This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eMUDUAOLjBp8Dyrvc8B2BGxnHpw.roa File: eMUDUAOLjBp8Dyrvc8B2BGxnHpw.roa (raw, json) Hash identifier: tOHRhBSQ2r1h9PPjsNN7RxcbHUbhV0ff4tu9tqlRMOM= Subject key identifier: 78:C5:03:50:03:8B:8C:1A:7C:0F:2A:EF:73:C0:76:04:6C:67:1E:9C Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1BA04027F0DB3F7E1C585024C9349 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eMUDUAOLjBp8Dyrvc8B2BGxnHpw.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133504 IP address blocks: 2a09:17c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ba:04:02:7f:0d:b3:f7:e1:c5:85:02:4c:93:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78c50350038b8c1a7c0f2aef73c076046c671e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:72:c7:ce:dc:c1:2b:48:58:ea:1c:59:8c: e6:41:7b:a5:5e:f1:6c:16:b0:b5:fa:52:9d:0f:e3: cd:e5:8f:c8:c5:63:32:e6:1f:04:d5:b2:12:51:f4: 17:e1:84:3b:42:5d:98:2b:e1:e3:16:a4:69:f4:ad: 6b:63:9d:d3:e6:5f:87:6b:4d:fe:c4:cd:f8:36:fd: 2f:3c:e9:9f:ae:19:3d:98:bb:dc:5e:4e:37:19:4b: 2e:bc:c6:f9:b3:d5:f1:32:12:79:7e:e9:e3:78:df: c5:b4:aa:60:7f:33:c7:bd:7d:93:bc:34:f6:4e:ff: 9d:a3:e9:8e:1b:bc:4f:b5:a8:aa:c6:fa:89:a5:84: cc:93:47:ca:e3:75:d3:be:2c:15:b5:48:b2:e1:e6: 58:41:09:4f:9b:06:5b:83:05:84:b6:ae:cd:4a:95: b3:c2:1f:2e:9a:e9:87:67:8d:43:63:f1:89:66:d4: 44:09:09:ff:e0:de:f7:a4:76:9c:b4:e9:29:15:21: 14:f5:62:18:12:96:c5:f0:db:8d:d7:2a:b4:99:d7: 1f:b0:fe:c8:7f:dc:3e:0f:63:e0:d7:37:0f:d9:19: ff:0b:8a:56:45:d5:50:d9:98:09:e6:8e:74:6c:42: f4:4e:8a:db:b7:eb:34:49:02:e9:cd:a8:51:b0:98: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C5:03:50:03:8B:8C:1A:7C:0F:2A:EF:73:C0:76:04:6C:67:1E:9C X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eMUDUAOLjBp8Dyrvc8B2BGxnHpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:17c0:1000::/48 Signature Algorithm: sha256WithRSAEncryption bb:4f:01:8c:ee:aa:4c:c7:54:45:81:08:af:ad:72:f1:a3:cf: 4f:39:96:19:2f:3f:a8:0e:20:aa:cf:1d:60:77:3a:32:a0:83: 17:a4:6e:9b:26:85:b6:46:47:00:bb:a2:be:25:d7:ba:2f:99: 57:1d:21:61:6d:a9:cd:76:b6:8f:22:b8:7d:5d:ad:3c:fc:51: f1:b7:25:5d:13:61:c2:85:32:63:d5:af:1f:f5:1c:cf:00:8f: d7:63:4c:42:a3:81:ab:c8:2e:d6:45:a7:53:77:1f:14:9b:13: 3d:c9:52:a3:41:83:8c:36:99:5c:f4:98:6f:bb:e4:35:e5:57: f4:39:0d:c6:4b:3c:fc:6c:77:1d:5c:91:8e:7b:c0:1e:60:aa: c5:f2:c9:23:30:13:09:d2:a3:ff:aa:e9:c6:3a:d4:c6:bd:a5: fb:ce:7f:96:ae:46:1e:d8:c6:66:49:19:d9:bd:a3:d3:22:ff: c1:40:01:f2:4c:f5:2b:0f:bd:9f:a5:9a:3d:cd:1f:d6:4e:5c: 63:ca:ff:56:c3:70:39:70:f1:76:b0:1f:ca:b9:86:01:69:02: 88:1b:af:03:9c:f2:dc:7f:ba:3b:28:97:da:96:e8:e3:bb:3b: 7f:74:b5:88:76:97:ac:0e:c2:01:f5:cb:12:ee:e8:62:0c:86: d5:9a:b8:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8boEAn8Ns/fhxYUCTJNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGM1MDM1MDAzOGI4YzFhN2MwZjJhZWY3M2MwNzYwNDZjNjcxZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE9yx87cwStIWOocWYzmQXulXvFs FrC1+lKdD+PN5Y/IxWMy5h8E1bISUfQX4YQ7Ql2YK+HjFqRp9K1rY53T5l+Ha03+ xM34Nv0vPOmfrhk9mLvcXk43GUsuvMb5s9XxMhJ5funjeN/FtKpgfzPHvX2TvDT2 Tv+do+mOG7xPtaiqxvqJpYTMk0fK43XTviwVtUiy4eZYQQlPmwZbgwWEtq7NSpWz wh8umumHZ41DY/GJZtRECQn/4N73pHactOkpFSEU9WIYEpbF8NuN1yq0mdcfsP7I f9w+D2Pg1zcP2Rn/C4pWRdVQ2ZgJ5o50bEL0Torbt+s0SQLpzahRsJj4swIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHjFA1ADi4wafA8q73PAdgRsZx6cMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvZU1VRFVBT0xqQnA4RHlydmM4QjJCR3huSHB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkXwBAA MA0GCSqGSIb3DQEBCwUAA4IBAQC7TwGM7qpMx1RFgQivrXLxo89POZYZLz+oDiCq zx1gdzoyoIMXpG6bJoW2RkcAu6K+Jde6L5lXHSFhbanNdraPIrh9Xa08/FHxtyVd E2HChTJj1a8f9RzPAI/XY0xCo4GryC7WRadTdx8UmxM9yVKjQYOMNplc9Jhvu+Q1 5Vf0OQ3GSzz8bHcdXJGOe8AeYKrF8skjMBMJ0qP/qunGOtTGvaX7zn+WrkYe2MZm SRnZvaPTIv/BQAHyTPUrD72fpZo9zR/WTlxjyv9Ww3A5cPF2sB/KuYYBaQKIG68D nPLcf7o7KJfalujjuzt/dLWIdpesDsIB9csS7uhiDIbVmrjR -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:51 2026 by rpki-client