This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa File: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (raw, json) Hash identifier: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk= Subject key identifier: 11:2C:86:FE:E6:2D:1B:92:1C:6A:70:E6:C9:F5:D1:30:63:8D:67:56 Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Certificate serial: 019B7DCA640EF610C778E64417B28B769926 Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa Signing time: Fri 02 Jan 2026 08:19:34 +0000 ROA not before: Fri 02 Jan 2026 08:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200044 IP address blocks: 2a00:eb9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:64:0e:f6:10:c7:78:e6:44:17:b2:8b:76:99:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=112c86fee62d1b921c6a70e6c9f5d130638d6756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:e1:a5:9c:bf:96:e7:2b:6b:f2:5e:c6:c9: a0:d7:30:f2:f2:69:61:a6:c6:a2:d9:25:e4:e9:90: 4d:bd:ee:86:3d:40:02:7e:17:ee:ec:ce:1e:bc:54: 79:99:39:19:cf:88:28:1d:af:7f:6b:8e:be:85:70: 05:41:73:f4:78:5b:d4:4c:8e:58:08:3f:07:0a:02: 5b:d1:19:8e:e6:e2:2b:9b:bd:ea:32:cc:98:cd:86: a4:e5:55:76:e3:27:58:c2:23:ff:9a:81:58:f4:46: 07:15:cc:a4:a9:d8:77:4f:c1:d0:7b:d9:dd:cb:3a: 3f:bd:f7:37:28:ca:9d:ed:96:03:b1:32:ae:5c:52: 15:99:6a:a0:a0:33:9b:2b:c9:25:09:4a:1e:72:4b: 96:a3:b1:b0:e1:9f:d7:f5:87:07:4a:5a:c1:2f:b7: c3:b2:23:a0:22:dd:91:06:8c:48:a2:67:d3:8e:fe: 38:f6:00:58:6e:02:bd:1d:99:88:af:a0:e2:9f:3b: 70:b5:b6:4f:dc:ce:19:01:e4:b9:5e:d0:b0:86:a4: e5:a2:23:81:53:cb:04:ac:02:3f:ed:77:e4:d1:2f: cb:48:b2:f9:bf:b3:bb:ba:64:c8:3b:4c:65:d2:6a: 9f:52:5c:63:f8:56:07:df:97:d1:62:52:66:90:30: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2C:86:FE:E6:2D:1B:92:1C:6A:70:E6:C9:F5:D1:30:63:8D:67:56 X509v3 Authority Key Identifier: keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:eb9::/32 Signature Algorithm: sha256WithRSAEncryption 61:10:c4:bf:ba:33:c1:bc:39:ac:af:fb:73:1c:8a:3a:2b:44: 29:28:70:19:17:c3:56:99:1c:68:38:f5:b2:f3:0b:e0:08:b1: 03:d1:9c:11:b8:08:f8:35:5c:b7:2c:11:96:77:bf:fd:27:72: d0:a5:de:c5:43:86:51:f4:87:91:c6:99:3a:05:32:e0:4c:69: 25:86:ef:ad:47:eb:9b:f6:a9:2b:dc:00:de:9f:55:c2:16:2e: c1:0e:10:e0:fa:77:60:03:06:ba:62:16:b7:b7:20:59:1e:3e: b9:6a:7a:62:10:46:57:fb:55:bd:ba:6a:bc:8b:ea:5a:fc:3f: 9d:67:54:24:a5:b9:a9:c1:b5:45:18:68:91:38:f6:d8:f1:6e: 34:42:7e:14:1c:d1:c2:38:85:50:a8:e7:65:cf:d6:c6:a0:f9: e1:16:58:18:79:13:03:f3:9c:81:11:23:75:5b:e4:5d:6d:19: cf:da:f8:01:2a:95:47:3e:30:82:39:0d:4b:0b:c5:20:80:f1: 5f:be:8f:36:73:0b:18:97:97:51:23:c9:03:c0:db:e7:be:bf: 82:5d:bf:00:d9:66:57:cf:7d:87:db:46:79:bd:f3:e2:eb:a1: fb:44:2d:1f:49:2a:0e:82:ba:e4:fa:8a:f8:fb:1f:d2:56:6f: 99:78:1f:74 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9ymQO9hDHeOZEF7KLdpkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1 NTM1MzMwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTJjODZmZWU2MmQxYjkyMWM2YTcwZTZjOWY1ZDEzMDYzOGQ2NzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL/hpZy/lucra/Jexsmg1zDy8mlh psai2SXk6ZBNve6GPUACfhfu7M4evFR5mTkZz4goHa9/a46+hXAFQXP0eFvUTI5Y CD8HCgJb0RmO5uIrm73qMsyYzYak5VV24ydYwiP/moFY9EYHFcykqdh3T8HQe9nd yzo/vfc3KMqd7ZYDsTKuXFIVmWqgoDObK8klCUoeckuWo7Gw4Z/X9YcHSlrBL7fD siOgIt2RBoxIomfTjv449gBYbgK9HZmIr6DinztwtbZP3M4ZAeS5XtCwhqTloiOB U8sErAI/7Xfk0S/LSLL5v7O7umTIO0xl0mqfUlxj+FYH35fRYlJmkDALIwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBEshv7mLRuSHGpw5sn10TBjjWdWMB8GA1UdIwQY MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt MDVmOTBhZDI0ZjNlLzEvRVN5R191WXRHNUljYW5EbXlmWFJNR09OWjFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgAOuTAN BgkqhkiG9w0BAQsFAAOCAQEAYRDEv7ozwbw5rK/7cxyKOitEKShwGRfDVpkcaDj1 svML4AixA9GcEbgI+DVctywRlne//Sdy0KXexUOGUfSHkcaZOgUy4ExpJYbvrUfr m/apK9wA3p9VwhYuwQ4Q4Pp3YAMGumIWt7cgWR4+uWp6YhBGV/tVvbpqvIvqWvw/ nWdUJKW5qcG1RRhokTj22PFuNEJ+FBzRwjiFUKjnZc/WxqD54RZYGHkTA/OcgREj dVvkXW0Zz9r4ASqVRz4wgjkNSwvFIIDxX76PNnMLGJeXUSPJA8Db576/gl2/ANlm V899h9tGeb3z4uuh+0QtH0kqDoK65PqK+Psf0lZvmXgfdA== -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:03 2026 by rpki-client