This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/eAYv8vDO2qhIknKZLTDaqDcYe_A.roa File: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (raw, json) Hash identifier: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc= Subject key identifier: 78:06:2F:F2:F0:CE:DA:A8:48:92:72:99:2D:30:DA:A8:37:18:7B:F0 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37A060F0D4AD5E9A655C5BCD59854 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/eAYv8vDO2qhIknKZLTDaqDcYe_A.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142113 IP address blocks: 2a12:6c41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:06:0f:0d:4a:d5:e9:a6:55:c5:bc:d5:98:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78062ff2f0cedaa8489272992d30daa837187bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:8a:33:fd:54:75:5c:74:bc:61:5f:b7:c0: 9b:84:f2:88:82:cc:0d:1e:33:44:9d:27:f3:cf:3f: 97:82:91:0c:3c:05:29:81:dd:3a:1c:5c:36:d7:7f: e5:58:51:b4:5a:ce:71:50:71:fc:d1:d8:f0:50:46: d8:15:00:cd:ca:ff:9c:71:a3:7d:80:07:20:64:45: 70:c1:de:25:2d:b7:2e:19:72:6e:e4:b9:e2:62:91: 6f:8a:d0:33:44:35:5d:de:30:77:a4:b0:91:e8:ee: f4:88:4d:66:5d:48:56:10:dd:6b:f6:da:3c:be:44: 54:40:a6:d1:ff:ff:9f:21:8a:00:04:ad:0f:b0:23: 5c:5b:74:29:f3:f7:9a:3d:a8:e7:e7:3e:c6:76:76: 16:2c:f4:b4:3e:bf:53:60:7c:fb:36:fa:3f:91:3e: 05:3b:34:a1:ee:82:d1:d2:ff:bf:5e:ce:42:69:c2: dd:37:51:c8:f5:a8:df:e4:cc:8c:aa:ed:2e:0f:90: bd:1c:a3:7c:f3:4c:78:d5:cf:15:0b:d6:18:18:7d: 36:3d:b7:9c:f8:6d:a5:84:46:ff:cf:3d:4e:f2:93: 7d:44:34:c1:fd:29:21:78:11:30:c0:a5:dc:fd:98: bc:1c:3c:b4:76:07:b0:30:dd:c7:10:e4:af:cd:a7: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:06:2F:F2:F0:CE:DA:A8:48:92:72:99:2D:30:DA:A8:37:18:7B:F0 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/eAYv8vDO2qhIknKZLTDaqDcYe_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:6c41::/32 Signature Algorithm: sha256WithRSAEncryption 1d:20:0a:74:d9:be:65:0c:8f:dc:7a:a1:2c:b0:47:89:4f:d4: 71:30:68:90:70:de:5d:3a:b9:ba:46:d8:91:78:50:50:2f:31: c1:a9:83:ae:b8:1a:53:d3:8c:34:5a:7f:12:99:e3:57:fb:55: c1:b6:68:26:04:4e:ab:c1:00:65:28:be:3b:b3:de:31:26:19: 4a:60:2e:74:db:05:07:3e:c4:59:f0:4b:58:23:af:bf:30:12: a1:7b:2a:c2:8a:56:f3:5b:09:c5:37:7c:29:95:63:05:24:f5: 5b:34:8f:09:c1:78:d4:6d:3d:33:f2:b8:2b:6d:4c:28:a1:90: 04:90:6b:8e:37:ce:fd:8e:ef:73:9c:9b:24:14:fa:c9:1e:5a: f6:9a:97:b1:0c:36:18:2c:25:a0:0e:63:75:fd:ab:24:55:aa: f6:75:33:bd:eb:d4:19:8d:be:4e:5f:39:f7:bc:85:1b:5d:60: da:88:ef:88:f5:1e:0c:a0:a7:09:81:21:0a:d9:93:34:01:3c: b1:47:e3:cd:25:4b:76:1c:cc:10:87:b7:ac:86:fa:d9:59:aa: 1b:1f:25:ed:b6:62:47:e8:73:bf:67:23:8e:35:4d:fb:10:45: 66:00:7a:ad:d3:95:12:71:db:93:9a:91:f5:fe:a3:06:8a:f6: 75:62:c7:09 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o3oGDw1K1emmVcW81ZhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODA2MmZmMmYwY2VkYWE4NDg5MjcyOTkyZDMwZGFhODM3MTg3YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiKKM/1UdVx0vGFft8CbhPKIgswN HjNEnSfzzz+XgpEMPAUpgd06HFw213/lWFG0Ws5xUHH80djwUEbYFQDNyv+ccaN9 gAcgZEVwwd4lLbcuGXJu5LniYpFvitAzRDVd3jB3pLCR6O70iE1mXUhWEN1r9to8 vkRUQKbR//+fIYoABK0PsCNcW3Qp8/eaPajn5z7GdnYWLPS0Pr9TYHz7Nvo/kT4F OzSh7oLR0v+/Xs5CacLdN1HI9ajf5MyMqu0uD5C9HKN880x41c8VC9YYGH02Pbec +G2lhEb/zz1O8pN9RDTB/SkheBEwwKXc/Zi8HDy0dgewMN3HEOSvzacuXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHgGL/LwztqoSJJymS0w2qg3GHvwMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvZUFZdjh2RE8ycWhJa25LWkxURGFxRGNZZV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJsQTAN BgkqhkiG9w0BAQsFAAOCAQEAHSAKdNm+ZQyP3HqhLLBHiU/UcTBokHDeXTq5ukbY kXhQUC8xwamDrrgaU9OMNFp/EpnjV/tVwbZoJgROq8EAZSi+O7PeMSYZSmAudNsF Bz7EWfBLWCOvvzASoXsqwopW81sJxTd8KZVjBST1WzSPCcF41G09M/K4K21MKKGQ BJBrjjfO/Y7vc5ybJBT6yR5a9pqXsQw2GCwloA5jdf2rJFWq9nUzvevUGY2+Tl85 97yFG11g2ojviPUeDKCnCYEhCtmTNAE8sUfjzSVLdhzMEIe3rIb62VmqGx8l7bZi R+hzv2cjjjVN+xBFZgB6rdOVEnHbk5qR9f6jBor2dWLHCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:09 2026 by rpki-client