This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EtFx9f4oiCywxFykUSR2QjU7eFQ.roa File: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (raw, json) Hash identifier: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50= Subject key identifier: 12:D1:71:F5:FE:28:88:2C:B0:C4:5C:A4:51:24:76:42:35:3B:78:54 Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F840FF1F8125106490A96E44B395 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EtFx9f4oiCywxFykUSR2QjU7eFQ.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215813 IP address blocks: 2a12:5840:241f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f8:40:ff:1f:81:25:10:64:90:a9:6e:44:b3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12d171f5fe28882cb0c45ca451247642353b7854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:cf:13:f7:91:21:66:e8:9f:6c:e7:be:92: a3:6a:c6:cf:a6:7e:e5:47:e1:04:4d:4a:2a:2a:31: 9d:62:30:fd:c5:fa:ca:0b:d8:85:63:12:b9:9e:07: 86:4d:ac:98:89:e9:35:48:92:3b:31:b3:1f:ba:c2: 77:c0:27:e0:3e:fa:08:17:e9:09:11:2f:f2:49:e9: 83:1d:16:04:07:c3:36:06:34:c9:b4:85:38:f4:9e: b3:8c:2a:2d:f6:1a:da:eb:8c:15:8d:9e:42:b7:c2: c7:96:5d:45:87:e9:6a:75:cc:8a:05:65:3b:20:7b: 83:0d:b2:0a:18:8f:0a:2d:7e:ff:b1:da:2b:0f:da: 01:a9:95:d4:91:a0:83:71:d0:ab:d6:30:c7:53:d1: 8a:ac:49:0a:31:eb:a9:fd:05:ad:60:33:8a:0d:22: e2:87:08:03:20:b3:58:66:ea:16:02:f9:37:38:c0: 71:97:6c:e5:96:75:b7:51:68:e5:ee:2f:cf:63:77: 61:e5:06:5c:cc:ad:84:10:52:ff:c5:4a:cc:9b:74: 52:8f:b8:14:9c:11:5c:a2:83:d7:34:32:3d:01:0d: 55:ff:3a:d5:aa:36:eb:22:8e:74:3b:2b:c3:ae:eb: 6a:7d:ef:5b:6b:ab:9c:da:69:f8:98:23:5c:c7:3b: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D1:71:F5:FE:28:88:2C:B0:C4:5C:A4:51:24:76:42:35:3B:78:54 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EtFx9f4oiCywxFykUSR2QjU7eFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5840:241f::/48 Signature Algorithm: sha256WithRSAEncryption 96:4c:56:b4:26:4a:2a:04:23:7c:72:8c:5f:6d:3a:d8:39:82: ec:3b:25:cb:0b:ad:a8:d5:09:b0:35:bb:a4:1a:59:eb:ef:61: 99:aa:37:c1:58:e3:6c:58:db:43:f9:94:1c:ca:7e:77:17:ec: dc:15:fb:c4:93:37:66:a0:3e:e7:22:3a:3c:9b:9c:87:4d:37: 3b:05:6d:52:ff:ff:c9:2a:5a:67:d1:5d:d2:42:e4:72:74:ba: fa:35:e3:f6:5d:fe:6a:87:7a:c2:68:96:6a:b6:b0:5f:5a:49: 2c:47:5f:90:9e:96:dc:55:ba:97:e1:c5:45:af:ce:44:bf:fd: 66:52:c6:24:50:3b:e5:ff:b6:8d:aa:e0:a9:76:b2:cc:73:81: ca:e9:35:7b:53:8b:4f:e2:b6:9f:d9:c6:76:a6:6e:f0:1d:6a: 6f:87:5f:c3:6f:25:f2:11:69:52:c1:d6:9a:af:fb:af:0e:bb: 92:1a:84:f3:e5:88:e1:3f:db:49:9c:03:e0:aa:47:60:90:22: 54:10:1b:f2:7f:d5:16:07:e3:2a:f6:fa:66:b5:4c:b5:3e:9c: 9a:f8:be:f1:f8:7e:9e:da:21:8b:c7:bb:84:91:02:c6:86:be: cd:f3:c6:c2:f9:a9:5f:d0:e4:42:be:21:f5:cc:f5:3e:7c:db: bd:28:be:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPhA/x+BJRBkkKluRLOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmQxNzFmNWZlMjg4ODJjYjBjNDVjYTQ1MTI0NzY0MjM1M2I3ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3/PE/eRIWbon2znvpKjasbPpn7l R+EETUoqKjGdYjD9xfrKC9iFYxK5ngeGTayYiek1SJI7MbMfusJ3wCfgPvoIF+kJ ES/ySemDHRYEB8M2BjTJtIU49J6zjCot9hra64wVjZ5Ct8LHll1Fh+lqdcyKBWU7 IHuDDbIKGI8KLX7/sdorD9oBqZXUkaCDcdCr1jDHU9GKrEkKMeup/QWtYDOKDSLi hwgDILNYZuoWAvk3OMBxl2zllnW3UWjl7i/PY3dh5QZczK2EEFL/xUrMm3RSj7gU nBFcooPXNDI9AQ1V/zrVqjbrIo50OyvDrutqfe9ba6uc2mn4mCNcxzuP/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBLRcfX+KIgssMRcpFEkdkI1O3hUMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvRXRGeDlmNG9pQ3l3eEZ5a1VTUjJRalU3ZUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhJYQCQf MA0GCSqGSIb3DQEBCwUAA4IBAQCWTFa0JkoqBCN8coxfbTrYOYLsOyXLC62o1Qmw NbukGlnr72GZqjfBWONsWNtD+ZQcyn53F+zcFfvEkzdmoD7nIjo8m5yHTTc7BW1S ///JKlpn0V3SQuRydLr6NeP2Xf5qh3rCaJZqtrBfWkksR1+QnpbcVbqX4cVFr85E v/1mUsYkUDvl/7aNquCpdrLMc4HK6TV7U4tP4raf2cZ2pm7wHWpvh1/DbyXyEWlS wdaar/uvDruSGoTz5YjhP9tJnAPgqkdgkCJUEBvyf9UWB+Mq9vpmtUy1Ppya+L7x +H6e2iGLx7uEkQLGhr7N88bC+alf0ORCviH1zPU+fNu9KL6+ -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:04 2026 by rpki-client