This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/evI5OEg6waUB24zj44AWaj3RZOA.roa File: evI5OEg6waUB24zj44AWaj3RZOA.roa (raw, json) Hash identifier: Y1fnav5sUcdKyDCdtyfukclX/9hK+jv3+W4ALIcJR4g= Subject key identifier: 7A:F2:39:38:48:3A:C1:A5:01:DB:8C:E3:E3:80:16:6A:3D:D1:64:E0 Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef Certificate serial: 019B7A5B85839BCD5E4EEFE7DBFAF32804B1 Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/evI5OEg6waUB24zj44AWaj3RZOA.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196904 IP address blocks: 2a03:dc40:ffdf::/48 maxlen: 48 2a03:dc40:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:83:9b:cd:5e:4e:ef:e7:db:fa:f3:28:04:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af23938483ac1a501db8ce3e380166a3dd164e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:71:7c:7a:6a:4d:5e:ae:00:65:79:e7:d5: e7:69:2c:06:9f:88:ce:8e:8f:33:44:49:68:48:1c: a1:13:bd:25:46:e2:b0:80:6c:ec:cb:c4:48:6e:2c: 6e:a5:b3:fb:8e:f5:21:10:02:7a:18:58:3a:7c:43: 46:6a:30:89:00:7d:68:74:fb:cc:ee:7a:af:5e:f9: db:d6:bf:e0:5b:6f:60:b9:be:21:f5:8b:ae:41:ff: 5e:93:aa:c8:7c:f9:38:ac:1d:8b:3f:45:cd:8d:09: 1b:ab:27:0b:01:22:95:4b:6b:58:99:af:e2:29:c0: c3:87:5a:3b:b5:d7:a2:c6:f8:a9:21:d9:b2:d5:86: 6a:f3:5c:3e:cf:c6:01:3e:53:c1:ab:1a:92:3e:10: 4c:e4:ef:a8:7f:28:f0:b9:87:7b:4e:e6:4f:62:19: a1:a8:91:14:ce:31:09:ab:a0:2d:c7:48:fa:52:10: 73:ad:8f:05:1c:65:27:c1:ec:ae:e9:8a:1a:90:14: e6:60:4d:e3:f9:a9:01:b7:4c:07:ce:c7:25:e2:4d: b2:c6:bb:bc:af:b2:15:cd:16:5f:69:19:be:7b:65: 76:04:2f:d5:8e:30:c0:a1:7b:a0:a7:cd:f7:90:d6: cc:f5:8b:09:e0:87:3e:c9:dc:4d:1b:32:48:fa:3d: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F2:39:38:48:3A:C1:A5:01:DB:8C:E3:E3:80:16:6A:3D:D1:64:E0 X509v3 Authority Key Identifier: keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/evI5OEg6waUB24zj44AWaj3RZOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:dc40:ffdf::/48 2a03:dc40:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 42:e1:b3:39:9e:e2:ff:40:5d:ab:20:b5:e1:8e:d5:95:86:15: e7:04:5d:31:7e:73:f9:83:d1:e4:68:08:55:df:13:59:c1:e8: a2:63:08:22:ca:f6:32:e7:3c:00:7d:75:b9:01:e2:d7:91:14: 8c:49:4e:dc:a6:fb:d2:e7:9e:e4:95:33:ef:24:9a:68:fd:20: d3:84:9a:b5:13:1c:0b:c9:d3:0f:93:8d:25:67:7f:19:8d:c1: 97:08:42:ad:84:31:e9:8e:5c:13:49:ad:ff:06:20:33:7e:5e: a0:29:2a:46:d7:e4:42:4d:43:dc:1b:e3:37:62:4b:ce:7e:9e: cc:d7:de:65:fe:4b:16:55:16:de:aa:4e:1c:bd:d6:a0:96:9c: 4a:46:83:08:2b:02:ab:87:cc:02:39:18:98:eb:73:c8:d6:af: d6:4e:b8:9d:f5:71:3e:fd:16:05:d5:f1:ad:e3:67:f5:59:df: 7c:8f:9d:e4:23:60:a2:ce:f4:74:34:7d:0c:ac:34:a3:60:9a: b9:31:9f:bd:05:38:c9:aa:94:10:02:9a:47:6f:94:58:0f:8d: 08:65:ed:46:69:26:5c:66:98:40:81:cc:25:03:46:11:c6:fa: ed:e6:3e:57:d7:44:50:2c:f8:43:74:23:62:f9:37:1a:3c:4c: c2:5a:56:7d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W4WDm81eTu/n2/rzKASxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjYyZGJhZWNkMzU5YTRhMmE4OTEyY2YyZTY2OTNiMmY0 OGM5ZWYwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWYyMzkzODQ4M2FjMWE1MDFkYjhjZTNlMzgwMTY2YTNkZDE2NGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuylxfHpqTV6uAGV559XnaSwGn4jO jo8zREloSByhE70lRuKwgGzsy8RIbixupbP7jvUhEAJ6GFg6fENGajCJAH1odPvM 7nqvXvnb1r/gW29gub4h9YuuQf9ek6rIfPk4rB2LP0XNjQkbqycLASKVS2tYma/i KcDDh1o7tdeixvipIdmy1YZq81w+z8YBPlPBqxqSPhBM5O+ofyjwuYd7TuZPYhmh qJEUzjEJq6Atx0j6UhBzrY8FHGUnweyu6YoakBTmYE3j+akBt0wHzscl4k2yxru8 r7IVzRZfaRm+e2V2BC/VjjDAoXugp833kNbM9YsJ4Ic+ydxNGzJI+j3YqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHryOThIOsGlAduM4+OAFmo90WTgMB8GA1UdIwQY MBaAFGe2Lbrs01mkoqiRLPLmaTsvSMnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTIt MjgxZWVlMzFiNzQ3LzEvZXZJNU9FZzZ3YVVCMjR6ajQ0QVdhajNSWk9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTItMjgxZWVlMzFiNzQ3 LzEvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgPcQP/f AwcAKgPcQP//MA0GCSqGSIb3DQEBCwUAA4IBAQBC4bM5nuL/QF2rILXhjtWVhhXn BF0xfnP5g9HkaAhV3xNZweiiYwgiyvYy5zwAfXW5AeLXkRSMSU7cpvvS557klTPv JJpo/SDThJq1ExwLydMPk40lZ38ZjcGXCEKthDHpjlwTSa3/BiAzfl6gKSpG1+RC TUPcG+M3YkvOfp7M195l/ksWVRbeqk4cvdaglpxKRoMIKwKrh8wCORiY63PI1q/W Trid9XE+/RYF1fGt42f1Wd98j53kI2CizvR0NH0MrDSjYJq5MZ+9BTjJqpQQAppH b5RYD40IZe1GaSZcZphAgcwlA0YRxvrt5j5X10RQLPhDdCNi+TcaPEzCWlZ9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:32 2026 by rpki-client