This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/eM1X7x8wZM8pIbppf3y2iwcpciE.roa File: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (raw, json) Hash identifier: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA= Subject key identifier: 78:CD:57:EF:1F:30:64:CF:29:21:BA:69:7F:7C:B6:8B:07:29:72:21 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B7B36540B15355F245884ED8EA6A24936 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/eM1X7x8wZM8pIbppf3y2iwcpciE.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212683 IP address blocks: 2a11:2646::/32 maxlen: 32 2a11:2647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:54:0b:15:35:5f:24:58:84:ed:8e:a6:a2:49:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78cd57ef1f3064cf2921ba697f7cb68b07297221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:45:1c:91:71:fd:ab:62:fa:e5:04:57:92: 53:94:31:3f:a3:b6:f4:5c:1b:ed:b8:7e:2b:c1:45: 40:32:b6:2b:3d:96:3e:59:38:5b:5a:7c:c1:d6:f6: 1a:76:af:4a:ad:bf:4e:ff:4e:c3:c7:bd:8e:58:81: f9:0d:bf:d2:56:6d:6e:10:91:cf:4d:0c:b7:77:08: f0:b7:81:db:0d:c8:f4:74:38:d4:8d:8e:c0:ef:28: e9:f9:a3:01:19:3e:99:39:c0:32:93:69:d0:cc:9f: 79:10:70:2e:bc:1c:a2:8e:1e:7d:dd:77:36:1a:d1: ef:00:17:e0:e2:10:81:8e:48:cd:cf:73:6e:bb:ef: f6:88:4f:88:1f:98:bc:83:d9:3e:f4:46:67:f5:19: c1:da:0d:a1:dd:0c:55:5d:5d:1c:a6:46:2f:59:c9: d9:cc:63:ee:04:0c:80:42:ee:c5:3c:63:9e:a3:39: 1a:54:ea:0a:e3:57:b0:c9:3d:cd:dd:45:69:c2:49: 38:63:59:af:54:e6:70:6c:30:25:db:1b:5f:05:35: 23:7e:3c:72:51:d7:ba:ca:e4:32:af:1a:15:a3:4d: 5e:c3:1e:47:d6:5c:0f:a8:21:97:08:a4:2e:3f:6e: 3e:78:31:bc:7e:ef:fe:fc:60:99:f2:23:fe:86:f3: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CD:57:EF:1F:30:64:CF:29:21:BA:69:7F:7C:B6:8B:07:29:72:21 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/eM1X7x8wZM8pIbppf3y2iwcpciE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:2646::/31 Signature Algorithm: sha256WithRSAEncryption 0b:2b:5d:1d:c4:5b:f6:e2:9b:99:cb:dc:f2:72:c4:de:9a:29: c9:5e:d6:ce:2e:17:44:3c:21:bb:5e:f2:bc:ce:53:0a:d5:b5: 62:21:cc:67:2a:e1:f0:95:be:60:24:36:3a:b8:79:90:17:1b: 27:30:c5:98:c9:57:fd:80:10:36:7a:ac:09:5b:f6:90:d1:70: 0e:ce:f6:44:b2:3f:c7:6d:bb:4b:da:53:8f:30:7a:b9:0a:e6: 5b:43:4e:21:b9:5b:cf:b7:ba:c5:1a:77:ef:f7:97:b4:92:00: 24:d5:05:9e:29:19:c7:56:69:61:96:23:6c:60:4a:97:d0:31: a3:1e:9a:94:22:38:2c:11:ec:38:63:68:da:c3:ac:fa:f2:da: d3:9d:0c:c2:c8:8d:d3:94:39:ad:78:0b:1f:69:16:78:04:af: 36:0e:33:42:f6:9a:92:4e:e5:13:3b:c2:1b:8f:5e:7e:eb:f2: f5:8b:0d:38:3b:77:86:cf:5f:8f:a5:8a:b0:ae:56:dd:e4:2a: 18:cd:e9:2b:24:22:9b:a2:fa:ce:40:df:78:99:cf:d4:c8:63: 9d:03:4b:d1:28:35:68:24:64:9f:1e:eb:51:f4:dc:34:2f:3a: 92:f4:da:48:3e:6f:18:0d:fa:f3:a0:5d:38:2c:94:bd:4f:37: 14:0f:87:93 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NlQLFTVfJFiE7Y6mokk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGNkNTdlZjFmMzA2NGNmMjkyMWJhNjk3ZjdjYjY4YjA3Mjk3MjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoihFHJFx/ati+uUEV5JTlDE/o7b0 XBvtuH4rwUVAMrYrPZY+WThbWnzB1vYadq9Krb9O/07Dx72OWIH5Db/SVm1uEJHP TQy3dwjwt4HbDcj0dDjUjY7A7yjp+aMBGT6ZOcAyk2nQzJ95EHAuvByijh593Xc2 GtHvABfg4hCBjkjNz3Nuu+/2iE+IH5i8g9k+9EZn9RnB2g2h3QxVXV0cpkYvWcnZ zGPuBAyAQu7FPGOeozkaVOoK41ewyT3N3UVpwkk4Y1mvVOZwbDAl2xtfBTUjfjxy Ude6yuQyrxoVo01ewx5H1lwPqCGXCKQuP24+eDG8fu/+/GCZ8iP+hvMrewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHjNV+8fMGTPKSG6aX98tosHKXIhMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvZU0xWDd4OHdaTThwSWJwcGYzeTJpd2NwY2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhEmRjAN BgkqhkiG9w0BAQsFAAOCAQEACytdHcRb9uKbmcvc8nLE3popyV7Wzi4XRDwhu17y vM5TCtW1YiHMZyrh8JW+YCQ2Orh5kBcbJzDFmMlX/YAQNnqsCVv2kNFwDs72RLI/ x227S9pTjzB6uQrmW0NOIblbz7e6xRp37/eXtJIAJNUFnikZx1ZpYZYjbGBKl9Ax ox6alCI4LBHsOGNo2sOs+vLa050MwsiN05Q5rXgLH2kWeASvNg4zQvaakk7lEzvC G49efuvy9YsNODt3hs9fj6WKsK5W3eQqGM3pKyQim6L6zkDfeJnP1MhjnQNL0Sg1 aCRknx7rUfTcNC86kvTaSD5vGA3686BdOCyUvU83FA+Hkw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:07 2026 by rpki-client