This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/95kKPUTt_KRoJbYGcoMh4etHEZk.roa File: 95kKPUTt_KRoJbYGcoMh4etHEZk.roa (raw, json) Hash identifier: oBxMy8ABvRGBWK1peEa1eXimZakct0YDCoN2fCwZtFc= Subject key identifier: F7:99:0A:3D:44:ED:FC:A4:68:25:B6:06:72:83:21:E1:EB:47:11:99 Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Certificate serial: 019B77C6FA95375DA47EBEC686A4FF658005 Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/95kKPUTt_KRoJbYGcoMh4etHEZk.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 2a0e:c147::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fa:95:37:5d:a4:7e:be:c6:86:a4:ff:65:80:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7990a3d44edfca46825b606728321e1eb471199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:33:a3:4c:33:95:1d:20:9c:df:6d:c3:6a:cd: 73:16:ad:85:38:ec:a8:09:2f:0e:28:4e:83:e0:41: 10:87:f6:ff:6a:49:da:0b:65:27:9c:6f:c0:24:e0: 8a:af:02:f5:51:9c:ac:e6:f8:dd:7c:d5:ad:3a:a8: 9d:0f:59:ea:7f:6f:69:b3:e0:a4:da:12:2d:30:7a: bb:5e:44:d2:08:64:1d:3a:ea:06:36:87:eb:24:59: cb:98:6c:6d:71:03:c1:67:8c:63:ab:de:10:45:b3: c2:05:3e:4d:f8:df:26:17:a9:48:da:5c:30:1c:dd: da:fb:1c:8e:77:94:83:0f:e9:97:c2:83:84:ea:9c: b5:2e:0a:0f:d4:bf:b8:3c:b8:4d:2d:0a:11:5a:17: 5c:4b:47:e9:94:82:ad:5a:36:4e:e3:cc:f7:79:87: 5e:51:69:38:cd:59:4a:ad:f4:c6:df:c4:c9:53:ad: b9:de:e9:49:55:b5:ef:d3:38:45:f3:e4:f0:6e:8f: 51:29:37:ab:0f:de:60:af:76:57:4f:91:e7:da:c7: f0:52:e3:c7:f8:36:bc:fb:b7:ca:92:cc:de:12:dc: 6e:c3:f1:61:a1:ea:b2:29:68:92:d0:52:08:be:ae: 1c:02:50:22:2c:28:0a:92:75:a1:d5:bf:47:f6:d1: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:99:0A:3D:44:ED:FC:A4:68:25:B6:06:72:83:21:E1:EB:47:11:99 X509v3 Authority Key Identifier: keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/95kKPUTt_KRoJbYGcoMh4etHEZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:c147::/32 Signature Algorithm: sha256WithRSAEncryption 87:4b:ce:46:af:f7:ff:04:0a:69:28:06:e7:69:c4:3e:2b:5a: 35:88:90:28:c1:b1:a8:fe:7d:11:44:d2:3a:22:16:c4:bd:bb: bb:df:be:50:a9:66:f0:c7:1e:75:3d:1b:f4:a8:4f:82:8d:f4: 87:a0:06:d6:4d:6f:47:1a:98:b3:52:e4:37:03:48:7f:11:e7: d8:a8:59:8c:aa:4b:0a:ca:d2:a5:44:87:de:2c:40:8e:5e:ee: ee:5d:12:4a:8f:94:32:35:2e:69:69:23:77:2e:cf:94:f2:6c: 29:79:92:a8:a0:b3:60:e8:9c:bb:85:20:5e:ec:54:a6:01:b2: b4:1a:6d:3d:0b:21:ab:a8:c2:69:d9:b9:59:e5:95:c3:84:94: a0:3b:c5:b0:3b:1f:24:b2:04:69:51:05:9b:ff:eb:4e:54:07: db:1f:2f:3a:55:8c:71:73:8f:8f:88:69:fd:1a:29:03:6c:72: 6a:01:50:37:3c:18:c5:ad:cf:d9:ab:dd:d7:51:e7:71:39:ca: 74:4a:8b:5a:c7:5e:00:9b:ab:88:6c:55:6e:fe:c2:a3:c3:f5: 3e:9e:fb:64:97:6d:47:06:18:08:e0:62:9b:1e:b9:a6:6f:37: b7:2f:74:91:40:ca:d9:6b:fb:44:3e:b3:35:d6:85:3c:20:76: 7d:7c:cc:75 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xvqVN12kfr7GhqT/ZYAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0 YzM1YjQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzk5MGEzZDQ0ZWRmY2E0NjgyNWI2MDY3MjgzMjFlMWViNDcxMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DOjTDOVHSCc323Das1zFq2FOOyo CS8OKE6D4EEQh/b/aknaC2UnnG/AJOCKrwL1UZys5vjdfNWtOqidD1nqf29ps+Ck 2hItMHq7XkTSCGQdOuoGNofrJFnLmGxtcQPBZ4xjq94QRbPCBT5N+N8mF6lI2lww HN3a+xyOd5SDD+mXwoOE6py1LgoP1L+4PLhNLQoRWhdcS0fplIKtWjZO48z3eYde UWk4zVlKrfTG38TJU6253ulJVbXv0zhF8+Twbo9RKTerD95gr3ZXT5Hn2sfwUuPH +Da8+7fKkszeEtxuw/FhoeqyKWiS0FIIvq4cAlAiLCgKknWh1b9H9tG9QQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPeZCj1E7fykaCW2BnKDIeHrRxGZMB8GA1UdIwQY MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt ZTQwOTI2MDAxNWVmLzEvOTVrS1BVVHRfS1JvSmJZR2NvTWg0ZXRIRVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7BRzAN BgkqhkiG9w0BAQsFAAOCAQEAh0vORq/3/wQKaSgG52nEPitaNYiQKMGxqP59EUTS OiIWxL27u9++UKlm8McedT0b9KhPgo30h6AG1k1vRxqYs1LkNwNIfxHn2KhZjKpL CsrSpUSH3ixAjl7u7l0SSo+UMjUuaWkjdy7PlPJsKXmSqKCzYOicu4UgXuxUpgGy tBptPQshq6jCadm5WeWVw4SUoDvFsDsfJLIEaVEFm//rTlQH2x8vOlWMcXOPj4hp /RopA2xyagFQNzwYxa3P2avd11HncTnKdEqLWsdeAJuriGxVbv7Co8P1Pp77ZJdt RwYYCOBimx65pm83ty90kUDK2Wv7RD6zNdaFPCB2fXzMdQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:30 2026 by rpki-client