This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/RS_ewMX54hVbpRD6ei0HJL0oRHE.roa File: RS_ewMX54hVbpRD6ei0HJL0oRHE.roa (raw, json) Hash identifier: I5QkBNTE69fpfHSb13XFTFHNBBve1NDU9UJ/JapJNdQ= Subject key identifier: 45:2F:DE:C0:C5:F9:E2:15:5B:A5:10:FA:7A:2D:07:24:BD:28:44:71 Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Certificate serial: 019B79ECE07BE62C871099FD567511B679E6 Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/RS_ewMX54hVbpRD6ei0HJL0oRHE.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49792 IP address blocks: 2001:67c:1194::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e0:7b:e6:2c:87:10:99:fd:56:75:11:b6:79:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=452fdec0c5f9e2155ba510fa7a2d0724bd284471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:6e:3b:b2:20:65:ab:58:03:73:12:7f:54: bb:f1:9a:15:43:00:eb:f1:97:ae:83:9b:28:89:87: bb:eb:29:41:33:6f:13:72:e9:76:7c:d6:7e:71:c3: 2d:ca:74:cb:ee:d0:0b:df:cf:ef:41:25:85:c5:f1: 1b:64:f1:f3:6d:ec:21:cb:ab:e7:af:31:2c:0d:12: 89:51:e3:fd:6c:8c:40:a8:81:89:9b:c5:24:ac:bf: 07:4f:88:3c:75:eb:bd:d4:76:ea:f7:b6:26:7a:4a: 72:a5:eb:87:c8:25:37:61:64:3d:ad:5e:9a:18:81: 9c:66:3c:95:b5:4d:7a:e8:ec:21:14:69:f8:8e:e2: f1:e7:93:59:36:9b:11:ed:a2:2a:13:3e:f3:76:7b: f5:b3:a3:ee:b7:e9:a1:3e:63:52:fb:12:d0:2f:5c: a7:6f:fc:13:34:3b:b9:bd:0e:16:9c:e4:c3:e3:7d: af:78:c3:6a:62:c3:f1:21:99:79:33:0d:67:60:ee: 6a:52:85:f8:d7:e9:0b:82:11:82:e1:50:33:38:96: ee:97:17:6d:25:13:85:39:94:e2:e4:86:06:14:54: a4:ee:e7:c8:c0:9d:d4:a9:bd:02:dd:da:42:ca:5f: 15:1a:8d:8f:b1:07:55:38:53:ef:4d:63:44:43:ae: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2F:DE:C0:C5:F9:E2:15:5B:A5:10:FA:7A:2D:07:24:BD:28:44:71 X509v3 Authority Key Identifier: keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/RS_ewMX54hVbpRD6ei0HJL0oRHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1194::/48 Signature Algorithm: sha256WithRSAEncryption 4b:6e:8c:5e:1a:2d:68:23:11:d3:28:d6:cf:40:8b:9e:fe:91: 49:19:0d:0b:91:1f:18:fd:99:97:2c:aa:c9:73:12:e7:a3:99: 90:d6:b8:75:a5:5b:46:95:93:c2:c1:cb:4d:53:a2:f7:63:e9: 6a:4b:b2:96:dd:e9:42:20:0d:f3:6d:61:57:fa:bb:32:10:fd: c8:d0:68:3c:d6:d4:e1:ac:4b:1d:38:b2:a4:a9:bf:c6:d7:01: 9e:7b:1d:b4:55:08:b4:27:d2:80:00:46:cc:15:7f:77:31:43: 3c:c5:c7:fb:47:1b:d2:9b:2c:38:78:3f:d1:8b:6d:0e:04:a3: 52:d4:99:a5:97:6e:02:46:d7:53:c2:f0:10:ba:0e:aa:f4:80: 16:e6:aa:c0:88:86:b6:7e:6f:90:93:6c:71:0e:68:00:a9:57: 41:73:38:46:e3:d6:e2:48:6b:59:cc:bd:1c:75:f6:d6:2d:c2: 0d:57:f4:6b:8f:31:f9:6a:65:bb:9a:81:05:c9:ae:30:53:d5: 24:4a:89:d6:29:9c:43:9a:f4:b7:3c:cc:64:cb:d2:f7:28:83: d4:bf:f6:ec:c7:08:d4:87:aa:35:c5:39:46:61:41:9b:de:f1: 29:7d:74:b5:73:d8:e5:47:dd:60:19:74:fe:8d:30:85:df:a0: 58:d1:99:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57OB75iyHEJn9VnURtnnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMzQxNTU4ZGJhMGI2ZGI5NGM1NWNlMDZlMzA2ZmY2NTE5 ZDZlZjEwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTJmZGVjMGM1ZjllMjE1NWJhNTEwZmE3YTJkMDcyNGJkMjg0NDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYpuO7IgZatYA3MSf1S78ZoVQwDr 8Zeug5soiYe76ylBM28Tcul2fNZ+ccMtynTL7tAL38/vQSWFxfEbZPHzbewhy6vn rzEsDRKJUeP9bIxAqIGJm8UkrL8HT4g8deu91Hbq97YmekpypeuHyCU3YWQ9rV6a GIGcZjyVtU166OwhFGn4juLx55NZNpsR7aIqEz7zdnv1s6Put+mhPmNS+xLQL1yn b/wTNDu5vQ4WnOTD432veMNqYsPxIZl5Mw1nYO5qUoX41+kLghGC4VAzOJbulxdt JROFOZTi5IYGFFSk7ufIwJ3Uqb0C3dpCyl8VGo2PsQdVOFPvTWNEQ65p9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEUv3sDF+eIVW6UQ+notByS9KERxMB8GA1UdIwQY MBaAFEo0FVjboLbblMVc4G4wb/ZRnW7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYt MGI2OTdhM2I3NjJhLzEvUlNfZXdNWDU0aFZicFJENmVpMEhKTDBvUkhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYtMGI2OTdhM2I3NjJh LzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBGU MA0GCSqGSIb3DQEBCwUAA4IBAQBLboxeGi1oIxHTKNbPQIue/pFJGQ0LkR8Y/ZmX LKrJcxLno5mQ1rh1pVtGlZPCwctNU6L3Y+lqS7KW3elCIA3zbWFX+rsyEP3I0Gg8 1tThrEsdOLKkqb/G1wGeex20VQi0J9KAAEbMFX93MUM8xcf7RxvSmyw4eD/Ri20O BKNS1Jmll24CRtdTwvAQug6q9IAW5qrAiIa2fm+Qk2xxDmgAqVdBczhG49biSGtZ zL0cdfbWLcINV/RrjzH5amW7moEFya4wU9UkSonWKZxDmvS3PMxky9L3KIPUv/bs xwjUh6o1xTlGYUGb3vEpfXS1c9jlR91gGXT+jTCF36BY0Zlo -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:32 2026 by rpki-client