This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/E2O5g-3u7QFDSnqyhGOqtBMannc.roa File: E2O5g-3u7QFDSnqyhGOqtBMannc.roa (raw, json) Hash identifier: LyXDleKJ3gZrrfu8ZQu1gqPieNpy6nIwJ9/Oz5vq8aE= Subject key identifier: 13:63:B9:83:ED:EE:ED:01:43:4A:7A:B2:84:63:AA:B4:13:1A:9E:77 Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Certificate serial: 019B7BA52AAC5C4ADF7C6611478B7B70D6A7 Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/E2O5g-3u7QFDSnqyhGOqtBMannc.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50273 IP address blocks: 2001:67c:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2a:ac:5c:4a:df:7c:66:11:47:8b:7b:70:d6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1363b983edeeed01434a7ab28463aab4131a9e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:28:f6:fc:f9:02:19:77:0f:07:a0:de:11:2f: f2:43:54:66:6d:e5:5e:cd:52:b3:70:03:2c:32:65: ce:11:ca:f3:d8:57:f8:81:9d:53:9f:d4:51:39:ec: 8f:5a:d1:da:6c:4c:26:be:9d:cd:87:53:35:61:50: 07:6b:59:f2:75:4e:ed:fa:89:50:15:6a:d0:4a:85: 7f:d1:ef:b6:62:db:43:f4:aa:b8:f9:dc:35:c4:f6: 83:8e:9a:5f:4c:1c:f7:b7:46:b9:e8:89:75:14:a2: 34:01:2b:f6:23:36:02:1e:80:bd:38:c7:a0:b1:dc: ed:ef:43:20:3e:2d:ba:93:16:f9:f9:92:85:1c:66: 63:2f:d8:64:27:74:3e:0c:49:47:05:41:59:de:19: 46:b7:a9:67:08:df:eb:38:c8:8f:79:75:a9:68:49: c4:7e:3e:d1:1e:96:a8:db:1e:d6:f9:28:0e:45:98: bb:04:29:59:35:c7:e1:36:16:9f:9e:7e:08:cf:f5: b4:3d:8d:04:d6:8a:84:9c:3c:5e:17:68:7b:1e:f4: 55:36:7c:9b:b5:c4:cd:54:57:a8:22:eb:f9:68:44: 43:64:78:b9:28:f8:18:12:16:d1:98:c3:90:87:1f: 16:e4:cb:4a:f3:09:53:3f:cf:ef:14:24:be:b7:69: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:63:B9:83:ED:EE:ED:01:43:4A:7A:B2:84:63:AA:B4:13:1A:9E:77 X509v3 Authority Key Identifier: keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/E2O5g-3u7QFDSnqyhGOqtBMannc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:dc::/48 Signature Algorithm: sha256WithRSAEncryption 53:f5:01:8a:7a:76:72:2e:72:b1:70:b5:86:93:59:9f:19:5d: 84:1f:c3:b1:82:46:18:81:be:c8:6e:d6:c2:15:64:2c:4f:e5: 58:b6:f6:80:2f:d7:56:22:a9:0c:31:cd:13:a5:d9:8b:45:ad: 96:ad:e8:a8:0b:8c:6d:c4:e0:b0:47:e7:ad:98:e1:3a:01:3e: 08:72:43:16:0d:97:7e:ec:e4:5a:c4:27:86:24:bd:a5:a9:f8: 1b:a7:ac:64:e4:51:05:7e:4b:ca:21:c6:ff:33:84:cb:35:5d: 94:d0:ff:37:ab:44:1b:d8:4e:12:e3:cd:98:c4:49:ec:50:02: bd:c2:e0:2d:fa:69:fe:09:83:f8:b3:fa:b1:a0:24:f1:7f:b0: a9:3e:d1:14:e3:e4:46:54:70:3a:85:6f:27:9a:12:92:9a:d1: 1d:b7:7a:f5:96:2f:d2:af:3b:1f:8c:bf:fc:7e:31:de:e9:79: 7d:38:c8:3f:9c:2e:e5:af:d5:64:23:3e:90:57:a8:e8:9e:06: c7:87:aa:e4:de:fe:eb:44:a3:c6:ed:38:e7:3f:a4:bc:be:8d: 6a:44:a9:9c:18:5b:09:4d:5a:bb:3b:23:67:2c:6b:87:d2:e3: 6b:26:0f:fd:96:10:a5:68:e3:61:84:40:5d:c3:fa:ae:c1:0c: b4:71:a3:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pSqsXErffGYRR4t7cNanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl YTA0YjUwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzYzYjk4M2VkZWVlZDAxNDM0YTdhYjI4NDYzYWFiNDEzMWE5ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyj2/PkCGXcPB6DeES/yQ1RmbeVe zVKzcAMsMmXOEcrz2Ff4gZ1Tn9RROeyPWtHabEwmvp3Nh1M1YVAHa1nydU7t+olQ FWrQSoV/0e+2YttD9Kq4+dw1xPaDjppfTBz3t0a56Il1FKI0ASv2IzYCHoC9OMeg sdzt70MgPi26kxb5+ZKFHGZjL9hkJ3Q+DElHBUFZ3hlGt6lnCN/rOMiPeXWpaEnE fj7RHpao2x7W+SgORZi7BClZNcfhNhafnn4Iz/W0PY0E1oqEnDxeF2h7HvRVNnyb tcTNVFeoIuv5aERDZHi5KPgYEhbRmMOQhx8W5MtK8wlTP8/vFCS+t2kuKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBNjuYPt7u0BQ0p6soRjqrQTGp53MB8GA1UdIwQY MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt OWI1NTk1MjlhZDE2LzEvRTJPNWctM3U3UUZEU25xeWhHT3F0Qk1hbm5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2 LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfADc MA0GCSqGSIb3DQEBCwUAA4IBAQBT9QGKenZyLnKxcLWGk1mfGV2EH8OxgkYYgb7I btbCFWQsT+VYtvaAL9dWIqkMMc0TpdmLRa2WreioC4xtxOCwR+etmOE6AT4IckMW DZd+7ORaxCeGJL2lqfgbp6xk5FEFfkvKIcb/M4TLNV2U0P83q0Qb2E4S482YxEns UAK9wuAt+mn+CYP4s/qxoCTxf7CpPtEU4+RGVHA6hW8nmhKSmtEdt3r1li/Srzsf jL/8fjHe6Xl9OMg/nC7lr9VkIz6QV6jongbHh6rk3v7rRKPG7TjnP6S8vo1qRKmc GFsJTVq7OyNnLGuH0uNrJg/9lhClaONhhEBdw/quwQy0caPD -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:42 2026 by rpki-client