This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/EVWA8tRR_GUgCCB9WljFzwOIIAI.roa File: EVWA8tRR_GUgCCB9WljFzwOIIAI.roa (raw, json) Hash identifier: UVMlzJcrxW3V+aJ2ZuqXdONo4GBzzD3MR0Pi9zGZHY8= Subject key identifier: 11:55:80:F2:D4:51:FC:65:20:08:20:7D:5A:58:C5:CF:03:88:20:02 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8035754886C38DDD76F3AFBC23392D Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/EVWA8tRR_GUgCCB9WljFzwOIIAI.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215750 IP address blocks: 2a0f:7803:e300::/40 maxlen: 48 2a0f:7803:fe40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:75:48:86:c3:8d:dd:76:f3:af:bc:23:39:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=115580f2d451fc652008207d5a58c5cf03882002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:ed:a2:45:08:33:3a:ee:49:af:ae:c2:55: 9e:6b:92:4e:ee:e1:8d:0d:ef:87:43:cc:18:cf:07: 86:01:6b:06:d1:b0:12:84:40:24:e5:5f:6a:ec:49: ca:a8:f6:04:3a:6b:83:5d:38:4c:9e:c4:76:1e:f0: 75:84:ba:b5:ce:d1:c6:c3:cb:aa:72:c1:cd:3d:fa: 43:c3:2c:7a:bb:29:fa:b8:82:71:35:b6:bb:06:aa: 9e:61:29:4c:1b:bb:3d:ce:23:6e:b2:c9:16:6a:06: fc:ab:32:80:cf:fc:e0:67:e8:2f:1b:a1:17:d8:b3: 34:99:6c:d2:d2:4b:1c:84:38:d8:20:7a:c2:9e:3e: 71:7b:be:d8:be:d6:d7:af:dd:60:30:69:28:26:74: 28:2b:5c:b1:d9:5b:54:db:a0:b5:b2:27:66:28:9c: 57:52:ce:59:17:c4:19:59:8b:ec:08:f8:4c:9a:db: df:da:53:f8:0e:9b:2d:84:d4:59:2d:f0:43:f3:44: 7d:0b:64:4a:65:2a:94:5f:92:e2:de:63:e1:93:fc: ea:6f:d7:04:12:29:91:47:5a:fc:e3:f7:e3:79:24: 48:21:e9:8d:8e:f4:98:91:04:94:0a:9b:67:15:66: a4:02:fd:9a:fa:d4:49:96:f2:f7:d2:85:3c:c3:7d: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:55:80:F2:D4:51:FC:65:20:08:20:7D:5A:58:C5:CF:03:88:20:02 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/EVWA8tRR_GUgCCB9WljFzwOIIAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:e300::/40 2a0f:7803:fe40::/44 Signature Algorithm: sha256WithRSAEncryption b9:63:97:ef:77:d4:4c:9b:03:4a:31:36:54:49:05:a0:0a:f9: 52:10:03:16:cd:6e:da:12:33:f0:2b:96:a3:88:ae:7f:cc:c9: 0f:68:42:b4:05:42:f6:75:91:d6:47:97:29:d5:55:e2:0c:46: 66:87:b0:cf:d0:2f:54:48:1b:61:5d:20:1b:eb:86:f5:13:f2: 09:73:82:1b:2f:66:61:ed:17:db:10:6e:85:de:d7:49:bd:54: ae:a6:e8:98:7e:07:54:66:70:6c:45:dc:69:70:c4:f4:25:e7: b4:a9:fd:d0:4c:f2:06:81:ec:de:dd:db:e5:db:46:0f:e7:33: d5:e2:cc:25:cb:9b:83:20:c8:25:f6:0b:e4:f1:80:1d:b1:9b: dd:de:55:85:e9:6e:6c:89:83:4f:6a:69:1b:68:7e:0b:1f:68: 94:3a:68:9c:3d:60:5d:61:b3:d4:ff:79:e6:82:f8:60:ab:77: bf:a0:2a:55:32:d3:b2:1a:b7:f4:9a:16:fd:ef:7b:58:92:1b: 29:42:39:a9:dd:f1:5d:ab:14:ca:18:2b:37:5c:be:de:b1:c1: df:52:fd:70:6d:9c:a6:cb:75:9f:9c:ea:4b:39:09:c9:53:22: c9:ee:c5:13:7f:11:81:53:18:a1:b0:7e:69:2a:22:14:93:a3: d5:de:12:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8gDV1SIbDjd1286+8IzktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTU1ODBmMmQ0NTFmYzY1MjAwODIwN2Q1YTU4YzVjZjAzODgyMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z3tokUIMzruSa+uwlWea5JO7uGN De+HQ8wYzweGAWsG0bAShEAk5V9q7EnKqPYEOmuDXThMnsR2HvB1hLq1ztHGw8uq csHNPfpDwyx6uyn6uIJxNba7BqqeYSlMG7s9ziNusskWagb8qzKAz/zgZ+gvG6EX 2LM0mWzS0kschDjYIHrCnj5xe77YvtbXr91gMGkoJnQoK1yx2VtU26C1sidmKJxX Us5ZF8QZWYvsCPhMmtvf2lP4DpsthNRZLfBD80R9C2RKZSqUX5Li3mPhk/zqb9cE EimRR1r84/fjeSRIIemNjvSYkQSUCptnFWakAv2a+tRJlvL30oU8w305wwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFBFVgPLUUfxlIAggfVpYxc8DiCACMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvRVZXQTh0UlJfR1VnQ0NCOVdsakZ6d09JSUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg94A+MD BwQqD3gD/kAwDQYJKoZIhvcNAQELBQADggEBALljl+931EybA0oxNlRJBaAK+VIQ AxbNbtoSM/ArlqOIrn/MyQ9oQrQFQvZ1kdZHlynVVeIMRmaHsM/QL1RIG2FdIBvr hvUT8glzghsvZmHtF9sQboXe10m9VK6m6Jh+B1RmcGxF3GlwxPQl57Sp/dBM8gaB 7N7d2+XbRg/nM9XizCXLm4MgyCX2C+TxgB2xm93eVYXpbmyJg09qaRtofgsfaJQ6 aJw9YF1hs9T/eeaC+GCrd7+gKlUy07Iat/SaFv3ve1iSGylCOand8V2rFMoYKzdc vt6xwd9S/XBtnKbLdZ+c6ks5CclTIsnuxRN/EYFTGKGwfmkqIhSTo9XeEkg= -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:58 2026 by rpki-client