This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/etj0sShjec2CBR92UCLlU4OhoHU.roa File: etj0sShjec2CBR92UCLlU4OhoHU.roa (raw, json) Hash identifier: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg= Subject key identifier: 7A:D8:F4:B1:28:63:79:CD:82:05:1F:76:50:22:E5:53:83:A1:A0:75 Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa Certificate serial: 019B7B3660DBAE3724FA7E72CFA713295F6D Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/etj0sShjec2CBR92UCLlU4OhoHU.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205220 IP address blocks: 2a0a:c640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:60:db:ae:37:24:fa:7e:72:cf:a7:13:29:5f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ad8f4b1286379cd82051f765022e55383a1a075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:9d:50:b7:e2:87:ee:96:1b:80:3f:be:6e: 56:82:61:80:a2:66:a7:64:3d:1e:c6:18:4b:dc:6e: d4:e8:06:c9:95:ec:d6:1a:b5:cb:06:fb:64:ce:55: fa:4d:8e:db:7f:81:c4:9e:7d:4d:d2:73:bc:c7:14: f0:30:a8:29:68:91:35:52:3b:dc:c2:af:0b:b1:b5: f0:7c:9d:4e:a2:85:67:58:13:fe:fa:c2:60:ec:10: dd:87:1a:00:43:67:34:a1:c1:b0:9d:b4:75:ba:8a: 4a:28:6b:fb:14:e6:10:85:27:81:c3:9d:99:81:49: 4a:5e:df:d9:5e:65:5c:c1:d7:b6:2c:77:23:12:09: 40:73:31:ae:2a:ad:ae:bd:66:35:7b:cf:47:4c:7d: c0:9e:9e:31:c5:26:ed:48:00:8a:b5:e8:00:c7:be: 28:92:fe:f9:04:b1:88:80:e7:39:a4:6d:76:00:94: f8:1a:34:89:40:2c:25:7e:9d:e3:3f:62:9c:12:44: d7:97:80:c0:bb:9c:9f:c9:3a:69:d2:91:be:98:2b: e0:fe:6a:35:aa:1e:cf:8b:88:e7:01:6b:36:04:69: a9:6a:32:0f:fa:9e:44:8a:8c:39:5f:f1:e8:bd:d0: 70:fe:c5:59:0c:30:cb:7d:ff:e8:ee:a1:0f:bd:7d: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:F4:B1:28:63:79:CD:82:05:1F:76:50:22:E5:53:83:A1:A0:75 X509v3 Authority Key Identifier: keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/etj0sShjec2CBR92UCLlU4OhoHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:c640::/29 Signature Algorithm: sha256WithRSAEncryption 0d:83:2d:af:dd:83:3c:2c:a1:3b:28:3f:fd:91:6e:9d:6d:92: 27:49:6d:ad:11:7d:32:64:a3:ed:48:af:4a:20:ae:ec:d3:56: 1d:49:32:c5:e2:89:e5:56:10:30:20:9c:c1:cf:eb:c1:be:d5: df:96:f3:b2:56:fc:17:58:ec:31:96:5c:f8:59:a9:eb:5c:3e: 09:ad:88:32:7c:78:a1:88:e2:73:5d:12:ff:54:7d:42:c4:40: 5b:d1:37:75:db:62:50:c8:38:7e:a6:f9:18:2b:73:b5:53:d5: 09:2d:ce:08:fa:1e:30:47:3c:d6:af:71:6a:76:b6:99:25:db: fc:94:60:09:04:95:01:ac:ea:13:77:71:e8:02:10:c0:ea:cb: b3:ea:db:fc:78:d1:35:6e:78:b9:aa:c8:66:ee:d2:0d:c7:ea: 18:01:37:e0:df:0b:14:c6:71:1c:8b:fb:1a:c7:4f:3d:8e:c7: 11:43:bd:7e:36:f5:f2:98:b5:51:f4:e6:48:af:55:04:ce:4c: ca:08:0b:1b:50:42:85:30:d8:01:0e:70:90:01:16:8a:38:fc: 37:9c:90:1a:dc:5c:2f:9e:e0:92:58:bb:a3:78:5a:f9:f3:8b: 8a:62:a3:e7:bd:c4:33:82:98:48:2c:8d:b2:2f:a6:b0:96:5f: ba:ef:ec:94 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NmDbrjck+n5yz6cTKV9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy MDU3ZmEwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQ4ZjRiMTI4NjM3OWNkODIwNTFmNzY1MDIyZTU1MzgzYTFhMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtSdULfih+6WG4A/vm5WgmGAoman ZD0exhhL3G7U6AbJlezWGrXLBvtkzlX6TY7bf4HEnn1N0nO8xxTwMKgpaJE1Ujvc wq8LsbXwfJ1OooVnWBP++sJg7BDdhxoAQ2c0ocGwnbR1uopKKGv7FOYQhSeBw52Z gUlKXt/ZXmVcwde2LHcjEglAczGuKq2uvWY1e89HTH3Anp4xxSbtSACKtegAx74o kv75BLGIgOc5pG12AJT4GjSJQCwlfp3jP2KcEkTXl4DAu5yfyTpp0pG+mCvg/mo1 qh7Pi4jnAWs2BGmpajIP+p5Eiow5X/HovdBw/sVZDDDLff/o7qEPvX1Z1wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHrY9LEoY3nNggUfdlAi5VODoaB1MB8GA1UdIwQY MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt MDhmMDk0ZGFmMjQ3LzEvZXRqMHNTaGplYzJDQlI5MlVDTGxVNE9ob0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3 LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrGQDAN BgkqhkiG9w0BAQsFAAOCAQEADYMtr92DPCyhOyg//ZFunW2SJ0ltrRF9MmSj7Uiv SiCu7NNWHUkyxeKJ5VYQMCCcwc/rwb7V35bzslb8F1jsMZZc+Fmp61w+Ca2IMnx4 oYjic10S/1R9QsRAW9E3ddtiUMg4fqb5GCtztVPVCS3OCPoeMEc81q9xana2mSXb /JRgCQSVAazqE3dx6AIQwOrLs+rb/HjRNW54uarIZu7SDcfqGAE34N8LFMZxHIv7 GsdPPY7HEUO9fjb18pi1UfTmSK9VBM5MyggLG1BChTDYAQ5wkAEWijj8N5yQGtxc L57gkli7o3ha+fOLimKj573EM4KYSCyNsi+msJZfuu/slA== -----END CERTIFICATE-----Generated at Fri Jan 2 19:44:15 2026 by rpki-client