This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa File: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (raw, json) Hash identifier: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY= Subject key identifier: 13:42:E3:0B:5E:91:3C:26:79:86:90:F8:58:57:43:C4:5E:4B:94:71 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B775949AF3D0310BE9122CCFA8119569C Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a13:cc87:fc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:49:af:3d:03:10:be:91:22:cc:fa:81:19:56:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1342e30b5e913c26798690f8585743c45e4b9471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:48:8e:7d:54:28:93:e6:3c:9d:c6:1b:0c: 95:c9:13:27:16:75:59:aa:ba:0d:66:67:82:89:b6: 74:5a:63:5c:26:45:8b:1a:a9:c6:c4:59:88:3b:d4: 0a:e2:5d:09:30:69:c4:24:c7:50:8a:5b:05:fb:8a: 19:a4:d5:39:a6:66:3b:1c:dd:f9:48:57:1c:3d:58: 75:77:c2:4d:49:73:82:5a:e1:e8:bb:ea:68:c3:d6: 06:2c:b6:52:8d:58:59:e8:8e:d7:3b:15:bc:a8:d6: dc:6e:d6:81:4c:48:b9:dc:76:7e:b8:91:a7:31:15: 31:8f:fa:6b:f9:b7:8a:dc:bf:07:e6:bc:5a:2d:40: d5:c7:b5:33:0b:ec:cf:b5:b2:88:e1:c8:51:93:2b: ad:67:12:62:0f:c9:f4:f4:ac:1d:9c:1c:60:c7:ab: 92:78:8e:22:24:e9:77:01:9f:db:4b:49:7a:21:62: 76:53:85:b9:39:d7:fc:91:21:f6:71:56:c8:7d:b1: ac:48:6b:80:88:48:c6:bf:3b:f8:f8:6a:eb:60:d6: 25:62:16:8f:a0:09:39:16:58:f0:85:c7:4c:38:07: 66:22:4f:f5:ae:c1:e7:0f:f6:1f:2e:c8:48:94:c7: 0b:ca:28:4a:98:0f:cc:b2:bf:f4:f8:53:00:c1:fe: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:42:E3:0B:5E:91:3C:26:79:86:90:F8:58:57:43:C4:5E:4B:94:71 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:cc87:fc00::/48 Signature Algorithm: sha256WithRSAEncryption 68:48:70:88:1c:ab:4b:86:3d:cd:6b:2c:30:9a:88:fb:69:f8: 32:de:4b:f2:1c:d5:44:5f:fb:6a:ba:c7:80:0c:c1:d6:c3:b1: 0d:b3:ca:e2:2c:ba:2a:78:b0:62:45:47:c4:01:0f:34:88:b8: 72:ea:81:46:d1:79:e1:81:23:06:7a:7d:85:02:3d:3c:0d:5c: 51:73:8b:ba:29:02:20:99:d0:24:42:f6:17:bb:ca:56:f6:9e: 9c:de:66:b1:f8:05:4b:46:d7:98:9c:c0:9b:15:1b:dc:cb:62: 05:97:60:a5:d5:a1:cf:4c:57:51:47:23:88:66:b1:09:42:4e: ad:2b:f1:2d:44:d0:04:84:98:72:df:a6:3c:92:22:43:a9:e0: 0f:7b:9b:7a:8e:60:66:90:4f:fe:a8:ba:4b:7d:78:c6:81:96: ac:c0:51:00:f4:1c:1a:9d:a2:d8:f7:a1:01:9e:23:28:cf:5c: 97:0a:ff:44:f3:10:26:7e:f4:5b:1f:b3:d5:52:4d:29:55:fc: 5e:38:d1:72:09:42:18:ec:b7:d3:6b:c5:db:49:e3:c6:75:77: 69:8d:c2:b3:85:fa:e6:85:ff:ae:89:6f:4c:62:06:9d:6c:e1: 63:c8:4a:d8:e7:c2:4a:d0:66:bc:b8:8d:b2:c6:4e:31:ae:73: 84:bd:bf:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WUmvPQMQvpEizPqBGVacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQyZTMwYjVlOTEzYzI2Nzk4NjkwZjg1ODU3NDNjNDVlNGI5NDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre9Ijn1UKJPmPJ3GGwyVyRMnFnVZ qroNZmeCibZ0WmNcJkWLGqnGxFmIO9QK4l0JMGnEJMdQilsF+4oZpNU5pmY7HN35 SFccPVh1d8JNSXOCWuHou+pow9YGLLZSjVhZ6I7XOxW8qNbcbtaBTEi53HZ+uJGn MRUxj/pr+beK3L8H5rxaLUDVx7UzC+zPtbKI4chRkyutZxJiD8n09KwdnBxgx6uS eI4iJOl3AZ/bS0l6IWJ2U4W5Odf8kSH2cVbIfbGsSGuAiEjGvzv4+GrrYNYlYhaP oAk5FljwhcdMOAdmIk/1rsHnD/YfLshIlMcLyihKmA/Msr/0+FMAwf5hLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBNC4wtekTwmeYaQ+FhXQ8ReS5RxMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvRTBMakMxNlJQQ1o1aHBENFdGZER4RjVMbEhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPMh/wA MA0GCSqGSIb3DQEBCwUAA4IBAQBoSHCIHKtLhj3Naywwmoj7afgy3kvyHNVEX/tq useADMHWw7ENs8riLLoqeLBiRUfEAQ80iLhy6oFG0XnhgSMGen2FAj08DVxRc4u6 KQIgmdAkQvYXu8pW9p6c3max+AVLRteYnMCbFRvcy2IFl2Cl1aHPTFdRRyOIZrEJ Qk6tK/EtRNAEhJhy36Y8kiJDqeAPe5t6jmBmkE/+qLpLfXjGgZaswFEA9BwanaLY 96EBniMoz1yXCv9E8xAmfvRbH7PVUk0pVfxeONFyCUIY7LfTa8XbSePGdXdpjcKz hfrmhf+uiW9MYgadbOFjyErY58JK0Ga8uI2yxk4xrnOEvb9d -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:39 2026 by rpki-client