This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/EFKhtt91L5OdB8guQ7HyKYp2_3c.roa File: EFKhtt91L5OdB8guQ7HyKYp2_3c.roa (raw, json) Hash identifier: dQPdysasv2TEU+k67rw/mLBE/IZwJp/RJi2tWgg3JKA= Subject key identifier: 10:52:A1:B6:DF:75:2F:93:9D:07:C8:2E:43:B1:F2:29:8A:76:FF:77 Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Certificate serial: 019B791114262AF7983D116221AA5CD0A893 Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/EFKhtt91L5OdB8guQ7HyKYp2_3c.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a13:5a47::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:14:26:2a:f7:98:3d:11:62:21:aa:5c:d0:a8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1052a1b6df752f939d07c82e43b1f2298a76ff77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:47:57:6f:05:86:9b:10:6d:9a:83:2a:c4:42: 26:67:93:3e:9d:11:da:20:03:51:d7:c6:9b:34:da: 28:e0:d7:3d:e3:0f:ad:6b:0f:2d:e1:81:91:f6:47: 8d:22:a9:79:f1:e5:46:ef:f4:17:71:31:1a:e1:21: e8:7e:ea:68:6e:54:50:90:c9:11:70:f6:64:ca:ab: c3:c4:51:0c:32:94:81:65:a0:20:ba:6c:15:bc:2b: e1:20:97:d3:7f:89:c7:f4:ae:19:6d:63:c3:7f:4f: 1f:46:c8:0f:72:0d:c4:ab:a2:8c:6d:67:37:8f:7c: eb:a1:0e:fb:93:68:47:6f:f5:20:28:d4:5e:80:0e: 95:4c:93:cb:27:ba:ec:83:64:87:25:8c:37:ad:40: b0:d0:cf:ce:5a:3c:35:ad:0c:c2:44:c3:86:ff:27: 48:03:d0:49:66:4f:d7:40:98:50:81:d3:6c:7e:da: db:32:cc:7a:31:dc:98:70:db:31:fe:6e:5f:3f:ba: 4f:d3:c1:21:37:1d:64:cb:2e:c5:44:4f:d9:db:36: 10:2e:6b:15:3c:23:17:56:fd:33:ee:34:8d:da:cc: 57:c4:31:55:74:b1:90:a6:62:74:40:a1:1c:13:c3: d3:6b:71:43:33:8a:dd:e1:12:61:8e:ed:d6:5b:46: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:52:A1:B6:DF:75:2F:93:9D:07:C8:2E:43:B1:F2:29:8A:76:FF:77 X509v3 Authority Key Identifier: keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/EFKhtt91L5OdB8guQ7HyKYp2_3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5a47::/32 Signature Algorithm: sha256WithRSAEncryption 7d:73:3e:f6:b2:11:b9:56:78:b0:ed:aa:2e:ce:32:6a:a6:3a: b7:a7:5d:c5:5d:79:4e:14:fb:65:ea:24:5f:58:45:9d:24:6c: 03:2a:8c:c2:f2:2d:30:68:9c:93:74:45:17:34:14:37:b3:25: 9b:a0:7d:e7:c9:ce:85:79:14:6e:e6:bd:95:c3:00:92:9a:51: 55:54:87:40:97:f0:b9:30:ef:1e:4b:0d:bc:71:d2:65:e6:88: ba:85:20:28:e8:cd:94:ed:ef:64:6c:67:7e:02:2b:03:c5:04: 5a:a9:77:d3:61:ad:6c:9e:d5:0b:46:e0:57:3e:af:a3:82:19: d9:86:7a:70:b1:02:eb:1e:42:83:5b:9c:c5:a9:14:57:6e:0c: 1b:fd:f3:70:6c:71:a7:a4:9e:ac:62:8a:86:8b:cb:97:52:f4: d8:87:ac:44:66:7e:4e:98:65:81:bc:dd:79:f7:02:3f:b1:76: 5c:af:6e:03:c4:ba:da:54:51:f0:ab:63:d5:49:7d:1d:6c:ec: b3:df:fe:dc:95:05:26:27:e0:e9:25:de:79:67:e1:4e:13:29: 03:99:e3:88:57:73:01:06:cd:b1:b9:dc:ae:40:d4:a3:11:a4: f5:25:96:d0:65:16:c6:3d:60:ac:66:71:81:b6:9d:f6:3f:35: 7e:79:6e:b8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ERQmKveYPRFiIapc0KiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2 YTczYzMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDUyYTFiNmRmNzUyZjkzOWQwN2M4MmU0M2IxZjIyOThhNzZmZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50dXbwWGmxBtmoMqxEImZ5M+nRHa IANR18abNNoo4Nc94w+taw8t4YGR9keNIql58eVG7/QXcTEa4SHofupoblRQkMkR cPZkyqvDxFEMMpSBZaAgumwVvCvhIJfTf4nH9K4ZbWPDf08fRsgPcg3Eq6KMbWc3 j3zroQ77k2hHb/UgKNRegA6VTJPLJ7rsg2SHJYw3rUCw0M/OWjw1rQzCRMOG/ydI A9BJZk/XQJhQgdNsftrbMsx6MdyYcNsx/m5fP7pP08EhNx1kyy7FRE/Z2zYQLmsV PCMXVv0z7jSN2sxXxDFVdLGQpmJ0QKEcE8PTa3FDM4rd4RJhju3WW0Yd/wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBBSobbfdS+TnQfILkOx8imKdv93MB8GA1UdIwQY MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt YWJjYjFlNzU4MmIzLzEvRUZLaHR0OTFMNU9kQjhndVE3SHlLWXAyXzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhNaRzAN BgkqhkiG9w0BAQsFAAOCAQEAfXM+9rIRuVZ4sO2qLs4yaqY6t6ddxV15ThT7Zeok X1hFnSRsAyqMwvItMGick3RFFzQUN7Mlm6B958nOhXkUbua9lcMAkppRVVSHQJfw uTDvHksNvHHSZeaIuoUgKOjNlO3vZGxnfgIrA8UEWql302GtbJ7VC0bgVz6vo4IZ 2YZ6cLEC6x5Cg1ucxakUV24MG/3zcGxxp6SerGKKhovLl1L02IesRGZ+Tphlgbzd efcCP7F2XK9uA8S62lRR8Ktj1Ul9HWzss9/+3JUFJifg6SXeeWfhThMpA5njiFdz AQbNsbncrkDUoxGk9SWW0GUWxj1grGZxgbad9j81fnluuA== -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:54 2026 by rpki-client