This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa File: eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa (raw, json) Hash identifier: 8Xp/LdoxCaTuezyx5QRMEAVFrFHA3obUardNQYSwraI= Subject key identifier: 78:94:AE:DA:6C:2A:8E:FF:90:A9:73:DA:F9:BE:86:45:44:83:DE:B4 Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Certificate serial: 019B7C12045AAE9E915B9BD7F9CE6D221F88 Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa Signing time: Fri 02 Jan 2026 00:18:34 +0000 ROA not before: Fri 02 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2001:67c:2064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:04:5a:ae:9e:91:5b:9b:d7:f9:ce:6d:22:1f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Validity Not Before: Jan 2 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7894aeda6c2a8eff90a973daf9be86454483deb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:28:39:49:cd:2d:8d:92:75:95:ad:f0:49: ad:2a:0e:28:03:84:45:1e:3f:fa:f7:3a:c5:ef:50: e9:e0:16:8e:84:e6:fd:2b:90:4c:4d:60:7f:78:24: 54:32:b8:39:ff:b8:37:be:73:0b:60:9b:b6:b1:d8: 40:99:4b:d9:80:f0:9f:9e:07:11:97:f4:15:d8:72: d1:66:ff:86:96:b6:2a:4b:cf:79:60:60:e8:56:d6: 7c:65:4a:81:7d:7c:14:a1:9f:b6:d2:9a:37:d1:6e: 29:47:ff:a6:f0:2a:9b:d1:0b:7e:77:fd:40:84:24: 04:5a:be:8c:75:f7:4f:79:f0:14:01:d5:8e:9a:e1: 83:09:34:0d:f1:b3:c3:36:2d:ba:29:d9:1b:d2:b6: 88:98:f7:e1:9e:4e:e0:7e:b4:5b:e8:4a:33:91:64: e2:41:89:55:e6:68:99:32:c6:c0:d7:5c:f3:7f:a3: 63:df:57:7b:92:2a:84:ef:49:0a:91:44:59:d8:a7: 78:21:77:59:de:22:b8:b6:8c:fe:d3:89:08:5f:4b: f7:97:a0:fb:6c:03:5d:83:4a:92:b2:6e:4b:98:4a: e0:f6:17:c9:52:ce:03:51:e7:4c:56:d1:b1:90:c6: f0:cf:a9:91:9a:96:32:ba:ea:f9:c8:f9:72:6e:6e: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:AE:DA:6C:2A:8E:FF:90:A9:73:DA:F9:BE:86:45:44:83:DE:B4 X509v3 Authority Key Identifier: keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2064::/48 Signature Algorithm: sha256WithRSAEncryption 26:06:a4:cd:f1:f9:d1:c3:22:89:c6:a6:b4:00:df:eb:3f:59: c5:04:78:a6:2c:5b:98:a5:74:24:31:ac:2a:0e:60:6b:76:ea: f2:5e:5d:e9:b3:ec:05:a2:08:71:49:d1:f6:1f:cf:e3:bf:ea: a5:08:36:22:91:d1:80:f5:7d:d9:ee:34:74:36:06:ea:ae:6a: a0:6b:1f:40:a5:fb:2a:9c:31:53:87:4b:89:a7:c3:71:88:31: ff:5b:72:9f:76:4f:ef:b0:45:53:01:43:2f:15:4e:6f:ba:35: 29:8b:d8:15:0a:da:1c:66:ba:99:cf:6e:4a:94:37:87:f5:ff: 68:2a:3f:dc:37:ee:87:51:f8:af:85:4c:51:8d:62:20:eb:39: a9:96:68:cc:32:58:fa:58:67:7c:32:e5:98:4a:2e:19:1c:b4: ef:29:06:66:a8:1f:7f:78:e1:41:52:9f:48:5a:9e:ea:23:c7: ad:be:18:4b:bc:e7:c9:48:46:f4:03:f0:21:d3:17:40:5f:e8: 72:62:93:85:6c:46:7b:9d:d8:0f:26:6d:3c:80:ee:a0:8f:ee: 1b:33:ca:0e:4d:f2:50:ae:a8:66:f8:ba:5b:22:a1:aa:36:84: 3d:d2:68:b0:88:0a:90:29:23:96:b3:66:75:0b:a0:03:c4:c2: 48:ca:3f:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EgRarp6RW5vX+c5tIh+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjlhNjdkNGIyMTVhM2YzMWZjNDYyZjBlYTUzNGVmODNm OGVmNTcwHhcNMjYwMTAyMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODk0YWVkYTZjMmE4ZWZmOTBhOTczZGFmOWJlODY0NTQ0ODNkZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0QoOUnNLY2SdZWt8EmtKg4oA4RF Hj/69zrF71Dp4BaOhOb9K5BMTWB/eCRUMrg5/7g3vnMLYJu2sdhAmUvZgPCfngcR l/QV2HLRZv+GlrYqS895YGDoVtZ8ZUqBfXwUoZ+20po30W4pR/+m8Cqb0Qt+d/1A hCQEWr6MdfdPefAUAdWOmuGDCTQN8bPDNi26Kdkb0raImPfhnk7gfrRb6EozkWTi QYlV5miZMsbA11zzf6Nj31d7kiqE70kKkURZ2Kd4IXdZ3iK4toz+04kIX0v3l6D7 bANdg0qSsm5LmErg9hfJUs4DUedMVtGxkMbwz6mRmpYyuur5yPlybm5tzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHiUrtpsKo7/kKlz2vm+hkVEg960MB8GA1UdIwQY MBaAFA5ppn1LIVo/MfxGLw6lNO+D+O9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MGJkZDQtZTJhOS00NmM5LTgzNmUt NjhjMWI3ZGZiMTkwLzEvZUpTdTJtd3Fqdi1RcVhQYS1iNkdSVVNEM3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81MGJkZDQtZTJhOS00NmM5LTgzNmUtNjhjMWI3ZGZiMTkw LzEvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCBk MA0GCSqGSIb3DQEBCwUAA4IBAQAmBqTN8fnRwyKJxqa0AN/rP1nFBHimLFuYpXQk MawqDmBrduryXl3ps+wFoghxSdH2H8/jv+qlCDYikdGA9X3Z7jR0Ngbqrmqgax9A pfsqnDFTh0uJp8NxiDH/W3Kfdk/vsEVTAUMvFU5vujUpi9gVCtocZrqZz25KlDeH 9f9oKj/cN+6HUfivhUxRjWIg6zmplmjMMlj6WGd8MuWYSi4ZHLTvKQZmqB9/eOFB Up9IWp7qI8etvhhLvOfJSEb0A/Ah0xdAX+hyYpOFbEZ7ndgPJm08gO6gj+4bM8oO TfJQrqhm+LpbIqGqNoQ90miwiAqQKSOWs2Z1C6ADxMJIyj/P -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:16 2026 by rpki-client