This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/EgjChhzCGWJh6V51f8ojCveMlfE.roa File: EgjChhzCGWJh6V51f8ojCveMlfE.roa (raw, json) Hash identifier: i4SrxX9zQ7sZ8KNvnrH9l0DYTEr6ZfYVUcw4c3JUaOg= Subject key identifier: 12:08:C2:86:1C:C2:19:62:61:E9:5E:75:7F:CA:23:0A:F7:8C:95:F1 Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56 Certificate serial: 019B7F8222E9D5FA8687493E53DCB99AB219 Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/EgjChhzCGWJh6V51f8ojCveMlfE.roa Signing time: Fri 02 Jan 2026 16:19:53 +0000 ROA not before: Fri 02 Jan 2026 16:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49078 IP address blocks: 2a04:7140:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:22:e9:d5:fa:86:87:49:3e:53:dc:b9:9a:b2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56 Validity Not Before: Jan 2 16:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1208c2861cc2196261e95e757fca230af78c95f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:a4:b9:bb:31:b8:71:00:c0:2e:06:0e:f3: a7:e1:ef:55:45:57:9c:be:18:e4:41:5c:6e:95:f8: ac:c7:37:4f:a2:92:24:78:f6:9a:a6:20:a3:90:4d: ea:27:0b:33:6d:3b:28:e6:ed:10:65:e3:b8:a3:3d: 3d:9f:5a:4f:b5:a3:c8:ac:b6:e3:2d:26:13:46:b8: c8:98:b8:8a:67:a0:76:1f:af:b8:10:0b:2d:ee:55: 48:7a:78:f7:8c:0b:68:42:47:fd:8c:f7:b7:22:58: 60:d4:a4:6a:93:2b:ba:ad:f2:76:01:ec:73:80:f1: 92:af:40:f3:5b:7a:e6:57:27:44:2b:e6:57:ea:28: 7e:29:da:07:a8:29:3b:93:a2:6c:8a:7c:a5:45:f7: 9c:28:99:8f:8f:18:36:40:52:8d:83:94:67:46:7a: fe:15:0c:22:8d:e1:7c:c6:5a:cb:d7:5b:22:87:29: 28:d7:84:43:03:b1:eb:d1:10:2a:6d:cb:48:2f:f9: 88:46:7a:8b:af:8c:2d:5b:ff:e9:29:bb:23:62:5b: 1b:52:ea:ba:92:ca:5a:68:01:ee:52:ff:8c:b2:e1: 95:18:44:74:a3:59:9e:c0:88:64:5a:4b:c0:db:e2: 9e:8a:bf:2f:88:77:ea:25:5f:c8:ee:13:c9:df:5c: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:08:C2:86:1C:C2:19:62:61:E9:5E:75:7F:CA:23:0A:F7:8C:95:F1 X509v3 Authority Key Identifier: keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/EgjChhzCGWJh6V51f8ojCveMlfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:7140:21::/48 Signature Algorithm: sha256WithRSAEncryption 65:23:a1:af:1d:4b:6e:f1:df:37:4a:1e:78:31:14:de:1f:87: be:9c:92:38:10:07:cc:6b:be:cc:6a:7f:4e:11:65:b0:87:46: 28:7b:8e:25:e6:dd:50:6c:72:91:52:1f:77:54:97:c0:ef:9d: 76:d3:c3:de:6c:45:53:85:d9:a3:78:b6:e8:fc:9c:27:c4:64: ec:7a:64:4e:36:3c:43:f5:ca:1d:11:20:64:4f:76:95:4d:92: 85:57:7e:59:8a:e9:a5:38:c8:74:61:b6:22:55:38:30:e2:cc: 7a:c1:05:f1:f4:34:52:8d:cd:f8:77:37:44:89:57:7d:d1:d1: 05:26:2d:16:bc:10:07:2d:c6:0b:3b:bf:4d:60:fb:81:cf:26: ea:e0:23:cc:e9:48:f5:ae:dc:40:8f:ea:55:5f:c8:64:75:73: 7e:d0:98:01:b8:53:59:5a:85:45:97:19:a7:9d:67:a1:43:55: e1:22:6f:83:46:86:f6:fe:33:6b:92:d0:89:79:29:04:bc:0e: da:fa:7b:c4:b9:e6:c9:1c:25:5d:41:8f:65:a1:54:50:de:3c: 78:54:1b:ab:6a:c5:12:b8:31:2b:a0:2c:31:a0:26:6b:5c:2c: 87:85:20:40:cd:de:f3:ad:77:14:7e:77:44:5e:de:e3:a6:36: ef:e7:c9:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/giLp1fqGh0k+U9y5mrIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZjMxMWVmMTU4MWEwMGU0MzdjZDcwNGI2MjgxYWM4NjIx YWZjNTYwHhcNMjYwMTAyMTYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjA4YzI4NjFjYzIxOTYyNjFlOTVlNzU3ZmNhMjMwYWY3OGM5NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8qkubsxuHEAwC4GDvOn4e9VRVec vhjkQVxulfisxzdPopIkePaapiCjkE3qJwszbTso5u0QZeO4oz09n1pPtaPIrLbj LSYTRrjImLiKZ6B2H6+4EAst7lVIenj3jAtoQkf9jPe3Ilhg1KRqkyu6rfJ2Aexz gPGSr0DzW3rmVydEK+ZX6ih+KdoHqCk7k6JsinylRfecKJmPjxg2QFKNg5RnRnr+ FQwijeF8xlrL11sihyko14RDA7Hr0RAqbctIL/mIRnqLr4wtW//pKbsjYlsbUuq6 kspaaAHuUv+MsuGVGER0o1mewIhkWkvA2+Keir8viHfqJV/I7hPJ31zoUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBIIwoYcwhliYeledX/KIwr3jJXxMB8GA1UdIwQY MBaAFHbzEe8VgaAOQ3zXBLYoGshiGvxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHZNUjd4V0JvQTVEZk5jRXRpZ2F5R0lhX0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81MjUyMjQtNzhlYS00OWU0LTk3NDkt MTY5NDMxMjk2YzU5LzEvRWdqQ2hoekNHV0poNlY1MWY4b2pDdmVNbGZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81MjUyMjQtNzhlYS00OWU0LTk3NDktMTY5NDMxMjk2YzU5 LzEvZHZNUjd4V0JvQTVEZk5jRXRpZ2F5R0lhX0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRxQAAh MA0GCSqGSIb3DQEBCwUAA4IBAQBlI6GvHUtu8d83Sh54MRTeH4e+nJI4EAfMa77M an9OEWWwh0Yoe44l5t1QbHKRUh93VJfA751208PebEVThdmjeLbo/JwnxGTsemRO NjxD9codESBkT3aVTZKFV35ZiumlOMh0YbYiVTgw4sx6wQXx9DRSjc34dzdEiVd9 0dEFJi0WvBAHLcYLO79NYPuBzybq4CPM6Uj1rtxAj+pVX8hkdXN+0JgBuFNZWoVF lxmnnWehQ1XhIm+DRob2/jNrktCJeSkEvA7a+nvEuebJHCVdQY9loVRQ3jx4VBur asUSuDEroCwxoCZrXCyHhSBAzd7zrXcUfndEXt7jpjbv58lG -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:23 2026 by rpki-client