This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa File: evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa (raw, json) Hash identifier: 54FCOYYN42LEii2+4I3cfpiMUraNJ7gBfh9JPajAgpM= Subject key identifier: 7A:F6:66:F2:5C:09:F3:74:5A:DA:0C:E9:1E:7E:25:84:79:09:0F:38 Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf Certificate serial: 019B7834F0D7E0E33F328EF8DEB039DDB053 Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216394 IP address blocks: 2a01:f905::/32 maxlen: 32 2a01:f905:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f0:d7:e0:e3:3f:32:8e:f8:de:b0:39:dd:b0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af666f25c09f3745ada0ce91e7e258479090f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0c:d5:7e:71:c6:c2:d9:88:4d:74:14:72:b6: d0:07:5c:86:c9:ff:83:d8:49:e8:43:62:42:40:88: 83:30:2d:04:a4:2a:5f:5c:cc:4a:ce:23:00:dd:2a: f7:d5:01:2a:57:fc:2c:88:b1:5b:57:86:f4:0b:cb: e2:3b:59:ee:e8:80:9d:24:b2:93:17:ac:e1:32:73: 5d:46:c1:6e:b1:aa:a6:78:ae:b2:74:82:9b:60:95: db:ec:83:6e:85:d5:b3:a0:43:a8:bd:64:9a:e6:48: c7:e0:59:8e:65:4e:28:91:d0:c2:34:22:9e:f3:4f: da:2b:8d:aa:2a:c7:43:98:5f:c6:0a:dc:71:e6:21: b7:70:36:ca:a0:e8:0f:ed:ad:16:0d:49:22:2f:db: 19:08:51:f7:f4:a7:5f:9f:75:11:a0:d9:20:f0:69: 50:d7:71:59:36:14:48:a5:2e:9c:bb:7a:eb:49:b4: a2:60:72:55:6f:c7:18:6c:f1:62:4b:94:04:26:24: 32:58:87:64:46:24:38:70:4f:55:63:2e:83:3c:da: 9e:3d:7f:7d:dc:a8:f3:68:0b:8a:b0:47:f7:27:5d: c8:fc:86:43:a9:b8:60:0e:44:61:e2:f4:63:2f:78: 5c:f2:07:ee:e6:cd:de:97:7c:a6:fe:e1:33:3d:09: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F6:66:F2:5C:09:F3:74:5A:DA:0C:E9:1E:7E:25:84:79:09:0F:38 X509v3 Authority Key Identifier: keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f905::/32 Signature Algorithm: sha256WithRSAEncryption 30:10:cc:36:c8:c4:d1:71:4e:ed:77:7d:a1:63:59:90:25:a1: 22:c2:38:8e:99:41:1f:2b:4d:76:7f:ad:de:bc:2d:a0:c9:dc: fb:5e:ee:1e:24:9c:a6:e9:ca:fd:83:8c:fd:35:a6:0e:f9:87: 93:0a:1d:eb:26:84:a9:5a:3a:39:35:fb:3f:ee:34:27:df:cf: 2e:43:fe:05:69:6f:65:97:46:0c:a1:c3:27:94:91:86:94:8f: 29:d3:0b:ce:7a:c8:ba:43:71:64:7b:5e:e2:a1:f9:94:8d:b6: d1:19:d2:17:8f:14:df:b4:19:f4:54:3e:5c:05:5f:22:4d:51: cb:9f:97:36:6b:91:6a:24:99:eb:d5:94:40:7e:06:d2:76:65: 25:45:b9:f4:d0:f3:cd:7d:a7:c3:16:97:8f:fa:62:fa:75:de: fc:86:20:69:92:72:cb:78:5e:a5:09:18:cb:6a:f4:de:70:c4: ff:09:64:16:dc:eb:11:77:01:57:18:85:9b:5b:b0:bb:06:42: 84:ae:5f:cd:01:e6:16:17:96:ac:08:13:9e:f0:59:b6:3a:12: 4c:8c:2e:f8:88:c2:d4:b0:0c:37:19:02:e2:92:ac:c7:83:0c: 68:aa:17:07:cc:ee:29:45:2b:7f:37:a6:66:0c:c2:84:11:ee: 23:c8:1b:43 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NPDX4OM/Mo743rA53bBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4 MmFjYmYwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWY2NjZmMjVjMDlmMzc0NWFkYTBjZTkxZTdlMjU4NDc5MDkwZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gzVfnHGwtmITXQUcrbQB1yGyf+D 2EnoQ2JCQIiDMC0EpCpfXMxKziMA3Sr31QEqV/wsiLFbV4b0C8viO1nu6ICdJLKT F6zhMnNdRsFusaqmeK6ydIKbYJXb7INuhdWzoEOovWSa5kjH4FmOZU4okdDCNCKe 80/aK42qKsdDmF/GCtxx5iG3cDbKoOgP7a0WDUkiL9sZCFH39Kdfn3URoNkg8GlQ 13FZNhRIpS6cu3rrSbSiYHJVb8cYbPFiS5QEJiQyWIdkRiQ4cE9VYy6DPNqePX99 3KjzaAuKsEf3J13I/IZDqbhgDkRh4vRjL3hc8gfu5s3el3ym/uEzPQmTnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHr2ZvJcCfN0WtoM6R5+JYR5CQ84MB8GA1UdIwQY MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt YTE5Y2M4YTc2ZDA0LzEvZXZabThsd0o4M1JhMmd6cEhuNGxoSGtKRHpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0 LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgH5BTAN BgkqhkiG9w0BAQsFAAOCAQEAMBDMNsjE0XFO7Xd9oWNZkCWhIsI4jplBHytNdn+t 3rwtoMnc+17uHiScpunK/YOM/TWmDvmHkwod6yaEqVo6OTX7P+40J9/PLkP+BWlv ZZdGDKHDJ5SRhpSPKdMLznrIukNxZHte4qH5lI220RnSF48U37QZ9FQ+XAVfIk1R y5+XNmuRaiSZ69WUQH4G0nZlJUW59NDzzX2nwxaXj/pi+nXe/IYgaZJyy3hepQkY y2r03nDE/wlkFtzrEXcBVxiFm1uwuwZChK5fzQHmFheWrAgTnvBZtjoSTIwu+IjC 1LAMNxkC4pKsx4MMaKoXB8zuKUUrfzemZgzChBHuI8gbQw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:51 2026 by rpki-client