This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/ekbIvq4xoQE_G2aZ6OBWbjCke00.roa File: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (raw, json) Hash identifier: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY= Subject key identifier: 7A:46:C8:BE:AE:31:A1:01:3F:1B:66:99:E8:E0:56:6E:30:A4:7B:4D Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba Certificate serial: 019B77C6DF2E3EA2474A08E0B503A48D7493 Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/ekbIvq4xoQE_G2aZ6OBWbjCke00.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 5.56.34.0/24 maxlen: 24 5.56.35.0/24 maxlen: 24 2a01:47c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:df:2e:3e:a2:47:4a:08:e0:b5:03:a4:8d:74:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a46c8beae31a1013f1b6699e8e0566e30a47b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:eb:5d:70:aa:50:39:d9:7d:48:ee:f3:ff: 8e:c7:7b:2a:27:2b:8d:d5:8e:c1:a0:10:e8:3f:bb: 2c:a7:da:13:ba:49:e9:64:57:4b:81:c7:26:f4:92: 01:5c:e4:2b:84:9a:67:ae:08:66:5e:c9:cb:a5:ad: 4b:29:af:88:09:67:7f:25:89:24:ec:2f:d7:c7:6a: 0c:2c:ec:50:de:7d:4f:f4:70:d1:58:72:98:f3:0d: 87:6f:74:e3:cc:ea:68:3e:6f:4b:96:30:ed:f6:86: 62:d4:3e:f0:dd:13:e3:e2:0b:16:45:db:93:56:bf: 39:02:54:f1:89:0d:9c:a2:65:4f:19:10:73:fd:2b: 96:65:05:2c:3d:b9:89:7f:b3:17:53:39:33:3d:f4: f3:f0:70:33:90:f2:fb:2d:2a:2f:75:93:2b:12:ae: 28:cf:de:53:d5:95:9e:94:79:f0:6a:55:22:de:91: fb:7c:c1:26:9b:84:24:ba:a6:d5:bc:ac:49:56:7c: 6f:30:85:32:b4:1d:67:0f:de:13:90:4e:13:f4:60: 31:76:97:2f:4d:e6:58:4b:96:85:0f:25:80:03:f5: eb:6e:39:30:12:63:f5:86:31:d3:9a:bf:ba:69:98: 6b:1a:f3:b6:56:60:ea:f3:e9:6a:ec:80:1e:34:e8: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:C8:BE:AE:31:A1:01:3F:1B:66:99:E8:E0:56:6E:30:A4:7B:4D X509v3 Authority Key Identifier: keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/ekbIvq4xoQE_G2aZ6OBWbjCke00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.34.0/23 IPv6: 2a01:47c2::/32 Signature Algorithm: sha256WithRSAEncryption 19:29:2f:81:a0:b0:04:75:71:e9:a1:28:be:8c:8d:f2:00:4b: 09:80:ef:81:16:7e:39:2b:64:52:f4:cd:8b:6b:fd:c6:4d:d0: 12:1d:85:a2:7d:70:59:c7:77:24:f1:de:dd:15:bc:6f:8f:9c: ad:06:41:35:f7:b0:e5:69:d3:c7:22:c0:59:9c:36:bd:7c:99: 18:d4:b7:09:ad:ba:6d:f4:a0:9d:53:16:36:75:69:08:4b:55: ce:4b:f6:fb:08:64:c3:27:93:66:8e:e0:d9:e1:84:b2:bb:32: c6:4e:bc:2a:92:3e:8f:61:17:81:25:b2:69:43:43:d2:de:5f: d9:35:e9:51:54:c2:31:5d:8d:ac:a6:55:0f:c0:6e:44:63:0f: a0:f1:c0:89:00:35:53:bc:e3:58:98:f7:0b:a6:8b:79:b4:d1: 49:a8:c1:2a:35:05:a9:30:38:03:cd:9c:f7:8a:72:3c:b9:2c: 1d:69:85:2e:9a:64:8b:89:63:d9:2c:61:ff:72:b0:65:52:9a: 2d:97:99:c8:62:21:f7:61:7b:a3:2a:9a:0a:a3:01:4f:be:ac: 34:d0:02:b9:53:4e:a3:36:b1:7e:9b:6a:ad:99:4e:7a:2e:cc: 67:61:b9:a0:98:42:67:5f:61:73:5d:33:34:10:8c:ce:d1:ea: 43:f8:9a:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xt8uPqJHSgjgtQOkjXSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWNjMGQ1OGIxNmFkYmJmN2ZhNWMyZmRiYzM2NTlmOWM3 M2M3YmEwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTQ2YzhiZWFlMzFhMTAxM2YxYjY2OTllOGUwNTY2ZTMwYTQ3YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUXrXXCqUDnZfUju8/+Ox3sqJyuN 1Y7BoBDoP7ssp9oTuknpZFdLgccm9JIBXOQrhJpnrghmXsnLpa1LKa+ICWd/JYkk 7C/Xx2oMLOxQ3n1P9HDRWHKY8w2Hb3TjzOpoPm9LljDt9oZi1D7w3RPj4gsWRduT Vr85AlTxiQ2comVPGRBz/SuWZQUsPbmJf7MXUzkzPfTz8HAzkPL7LSovdZMrEq4o z95T1ZWelHnwalUi3pH7fMEmm4QkuqbVvKxJVnxvMIUytB1nD94TkE4T9GAxdpcv TeZYS5aFDyWAA/XrbjkwEmP1hjHTmr+6aZhrGvO2VmDq8+lq7IAeNOiGgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHpGyL6uMaEBPxtmmejgVm4wpHtNMB8GA1UdIwQY MBaAFKccwNWLFq279/pcL9vDZZ+cc8e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt ZGU2NDBkMDEyMDY1LzEvZWtiSXZxNHhvUUVfRzJhWjZPQldiakNrZTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1 LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBBTgiMA0E AgACMAcDBQAqAUfCMA0GCSqGSIb3DQEBCwUAA4IBAQAZKS+BoLAEdXHpoSi+jI3y AEsJgO+BFn45K2RS9M2La/3GTdASHYWifXBZx3ck8d7dFbxvj5ytBkE197DladPH IsBZnDa9fJkY1LcJrbpt9KCdUxY2dWkIS1XOS/b7CGTDJ5NmjuDZ4YSyuzLGTrwq kj6PYReBJbJpQ0PS3l/ZNelRVMIxXY2splUPwG5EYw+g8cCJADVTvONYmPcLpot5 tNFJqMEqNQWpMDgDzZz3inI8uSwdaYUummSLiWPZLGH/crBlUpotl5nIYiH3YXuj KpoKowFPvqw00AK5U06jNrF+m2qtmU56LsxnYbmgmEJnX2FzXTM0EIzO0epD+JqS -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:37 2026 by rpki-client