This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa File: ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa (raw, json) Hash identifier: SCP22drV5yjMaMO6Qyzik8RwzK7qK47hYUDCwnDNJ2I= Subject key identifier: 11:3F:F7:F3:07:DD:CE:12:7B:53:5B:4B:EA:71:9B:7D:31:0D:34:84 Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Certificate serial: 019B7910696CEC950E9C7FD90472B3E592FC Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197424 IP address blocks: 2a0f:e580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:69:6c:ec:95:0e:9c:7f:d9:04:72:b3:e5:92:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=113ff7f307ddce127b535b4bea719b7d310d3484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:98:5a:12:b5:ac:b3:28:c8:9e:6b:81:1a: 04:14:20:2d:93:32:af:8c:70:0c:8d:a7:fd:82:0a: 71:89:23:ee:83:1d:9b:47:0a:64:25:40:95:d9:be: 91:25:92:db:6e:fc:d0:ed:db:8d:e4:d5:74:c7:c8: 05:ae:6e:dd:ca:46:51:a8:85:97:51:bc:30:f1:8b: 15:78:0a:70:4c:22:4f:87:07:68:c4:4e:38:2c:47: 3d:de:bf:ad:18:70:a6:b7:45:55:57:3b:d5:1d:de: 9f:48:17:06:56:eb:35:6a:59:cb:c0:08:63:5f:00: f0:cc:af:f6:4e:a1:e9:04:99:c0:77:c4:7f:eb:3b: 1f:fa:96:dc:c8:2c:31:85:e9:dc:e9:e4:b4:f9:e1: 14:fd:ce:a4:d1:ce:ea:0c:69:dd:72:70:2f:8e:38: 1f:7c:37:97:02:a2:6c:1e:48:79:b5:b6:d0:7f:d9: c0:f0:f1:f9:71:e9:0a:93:a8:e6:85:82:2b:ed:9d: 09:03:f0:a7:95:29:a3:69:bc:ec:16:42:5e:4d:c9: 4d:69:09:14:d7:ac:e9:9f:40:ef:ac:3a:58:da:74: 5e:97:0e:4f:be:ee:6d:99:f2:c7:7c:ac:cf:31:66: d0:52:85:98:1f:49:21:b8:db:c7:5c:c3:31:c2:24: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:F7:F3:07:DD:CE:12:7B:53:5B:4B:EA:71:9B:7D:31:0D:34:84 X509v3 Authority Key Identifier: keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:e580::/48 Signature Algorithm: sha256WithRSAEncryption 67:9c:42:63:a2:b3:0f:26:02:70:d8:2e:2a:ac:aa:25:5c:7c: 7a:bc:26:8d:ce:92:85:4d:6f:d3:3e:19:0f:50:f9:bd:d4:46: 54:2e:e1:1c:8c:50:3a:24:cf:a4:18:e7:12:e1:62:3b:f8:4a: f0:95:03:86:d1:e7:0d:38:f9:22:e0:6d:38:c6:d6:73:73:9b: 1d:ad:5f:d8:41:55:dd:90:58:81:f1:6f:99:df:81:cc:77:70: d6:1c:49:f8:7e:ff:ac:8c:d8:ac:61:3c:17:c9:ae:b8:cc:a2: 15:78:ba:ca:f7:ad:bf:19:0e:72:ce:f9:6e:ba:3d:22:c7:49: bf:a8:30:ba:0f:75:c9:83:5b:00:57:03:dc:02:57:db:59:14: 6a:63:b9:29:d7:30:c2:fe:16:06:79:58:89:52:27:16:36:85: f6:94:41:58:27:8b:ae:04:4a:0b:18:cc:df:db:38:32:ba:2b: 51:d7:c4:86:87:06:ba:34:aa:b4:96:66:0d:1f:8c:6c:0b:72: a7:a9:1d:92:8a:11:79:fc:bf:13:6a:03:4b:62:ce:a6:e7:41: 60:29:96:07:4f:f5:eb:67:3c:91:8b:b3:26:e3:91:6c:c9:d2: 2b:12:86:0a:99:03:10:24:5d:5a:f4:c5:32:93:a6:bd:aa:81: 3e:00:12:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EGls7JUOnH/ZBHKz5ZL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmQ3ZDk3NDNkZTJlZmEyZjYzMzM3OGEyNjhmNThmMmFh MTYwNTAwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTNmZjdmMzA3ZGRjZTEyN2I1MzViNGJlYTcxOWI3ZDMxMGQzNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7CYWhK1rLMoyJ5rgRoEFCAtkzKv jHAMjaf9ggpxiSPugx2bRwpkJUCV2b6RJZLbbvzQ7duN5NV0x8gFrm7dykZRqIWX Ubww8YsVeApwTCJPhwdoxE44LEc93r+tGHCmt0VVVzvVHd6fSBcGVus1alnLwAhj XwDwzK/2TqHpBJnAd8R/6zsf+pbcyCwxhenc6eS0+eEU/c6k0c7qDGndcnAvjjgf fDeXAqJsHkh5tbbQf9nA8PH5cekKk6jmhYIr7Z0JA/CnlSmjabzsFkJeTclNaQkU 16zpn0DvrDpY2nRelw5Pvu5tmfLHfKzPMWbQUoWYH0khuNvHXMMxwiS7AQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBE/9/MH3c4Se1NbS+pxm30xDTSEMB8GA1UdIwQY MBaAFC0tfZdD3i76L2MzeKJo9Y8qoWBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQt Y2JjY2Y5MDQ1NWZlLzEvRVRfMzh3ZmR6aEo3VTF0TDZuR2JmVEVOTklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQtY2JjY2Y5MDQ1NWZl LzEvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/lgAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBnnEJjorMPJgJw2C4qrKolXHx6vCaNzpKFTW/T PhkPUPm91EZULuEcjFA6JM+kGOcS4WI7+ErwlQOG0ecNOPki4G04xtZzc5sdrV/Y QVXdkFiB8W+Z34HMd3DWHEn4fv+sjNisYTwXya64zKIVeLrK962/GQ5yzvluuj0i x0m/qDC6D3XJg1sAVwPcAlfbWRRqY7kp1zDC/hYGeViJUicWNoX2lEFYJ4uuBEoL GMzf2zgyuitR18SGhwa6NKq0lmYNH4xsC3KnqR2SihF5/L8TagNLYs6m50FgKZYH T/XrZzyRi7Mm45FsydIrEoYKmQMQJF1a9MUyk6a9qoE+ABJ3 -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:37 2026 by rpki-client