This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/eaw_KDLii_O0OZBia4ceyJvvRgg.roa File: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (raw, json) Hash identifier: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc= Subject key identifier: 79:AC:3F:28:32:E2:8B:F3:B4:39:90:62:6B:87:1E:C8:9B:EF:46:08 Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397 Certificate serial: 019B7C11F7275660F07E4005ECD8980B4EA8 Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/eaw_KDLii_O0OZBia4ceyJvvRgg.roa Signing time: Fri 02 Jan 2026 00:18:30 +0000 ROA not before: Fri 02 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199568 IP address blocks: 2001:678:7b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f7:27:56:60:f0:7e:40:05:ec:d8:98:0b:4e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31938bc720282444babd3b26b3492b456adb397 Validity Not Before: Jan 2 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79ac3f2832e28bf3b43990626b871ec89bef4608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:25:83:10:f0:01:d6:53:ff:40:73:e2:aa: 55:9b:8e:ae:6d:eb:ad:5d:ca:ad:86:d8:c3:69:3f: dc:6f:83:58:8c:92:de:b5:f3:28:a4:52:2d:db:17: 89:c4:dd:28:69:f5:79:6b:05:e8:f3:aa:cd:5d:fa: 18:9b:e9:24:5d:e5:0d:12:6e:23:3e:c0:1f:5b:0e: 40:92:ae:8e:b6:7d:8f:84:e3:1c:ca:c9:55:5a:85: f3:7c:87:24:81:c5:28:93:a8:d1:6f:24:d8:77:30: 13:6f:2d:c6:d2:1c:74:bb:58:3c:31:e6:d5:43:6e: f9:5b:b7:17:19:28:e0:d5:cb:d9:f0:04:9b:a6:5c: 64:21:6b:3d:e3:a1:59:5e:c5:e7:7b:47:9d:21:3b: a9:43:e6:fa:a4:b6:0d:96:c6:7b:1d:15:e6:0e:3b: ca:23:d3:4b:2f:db:fc:5f:72:3d:6d:84:69:a4:b0: e1:9a:e4:de:ec:96:a9:82:32:12:86:ba:32:10:89: 0e:b1:c6:eb:be:f8:72:0f:ef:0d:23:5d:5a:c3:17: 3b:a0:f6:8e:c6:94:4d:ad:09:d8:1f:93:5a:15:76: e0:0c:74:d3:8a:a9:07:f1:87:78:1b:ff:97:f3:77: 1d:b3:03:78:f0:32:48:de:b4:64:32:66:51:2d:01: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AC:3F:28:32:E2:8B:F3:B4:39:90:62:6B:87:1E:C8:9B:EF:46:08 X509v3 Authority Key Identifier: keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/eaw_KDLii_O0OZBia4ceyJvvRgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7b0::/48 Signature Algorithm: sha256WithRSAEncryption 91:dd:91:a1:b2:b7:d1:90:02:0a:e7:89:b8:c8:02:b5:25:4b: 91:a9:18:49:12:ef:be:bf:74:3a:46:d7:53:12:2a:53:42:ed: 33:cc:01:ee:d6:d4:12:48:52:b4:bd:fa:91:b8:a2:5b:75:49: 14:d2:38:ed:08:06:06:3d:ea:e9:f3:a8:e8:0b:71:0d:62:28: db:f7:12:93:6f:3d:f8:47:82:9c:2c:a4:f3:83:e6:f0:67:1c: 48:42:66:66:04:f1:7b:ac:80:ef:19:d3:56:51:13:fd:85:48: 34:a7:82:99:12:f8:66:06:3e:18:87:8b:89:65:30:7c:fb:f8: 64:30:66:3a:c5:30:f5:31:cc:bf:8a:51:03:62:81:87:a2:5a: 4a:70:5c:ab:34:42:d7:e4:e8:46:ed:d8:e1:b5:a1:da:71:d2: 09:30:85:05:eb:ff:a5:dc:d9:13:38:92:6e:c5:4b:36:d9:1d: 94:70:66:66:6f:24:a1:d9:85:8c:bd:ad:8d:51:67:8b:ca:f2: 22:81:10:ff:a2:d5:09:4a:72:f4:b7:9c:04:2a:0d:97:d6:5c: c9:61:79:73:b4:45:48:98:88:38:63:8f:68:03:b7:82:6a:2e: a5:60:25:46:1a:48:9c:51:fc:02:c8:ff:b2:ce:ee:d8:8c:57: 26:91:3a:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EfcnVmDwfkAF7NiYC06oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTkzOGJjNzIwMjgyNDQ0YmFiZDNiMjZiMzQ5MmI0NTZh ZGIzOTcwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWFjM2YyODMyZTI4YmYzYjQzOTkwNjI2Yjg3MWVjODliZWY0NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu4lgxDwAdZT/0Bz4qpVm46ubeut XcqthtjDaT/cb4NYjJLetfMopFIt2xeJxN0oafV5awXo86rNXfoYm+kkXeUNEm4j PsAfWw5Akq6Otn2PhOMcyslVWoXzfIckgcUok6jRbyTYdzATby3G0hx0u1g8MebV Q275W7cXGSjg1cvZ8ASbplxkIWs946FZXsXne0edITupQ+b6pLYNlsZ7HRXmDjvK I9NLL9v8X3I9bYRppLDhmuTe7JapgjIShroyEIkOscbrvvhyD+8NI11awxc7oPaO xpRNrQnYH5NaFXbgDHTTiqkH8Yd4G/+X83cdswN48DJI3rRkMmZRLQH+PwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHmsPygy4ovztDmQYmuHHsib70YIMB8GA1UdIwQY MBaAFLMZOLxyAoJES6vTsms0krRWrbOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEt OWI1ZGY4NWMxMTQwLzEvZWF3X0tETGlpX08wT1pCaWE0Y2V5SnZ2UmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEtOWI1ZGY4NWMxMTQw LzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAew MA0GCSqGSIb3DQEBCwUAA4IBAQCR3ZGhsrfRkAIK54m4yAK1JUuRqRhJEu++v3Q6 RtdTEipTQu0zzAHu1tQSSFK0vfqRuKJbdUkU0jjtCAYGPerp86joC3ENYijb9xKT bz34R4KcLKTzg+bwZxxIQmZmBPF7rIDvGdNWURP9hUg0p4KZEvhmBj4Yh4uJZTB8 +/hkMGY6xTD1Mcy/ilEDYoGHolpKcFyrNELX5OhG7djhtaHacdIJMIUF6/+l3NkT OJJuxUs22R2UcGZmbySh2YWMva2NUWeLyvIigRD/otUJSnL0t5wEKg2X1lzJYXlz tEVImIg4Y49oA7eCai6lYCVGGkicUfwCyP+yzu7YjFcmkToi -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:28 2026 by rpki-client