This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/ew282-AhNX4FMYFmo40ImlhZsYU.roa File: ew282-AhNX4FMYFmo40ImlhZsYU.roa (raw, json) Hash identifier: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0= Subject key identifier: 7B:0D:BC:DB:E0:21:35:7E:05:31:81:66:A3:8D:08:9A:58:59:B1:85 Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18 Certificate serial: 019B7AC9193270E1260039E0170DED638A57 Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/ew282-AhNX4FMYFmo40ImlhZsYU.roa Signing time: Thu 01 Jan 2026 18:19:17 +0000 ROA not before: Thu 01 Jan 2026 18:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 781 IP address blocks: 2a0c:1100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:19:32:70:e1:26:00:39:e0:17:0d:ed:63:8a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b0dbcdbe021357e05318166a38d089a5859b185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:fc:ef:af:7e:f8:78:bf:ff:d5:6c:53:0e: 96:8a:4b:4d:64:0c:3c:3b:b4:cf:10:37:81:0b:e8: 9d:25:fd:06:a7:5e:3e:5b:4d:79:38:6e:7f:a4:3a: 6b:45:bc:f0:0b:8f:f0:b3:63:0e:7d:93:b0:96:c3: 1d:e3:4e:48:b6:b0:8f:0f:40:0c:54:7f:c9:0f:3a: e5:6f:06:07:b9:8f:cf:71:2a:a8:5e:a0:5c:b0:c9: 56:9c:db:ae:18:c9:a7:e7:20:04:3e:18:28:f0:b3: ce:a5:e8:22:3e:51:c2:c2:b7:5a:ec:44:e1:1d:1a: bb:2a:c7:7d:c7:45:57:bb:ef:f6:3c:10:a5:2f:23: ef:f0:56:3c:1f:d6:6a:e9:2f:ea:e7:d2:45:bd:c0: 01:26:24:44:ce:7b:c4:71:d2:ec:5c:cf:42:3d:1f: 2d:a6:8a:80:0b:41:49:e8:92:51:84:a3:3e:bf:c7: 23:dd:56:ab:39:b4:46:d8:df:47:9b:6d:7a:a1:01: ec:a1:f2:27:a1:51:bc:50:93:27:64:19:49:46:ff: d5:4f:ca:8b:06:a4:f4:9a:1f:33:c5:ba:ca:71:c4: f3:ce:69:90:10:6c:8a:8a:ea:bc:21:86:f1:b0:b1: de:d9:0e:60:60:be:82:71:be:62:c7:68:84:31:63: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0D:BC:DB:E0:21:35:7E:05:31:81:66:A3:8D:08:9A:58:59:B1:85 X509v3 Authority Key Identifier: keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/ew282-AhNX4FMYFmo40ImlhZsYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:1100::/32 Signature Algorithm: sha256WithRSAEncryption 96:59:86:ac:da:dc:a3:89:22:25:77:65:47:a6:ac:fe:d6:69: 7c:14:62:6f:7d:30:d2:83:cc:80:0f:cf:48:4d:7d:62:2d:40: ed:3b:7e:6a:97:04:48:06:21:df:8c:5c:76:e7:c4:62:f7:8a: d3:9f:20:f8:b7:65:a6:e4:6e:79:6f:8e:e4:35:08:ac:2a:75: 85:de:1b:36:92:81:19:41:49:17:e9:1b:3b:07:db:2e:12:eb: 13:62:4f:a9:81:e8:fa:a3:a5:4b:33:9b:eb:ad:1b:f6:78:a3: 7a:fe:9e:fb:64:fa:74:54:e4:f3:3c:67:4a:b3:11:b6:21:05: ae:94:b1:5f:95:6d:a2:50:19:9e:4f:b2:b9:6c:b8:7e:66:6c: 26:90:13:0f:59:9f:05:33:52:19:89:c0:83:1f:9c:9b:5d:21: 47:f7:b2:de:db:c2:1e:c3:5a:ef:79:be:82:91:ba:03:fd:45: ea:c0:4b:89:33:60:cb:5b:b8:08:50:5e:84:4c:98:b3:6c:54: 9e:e1:ef:ec:55:34:60:21:b3:e6:27:92:fc:55:d3:2a:2e:66: cc:54:4f:d5:f6:ee:bb:86:2c:77:4b:f0:b2:53:e0:84:fa:cb: 03:eb:55:52:e1:67:ff:99:f7:1e:cd:bc:1f:45:b5:6d:dc:4a: 15:34:af:7e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yRkycOEmADngFw3tY4pXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZjRmMjRiNDBmZGE5Yjk1MjhlNGE4ZWRjYWQ2MWI4NDFk ZjZjMTgwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjBkYmNkYmUwMjEzNTdlMDUzMTgxNjZhMzhkMDg5YTU4NTliMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGn8769++Hi//9VsUw6WiktNZAw8 O7TPEDeBC+idJf0Gp14+W015OG5/pDprRbzwC4/ws2MOfZOwlsMd405ItrCPD0AM VH/JDzrlbwYHuY/PcSqoXqBcsMlWnNuuGMmn5yAEPhgo8LPOpegiPlHCwrda7ETh HRq7Ksd9x0VXu+/2PBClLyPv8FY8H9Zq6S/q59JFvcABJiREznvEcdLsXM9CPR8t poqAC0FJ6JJRhKM+v8cj3VarObRG2N9Hm216oQHsofInoVG8UJMnZBlJRv/VT8qL BqT0mh8zxbrKccTzzmmQEGyKiuq8IYbxsLHe2Q5gYL6Ccb5ix2iEMWPXEwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHsNvNvgITV+BTGBZqONCJpYWbGFMB8GA1UdIwQY MBaAFOX08ktA/am5Uo5KjtytYbhB32wYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWZUeVMwRDlxYmxTamtxTzNLMWh1RUhmYkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MWUzYTUtMzFkYi00YmRkLWIwY2Qt ODI4MDIyMDQzZWEzLzEvZXcyODItQWhOWDRGTVlGbW80MEltbGhac1lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81MWUzYTUtMzFkYi00YmRkLWIwY2QtODI4MDIyMDQzZWEz LzEvNWZUeVMwRDlxYmxTamtxTzNLMWh1RUhmYkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgwRADAN BgkqhkiG9w0BAQsFAAOCAQEAllmGrNrco4kiJXdlR6as/tZpfBRib30w0oPMgA/P SE19Yi1A7Tt+apcESAYh34xcdufEYveK058g+LdlpuRueW+O5DUIrCp1hd4bNpKB GUFJF+kbOwfbLhLrE2JPqYHo+qOlSzOb660b9nijev6e+2T6dFTk8zxnSrMRtiEF rpSxX5VtolAZnk+yuWy4fmZsJpATD1mfBTNSGYnAgx+cm10hR/ey3tvCHsNa73m+ gpG6A/1F6sBLiTNgy1u4CFBehEyYs2xUnuHv7FU0YCGz5ieS/FXTKi5mzFRP1fbu u4Ysd0vwslPghPrLA+tVUuFn/5n3Hs28H0W1bdxKFTSvfg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:53 2026 by rpki-client