This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/zeEPpitSOzyXHndgpLbTNYerulw.roa File: zeEPpitSOzyXHndgpLbTNYerulw.roa (raw, json) Hash identifier: oTCVEfUpyQEEQ/RQUBU/rrU5tazeZweEU7eMxBkYLIA= Subject key identifier: CD:E1:0F:A6:2B:52:3B:3C:97:1E:77:60:A4:B6:D3:35:87:AB:BA:5C Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C801517E9F925FB046BE74A6932100C Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/zeEPpitSOzyXHndgpLbTNYerulw.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216198 IP address blocks: 2a13:2200:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:17:e9:f9:25:fb:04:6b:e7:4a:69:32:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde10fa62b523b3c971e7760a4b6d33587abba5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:32:10:b6:cc:ab:25:06:cf:60:7e:0c:66: 94:bf:40:0c:2a:a5:a4:21:ce:1b:78:e6:59:3b:68: 6d:8b:ef:02:c5:29:aa:cb:49:d7:76:11:15:63:17: 46:ec:e6:46:28:5f:cb:25:61:b3:73:22:4c:5b:54: c8:9f:7d:39:c6:35:44:7c:d9:9d:e2:f1:83:4a:c3: 03:92:eb:1a:5e:16:e4:17:4e:0b:53:4b:ed:12:3a: ae:00:be:77:b6:fe:98:4f:51:4e:a4:1e:e2:ec:19: fe:0e:c0:a4:d9:06:a9:40:18:84:c2:1e:47:9d:22: e9:60:aa:83:d5:79:bf:0e:04:6a:6a:23:44:ae:fb: 5e:18:8b:a4:e2:17:8f:af:b6:2d:a6:93:3f:3d:24: 0d:6f:3d:46:9c:a7:5c:42:e8:72:42:6b:a7:22:63: c3:ef:3e:ca:62:bf:10:68:ad:e6:d9:c0:c3:c8:53: 6f:14:0e:19:56:e0:ec:a8:27:7a:ba:cf:0c:e7:90: a9:20:d0:35:24:b7:24:80:eb:74:e1:42:45:9f:5f: 98:bf:3b:b8:f9:4b:47:bf:27:f4:ff:fb:83:cb:75: 1b:25:03:6a:f7:93:52:fa:b9:cb:53:f3:08:61:43: 0a:7d:bd:b2:ff:c7:eb:64:f8:b3:23:54:e8:81:05: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:0F:A6:2B:52:3B:3C:97:1E:77:60:A4:B6:D3:35:87:AB:BA:5C X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/zeEPpitSOzyXHndgpLbTNYerulw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:e::/48 Signature Algorithm: sha256WithRSAEncryption 11:a3:5f:ca:c0:7e:9d:65:65:2d:84:0d:3d:82:66:03:f0:51: 31:41:bb:19:21:03:52:f1:40:f3:6d:e4:c0:35:c8:5c:10:a3: 0d:9c:4c:e5:d2:d3:d0:b5:7a:4f:16:48:8a:38:fa:e8:7f:61: ab:ab:0d:50:8a:87:b8:d6:73:3a:72:4e:7d:4d:02:52:b1:c4: 39:f1:43:4f:86:e5:e6:c4:59:03:c0:87:36:eb:ce:20:ce:b4: 5d:9c:ee:00:4e:ed:66:93:3a:4c:8d:80:d6:33:16:8a:84:c2: ab:06:6b:57:de:b3:f8:d7:ae:d5:00:2a:19:ae:cd:3b:25:25: 1f:0c:c8:eb:7a:0b:da:1e:20:0a:bb:c7:ed:c6:3e:a5:b5:47: 8b:7c:8a:f6:f9:10:c0:ff:e4:20:ba:cf:47:15:aa:38:9c:ef: da:f1:9b:14:49:51:6e:7b:75:8d:d4:bc:3d:d1:ae:ca:79:68: ea:e1:34:ed:10:51:0e:a9:0e:6f:23:1f:c1:78:6c:2b:99:78: 92:cb:22:42:cf:60:14:c5:2a:54:fb:ab:71:2a:95:8e:cf:3f: 55:82:77:d8:62:87:d2:72:3f:c2:d1:e7:5a:62:5d:ec:00:b3: 46:7b:10:ec:e8:68:37:5f:cc:c7:4a:41:49:4a:40:48:b8:8d: 9a:16:9d:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBUX6fkl+wRr50ppMhAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGUxMGZhNjJiNTIzYjNjOTcxZTc3NjBhNGI2ZDMzNTg3YWJiYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWAyELbMqyUGz2B+DGaUv0AMKqWk Ic4beOZZO2hti+8CxSmqy0nXdhEVYxdG7OZGKF/LJWGzcyJMW1TIn305xjVEfNmd 4vGDSsMDkusaXhbkF04LU0vtEjquAL53tv6YT1FOpB7i7Bn+DsCk2QapQBiEwh5H nSLpYKqD1Xm/DgRqaiNErvteGIuk4hePr7YtppM/PSQNbz1GnKdcQuhyQmunImPD 7z7KYr8QaK3m2cDDyFNvFA4ZVuDsqCd6us8M55CpINA1JLckgOt04UJFn1+Yvzu4 +UtHvyf0//uDy3UbJQNq95NS+rnLU/MIYUMKfb2y/8frZPizI1TogQWUDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM3hD6YrUjs8lx53YKS20zWHq7pcMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvemVFUHBpdFNPenlYSG5kZ3BMYlROWWVydWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAO MA0GCSqGSIb3DQEBCwUAA4IBAQARo1/KwH6dZWUthA09gmYD8FExQbsZIQNS8UDz beTANchcEKMNnEzl0tPQtXpPFkiKOProf2Grqw1Qioe41nM6ck59TQJSscQ58UNP huXmxFkDwIc2684gzrRdnO4ATu1mkzpMjYDWMxaKhMKrBmtX3rP4167VACoZrs07 JSUfDMjregvaHiAKu8ftxj6ltUeLfIr2+RDA/+Qgus9HFao4nO/a8ZsUSVFue3WN 1Lw90a7KeWjq4TTtEFEOqQ5vIx/BeGwrmXiSyyJCz2AUxSpU+6txKpWOzz9VgnfY YofScj/C0edaYl3sALNGexDs6Gg3X8zHSkFJSkBIuI2aFp1z -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:53 2026 by rpki-client