRFw.roa (raw, json) Hash identifier: aX/PaVxqrJIC5KQZYq6EKDOKdou7qHx9ps25VGG6VE8= Subject key identifier: 13:3C:FE:5E:8C:11:0A:D3:BC:90:B6:B6:97:CF:DD:96:BD:A3:44:5C Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA488612F8575DB1D5460F67125D7A7 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ezz-XowRCtO8kLa2l8_dlr2jRFw.roa Signing time: Thu 01 Jan 2026 22:18:58 +0000 ROA not before: Thu 01 Jan 2026 22:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8342 IP address blocks: 2a0d:1ac7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:88:61:2f:85:75:db:1d:54:60:f6:71:25:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133cfe5e8c110ad3bc90b6b697cfdd96bda3445c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:d3:17:f0:1a:a5:2f:a3:d2:5e:e0:8c:64: f2:ab:4b:ed:d3:bb:c8:ef:62:c3:0e:9a:1e:47:56: 8b:fc:c5:ae:c3:c1:1a:89:d7:bd:e3:23:d7:c1:b7: 79:87:14:f5:2a:4a:70:60:6d:d0:c9:79:2e:78:da: 22:b0:f9:31:9e:e5:b3:13:9e:91:90:2d:e0:e9:ea: 52:3a:59:2d:66:0b:7f:9d:a6:a9:c1:3c:09:05:20: 19:40:de:c6:08:ae:1f:08:6f:6d:67:ce:83:75:09: 6f:3c:ab:4b:eb:60:44:de:12:5d:5f:c0:e3:eb:16: f3:24:bb:78:81:12:68:52:12:1f:8d:e2:af:3b:2a: 9f:fa:4d:c9:9a:1a:17:89:9d:8d:b8:50:e9:23:7f: f2:63:32:94:00:e4:c5:66:00:7e:58:69:9f:49:8a: fa:49:b6:bb:6c:f2:61:c0:ab:14:e2:f5:1f:dc:1b: 21:6c:e0:df:0f:82:66:39:1b:ba:70:b3:93:60:a7: a2:6c:b5:79:09:ee:fa:1f:14:4d:aa:fa:50:dd:b8: 21:93:86:72:eb:78:8b:32:09:e8:0d:44:2c:73:f4: 14:b6:42:87:96:7c:95:5d:98:a0:59:58:f0:e4:45: ae:47:1c:7a:f2:17:3c:a7:f5:bb:16:f6:75:3e:b4: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3C:FE:5E:8C:11:0A:D3:BC:90:B6:B6:97:CF:DD:96:BD:A3:44:5C X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ezz-XowRCtO8kLa2l8_dlr2jRFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1ac7::/32 Signature Algorithm: sha256WithRSAEncryption 91:f5:c6:55:6a:2a:bf:2c:92:1b:92:01:d3:90:33:ba:fb:2b: 55:04:19:b2:3a:a8:71:68:f2:0b:f7:7d:45:19:a4:48:68:ce: ba:87:2a:00:58:ec:62:99:c1:e9:30:c8:9f:62:9c:72:dc:71: 3e:67:95:57:f5:0e:6b:30:5e:2a:f5:b7:86:7d:af:8f:e4:ff: dd:72:cb:3f:7a:b3:dd:2b:a3:e3:29:cf:8d:a1:be:3e:89:eb: de:15:8f:a7:4b:56:ea:42:de:83:a4:2c:2d:4c:2d:04:56:c3: 10:a0:96:22:35:07:f7:38:7a:72:bb:3f:73:d1:25:78:0a:8d: ae:35:23:77:77:b1:74:42:61:be:63:c2:6a:13:fc:42:5f:6c: f5:76:5f:aa:87:2d:b0:a7:a6:dc:2c:df:c9:dc:57:dc:e3:a5: 16:a0:d4:37:44:e7:ae:43:b7:b4:fc:c2:b0:b3:73:9e:0b:54: 5d:3e:bf:15:a1:47:a0:27:84:5a:26:60:fa:06:29:3d:ca:1f: 82:5e:e2:ca:da:72:95:46:a1:df:b4:39:98:8b:69:56:ab:4b: 1c:b5:81:1d:ea:26:d2:b7:b9:4b:77:63:8b:d2:e1:4d:cb:a0: b6:77:3c:43:e6:a7:e2:5c:2a:0b:b1:b8:80:d4:5a:81:98:3d: 74:fa:92:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pIhhL4V12x1UYPZxJdenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNjZmU1ZThjMTEwYWQzYmM5MGI2YjY5N2NmZGQ5NmJkYTM0NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdzTF/AapS+j0l7gjGTyq0vt07vI 72LDDpoeR1aL/MWuw8Eaide94yPXwbd5hxT1KkpwYG3QyXkueNoisPkxnuWzE56R kC3g6epSOlktZgt/naapwTwJBSAZQN7GCK4fCG9tZ86DdQlvPKtL62BE3hJdX8Dj 6xbzJLt4gRJoUhIfjeKvOyqf+k3JmhoXiZ2NuFDpI3/yYzKUAOTFZgB+WGmfSYr6 Sba7bPJhwKsU4vUf3BshbODfD4JmORu6cLOTYKeibLV5Ce76HxRNqvpQ3bghk4Zy 63iLMgnoDUQsc/QUtkKHlnyVXZigWVjw5EWuRxx68hc8p/W7FvZ1PrSgswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBM8/l6MEQrTvJC2tpfP3Za9o0RcMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvRXp6LVhvd1JDdE84a0xhMmw4X2RscjJqUkZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg0axzAN BgkqhkiG9w0BAQsFAAOCAQEAkfXGVWoqvyySG5IB05AzuvsrVQQZsjqocWjyC/d9 RRmkSGjOuocqAFjsYpnB6TDIn2KcctxxPmeVV/UOazBeKvW3hn2vj+T/3XLLP3qz 3Suj4ynPjaG+Ponr3hWPp0tW6kLeg6QsLUwtBFbDEKCWIjUH9zh6crs/c9EleAqN rjUjd3exdEJhvmPCahP8Ql9s9XZfqoctsKem3CzfydxX3OOlFqDUN0TnrkO3tPzC sLNzngtUXT6/FaFHoCeEWiZg+gYpPcofgl7iytpylUah37Q5mItpVqtLHLWBHeom 0re5S3dji9LhTcugtnc8Q+an4lwqC7G4gNRagZg9dPqSrw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:06 2026 by rpki-client