This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/ezMcKD1ocdQnV8_lR3eRy32z5zk.roa File: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (raw, json) Hash identifier: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8= Subject key identifier: 7B:33:1C:28:3D:68:71:D4:27:57:CF:E5:47:77:91:CB:7D:B3:E7:39 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758858C1E53EE0BC41E847D2BB3D45B Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/ezMcKD1ocdQnV8_lR3eRy32z5zk.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2094 IP address blocks: 2001:660:3203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:85:8c:1e:53:ee:0b:c4:1e:84:7d:2b:b3:d4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b331c283d6871d42757cfe5477791cb7db3e739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:e8:e6:98:98:af:17:7d:a1:8e:f8:da:4a: f0:bc:31:d5:89:6c:b4:3b:8f:d0:fa:97:a2:69:06: 6b:af:35:f4:33:18:93:04:49:03:57:c5:27:13:a1: e4:da:6f:69:6f:27:c7:b5:cf:83:b1:aa:ca:d7:c9: f9:f5:bb:df:69:9f:cd:27:a0:1a:cb:54:7d:a5:6e: 65:82:6e:f9:71:0f:95:a8:a4:31:73:b5:f9:c8:26: a1:64:41:03:93:7a:ce:8a:0c:ec:69:32:b3:99:07: 4b:40:dd:39:39:9b:6e:5d:80:d1:8c:ce:82:fa:c5: 33:c6:29:56:3b:74:0a:ae:8b:cf:69:60:c3:fd:a9: 50:77:f8:1c:02:ff:10:28:08:72:2e:92:30:ed:e3: 9b:00:fb:96:24:ff:31:51:17:4f:f9:d7:07:52:95: 1b:4c:d6:7b:ec:d5:a0:3e:64:e7:16:ab:ea:ed:41: 09:56:d9:21:fb:fb:4b:36:80:a3:4e:84:bf:5f:ed: d0:39:8e:9f:cf:b9:5b:2a:6d:b4:3f:95:21:74:c1: f2:4c:6a:d9:9b:73:32:80:0b:bd:61:0e:aa:e9:3d: 08:fb:d7:ee:b9:1d:2f:30:81:95:4b:45:7c:4d:31: fb:52:bf:77:f5:35:d5:8c:2b:67:0d:43:48:17:25: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:1C:28:3D:68:71:D4:27:57:CF:E5:47:77:91:CB:7D:B3:E7:39 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/ezMcKD1ocdQnV8_lR3eRy32z5zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:660:3203::/48 Signature Algorithm: sha256WithRSAEncryption 8d:c1:8c:d0:83:2c:03:1d:70:ca:5c:79:0b:69:f7:bd:b3:cd: 2e:de:0a:20:0a:5e:d5:6f:58:dc:f9:a2:e8:80:b0:ac:59:a6: ef:a2:e3:60:e9:0e:bd:a8:66:95:19:c7:30:9f:cf:2c:88:72: 95:d1:25:5b:88:63:e0:f5:4e:dd:ff:69:42:eb:cf:45:a3:33: cd:9c:40:83:9c:c2:5b:3d:8f:75:39:95:43:c9:3c:e9:a7:45: 7b:bb:1a:b2:9e:99:eb:68:e1:79:e7:2b:f9:f5:25:eb:2f:e4: 7a:10:72:5c:65:9e:c0:3d:12:fe:4c:86:58:2b:e6:bb:63:2d: a8:dc:b8:28:34:85:e1:26:84:38:31:5e:3e:74:5b:3d:af:fd: 7d:37:b8:f4:fe:d0:3d:bf:5b:fe:f5:aa:da:a7:5f:6d:11:48: a0:71:33:55:ad:ea:7e:b9:98:93:05:47:21:51:9c:80:85:3c: 14:da:1a:22:59:ef:ce:1c:a3:34:66:40:1e:47:37:90:1c:b7: 8b:b7:f4:10:02:97:8e:47:2e:87:57:76:e4:8d:6a:84:a1:45: 0e:57:ad:55:0d:b5:fe:74:f0:7d:5c:88:94:5e:ef:48:2b:05: d3:99:58:98:6f:e1:fc:39:b8:a4:a7:13:0d:cd:45:75:9c:17: 16:ba:4e:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WIWMHlPuC8QehH0rs9RbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjMzMWMyODNkNjg3MWQ0Mjc1N2NmZTU0Nzc3OTFjYjdkYjNlNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTo5piYrxd9oY742krwvDHViWy0 O4/Q+peiaQZrrzX0MxiTBEkDV8UnE6Hk2m9pbyfHtc+DsarK18n59bvfaZ/NJ6Aa y1R9pW5lgm75cQ+VqKQxc7X5yCahZEEDk3rOigzsaTKzmQdLQN05OZtuXYDRjM6C +sUzxilWO3QKrovPaWDD/alQd/gcAv8QKAhyLpIw7eObAPuWJP8xURdP+dcHUpUb TNZ77NWgPmTnFqvq7UEJVtkh+/tLNoCjToS/X+3QOY6fz7lbKm20P5UhdMHyTGrZ m3MygAu9YQ6q6T0I+9fuuR0vMIGVS0V8TTH7Ur939TXVjCtnDUNIFyWXpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHszHCg9aHHUJ1fP5Ud3kct9s+c5MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvZXpNY0tEMW9jZFFuVjhfbFIzZVJ5MzJ6NXprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGYDID MA0GCSqGSIb3DQEBCwUAA4IBAQCNwYzQgywDHXDKXHkLafe9s80u3gogCl7Vb1jc +aLogLCsWabvouNg6Q69qGaVGccwn88siHKV0SVbiGPg9U7d/2lC689FozPNnECD nMJbPY91OZVDyTzpp0V7uxqynpnraOF55yv59SXrL+R6EHJcZZ7APRL+TIZYK+a7 Yy2o3LgoNIXhJoQ4MV4+dFs9r/19N7j0/tA9v1v+9arap19tEUigcTNVrep+uZiT BUchUZyAhTwU2hoiWe/OHKM0ZkAeRzeQHLeLt/QQApeORy6HV3bkjWqEoUUOV61V DbX+dPB9XIiUXu9IKwXTmViYb+H8ObikpxMNzUV1nBcWuk5X -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:06 2026 by rpki-client