This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/e-PI40mcmW_4qj2wj51dZytuRJ4.roa File: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (raw, json) Hash identifier: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE= Subject key identifier: 7B:E3:C8:E3:49:9C:99:6F:F8:AA:3D:B0:8F:9D:5D:67:2B:6E:44:9E Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019B77C6E3DB1CBD9E4391F9CF4F0E312D42 Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/e-PI40mcmW_4qj2wj51dZytuRJ4.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209209 IP address blocks: 2a11:2307::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e3:db:1c:bd:9e:43:91:f9:cf:4f:0e:31:2d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be3c8e3499c996ff8aa3db08f9d5d672b6e449e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:c1:4e:fa:4d:c6:7a:69:67:d7:4e:4d:1d: 75:0d:b1:34:ad:52:e3:7f:55:28:5c:ee:db:8c:8c: 42:56:07:a3:58:83:7d:36:8c:3c:68:c0:fc:c7:ab: ac:44:58:9e:f9:23:df:a1:55:1e:78:e9:b0:fe:04: 7a:1d:dd:54:e8:2e:1d:95:e3:11:75:24:34:c2:4d: b4:55:d9:d2:2b:9c:17:8e:53:8d:ff:64:43:13:2b: 06:36:d6:6e:f1:28:70:d2:30:f3:5e:3a:24:89:ff: ab:67:3a:ca:db:b4:91:c1:7e:f4:89:c2:09:bd:5c: b4:a8:92:ce:00:10:53:18:ae:7e:8e:31:d2:5a:0c: f9:17:ce:38:c4:f9:e4:81:bb:19:6b:ec:91:ad:85: e6:43:76:66:0a:b3:00:b1:47:45:28:b5:76:6a:60: 2c:4a:41:99:5d:51:12:36:2b:46:cb:36:4d:3c:a9: f5:57:50:bf:3f:15:c6:22:b0:1d:3b:20:f1:74:63: 91:70:9c:f9:03:ce:08:ee:96:ee:d3:82:69:46:76: 29:06:fa:9d:7c:93:a6:a8:b4:f0:ed:6b:8d:32:a5: f6:40:18:2b:dd:db:76:9c:75:c7:7c:e7:f9:88:e7: 87:67:56:b3:27:47:73:70:d6:06:df:1d:70:56:17: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:C8:E3:49:9C:99:6F:F8:AA:3D:B0:8F:9D:5D:67:2B:6E:44:9E X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/e-PI40mcmW_4qj2wj51dZytuRJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:2307::/37 Signature Algorithm: sha256WithRSAEncryption 70:49:67:ec:53:d6:a6:0e:e0:fc:f3:6f:4b:4e:b9:31:26:69: 38:e8:15:09:3d:4f:77:da:68:b9:bd:6f:be:03:b1:3d:36:2c: ac:40:07:b6:4d:1d:54:31:8f:be:04:cd:99:63:76:9b:51:e9: 58:b4:15:36:00:61:5e:2d:ad:ea:31:e8:25:ac:0b:1b:12:54: d2:92:21:1e:72:80:b5:bc:9e:36:2a:76:a1:2a:b4:e1:d1:1f: 26:fb:a9:6b:26:02:b0:16:bf:0f:15:0c:6f:02:c1:0e:04:2f: 51:49:8a:6a:c4:56:5e:4e:d8:5d:1d:2e:e8:0a:12:e1:72:07: 09:18:b0:f0:df:a7:3e:eb:a2:26:2d:4b:38:ce:df:85:d1:d6: e6:09:2f:2e:5d:46:26:fb:65:88:53:dd:8b:83:f0:58:45:f8: 24:aa:30:6b:a2:9b:eb:d6:ae:5f:01:19:b1:fe:f9:c9:13:cb: 9f:63:93:f0:69:0c:9b:39:5d:46:eb:dd:cf:05:e5:55:b5:95: 90:41:bf:bc:16:d3:08:13:4a:e3:e7:87:8a:5e:21:aa:12:32: 97:15:20:2e:cf:bd:01:5f:bc:06:3d:64:25:df:e5:6c:37:14: c8:b3:ce:90:d4:4b:f7:b2:e4:d3:41:3c:8e:6b:fd:3b:3d:0f: 94:b1:96:27 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xuPbHL2eQ5H5z08OMS1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmUzYzhlMzQ5OWM5OTZmZjhhYTNkYjA4ZjlkNWQ2NzJiNmU0NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/LBTvpNxnppZ9dOTR11DbE0rVLj f1UoXO7bjIxCVgejWIN9Now8aMD8x6usRFie+SPfoVUeeOmw/gR6Hd1U6C4dleMR dSQ0wk20VdnSK5wXjlON/2RDEysGNtZu8Shw0jDzXjokif+rZzrK27SRwX70icIJ vVy0qJLOABBTGK5+jjHSWgz5F844xPnkgbsZa+yRrYXmQ3ZmCrMAsUdFKLV2amAs SkGZXVESNitGyzZNPKn1V1C/PxXGIrAdOyDxdGORcJz5A84I7pbu04JpRnYpBvqd fJOmqLTw7WuNMqX2QBgr3dt2nHXHfOf5iOeHZ1azJ0dzcNYG3x1wVheBPQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHvjyONJnJlv+Ko9sI+dXWcrbkSeMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvZS1QSTQwbWNtV180cWoyd2o1MWRaeXR1Uko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKhEjBwAw DQYJKoZIhvcNAQELBQADggEBAHBJZ+xT1qYO4Pzzb0tOuTEmaTjoFQk9T3faaLm9 b74DsT02LKxAB7ZNHVQxj74EzZljdptR6Vi0FTYAYV4treox6CWsCxsSVNKSIR5y gLW8njYqdqEqtOHRHyb7qWsmArAWvw8VDG8CwQ4EL1FJimrEVl5O2F0dLugKEuFy BwkYsPDfpz7roiYtSzjO34XR1uYJLy5dRib7ZYhT3YuD8FhF+CSqMGuim+vWrl8B GbH++ckTy59jk/BpDJs5XUbr3c8F5VW1lZBBv7wW0wgTSuPnh4peIaoSMpcVIC7P vQFfvAY9ZCXf5Ww3FMizzpDUS/ey5NNBPI5r/Ts9D5Sxlic= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:41 2026 by rpki-client