This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/EzuHouYxd53u3vkGcKRZ0g9x5JI.roa File: EzuHouYxd53u3vkGcKRZ0g9x5JI.roa (raw, json) Hash identifier: skJ7kZK8dJtBwIKwCf9WtSm/5TsYVPUhUjrWUKbZczg= Subject key identifier: 13:3B:87:A2:E6:31:77:9D:EE:DE:F9:06:70:A4:59:D2:0F:71:E4:92 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8028B45BBB2ED4FD7377361D1C86F5 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/EzuHouYxd53u3vkGcKRZ0g9x5JI.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214040 IP address blocks: 2a0f:7804:f650::/44 maxlen: 48 2a0f:7804:f9f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:28:b4:5b:bb:2e:d4:fd:73:77:36:1d:1c:86:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133b87a2e631779deedef90670a459d20f71e492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:7b:ae:da:31:46:02:6a:6a:62:09:4c:88: 2b:09:c3:5b:89:a1:52:a9:77:76:85:16:ca:e9:3b: 2d:a9:16:18:1a:68:00:80:dd:16:57:e9:3b:53:41: 05:69:e4:d3:17:aa:e1:95:ea:b0:94:87:34:96:32: f5:97:2b:7d:9c:87:bd:cd:a7:ea:1d:71:4c:dc:9c: 68:15:24:69:62:03:ef:2e:1d:a9:54:79:52:ec:4c: 73:e0:a3:3b:57:00:52:92:8a:16:6e:a7:b2:90:53: ca:9e:12:9c:32:31:31:0e:ce:cf:f4:ef:c9:67:cd: 98:f9:58:13:3d:de:ba:8d:42:6f:16:83:6a:dd:44: c1:7c:c2:2b:27:f1:4c:e8:73:02:6e:15:c6:08:8a: fe:3e:5f:28:4b:ac:29:03:3e:e3:41:d0:43:4a:a6: 58:5b:7b:7d:b7:e7:64:19:d0:3e:59:42:d1:b6:f1: af:31:17:52:4d:4a:f7:51:74:30:8e:6f:ea:c7:8b: 2b:d5:2d:77:fc:82:78:6c:8a:cf:36:d3:ee:b6:49: 17:19:77:70:72:f0:c8:9c:23:96:f9:42:e3:53:d5: 3d:80:32:92:62:46:c3:0a:ed:1b:4e:1c:0f:8f:8f: 38:14:f5:7f:ee:e7:58:07:79:5c:4b:7b:5f:ee:4d: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:87:A2:E6:31:77:9D:EE:DE:F9:06:70:A4:59:D2:0F:71:E4:92 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/EzuHouYxd53u3vkGcKRZ0g9x5JI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7804:f650::/44 2a0f:7804:f9f0::/44 Signature Algorithm: sha256WithRSAEncryption 2c:5a:89:01:d5:99:d6:40:cd:56:ca:45:57:5e:c0:eb:50:0a: 09:59:95:15:bb:40:d6:da:e9:6f:3b:de:c0:ed:9e:8d:53:68: 99:1b:a7:b5:0f:2d:f2:80:39:00:e3:39:80:5b:a5:7f:63:ee: 24:09:55:c4:08:bc:c3:f5:c7:58:e1:93:49:b4:93:43:c1:b7: f7:41:6e:39:a8:95:e5:23:1a:ec:be:98:6f:6a:e4:cc:1a:fe: ad:2c:d2:23:f7:4a:b8:a8:06:17:91:2c:a0:09:47:5a:14:58: 70:5f:59:aa:26:38:22:7a:bf:18:89:f3:a2:52:fb:0b:fe:c3: 38:38:cd:8c:78:29:27:fa:6f:f6:98:ae:20:20:b5:f9:25:82: ca:68:9c:2c:de:d8:b5:2d:84:f0:68:c8:f2:17:55:c6:ab:6b: eb:9e:4e:4c:13:40:0b:d8:00:1f:7c:68:d6:6c:a4:c3:52:2f: 60:02:41:a6:f5:29:21:bf:74:a8:7d:53:d4:f0:ab:2f:93:34: 5a:f2:8a:6f:c5:0c:6e:09:9f:6b:ee:f8:86:92:09:f8:8e:e9: 05:4d:f5:d1:d0:47:52:fd:53:b4:d5:22:13:4f:2f:8a:10:89: f4:44:f9:5c:e8:70:ff:5a:d7:d7:3b:65:98:aa:7f:7e:bb:26: 6c:f9:45:ce -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gCi0W7su1P1zdzYdHIb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNiODdhMmU2MzE3NzlkZWVkZWY5MDY3MGE0NTlkMjBmNzFlNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHx7rtoxRgJqamIJTIgrCcNbiaFS qXd2hRbK6TstqRYYGmgAgN0WV+k7U0EFaeTTF6rhleqwlIc0ljL1lyt9nIe9zafq HXFM3JxoFSRpYgPvLh2pVHlS7Exz4KM7VwBSkooWbqeykFPKnhKcMjExDs7P9O/J Z82Y+VgTPd66jUJvFoNq3UTBfMIrJ/FM6HMCbhXGCIr+Pl8oS6wpAz7jQdBDSqZY W3t9t+dkGdA+WULRtvGvMRdSTUr3UXQwjm/qx4sr1S13/IJ4bIrPNtPutkkXGXdw cvDInCOW+ULjU9U9gDKSYkbDCu0bThwPj484FPV/7udYB3lcS3tf7k0IuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBM7h6LmMXed7t75BnCkWdIPceSSMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvRXp1SG91WXhkNTN1M3ZrR2NLUlowZzl4NUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94BPZQ AwcEKg94BPnwMA0GCSqGSIb3DQEBCwUAA4IBAQAsWokB1ZnWQM1WykVXXsDrUAoJ WZUVu0DW2ulvO97A7Z6NU2iZG6e1Dy3ygDkA4zmAW6V/Y+4kCVXECLzD9cdY4ZNJ tJNDwbf3QW45qJXlIxrsvphvauTMGv6tLNIj90q4qAYXkSygCUdaFFhwX1mqJjgi er8YifOiUvsL/sM4OM2MeCkn+m/2mK4gILX5JYLKaJws3ti1LYTwaMjyF1XGq2vr nk5ME0AL2AAffGjWbKTDUi9gAkGm9Skhv3SofVPU8KsvkzRa8opvxQxuCZ9r7viG kgn4jukFTfXR0EdS/VO01SITTy+KEIn0RPlc6HD/WtfXO2WYqn9+uyZs+UXO -----END CERTIFICATE-----Generated at Sun Jan 11 12:58:11 2026 by rpki-client