This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/EzzALuW7NfmsgaL4kIcl-Odf4eI.roa File: EzzALuW7NfmsgaL4kIcl-Odf4eI.roa (raw, json) Hash identifier: umfdSeppNsxQTLkViIjjr//zdatyiXav2DlvNdT/PiE= Subject key identifier: 13:3C:C0:2E:E5:BB:35:F9:AC:81:A2:F8:90:87:25:F8:E7:5F:E1:E2 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DA48385E24006C4D828C4C2B1082 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/EzzALuW7NfmsgaL4kIcl-Odf4eI.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38846 IP address blocks: 2a0f:5707:ab00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:da:48:38:5e:24:00:6c:4d:82:8c:4c:2b:10:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133cc02ee5bb35f9ac81a2f8908725f8e75fe1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:f1:9f:92:13:4c:1b:f7:ba:c1:57:dd:07: fe:70:6e:d6:e5:1a:37:29:21:d0:77:f2:54:0a:53: 5b:33:af:ae:49:ec:30:40:a4:65:ec:c0:df:c4:b8: be:24:3e:ed:9c:97:ff:ba:d1:e5:af:9b:46:6c:0b: a7:08:a1:ce:f0:9a:23:bc:b9:fe:9b:a0:8a:de:9e: cc:e6:6e:fe:c3:3d:aa:33:22:80:93:3e:f1:a6:3a: f8:6a:47:47:fa:5a:b8:8c:24:64:03:78:1c:c3:20: dd:23:11:ad:1b:07:75:95:70:79:e4:37:3b:7f:ca: 64:6d:1b:de:2f:7a:a8:91:de:92:d5:a2:5c:8f:17: 6e:f2:fe:99:6f:b9:42:75:46:c0:c3:f6:f8:8c:dd: af:16:49:0a:08:e3:18:c6:37:4f:e8:44:8b:d0:f8: 40:08:02:ad:24:4d:32:04:56:20:ea:5f:b8:c4:52: c6:23:91:6d:15:f4:e7:8b:24:33:4b:24:f0:17:28: 10:fa:db:fe:8a:71:fe:dd:7f:c3:3b:b7:71:d1:82: 51:3f:46:73:95:9e:1d:df:43:31:b6:43:f0:f4:3e: 27:56:18:b2:ef:97:23:2d:42:bd:b1:46:af:c6:5f: 81:04:51:08:1e:bf:9c:40:7f:00:d9:af:40:d5:45: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3C:C0:2E:E5:BB:35:F9:AC:81:A2:F8:90:87:25:F8:E7:5F:E1:E2 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/EzzALuW7NfmsgaL4kIcl-Odf4eI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ab00::/44 Signature Algorithm: sha256WithRSAEncryption 9c:01:cc:c5:b4:0a:19:38:b1:3c:eb:52:3b:e5:a7:f1:ca:4d: 02:7e:cf:b0:99:2b:8e:3c:e7:fa:ba:36:b0:65:0b:57:a3:e2: 1a:46:37:34:eb:2f:19:d9:d0:e5:ed:58:ef:f5:ad:c7:43:bc: 5c:1c:e1:2d:88:d9:97:72:d0:1f:7d:fc:72:27:65:e7:71:89: 51:88:ee:f6:79:57:10:4f:a3:04:f1:55:5c:33:70:c2:50:62: e8:8b:da:16:d9:ac:8a:5d:4b:86:9f:35:4d:66:03:2e:32:89: 3c:e6:85:f0:88:65:20:f2:93:a0:8e:85:4c:ff:ea:b6:32:04: 44:45:5c:00:74:9c:23:f3:58:45:68:45:85:c6:21:bd:a3:ce: 0f:e1:68:d3:37:04:82:f5:9f:40:2a:20:fa:ae:78:fa:22:d5: 64:bd:a9:71:78:c1:7b:04:4b:75:f7:5f:83:36:95:71:52:bd: cf:d9:20:eb:ea:ac:94:1a:e7:67:e8:95:e3:09:39:9e:71:1d: 4d:9c:92:89:ed:f9:40:01:fa:f1:ed:5f:54:b4:65:10:2a:18: 10:89:14:62:5e:0e:93:d6:30:57:8d:58:78:bd:d7:1b:0e:44: c9:e8:4b:d7:f0:91:23:97:05:98:2b:8a:c1:b0:8e:cf:98:a0: 24:fb:ee:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNpIOF4kAGxNgoxMKxCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNjYzAyZWU1YmIzNWY5YWM4MWEyZjg5MDg3MjVmOGU3NWZlMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Xxn5ITTBv3usFX3Qf+cG7W5Ro3 KSHQd/JUClNbM6+uSewwQKRl7MDfxLi+JD7tnJf/utHlr5tGbAunCKHO8JojvLn+ m6CK3p7M5m7+wz2qMyKAkz7xpjr4akdH+lq4jCRkA3gcwyDdIxGtGwd1lXB55Dc7 f8pkbRveL3qokd6S1aJcjxdu8v6Zb7lCdUbAw/b4jN2vFkkKCOMYxjdP6ESL0PhA CAKtJE0yBFYg6l+4xFLGI5FtFfTniyQzSyTwFygQ+tv+inH+3X/DO7dx0YJRP0Zz lZ4d30MxtkPw9D4nVhiy75cjLUK9sUavxl+BBFEIHr+cQH8A2a9A1UUiHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBM8wC7luzX5rIGi+JCHJfjnX+HiMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvRXp6QUx1VzdOZm1zZ2FMNGtJY2wtT2RmNGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6sA MA0GCSqGSIb3DQEBCwUAA4IBAQCcAczFtAoZOLE861I75afxyk0Cfs+wmSuOPOf6 ujawZQtXo+IaRjc06y8Z2dDl7Vjv9a3HQ7xcHOEtiNmXctAfffxyJ2XncYlRiO72 eVcQT6ME8VVcM3DCUGLoi9oW2ayKXUuGnzVNZgMuMok85oXwiGUg8pOgjoVM/+q2 MgRERVwAdJwj81hFaEWFxiG9o84P4WjTNwSC9Z9AKiD6rnj6ItVkvalxeMF7BEt1 91+DNpVxUr3P2SDr6qyUGudn6JXjCTmecR1NnJKJ7flAAfrx7V9UtGUQKhgQiRRi Xg6T1jBXjVh4vdcbDkTJ6EvX8JEjlwWYK4rBsI7PmKAk++4T -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:54 2026 by rpki-client