This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa File: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (raw, json) Hash identifier: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds= Subject key identifier: F8:4A:83:EA:F8:28:03:72:15:02:C8:E2:2D:06:15:13:2C:8A:5B:45 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F848851105424C57C420F0FF86EF6FF Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199327 IP address blocks: 2a0c:e304:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:88:51:10:54:24:c5:7c:42:0f:0f:f8:6e:f6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f84a83eaf82803721502c8e22d0615132c8a5b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:0e:81:25:d9:37:3d:24:ed:1f:ec:f1:ef: 37:93:67:9b:e7:70:09:ee:c0:5f:fc:0b:e5:50:50: 88:d1:4a:f6:96:7a:cb:c6:05:88:9a:0d:fb:25:f6: 79:c8:88:c7:57:eb:25:b5:18:df:a8:63:bd:ba:dd: 16:51:9a:c0:bf:67:7e:fd:f6:a8:99:50:5a:b4:1a: 16:e5:df:b7:b0:7e:d1:ab:47:41:f7:15:f0:18:9e: 06:2f:a3:f5:f4:1d:08:38:4c:c3:f1:f9:47:02:61: 5f:83:fa:d6:a0:8d:92:40:d7:90:ec:54:1d:bf:5f: 0d:dd:84:71:f1:f7:c8:98:a1:d9:64:d6:4f:89:cf: c3:bf:31:dd:82:a1:75:28:82:3d:d5:fd:8e:99:84: 41:14:34:b1:91:a5:60:b2:d5:41:13:ca:97:de:21: 30:ee:20:15:25:f3:23:75:5d:7a:ec:e4:1a:31:4c: 83:af:7b:84:48:14:e9:b6:00:ba:27:52:6d:61:82: e3:16:92:b0:9c:52:69:18:80:fd:7a:5c:d4:df:53: 00:b5:ae:ec:3d:74:06:47:bd:d6:a6:8b:fb:7e:7e: b5:0c:20:a3:6d:c4:0c:8f:89:fe:6b:02:2e:8e:72: f8:e8:a4:d6:53:fb:d4:30:dd:e1:c3:f7:13:04:a0: 3b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:83:EA:F8:28:03:72:15:02:C8:E2:2D:06:15:13:2C:8A:5B:45 X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:e304:10::/44 Signature Algorithm: sha256WithRSAEncryption 4e:69:e3:ec:c5:cf:ad:5b:06:3f:2d:75:74:9b:24:7e:36:01: 50:f8:4f:23:d6:54:e1:7e:88:ba:7b:35:9f:36:28:b0:03:ec: 2b:ef:2b:bb:bd:ba:ee:ff:03:cf:b9:59:bb:9c:3d:b0:04:ae: 47:0c:55:fd:af:b3:29:c5:3c:68:1e:78:16:4d:6a:90:4a:5e: 01:d5:4c:ee:2a:cd:48:37:28:d4:d7:cb:0a:bd:d6:67:5d:74: a6:8c:0c:bd:16:0d:c5:c4:ca:dc:e6:29:de:82:b2:90:d3:93: d2:e9:74:b5:37:76:53:94:88:0e:cf:c6:b9:ee:2c:6f:4e:29: 2a:8f:ef:5f:7d:93:3a:a3:0d:42:c6:de:c5:ed:36:93:82:ca: 62:45:d9:dd:51:ab:e5:24:ba:81:b9:a7:3d:fd:30:d5:23:e6: e7:e0:83:bc:1a:10:7f:16:8c:05:71:9c:9e:ab:05:c9:5f:32: 26:93:1d:91:f1:d0:1c:64:7f:72:4c:9e:af:00:3d:b4:f3:33: a6:51:f4:01:6a:37:4d:63:d1:08:b4:7f:0d:69:48:06:c1:de: 08:45:86:67:fe:ba:36:ba:63:dd:fc:12:3d:86:a3:6b:13:f9: 8b:9f:5e:6b:b0:14:69:11:32:40:c7:2a:69:7b:ea:81:11:e9: 29:96:e0:2c -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt/hIhREFQkxXxCDw/4bvb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODRhODNlYWY4MjgwMzcyMTUwMmM4ZTIyZDA2MTUxMzJjOGE1YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokkOgSXZNz0k7R/s8e83k2eb53AJ 7sBf/AvlUFCI0Ur2lnrLxgWImg37JfZ5yIjHV+sltRjfqGO9ut0WUZrAv2d+/fao mVBatBoW5d+3sH7Rq0dB9xXwGJ4GL6P19B0IOEzD8flHAmFfg/rWoI2SQNeQ7FQd v18N3YRx8ffImKHZZNZPic/DvzHdgqF1KII91f2OmYRBFDSxkaVgstVBE8qX3iEw 7iAVJfMjdV167OQaMUyDr3uESBTptgC6J1JtYYLjFpKwnFJpGID9elzU31MAta7s PXQGR73Wpov7fn61DCCjbcQMj4n+awIujnL46KTWU/vUMN3hw/cTBKA71wIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPhKg+r4KANyFQLI4i0GFRMsiltFMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvMS1FcUQ2dmdvQTNJVkFzamlMUVlWRXl5S1cwVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTcvZmNmZWM3LWQ2YzMtNGI0MC1iYTJjLWY5ODhkNDhlNTFl OC8xL2JmN1BvT1pwSlpYUHZxVW1ZSGJvNVQ3OWxHRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoM4wQA EDANBgkqhkiG9w0BAQsFAAOCAQEATmnj7MXPrVsGPy11dJskfjYBUPhPI9ZU4X6I uns1nzYosAPsK+8ru7267v8Dz7lZu5w9sASuRwxV/a+zKcU8aB54Fk1qkEpeAdVM 7irNSDco1NfLCr3WZ110powMvRYNxcTK3OYp3oKykNOT0ul0tTd2U5SIDs/Gue4s b04pKo/vX32TOqMNQsbexe02k4LKYkXZ3VGr5SS6gbmnPf0w1SPm5+CDvBoQfxaM BXGcnqsFyV8yJpMdkfHQHGR/ckyerwA9tPMzplH0AWo3TWPRCLR/DWlIBsHeCEWG Z/66Nrpj3fwSPYajaxP5i59ea7AUaREyQMcqaXvqgRHpKZbgLA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:48 2026 by rpki-client