This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/eUWfxWghJ9MEZ7tCGolfI7KpscU.roa File: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (raw, json) Hash identifier: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk= Subject key identifier: 79:45:9F:C5:68:21:27:D3:04:67:BB:42:1A:89:5F:23:B2:A9:B1:C5 Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef Certificate serial: 019B7B36E87FBABD4FE4ED982CCF1B47A2DC Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/eUWfxWghJ9MEZ7tCGolfI7KpscU.roa Signing time: Thu 01 Jan 2026 20:19:14 +0000 ROA not before: Thu 01 Jan 2026 20:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 2001:678:69c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e8:7f:ba:bd:4f:e4:ed:98:2c:cf:1b:47:a2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79459fc5682127d30467bb421a895f23b2a9b1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:3f:6c:7b:40:d5:ab:f0:dc:40:b3:0e:c0: 4a:7d:4f:dc:dd:ef:fb:02:83:e9:08:ac:c0:36:e3: 56:76:c3:30:b7:04:68:35:e6:f5:55:68:59:be:72: 83:e2:56:a7:f6:05:f7:66:f1:cd:9a:0f:8e:a1:6d: c0:2a:cd:26:a9:28:84:48:c1:fa:1a:be:f7:76:a2: 5a:09:32:5c:25:8e:45:9e:91:10:61:e4:20:53:6a: b9:37:a1:93:49:38:c5:7e:d7:b7:27:29:2c:31:ba: 3f:08:b7:0f:a3:37:bf:1b:4d:f3:38:e2:18:a4:d1: ac:36:46:50:11:72:b9:53:28:33:30:43:29:70:23: d4:15:e3:cd:2b:d9:ab:6d:5b:b3:d8:cc:7f:10:a3: 5a:57:2c:31:99:fc:e7:42:bd:18:57:1d:b5:6b:9d: bb:39:3c:ad:e5:69:41:b3:82:3b:e6:3c:78:6d:dd: 82:eb:05:ec:75:1c:f5:75:d7:04:c2:17:1b:7d:e3: 52:ff:d1:f7:10:f8:9e:d2:8d:75:35:6c:5f:e0:c0: fc:e4:5b:19:38:02:00:c5:b3:ee:ec:bb:a1:8e:ce: fc:52:05:6b:5d:3e:38:0b:5d:e2:bc:4d:89:27:78: f4:07:42:15:3e:45:1c:9b:7c:c5:32:57:72:f0:a9: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:45:9F:C5:68:21:27:D3:04:67:BB:42:1A:89:5F:23:B2:A9:B1:C5 X509v3 Authority Key Identifier: keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/eUWfxWghJ9MEZ7tCGolfI7KpscU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:69c::/48 Signature Algorithm: sha256WithRSAEncryption 56:44:be:1d:81:68:81:13:32:e4:70:d2:f9:d9:c5:83:b4:6e: dd:75:62:b5:e6:07:42:52:f8:82:06:a0:b3:cc:09:3f:dc:bc: 5b:44:ff:5c:bd:b7:6a:5e:a2:0f:a2:82:7e:df:63:90:c8:88: 78:3e:1f:a9:cd:59:28:19:17:9b:bb:77:83:e4:7a:9e:f1:e0: 0b:62:02:19:b7:76:de:0b:2c:09:27:5d:4a:f2:ca:88:41:fe: b3:a5:4f:e9:f2:72:4c:7b:70:72:80:cb:0b:91:50:22:22:0d: fc:99:47:8d:f7:ef:e8:20:5a:eb:82:a0:e7:d3:7f:40:0b:45: 47:98:52:15:b6:83:3d:b7:c4:46:33:9b:eb:9d:5a:db:17:0e: ce:df:fa:64:71:9f:d7:48:97:77:36:ae:2c:56:8b:11:62:ce: 14:92:71:af:e5:03:04:01:87:2a:ac:46:38:90:1e:f7:41:68: 50:28:5b:9c:b2:26:29:72:b7:58:ec:09:bc:13:6f:c1:5a:fc: 6f:ff:e1:72:57:bc:a1:b6:cf:26:be:7b:9a:29:b3:ea:71:04: e4:42:c9:c8:6f:c1:24:88:0f:d3:24:f4:a8:d1:a5:df:03:e9: 31:71:6e:92:79:e5:47:72:69:ff:da:16:a8:1c:32:c8:2a:ec: 8d:c8:e4:66 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7Nuh/ur1P5O2YLM8bR6LcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl MmQxZWYwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTQ1OWZjNTY4MjEyN2QzMDQ2N2JiNDIxYTg5NWYyM2IyYTliMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy4/bHtA1avw3ECzDsBKfU/c3e/7 AoPpCKzANuNWdsMwtwRoNeb1VWhZvnKD4lan9gX3ZvHNmg+OoW3AKs0mqSiESMH6 Gr73dqJaCTJcJY5FnpEQYeQgU2q5N6GTSTjFfte3JyksMbo/CLcPoze/G03zOOIY pNGsNkZQEXK5UygzMEMpcCPUFePNK9mrbVuz2Mx/EKNaVywxmfznQr0YVx21a527 OTyt5WlBs4I75jx4bd2C6wXsdRz1ddcEwhcbfeNS/9H3EPie0o11NWxf4MD85FsZ OAIAxbPu7Luhjs78UgVrXT44C13ivE2JJ3j0B0IVPkUcm3zFMldy8KnR9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHlFn8VoISfTBGe7QhqJXyOyqbHFMB8GA1UdIwQY MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt NTc2MzM3ZTUwZGM0LzEvZVVXZnhXZ2hKOU1FWjd0Q0dvbGZJN0twc2NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0 LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAac MA0GCSqGSIb3DQEBCwUAA4IBAQBWRL4dgWiBEzLkcNL52cWDtG7ddWK15gdCUviC BqCzzAk/3LxbRP9cvbdqXqIPooJ+32OQyIh4Ph+pzVkoGRebu3eD5Hqe8eALYgIZ t3beCywJJ11K8sqIQf6zpU/p8nJMe3BygMsLkVAiIg38mUeN9+/oIFrrgqDn039A C0VHmFIVtoM9t8RGM5vrnVrbFw7O3/pkcZ/XSJd3Nq4sVosRYs4UknGv5QMEAYcq rEY4kB73QWhQKFucsiYpcrdY7Am8E2/BWvxv/+FyV7yhts8mvnuaKbPqcQTkQsnI b8EkiA/TJPSo0aXfA+kxcW6SeeVHcmn/2haoHDLIKuyNyORm -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:49 2026 by rpki-client