This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EwJDYvpDV1tKUgWR2R8nJgZthtw.roa File: EwJDYvpDV1tKUgWR2R8nJgZthtw.roa (raw, json) Hash identifier: c1h8Zkd9Zj8+JapMxr1BMUxr7/y/QTVVSjYs8T79LoU= Subject key identifier: 13:02:43:62:FA:43:57:5B:4A:52:05:91:D9:1F:27:26:06:6D:86:DC Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CB431DCC0A994383D20C5CB2D57E Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EwJDYvpDV1tKUgWR2R8nJgZthtw.roa Signing time: Fri 02 Jan 2026 18:21:51 +0000 ROA not before: Fri 02 Jan 2026 18:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a0e:15c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:cb:43:1d:cc:0a:99:43:83:d2:0c:5c:b2:d5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13024362fa43575b4a520591d91f2726066d86dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:46:ea:37:46:a1:05:f3:26:a1:a3:25:d0: 2b:ca:ea:cf:f9:9e:a4:58:71:aa:f3:c2:2d:9d:62: 4e:b6:b3:ad:b7:c8:42:a2:d9:27:b8:86:9b:e3:94: 47:87:2c:16:1e:1e:a6:01:0b:35:d4:19:73:76:45: 70:bb:e7:34:33:0a:19:52:9c:95:14:64:b9:1b:91: f0:5d:83:71:d6:fa:87:4b:23:6e:56:3e:21:6d:3b: 54:b2:60:4b:13:8c:cb:62:8f:8f:eb:15:76:09:31: 1f:32:01:92:d3:bb:c1:49:61:9b:dd:2c:96:7c:f0: 71:7d:2c:d0:9e:62:1a:04:b0:14:c1:8d:0b:01:5f: 49:f5:70:0a:42:c7:0a:3a:84:1a:7b:11:45:5f:7d: 5b:ab:91:1e:a8:76:63:56:48:6e:b8:3e:16:55:3d: be:52:ea:4e:8b:38:d4:28:14:41:9f:0f:3b:dc:90: 8d:44:21:f0:7f:88:60:9a:f0:08:69:c5:75:9e:78: b1:86:65:b8:ba:73:c8:91:bc:3c:75:b7:21:8d:f5: e6:52:ab:1f:63:dd:0e:e7:c0:9c:14:9a:53:64:8f: b1:f9:78:ba:61:15:1a:49:75:28:06:ff:b8:dc:a0: 79:af:c5:f8:f6:9b:dd:4b:57:82:3a:15:53:c2:04: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:43:62:FA:43:57:5B:4A:52:05:91:D9:1F:27:26:06:6D:86:DC X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EwJDYvpDV1tKUgWR2R8nJgZthtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:15c4::/32 Signature Algorithm: sha256WithRSAEncryption 3c:6c:35:21:77:c2:e1:1f:47:00:41:58:26:96:97:e4:f4:71: 4c:b5:ab:21:b0:3e:57:2b:f1:08:4b:92:39:0f:c3:88:bb:ff: 6b:77:73:a6:1a:f9:b7:8a:a1:94:53:86:9a:3a:f5:49:6c:79: de:44:d1:a0:47:70:41:14:bd:f9:1f:4c:23:d7:0b:96:a1:2a: 25:31:d0:cc:b8:a1:45:77:0c:c6:10:39:80:22:28:95:6a:3b: f4:8b:88:00:89:d2:2a:c3:ae:a1:e1:27:9e:fa:2d:43:14:20: 4d:08:ac:2f:82:c7:a8:7e:cf:bf:7a:63:8b:55:01:fe:48:72: d8:1e:33:93:15:a8:da:af:7b:75:d6:08:01:6f:ad:c9:01:4b: 75:f2:4c:7c:3b:6c:eb:1f:e7:c2:da:b8:4b:63:2a:6d:91:f7: 5d:23:11:37:72:09:b2:2b:13:a0:88:db:01:91:65:f3:5c:3c: a3:66:93:46:d6:19:e2:54:23:1c:90:b6:fa:5f:72:4e:68:02: 4e:5e:f2:c2:57:fe:3a:68:e6:01:69:38:53:c9:3c:c0:97:a0: 1a:92:af:7f:4a:99:b9:b5:14:45:6b:8e:61:69:e1:51:fb:19: a6:d7:e5:cb:21:b2:a3:f6:d9:99:61:4a:02:c1:cb:64:0a:fd: f6:c9:14:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8ctDHcwKmUOD0gxcstV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzAyNDM2MmZhNDM1NzViNGE1MjA1OTFkOTFmMjcyNjA2NmQ4NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZG6jdGoQXzJqGjJdAryurP+Z6k WHGq88ItnWJOtrOtt8hCotknuIab45RHhywWHh6mAQs11BlzdkVwu+c0MwoZUpyV FGS5G5HwXYNx1vqHSyNuVj4hbTtUsmBLE4zLYo+P6xV2CTEfMgGS07vBSWGb3SyW fPBxfSzQnmIaBLAUwY0LAV9J9XAKQscKOoQaexFFX31bq5EeqHZjVkhuuD4WVT2+ UupOizjUKBRBnw873JCNRCHwf4hgmvAIacV1nnixhmW4unPIkbw8dbchjfXmUqsf Y90O58CcFJpTZI+x+Xi6YRUaSXUoBv+43KB5r8X49pvdS1eCOhVTwgQgfQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBMCQ2L6Q1dbSlIFkdkfJyYGbYbcMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvRXdKRFl2cERWMXRLVWdXUjJSOG5KZ1p0aHR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4VxDAN BgkqhkiG9w0BAQsFAAOCAQEAPGw1IXfC4R9HAEFYJpaX5PRxTLWrIbA+VyvxCEuS OQ/DiLv/a3dzphr5t4qhlFOGmjr1SWx53kTRoEdwQRS9+R9MI9cLlqEqJTHQzLih RXcMxhA5gCIolWo79IuIAInSKsOuoeEnnvotQxQgTQisL4LHqH7Pv3pji1UB/khy 2B4zkxWo2q97ddYIAW+tyQFLdfJMfDts6x/nwtq4S2MqbZH3XSMRN3IJsisToIjb AZFl81w8o2aTRtYZ4lQjHJC2+l9yTmgCTl7ywlf+OmjmAWk4U8k8wJegGpKvf0qZ ubUURWuOYWnhUfsZptflyyGyo/bZmWFKAsHLZAr99skUoA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:39 2026 by rpki-client