This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa File: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (raw, json) Hash identifier: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw= Subject key identifier: 79:4F:22:EA:73:CA:31:6A:82:B1:57:4F:16:9F:3D:84:78:50:FE:1B Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA367E5401F5B36705A2D8514B3C460 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205710 IP address blocks: 2a01:e901:167::/48 maxlen: 48 2a01:e901:177::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:67:e5:40:1f:5b:36:70:5a:2d:85:14:b3:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=794f22ea73ca316a82b1574f169f3d847850fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:15:5a:16:a5:56:17:29:5e:b1:12:17:8f: 02:79:6c:26:c9:df:36:fc:22:7e:94:cf:52:12:f9: 30:c6:df:e2:5d:18:f4:66:70:f5:48:bb:34:95:b9: 69:28:e0:84:d9:63:d6:46:45:a0:a2:df:e8:2e:ef: c9:0d:68:72:ac:a4:66:79:0a:90:f2:de:d1:08:fb: 80:54:76:6b:27:76:37:2c:26:84:0b:1d:c6:40:3a: c2:c5:82:9a:23:d8:ba:7c:b2:e6:9c:18:17:0b:dd: 91:d5:a0:d2:47:6d:1b:29:33:7b:f1:cc:2f:8d:42: 00:07:de:42:43:b6:97:e4:72:4e:e1:19:a0:15:40: 50:c6:c8:4f:b8:70:35:03:c1:2f:78:df:27:f0:6a: 3b:11:47:1e:f8:2f:92:50:2e:fc:32:86:1a:f4:16: f0:de:07:55:bf:70:6b:51:7b:c1:b2:ff:4e:09:2d: 59:04:bf:42:4c:5b:c6:29:a8:33:22:3d:31:4a:4a: 52:c1:d2:3a:47:9b:ad:eb:6a:b3:8d:9b:c4:39:0a: 92:8c:fe:b5:fe:dc:a1:00:8c:88:17:10:ae:07:5a: 76:94:55:d7:6a:d8:6f:44:09:68:ee:b6:3b:09:51: 20:18:6a:6b:83:16:02:fc:9d:3b:f5:f3:8c:d4:a5: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:22:EA:73:CA:31:6A:82:B1:57:4F:16:9F:3D:84:78:50:FE:1B X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:167::/48 2a01:e901:177::/48 Signature Algorithm: sha256WithRSAEncryption 41:18:bd:80:25:83:5b:17:77:1b:1c:c0:62:12:d2:aa:9a:e1: e6:94:d4:5c:4c:34:59:22:c2:8e:fa:67:be:f5:9f:c5:fa:13: c3:be:2f:4d:43:e9:a5:85:db:7c:74:4b:4c:8a:9e:b1:7c:61: ea:0e:f5:8a:1e:2b:f3:6d:4b:70:c3:da:28:25:fb:75:1c:02: c0:89:ec:bb:f8:66:46:9a:89:dc:cd:ea:5f:be:2e:67:73:49: 16:40:3a:cc:ca:e7:59:97:2a:1d:c8:02:d1:df:61:0b:77:1a: 61:27:85:9b:aa:ff:4b:5c:ae:43:49:03:b2:69:ca:ff:9e:64: 73:31:59:13:04:40:fc:5a:38:6c:8f:63:63:07:ce:c2:1a:a2: a7:57:21:0e:c2:4c:d9:33:1e:02:b1:ed:3c:45:51:e6:db:fd: 4d:ef:f4:fd:fb:96:3e:f4:51:3f:44:30:b8:9f:b1:55:0f:d0: 90:d5:d0:06:65:8d:bc:19:a6:9a:c4:ef:10:da:1c:e2:ce:43: 08:9b:ce:18:dc:7a:35:c0:73:6f:fd:4e:84:6f:69:32:62:aa: e6:0c:55:f8:fb:a9:68:0a:73:96:6c:0e:54:ae:d0:ae:5c:89: 72:dd:49:f4:b3:73:05:bf:8c:70:48:ca:a9:db:e7:ab:92:6c: ec:a6:25:ea -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o2flQB9bNnBaLYUUs8RgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTRmMjJlYTczY2EzMTZhODJiMTU3NGYxNjlmM2Q4NDc4NTBmZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsAVWhalVhcpXrESF48CeWwmyd82 /CJ+lM9SEvkwxt/iXRj0ZnD1SLs0lblpKOCE2WPWRkWgot/oLu/JDWhyrKRmeQqQ 8t7RCPuAVHZrJ3Y3LCaECx3GQDrCxYKaI9i6fLLmnBgXC92R1aDSR20bKTN78cwv jUIAB95CQ7aX5HJO4RmgFUBQxshPuHA1A8EveN8n8Go7EUce+C+SUC78MoYa9Bbw 3gdVv3BrUXvBsv9OCS1ZBL9CTFvGKagzIj0xSkpSwdI6R5ut62qzjZvEOQqSjP61 /tyhAIyIFxCuB1p2lFXXathvRAlo7rY7CVEgGGprgxYC/J079fOM1KU2gQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHlPIupzyjFqgrFXTxafPYR4UP4bMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvZVU4aTZuUEtNV3FDc1ZkUEZwODloSGhRX2hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgHpAQFn AwcAKgHpAQF3MA0GCSqGSIb3DQEBCwUAA4IBAQBBGL2AJYNbF3cbHMBiEtKqmuHm lNRcTDRZIsKO+me+9Z/F+hPDvi9NQ+mlhdt8dEtMip6xfGHqDvWKHivzbUtww9oo Jft1HALAiey7+GZGmonczepfvi5nc0kWQDrMyudZlyodyALR32ELdxphJ4Wbqv9L XK5DSQOyacr/nmRzMVkTBED8Wjhsj2NjB87CGqKnVyEOwkzZMx4Cse08RVHm2/1N 7/T9+5Y+9FE/RDC4n7FVD9CQ1dAGZY28GaaaxO8Q2hzizkMIm84Y3Ho1wHNv/U6E b2kyYqrmDFX4+6loCnOWbA5UrtCuXIly3Un0s3MFv4xwSMqp2+erkmzspiXq -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:42 2026 by rpki-client