This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/604DVjW89FcTF-J3OlDY0xygtP0.roa File: 604DVjW89FcTF-J3OlDY0xygtP0.roa (raw, json) Hash identifier: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg= Subject key identifier: EB:4E:03:56:35:BC:F4:57:13:17:E2:77:3A:50:D8:D3:1C:A0:B4:FD Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B3550BFADC095FC406627E76A1EA210 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/604DVjW89FcTF-J3OlDY0xygtP0.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 2a0e:e6c0:8000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:50:bf:ad:c0:95:fc:40:66:27:e7:6a:1e:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb4e035635bcf4571317e2773a50d8d31ca0b4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:80:f4:1f:3f:ac:a5:cc:1f:bc:52:7b:02:98: 1e:b5:7d:c5:4c:7d:e0:49:8c:b1:c1:8b:06:36:46: 35:4b:26:2f:1d:6d:dc:d0:d5:41:d5:19:0b:1f:d8: db:78:ed:07:11:49:5c:8a:49:7c:4c:bf:da:50:4c: f9:67:e7:81:70:e5:eb:2d:7b:0c:cc:d5:66:3d:de: aa:43:a4:84:d6:31:0e:09:9e:26:7b:93:b3:be:66: 71:82:57:c9:70:f0:ea:17:4e:c0:e1:d6:5d:82:08: c4:1d:f7:8b:78:18:df:69:dd:77:81:09:3b:27:45: 64:7b:d2:9f:fa:15:19:33:b7:25:9d:c3:4b:39:b3: 0c:9e:a1:ce:78:e2:bd:ed:75:94:3c:0f:ec:31:42: 88:1c:7e:14:5d:d9:c0:44:27:d4:8d:98:d7:5d:04: 21:5a:02:f6:fb:69:7b:b7:c5:71:c7:d1:df:2a:c2: ba:53:c6:06:1b:75:55:02:f6:11:be:88:1c:bb:94: cc:0e:15:37:6b:0b:0c:a7:2e:e1:02:bd:31:b5:24: 6a:37:e6:c6:07:f0:07:0f:98:8b:8d:f9:0a:80:24: 61:30:1a:54:c7:5d:94:d0:e2:86:b5:1f:2c:9a:61: 1b:6d:85:ed:3b:53:e8:04:59:c9:80:64:25:4f:08: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4E:03:56:35:BC:F4:57:13:17:E2:77:3A:50:D8:D3:1C:A0:B4:FD X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/604DVjW89FcTF-J3OlDY0xygtP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e6c0:8000::/44 Signature Algorithm: sha256WithRSAEncryption 1f:87:5f:a7:39:33:1b:8e:d0:85:2c:f6:ba:ad:2c:76:f4:ca: 9f:bf:18:78:c7:fa:82:93:6d:58:6d:6c:0d:7e:57:8b:16:9b: 70:eb:88:e1:5e:b6:f2:78:51:db:da:c7:88:a2:3b:91:07:d5: cc:7c:41:99:19:83:47:23:e2:45:7b:a3:ff:21:5a:3f:42:b9: 4e:a7:bf:61:62:5e:3d:b4:f3:58:bb:c0:de:ea:6a:91:c3:91: fb:c1:89:19:24:54:72:d2:b4:5a:53:bc:1f:f2:da:18:03:a2: 55:ca:b1:45:18:08:fc:db:f2:be:5f:12:10:83:89:0e:78:30: 0f:5f:59:28:f6:c0:1d:f2:19:50:50:90:ca:60:ec:df:36:bd: fe:d2:35:c5:a9:c3:36:79:5c:26:4c:da:b8:ef:e7:04:5c:5b: 51:3b:f1:2b:f6:a9:64:ec:2a:65:d1:35:83:d6:f7:32:f7:6d: fe:ba:87:18:c7:4a:ef:9e:0a:41:71:e4:21:fa:ed:39:93:af: 5c:0f:4e:71:a7:fc:65:91:42:38:99:d9:13:d3:a7:5a:a7:b8: 62:67:23:b4:31:35:1b:03:db:0d:69:7c:6d:5a:99:9e:35:00: c5:da:04:f9:a5:43:0c:56:b7:0d:e5:e6:24:68:92:84:69:dd: 14:1e:ea:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NVC/rcCV/EBmJ+dqHqIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjRlMDM1NjM1YmNmNDU3MTMxN2UyNzczYTUwZDhkMzFjYTBiNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oD0Hz+spcwfvFJ7ApgetX3FTH3g SYyxwYsGNkY1SyYvHW3c0NVB1RkLH9jbeO0HEUlcikl8TL/aUEz5Z+eBcOXrLXsM zNVmPd6qQ6SE1jEOCZ4me5OzvmZxglfJcPDqF07A4dZdggjEHfeLeBjfad13gQk7 J0Vke9Kf+hUZM7clncNLObMMnqHOeOK97XWUPA/sMUKIHH4UXdnARCfUjZjXXQQh WgL2+2l7t8Vxx9HfKsK6U8YGG3VVAvYRvogcu5TMDhU3awsMpy7hAr0xtSRqN+bG B/AHD5iLjfkKgCRhMBpUx12U0OKGtR8smmEbbYXtO1PoBFnJgGQlTwhb/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOtOA1Y1vPRXExfidzpQ2NMcoLT9MB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvNjA0RFZqVzg5RmNURi1KM09sRFkweHlndFAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7mwIAA MA0GCSqGSIb3DQEBCwUAA4IBAQAfh1+nOTMbjtCFLPa6rSx29Mqfvxh4x/qCk21Y bWwNfleLFptw64jhXrbyeFHb2seIojuRB9XMfEGZGYNHI+JFe6P/IVo/QrlOp79h Yl49tPNYu8De6mqRw5H7wYkZJFRy0rRaU7wf8toYA6JVyrFFGAj82/K+XxIQg4kO eDAPX1ko9sAd8hlQUJDKYOzfNr3+0jXFqcM2eVwmTNq47+cEXFtRO/Er9qlk7Cpl 0TWD1vcy923+uocYx0rvngpBceQh+u05k69cD05xp/xlkUI4mdkT06dap7hiZyO0 MTUbA9sNaXxtWpmeNQDF2gT5pUMMVrcN5eYkaJKEad0UHuqO -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:35 2026 by rpki-client