This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/E7jBDIqyZ11WO82f30hyB6Wv9ok.roa File: E7jBDIqyZ11WO82f30hyB6Wv9ok.roa (raw, json) Hash identifier: 4z+3nqji4gh4yjW7JtX0cO45G+UJjdxxeL8xg5cXbQc= Subject key identifier: 13:B8:C1:0C:8A:B2:67:5D:56:3B:CD:9F:DF:48:72:07:A5:AF:F6:89 Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Certificate serial: 019B7B368E0518D63945E10D10C1DD2B60CA Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/E7jBDIqyZ11WO82f30hyB6Wv9ok.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205491 IP address blocks: 2001:67c:b7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8e:05:18:d6:39:45:e1:0d:10:c1:dd:2b:60:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13b8c10c8ab2675d563bcd9fdf487207a5aff689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:00:a7:7f:f2:e4:82:74:9f:ae:f1:c6:5d: 60:93:5f:75:ba:47:c1:44:36:ac:89:e6:0b:72:0a: 64:ca:e8:33:58:b4:8f:85:c2:f9:64:4d:8f:12:88: 81:af:fd:16:7b:62:4f:e4:f0:79:a1:15:8b:c4:24: 33:d6:f3:40:b4:a9:e4:3d:25:24:57:b6:c0:e1:1a: 68:a5:98:8d:e0:1d:f4:e8:d7:72:d0:2e:8c:98:56: ab:5e:36:51:2e:18:8d:51:45:ff:44:ae:18:09:7c: 10:e6:40:2c:94:44:76:f3:f6:d7:f2:da:f8:aa:72: e0:d6:ba:52:9f:39:e2:fb:00:ad:00:f3:f9:ca:93: 11:25:70:d9:7f:d7:7b:91:fe:8f:da:46:48:46:00: c8:78:ff:16:21:b9:e0:92:57:9c:b6:05:ca:9c:2c: 68:35:a6:91:aa:d0:bf:cf:39:99:2e:94:ec:ed:7c: be:90:40:8e:b7:f4:89:65:f4:2b:60:45:22:6f:fa: 0c:1b:b8:d6:3c:d5:da:15:09:aa:c8:32:ee:de:30: 10:ac:cd:76:e6:04:a4:d1:dc:4c:2d:73:ab:2c:6f: 56:88:8d:1b:7b:2b:f7:09:9b:81:d7:4f:31:98:0b: 6a:02:2c:2c:73:e4:3a:49:fa:35:35:61:ef:13:7d: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B8:C1:0C:8A:B2:67:5D:56:3B:CD:9F:DF:48:72:07:A5:AF:F6:89 X509v3 Authority Key Identifier: keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/E7jBDIqyZ11WO82f30hyB6Wv9ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b7c::/48 Signature Algorithm: sha256WithRSAEncryption 66:49:17:b4:97:e7:c4:31:d9:5b:de:33:4b:23:f2:6f:9b:4e: c4:86:95:b8:24:aa:95:b3:f4:d8:3c:e9:59:94:15:b8:17:37: e8:7e:18:93:9a:8d:ad:62:7e:4d:a6:d2:05:94:3d:3c:f1:81: 5a:cd:14:1f:87:75:b3:f0:ac:ca:60:99:02:cb:23:af:0a:ee: 50:0b:cf:9e:97:1f:d0:cb:c0:f9:e8:cb:8d:be:7a:3e:14:d5: 76:5f:d1:0d:bf:08:7d:9a:c2:7d:0c:9f:6d:58:c1:16:c1:82: 11:eb:84:7e:d3:36:60:64:0b:b2:d9:0e:f2:0c:08:0d:69:b7: 95:8d:dd:56:d0:ad:d3:e9:b5:fb:ca:00:2d:ae:9a:93:2f:5b: 6b:41:09:ba:e1:84:69:40:55:2a:17:fb:07:65:33:f0:d8:c3: 1c:e0:09:66:2c:4c:00:57:d0:fe:39:93:9a:cd:8b:90:e2:fb: 2d:0b:0e:61:8b:e3:ab:6d:fe:6d:13:7f:49:ce:2c:27:4f:cb: a6:a3:eb:f0:c6:90:82:ff:84:38:01:d1:1a:ff:61:a9:43:84: 10:12:fd:9e:61:c3:b3:ef:e4:18:ff:b3:34:1d:87:1e:68:bf: 0c:4e:69:6c:b5:96:d9:db:c8:ac:a2:06:2a:b9:99:c1:27:23: b8:6d:08:c2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7No4FGNY5ReENEMHdK2DKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm YzI2NTUwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2I4YzEwYzhhYjI2NzVkNTYzYmNkOWZkZjQ4NzIwN2E1YWZmNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDMAp3/y5IJ0n67xxl1gk191ukfB RDasieYLcgpkyugzWLSPhcL5ZE2PEoiBr/0We2JP5PB5oRWLxCQz1vNAtKnkPSUk V7bA4RpopZiN4B306Ndy0C6MmFarXjZRLhiNUUX/RK4YCXwQ5kAslER28/bX8tr4 qnLg1rpSnzni+wCtAPP5ypMRJXDZf9d7kf6P2kZIRgDIeP8WIbngklectgXKnCxo NaaRqtC/zzmZLpTs7Xy+kECOt/SJZfQrYEUib/oMG7jWPNXaFQmqyDLu3jAQrM12 5gSk0dxMLXOrLG9WiI0beyv3CZuB108xmAtqAiwsc+Q6Sfo1NWHvE31UGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBO4wQyKsmddVjvNn99Icgelr/aJMB8GA1UdIwQY MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt ZGM4NTg2NGFlYTg5LzEvRTdqQkRJcXlaMTFXTzgyZjMwaHlCNld2OW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5 LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAt8 MA0GCSqGSIb3DQEBCwUAA4IBAQBmSRe0l+fEMdlb3jNLI/Jvm07EhpW4JKqVs/TY POlZlBW4FzfofhiTmo2tYn5NptIFlD088YFazRQfh3Wz8KzKYJkCyyOvCu5QC8+e lx/Qy8D56MuNvno+FNV2X9ENvwh9msJ9DJ9tWMEWwYIR64R+0zZgZAuy2Q7yDAgN abeVjd1W0K3T6bX7ygAtrpqTL1trQQm64YRpQFUqF/sHZTPw2MMc4AlmLEwAV9D+ OZOazYuQ4vstCw5hi+Orbf5tE39JziwnT8umo+vwxpCC/4Q4AdEa/2GpQ4QQEv2e YcOz7+QY/7M0HYceaL8MTmlstZbZ28isogYquZnBJyO4bQjC -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:57 2026 by rpki-client