This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa File: EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa (raw, json) Hash identifier: 6sbRbAzpkVZnbmwGmFls1zgBgBPqZlTzKVvW2qe/0sQ= Subject key identifier: 11:B5:B7:36:F1:0F:97:5A:15:DB:23:5D:E2:03:C4:59:CE:88:5F:89 Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf Certificate serial: 019B78352C00C58CF739AC6B232A1C0003B7 Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57707 IP address blocks: 2a03:a900:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2c:00:c5:8c:f7:39:ac:6b:23:2a:1c:00:03:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11b5b736f10f975a15db235de203c459ce885f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:f9:cb:b3:9c:6d:f6:9e:f4:9f:38:ac:db: 44:0e:9b:c9:11:ff:71:09:40:d0:22:e6:bd:41:b9: 90:d8:de:a1:2a:36:32:ff:78:33:a8:8b:bb:89:92: 47:48:7a:33:0e:6e:6a:d8:2f:b7:c4:78:ba:1f:20: ba:d4:ed:16:37:c0:bb:b6:22:c3:fa:5e:6d:98:a8: 19:8c:7c:83:d7:c2:8d:f3:c0:03:44:67:7d:f7:95: 68:4b:96:60:3f:77:c5:87:4c:5a:86:22:cc:1c:8c: e6:55:ee:80:d4:6e:e9:87:70:99:9a:4d:a9:91:71: bc:46:58:8e:a8:e2:ee:22:94:0e:5e:bc:ef:65:fe: e7:fb:d1:7b:b9:27:51:9e:cb:81:66:1c:5a:c0:56: b6:47:e2:72:6b:18:e4:77:0a:42:d2:be:c0:7a:58: 34:a3:d2:98:8f:c1:95:ee:64:ab:cc:6c:b6:4c:88: 88:d2:3c:4a:18:21:ee:de:2a:51:ad:a7:1a:79:d8: 50:3b:ae:82:3b:b0:fc:e4:54:78:13:92:d9:44:bc: 41:e4:5c:8c:6e:d0:70:1e:f7:a4:f6:26:fc:66:23: af:91:d3:f7:e1:fb:66:18:a5:fd:0e:1c:93:4e:97: 6a:00:a9:4f:62:7c:59:93:48:69:32:9c:eb:fb:a3: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B5:B7:36:F1:0F:97:5A:15:DB:23:5D:E2:03:C4:59:CE:88:5F:89 X509v3 Authority Key Identifier: keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:a900:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 90:08:7b:c8:6a:36:b5:bf:94:d2:e3:cb:a5:c6:e7:bf:3b:59: 23:ed:49:03:58:f5:92:0f:e9:c9:34:40:fd:5a:63:b1:00:d5: 35:63:16:01:2b:ce:70:91:02:34:6d:fd:6b:52:fc:06:02:d8: e0:d5:94:e2:e4:e4:50:73:a5:12:60:e3:fb:a3:81:36:e8:84: d3:3b:e0:92:3b:b7:18:e2:28:5f:3b:97:f4:fb:c6:0f:98:54: 1f:b8:05:8b:cf:a2:7b:8a:3f:e2:45:00:85:4e:db:98:44:f9: ba:ef:62:60:43:9e:cf:84:31:d6:7a:a3:65:95:69:67:17:70: 68:29:6a:9e:75:e0:8d:cd:bd:5b:96:be:0a:01:c3:69:80:0b: 71:f0:79:20:9b:a6:0e:b4:f3:99:f1:7d:40:35:53:df:8a:00: 0c:02:fe:b8:73:9a:82:38:59:04:c6:76:17:91:81:ba:eb:46: 2e:c5:c6:36:f6:37:e6:5b:25:a1:ab:7b:5f:5e:f0:c2:dc:31: f2:90:bb:be:9e:59:48:81:d2:b7:42:0a:59:22:bd:ea:a3:7d: 4e:16:70:cd:25:3d:40:8d:e3:26:d6:f0:35:4d:e7:20:64:cd: 82:74:b7:5c:38:59:15:39:58:e7:41:b8:a0:9c:c5:2f:e8:f4: bb:2b:0d:6f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NSwAxYz3OaxrIyocAAO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODE1MWFlMTY0YTViNzgyYjEwM2RlN2Y3YzhhODk0ODkz MmFlYmYwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWI1YjczNmYxMGY5NzVhMTVkYjIzNWRlMjAzYzQ1OWNlODg1Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHv5y7Ocbfae9J84rNtEDpvJEf9x CUDQIua9QbmQ2N6hKjYy/3gzqIu7iZJHSHozDm5q2C+3xHi6HyC61O0WN8C7tiLD +l5tmKgZjHyD18KN88ADRGd995VoS5ZgP3fFh0xahiLMHIzmVe6A1G7ph3CZmk2p kXG8RliOqOLuIpQOXrzvZf7n+9F7uSdRnsuBZhxawFa2R+JyaxjkdwpC0r7Aelg0 o9KYj8GV7mSrzGy2TIiI0jxKGCHu3ipRracaedhQO66CO7D85FR4E5LZRLxB5FyM btBwHvek9ib8ZiOvkdP34ftmGKX9DhyTTpdqAKlPYnxZk0hpMpzr+6OezwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBG1tzbxD5daFdsjXeIDxFnOiF+JMB8GA1UdIwQY MBaAFJuBUa4WSlt4KxA95/fIqJSJMq6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWIt ZGExZmU5ZWJlZThlLzEvRWJXM052RVBsMW9WMnlOZDRnUEVXYzZJWDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWItZGExZmU5ZWJlZThl LzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOpAP// MA0GCSqGSIb3DQEBCwUAA4IBAQCQCHvIaja1v5TS48ulxue/O1kj7UkDWPWSD+nJ NED9WmOxANU1YxYBK85wkQI0bf1rUvwGAtjg1ZTi5ORQc6USYOP7o4E26ITTO+CS O7cY4ihfO5f0+8YPmFQfuAWLz6J7ij/iRQCFTtuYRPm672JgQ57PhDHWeqNllWln F3BoKWqedeCNzb1blr4KAcNpgAtx8Hkgm6YOtPOZ8X1ANVPfigAMAv64c5qCOFkE xnYXkYG660YuxcY29jfmWyWhq3tfXvDC3DHykLu+nllIgdK3QgpZIr3qo31OFnDN JT1AjeMm1vA1TecgZM2CdLdcOFkVOVjnQbignMUv6PS7Kw1v -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:07 2026 by rpki-client