This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/EVC6qGwfCrszAWIa6NrJgfF3FOc.roa File: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (raw, json) Hash identifier: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo= Subject key identifier: 11:50:BA:A8:6C:1F:0A:BB:33:01:62:1A:E8:DA:C9:81:F1:77:14:E7 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED4914F18CFE462355D31EE3075142 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/EVC6qGwfCrszAWIa6NrJgfF3FOc.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57429 IP address blocks: 2a0f:607:1024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:49:14:f1:8c:fe:46:23:55:d3:1e:e3:07:51:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1150baa86c1f0abb3301621ae8dac981f17714e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:b7:19:20:ee:03:7e:21:d0:2c:6b:3a:36: 25:d8:ce:be:86:ad:06:61:24:7f:a9:ea:39:15:2e: 6a:fa:65:6f:2d:95:60:5b:36:5c:fa:c1:dc:9b:be: 8e:20:28:0c:9d:64:d7:76:f3:8f:ca:09:bf:75:6c: dc:6b:d5:d2:68:2a:39:e6:a3:09:bf:53:35:e6:f8: 3e:dd:34:16:c5:26:48:ec:f2:f6:c5:8d:11:00:3b: 71:c6:7b:3d:17:73:35:9b:83:87:b7:f2:c9:8e:f7: 06:87:ef:31:27:d9:6c:5e:12:de:e3:fa:5e:4c:f5: b7:70:8c:91:26:ab:99:14:c8:72:b6:ac:85:4e:eb: 16:fd:10:8c:c5:05:49:ea:72:25:29:14:56:b6:32: 47:64:ee:5b:0b:a5:a9:1d:e9:a7:18:50:d9:4d:2d: 41:8f:a5:3c:88:ac:c7:66:67:e0:5b:ad:23:07:69: fe:21:96:03:f9:f9:bd:20:26:4e:12:d0:c7:c4:0c: f5:b9:23:46:e9:e1:19:0a:31:9c:b7:a9:59:42:fb: 1b:5c:8d:10:36:cb:46:f0:62:f9:9a:6c:72:76:63: 49:fc:93:46:96:dd:27:51:a1:45:5c:09:fb:3a:42: 6e:2c:ec:13:f4:f4:c4:46:e2:90:28:ac:3a:1c:eb: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:50:BA:A8:6C:1F:0A:BB:33:01:62:1A:E8:DA:C9:81:F1:77:14:E7 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/EVC6qGwfCrszAWIa6NrJgfF3FOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1024::/48 Signature Algorithm: sha256WithRSAEncryption 78:f6:42:42:89:af:79:35:2a:21:80:58:3b:d0:38:9f:68:59: 6e:a2:9f:98:01:85:8e:7d:68:69:d7:05:46:7d:32:bf:02:73: 06:68:a0:06:cb:c4:ad:f1:d9:3b:bb:7c:da:3c:ca:6f:37:2c: cf:74:b1:b9:2c:c6:e2:cb:eb:01:b1:7b:dc:20:31:d9:11:02: dd:12:27:12:16:00:27:90:0f:aa:73:1b:e0:f4:99:8d:d7:09: 92:4f:fd:f4:aa:c1:e8:ac:b5:73:20:0b:92:44:40:f8:2e:ee: 0d:36:56:fb:c5:4b:42:7a:15:af:72:73:e1:b4:5a:d2:70:0d: 6e:c5:91:f9:a0:11:64:69:ee:01:dc:68:d5:d9:8b:44:a9:a3: ec:1a:5c:f6:62:95:c0:cf:49:0d:5c:b2:11:57:30:b8:4e:23: 79:50:b3:26:dc:96:b3:a9:39:4a:01:41:e9:9e:4e:71:f9:4a: 39:f1:6e:83:70:34:e0:fb:a5:31:26:6c:ea:12:f8:6c:d6:06: c3:d7:74:2d:96:e2:eb:f8:da:d0:f4:3f:66:ce:79:96:f5:fa: 3d:f4:88:0d:16:e7:1b:e6:1a:70:01:9a:79:26:93:3f:7a:0e: 56:de:39:c0:2b:e0:94:b8:95:87:61:2a:e7:f9:3d:0e:9e:36: 9c:29:80:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UkU8Yz+RiNV0x7jB1FCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTUwYmFhODZjMWYwYWJiMzMwMTYyMWFlOGRhYzk4MWYxNzcxNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn+3GSDuA34h0CxrOjYl2M6+hq0G YSR/qeo5FS5q+mVvLZVgWzZc+sHcm76OICgMnWTXdvOPygm/dWzca9XSaCo55qMJ v1M15vg+3TQWxSZI7PL2xY0RADtxxns9F3M1m4OHt/LJjvcGh+8xJ9lsXhLe4/pe TPW3cIyRJquZFMhytqyFTusW/RCMxQVJ6nIlKRRWtjJHZO5bC6WpHemnGFDZTS1B j6U8iKzHZmfgW60jB2n+IZYD+fm9ICZOEtDHxAz1uSNG6eEZCjGct6lZQvsbXI0Q NstG8GL5mmxydmNJ/JNGlt0nUaFFXAn7OkJuLOwT9PTERuKQKKw6HOsgTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBFQuqhsHwq7MwFiGujayYHxdxTnMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRVZDNnFHd2ZDcnN6QVdJYTZOckpnZkYzRk9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxAk MA0GCSqGSIb3DQEBCwUAA4IBAQB49kJCia95NSohgFg70DifaFluop+YAYWOfWhp 1wVGfTK/AnMGaKAGy8St8dk7u3zaPMpvNyzPdLG5LMbiy+sBsXvcIDHZEQLdEicS FgAnkA+qcxvg9JmN1wmST/30qsHorLVzIAuSRED4Lu4NNlb7xUtCehWvcnPhtFrS cA1uxZH5oBFkae4B3GjV2YtEqaPsGlz2YpXAz0kNXLIRVzC4TiN5ULMm3JazqTlK AUHpnk5x+Uo58W6DcDTg+6UxJmzqEvhs1gbD13QtluLr+NrQ9D9mznmW9fo99IgN Fucb5hpwAZp5JpM/eg5W3jnAK+CUuJWHYSrn+T0OnjacKYAE -----END CERTIFICATE-----Generated at Thu Jan 8 00:37:52 2026 by rpki-client