This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/4epOeDhcnpBTi2g4YcisvFWMAa4.roa File: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (raw, json) Hash identifier: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8= Subject key identifier: E1:EA:4E:78:38:5C:9E:90:53:8B:68:38:61:C8:AC:BC:55:8C:01:AE Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F5E5E8E11D8A96CB6EDA7535311E Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/4epOeDhcnpBTi2g4YcisvFWMAa4.roa Signing time: Fri 02 Jan 2026 00:19:35 +0000 ROA not before: Fri 02 Jan 2026 00:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26073 IP address blocks: 2a0d:1a40:edef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f5:e5:e8:e1:1d:8a:96:cb:6e:da:75:35:31:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ea4e78385c9e90538b683861c8acbc558c01ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:9c:75:38:32:51:fa:b3:7d:41:89:2f:60: c9:96:71:dd:a5:92:91:6a:92:0e:d0:b8:d6:88:d8: 9c:f1:34:d2:2e:2d:b0:0e:d4:9d:bf:4e:aa:67:23: 77:26:6e:ae:32:48:c2:4d:88:99:ff:f5:5c:db:42: 07:e2:4c:ca:7c:30:c5:87:77:25:e2:07:7b:13:20: 7b:a5:73:e7:da:f2:18:17:0e:66:f3:f4:65:6e:a6: dd:c0:54:40:55:5c:b2:e0:7c:27:15:37:ea:41:34: 4c:f9:e0:01:c1:61:73:d4:66:c0:ad:a6:1d:cd:d9: 4e:ea:a1:f7:3e:1f:66:61:09:8a:c8:e5:0f:78:b1: 43:c4:75:cb:26:60:e1:bd:24:3b:fb:e8:19:1e:7b: 40:47:0d:9c:fc:08:e8:44:23:f2:f5:54:55:09:e0: 7a:28:38:1a:d3:19:f9:b0:2e:10:2c:f5:36:9c:53: 78:72:43:97:0f:d1:9b:1a:81:66:6f:a1:be:c6:65: ac:7c:d4:86:43:a5:d8:3e:3a:e3:2e:46:03:be:89: d4:86:06:11:e9:bd:c7:42:83:0d:0e:9a:f0:79:80: c3:0d:3c:94:97:e4:30:f2:50:02:25:25:ec:93:ca: c6:2b:4a:04:64:b6:19:bf:a6:99:87:f6:f5:52:18: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EA:4E:78:38:5C:9E:90:53:8B:68:38:61:C8:AC:BC:55:8C:01:AE X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/4epOeDhcnpBTi2g4YcisvFWMAa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:edef::/48 Signature Algorithm: sha256WithRSAEncryption 3c:9f:4c:fc:7b:e0:64:c3:e4:fe:fe:82:b2:98:00:eb:03:71: 87:0e:3c:34:cf:98:2f:00:d4:f6:dd:69:a7:27:09:b8:60:ee: 5e:52:d0:37:f5:4d:6b:75:2a:0f:4d:f2:c1:f3:e5:d0:42:30: d5:cb:47:de:c6:24:2b:2a:08:ca:92:2f:b3:40:e6:31:e6:19: 5f:6b:9a:69:83:3b:25:9f:22:f7:bf:06:3f:84:7c:f2:59:5c: f8:2a:15:7e:b7:72:91:05:ba:17:55:9e:69:5f:7c:33:ce:43: 7c:54:2d:f9:8c:42:45:d8:cf:40:bd:3a:11:e4:a3:f3:83:5a: ef:b1:aa:14:cd:84:66:42:33:3a:cb:66:f7:b9:9b:2f:e0:46: 8e:36:55:04:eb:98:d3:41:19:16:37:d5:7f:21:e3:e4:33:7d: a1:3d:e4:fc:45:af:8e:36:71:20:70:fb:b8:30:fb:68:5b:79: c7:d1:76:9b:c0:e0:80:ca:77:a3:34:ad:e9:af:4b:ee:e2:77: 79:56:7f:b4:c4:76:d9:67:43:90:38:22:ae:dd:f0:fc:7b:31: 57:08:4a:66:16:0d:3e:69:36:91:79:8c:80:5b:0e:c8:85:4b: 26:d8:0f:3d:3e:cb:51:3d:fb:9d:4a:0e:15:78:dd:79:85:7d: a9:32:5a:54 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EvXl6OEdipbLbtp1NTEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWVhNGU3ODM4NWM5ZTkwNTM4YjY4Mzg2MWM4YWNiYzU1OGMwMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswCcdTgyUfqzfUGJL2DJlnHdpZKR apIO0LjWiNic8TTSLi2wDtSdv06qZyN3Jm6uMkjCTYiZ//Vc20IH4kzKfDDFh3cl 4gd7EyB7pXPn2vIYFw5m8/RlbqbdwFRAVVyy4HwnFTfqQTRM+eABwWFz1GbAraYd zdlO6qH3Ph9mYQmKyOUPeLFDxHXLJmDhvSQ7++gZHntARw2c/AjoRCPy9VRVCeB6 KDga0xn5sC4QLPU2nFN4ckOXD9GbGoFmb6G+xmWsfNSGQ6XYPjrjLkYDvonUhgYR 6b3HQoMNDprweYDDDTyUl+Qw8lACJSXsk8rGK0oEZLYZv6aZh/b1UhhHGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOHqTng4XJ6QU4toOGHIrLxVjAGuMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvNGVwT2VEaGNucEJUaTJnNFljaXN2RldNQWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQO3v MA0GCSqGSIb3DQEBCwUAA4IBAQA8n0z8e+Bkw+T+/oKymADrA3GHDjw0z5gvANT2 3WmnJwm4YO5eUtA39U1rdSoPTfLB8+XQQjDVy0fexiQrKgjKki+zQOYx5hlfa5pp gzslnyL3vwY/hHzyWVz4KhV+t3KRBboXVZ5pX3wzzkN8VC35jEJF2M9AvToR5KPz g1rvsaoUzYRmQjM6y2b3uZsv4EaONlUE65jTQRkWN9V/IePkM32hPeT8Ra+ONnEg cPu4MPtoW3nH0XabwOCAynejNK3pr0vu4nd5Vn+0xHbZZ0OQOCKu3fD8ezFXCEpm Fg0+aTaReYyAWw7IhUsm2A89PstRPfudSg4VeN15hX2pMlpU -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:10 2026 by rpki-client