This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/54sLosdN-3E7M3xXYL9Sj8R-JFA.roa File: 54sLosdN-3E7M3xXYL9Sj8R-JFA.roa (raw, json) Hash identifier: YOEtT3WDb6q1KIYxMWD9C0mL5TEs7xv26wN9VzwyZz0= Subject key identifier: E7:8B:0B:A2:C7:4D:FB:71:3B:33:7C:57:60:BF:52:8F:C4:7E:24:50 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C8011A9A054611E3CBBB2FC40BBD9BA Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/54sLosdN-3E7M3xXYL9Sj8R-JFA.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200213 IP address blocks: 2a13:2200:4::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:11:a9:a0:54:61:1e:3c:bb:b2:fc:40:bb:d9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e78b0ba2c74dfb713b337c5760bf528fc47e2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:4a:45:83:61:8d:ec:40:53:92:8a:ab:42: e2:7b:43:3d:5b:75:bd:dd:8c:a5:b0:c6:5e:21:ad: ef:9f:2e:06:c0:98:f3:5b:1c:01:60:da:62:40:20: 84:f0:37:da:10:7d:26:e8:9c:32:44:35:db:68:54: 01:3c:e6:e9:28:fb:ac:e2:eb:b4:8d:73:ab:76:a3: 55:81:30:b7:33:ad:d5:42:35:0e:31:5c:b3:cf:3c: 8d:19:76:4c:f9:91:71:38:d4:d8:6b:02:ac:45:49: 00:87:30:9d:5c:26:9e:ce:65:0c:f8:d2:92:98:12: f4:19:9b:15:50:c2:ab:a4:ac:9e:0a:7f:ed:93:72: 53:88:f8:e5:05:5f:68:4e:ba:51:47:70:49:3c:16: 6b:72:9f:44:e1:17:92:81:a9:92:89:db:11:21:35: eb:b2:39:33:b8:e3:0f:57:60:29:4e:f4:af:7d:d4: c7:db:f2:a0:10:b3:da:4c:da:32:6f:cc:b6:6a:0f: aa:48:85:e8:cb:da:35:e1:4b:1c:fe:38:87:86:13: 8e:e6:8c:61:71:81:7a:ab:74:17:31:e0:e4:c9:0b: dd:15:3a:66:44:5d:f7:43:ee:88:4b:c9:d1:1e:34: 7c:12:02:8c:0a:25:8f:29:1f:ed:45:4d:f2:29:96: ff:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8B:0B:A2:C7:4D:FB:71:3B:33:7C:57:60:BF:52:8F:C4:7E:24:50 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/54sLosdN-3E7M3xXYL9Sj8R-JFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:4::/46 Signature Algorithm: sha256WithRSAEncryption 42:d4:e0:24:e2:b5:cf:e7:c2:01:14:95:71:a2:01:f7:de:41: c1:d8:7b:c4:ce:4c:49:4b:86:53:d8:bf:23:69:eb:f4:f3:1d: 9d:de:94:12:79:48:dc:46:40:9f:74:4e:a3:5a:c8:38:53:b7: fb:c3:52:34:ab:b7:f3:47:f6:8e:8d:1b:9a:03:63:95:25:44: 85:90:58:f3:b3:0a:83:bd:b8:30:6a:40:61:41:36:02:c1:e2: d9:92:01:f7:89:36:69:35:fd:d9:b3:3a:40:e1:38:82:9a:3c: d3:e5:ab:a2:a4:8c:0a:cb:78:9e:79:17:70:a2:d2:48:8e:32: ed:c5:dd:51:59:bd:65:ba:bf:1d:50:e7:4c:87:c4:1f:8d:d6: 4e:6c:67:b5:83:1e:2f:b1:40:75:c4:24:ae:2d:da:b6:23:a5: 9d:55:e6:06:a7:ff:20:a0:5b:ee:60:c7:7a:57:eb:e2:31:f4: 1e:49:c6:66:4c:40:c9:c3:29:1c:0e:c8:eb:bb:80:b8:17:cb: 05:be:bd:14:7b:c6:1e:6f:c8:c8:d0:ed:5c:6c:14:2b:40:99: 05:9a:9d:2b:46:07:cc:80:a6:98:54:bd:b1:10:27:0a:e3:f6: 00:9f:83:bd:cb:e8:c1:e9:a0:59:c4:74:6b:c3:54:e5:3f:f2: cb:e4:b7:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBGpoFRhHjy7svxAu9m6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzhiMGJhMmM3NGRmYjcxM2IzMzdjNTc2MGJmNTI4ZmM0N2UyNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnklKRYNhjexAU5KKq0Lie0M9W3W9 3YylsMZeIa3vny4GwJjzWxwBYNpiQCCE8DfaEH0m6JwyRDXbaFQBPObpKPus4uu0 jXOrdqNVgTC3M63VQjUOMVyzzzyNGXZM+ZFxONTYawKsRUkAhzCdXCaezmUM+NKS mBL0GZsVUMKrpKyeCn/tk3JTiPjlBV9oTrpRR3BJPBZrcp9E4ReSgamSidsRITXr sjkzuOMPV2ApTvSvfdTH2/KgELPaTNoyb8y2ag+qSIXoy9o14Usc/jiHhhOO5oxh cYF6q3QXMeDkyQvdFTpmRF33Q+6IS8nRHjR8EgKMCiWPKR/tRU3yKZb/QwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOeLC6LHTftxOzN8V2C/Uo/EfiRQMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNTRzTG9zZE4tM0U3TTN4WFlMOVNqOFItSkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhMiAAAE MA0GCSqGSIb3DQEBCwUAA4IBAQBC1OAk4rXP58IBFJVxogH33kHB2HvEzkxJS4ZT 2L8jaev08x2d3pQSeUjcRkCfdE6jWsg4U7f7w1I0q7fzR/aOjRuaA2OVJUSFkFjz swqDvbgwakBhQTYCweLZkgH3iTZpNf3ZszpA4TiCmjzT5auipIwKy3ieeRdwotJI jjLtxd1RWb1lur8dUOdMh8QfjdZObGe1gx4vsUB1xCSuLdq2I6WdVeYGp/8goFvu YMd6V+viMfQeScZmTEDJwykcDsjru4C4F8sFvr0Ue8Yeb8jI0O1cbBQrQJkFmp0r RgfMgKaYVL2xECcK4/YAn4O9y+jB6aBZxHRrw1TlP/LL5LdR -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:39 2026 by rpki-client