This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/EBsnXuG2a2uBMEsQVfF-KePJhMk.roa File: EBsnXuG2a2uBMEsQVfF-KePJhMk.roa (raw, json) Hash identifier: bjQUmEt2k6yWvLOqxU6vKmfzVfKPRv4cTmewL826UYc= Subject key identifier: 10:1B:27:5E:E1:B6:6B:6B:81:30:4B:10:55:F1:7E:29:E3:C9:84:C9 Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11 Certificate serial: 019B7B36D174CF487822CAB043688155DBE4 Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/EBsnXuG2a2uBMEsQVfF-KePJhMk.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61095 IP address blocks: 2a04:1040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d1:74:cf:48:78:22:ca:b0:43:68:81:55:db:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=101b275ee1b66b6b81304b1055f17e29e3c984c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:7e:b2:62:26:60:dd:73:fb:e4:32:a5:80: 49:99:43:fc:d9:b3:d5:56:aa:35:ff:03:ce:7e:24: 1e:c3:99:5c:b2:1b:f9:2c:f7:56:75:c2:9f:7f:bf: 4f:39:21:d2:7a:85:3f:cc:00:4f:b5:34:b9:48:6b: 3d:2b:0c:de:3f:d0:da:28:fb:d0:86:80:24:6a:b7: e4:93:8a:c9:fd:fd:8b:e4:1c:a7:ac:d0:12:a6:ab: fc:06:33:cb:a7:f0:51:9f:f7:ab:c4:50:2e:35:47: d3:db:72:3f:e8:f8:fc:9a:dd:70:56:17:f4:ec:43: 05:80:83:b7:e3:33:7e:df:1a:ea:ac:2d:a7:de:80: 5b:3a:7a:7e:16:22:9d:2b:98:28:9a:f5:96:42:ae: a4:14:86:71:fc:23:94:6b:c0:7a:68:0e:96:30:d9: fa:bd:d3:d0:20:6a:18:6d:2b:67:55:f4:23:23:96: e9:48:50:27:8c:39:b5:32:45:10:1b:45:91:ac:2d: e1:15:22:78:cd:89:3d:73:ac:2d:bb:0a:63:12:ad: 93:ba:3e:41:51:33:c5:c2:86:2c:9a:a6:d7:44:6c: 66:92:60:de:04:4b:fa:21:cd:db:86:cf:6f:af:67: 27:95:89:75:0e:92:c8:21:60:39:42:30:fb:0d:1a: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:27:5E:E1:B6:6B:6B:81:30:4B:10:55:F1:7E:29:E3:C9:84:C9 X509v3 Authority Key Identifier: keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/EBsnXuG2a2uBMEsQVfF-KePJhMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:1040::/29 Signature Algorithm: sha256WithRSAEncryption 50:cd:33:52:4b:9c:d1:ad:8e:56:10:c3:f0:80:84:be:d3:b6: e9:ff:d8:48:12:f8:da:de:4a:52:a7:3a:f3:ac:04:fd:18:2a: a4:42:cf:44:b2:30:15:c2:20:7e:63:62:ff:b4:c7:92:7e:59: da:15:d3:ff:2d:e9:e9:8d:c6:58:6a:da:69:7c:14:9d:2b:42: 59:25:49:11:13:cd:24:11:3b:3f:ec:08:83:e2:25:9f:55:8b: 00:1c:0c:05:72:77:d6:7f:f7:f9:db:33:ad:0c:43:a5:75:20: e9:e9:5c:76:af:5a:ef:4a:e5:7a:9e:1f:5f:9e:d7:56:d7:b6: 0c:db:b5:ff:38:1f:fe:98:54:38:ac:7c:90:71:6a:d4:6e:a4: a1:3d:dc:a1:0a:a6:96:f2:e9:bf:3c:c9:0d:86:0f:1e:d7:f6: 57:af:00:a3:2d:57:af:23:27:c6:49:97:d9:b7:32:05:d9:0f: fd:6d:1d:1c:9d:a9:6e:fc:1e:b8:8a:7a:43:fe:eb:47:09:2c: 46:ee:8b:09:40:b0:5f:a9:93:37:2e:1b:eb:85:d1:8d:94:24: 18:c3:64:25:87:c9:b6:2f:ef:64:cc:d7:b7:52:3a:75:33:c2: aa:d3:eb:8f:01:9e:a6:58:8d:d7:2b:e6:52:b2:c6:e5:ec:cc: f5:9c:b5:08 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NtF0z0h4IsqwQ2iBVdvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMjBkNWM3OGMxMDdiY2Y5YzcxNTQ1M2QyMTQ0NGY2OTZl NDRiMTEwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDFiMjc1ZWUxYjY2YjZiODEzMDRiMTA1NWYxN2UyOWUzYzk4NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lB+smImYN1z++QypYBJmUP82bPV Vqo1/wPOfiQew5lcshv5LPdWdcKff79POSHSeoU/zABPtTS5SGs9KwzeP9DaKPvQ hoAkarfkk4rJ/f2L5BynrNASpqv8BjPLp/BRn/erxFAuNUfT23I/6Pj8mt1wVhf0 7EMFgIO34zN+3xrqrC2n3oBbOnp+FiKdK5gomvWWQq6kFIZx/COUa8B6aA6WMNn6 vdPQIGoYbStnVfQjI5bpSFAnjDm1MkUQG0WRrC3hFSJ4zYk9c6wtuwpjEq2Tuj5B UTPFwoYsmqbXRGxmkmDeBEv6Ic3bhs9vr2cnlYl1DpLIIWA5QjD7DRpMMQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBAbJ17htmtrgTBLEFXxfinjyYTJMB8GA1UdIwQY MBaAFEsg1ceMEHvPnHFUU9IURPaW5EsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTct NGI5YTYwNThiNDIzLzEvRUJzblh1RzJhMnVCTUVzUVZmRi1LZVBKaE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTctNGI5YTYwNThiNDIz LzEvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgQQQDAN BgkqhkiG9w0BAQsFAAOCAQEAUM0zUkuc0a2OVhDD8ICEvtO26f/YSBL42t5KUqc6 86wE/RgqpELPRLIwFcIgfmNi/7THkn5Z2hXT/y3p6Y3GWGraaXwUnStCWSVJERPN JBE7P+wIg+Iln1WLABwMBXJ31n/3+dszrQxDpXUg6elcdq9a70rlep4fX57XVte2 DNu1/zgf/phUOKx8kHFq1G6koT3coQqmlvLpvzzJDYYPHtf2V68Aoy1XryMnxkmX 2bcyBdkP/W0dHJ2pbvweuIp6Q/7rRwksRu6LCUCwX6mTNy4b64XRjZQkGMNkJYfJ ti/vZMzXt1I6dTPCqtPrjwGepliN1yvmUrLG5ezM9Zy1CA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:45 2026 by rpki-client