This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/7Oklqndg16rTFoulQJ2eaGX1Cgk.roa File: 7Oklqndg16rTFoulQJ2eaGX1Cgk.roa (raw, json) Hash identifier: HlA1nIn2IErPhsfJeFjKPMxrZyiOcXQ88PNQyY914dk= Subject key identifier: EC:E9:25:AA:77:60:D7:AA:D3:16:8B:A5:40:9D:9E:68:65:F5:0A:09 Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5 Certificate serial: 019B79ECCF4F80A4E754473CC1E2C55B83DE Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/7Oklqndg16rTFoulQJ2eaGX1Cgk.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213904 IP address blocks: 2a0b:bb00::/29 maxlen: 32 2a0b:bb00::/32 maxlen: 32 2a0b:bb01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cf:4f:80:a4:e7:54:47:3c:c1:e2:c5:5b:83:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5 Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece925aa7760d7aad3168ba5409d9e6865f50a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:13:62:06:b2:c7:bf:f0:d8:8e:9a:49:23: 82:d4:48:c5:45:df:d3:b9:a0:03:fe:8f:ff:11:e9: c8:34:59:41:1c:f6:da:80:b9:49:98:d7:25:12:ec: f8:8f:48:c7:a2:e9:ba:e2:84:77:4d:97:7b:2a:a6: 7e:f5:9b:c4:af:e5:e1:6e:9b:94:7e:c7:82:90:db: 33:08:e7:3f:b1:93:65:dd:9d:52:e2:98:9a:b8:69: f6:5f:bb:93:5b:81:e4:ea:00:f2:04:dc:8e:74:96: 00:12:7c:32:8a:45:dd:b6:b4:ab:53:4d:6a:ff:3c: 69:bd:8c:b0:7e:04:15:b7:ed:4e:ec:97:67:d4:44: 99:67:2a:ab:3a:ff:92:66:02:54:6b:98:71:37:f4: e3:9e:39:24:6b:74:cb:42:2a:2e:b2:97:f6:63:11: 94:cc:46:63:4d:2c:a7:32:7b:e0:b4:f3:6c:9d:5b: 61:1b:92:5c:6c:dd:73:4e:29:71:b5:99:8b:0d:52: b7:27:44:26:81:6f:1e:d4:b9:ff:36:7a:60:2e:d9: f0:75:d7:f5:cf:48:39:ad:4c:de:3e:b9:d4:47:bf: 9d:ca:02:97:c9:a4:c0:d9:34:fa:00:b9:aa:3e:38: 2e:c7:bb:48:cd:f7:f8:15:96:0e:fa:6f:e0:eb:58: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:25:AA:77:60:D7:AA:D3:16:8B:A5:40:9D:9E:68:65:F5:0A:09 X509v3 Authority Key Identifier: keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/7Oklqndg16rTFoulQJ2eaGX1Cgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:bb00::/29 Signature Algorithm: sha256WithRSAEncryption 2a:59:0c:43:12:af:71:b7:ed:c0:a0:e9:2b:8d:c8:76:4a:8f: d8:4d:a7:fb:7c:cc:dd:61:7d:f8:81:11:af:8a:30:ed:a4:68: 84:9a:47:3c:0a:2b:44:f3:0b:8d:13:d9:df:c1:3e:b0:ab:69: d3:4e:55:3b:3e:62:cd:67:0e:b6:45:47:40:13:b3:6b:25:03: 7e:68:13:cd:07:b7:fd:4d:d1:d4:5b:ed:d3:5f:86:6a:ee:87: 8d:6f:ea:77:4b:61:80:b0:b3:23:1c:2d:71:12:5b:ac:18:40: 21:29:55:de:3e:7e:6f:1c:b7:31:9e:d2:ed:1f:b2:dc:d4:54: c0:c7:73:71:5d:6c:a2:c8:48:c6:bc:1a:1a:15:6f:c5:9c:a7: f7:91:96:c5:bd:c6:d9:3d:fe:cf:df:5a:8a:ab:1a:0b:3b:5d: d9:78:02:2c:d8:cc:e0:1b:f2:50:7b:b8:ef:63:b3:d3:0e:c1: c7:a5:6f:58:e4:91:c5:88:24:82:96:53:38:c7:09:1f:2c:ce: 7b:ef:48:2b:64:79:a0:22:cd:ea:d8:f1:47:86:f3:ea:40:b2: 05:70:57:5c:0d:57:fa:5f:09:d1:0c:47:52:dd:7c:8f:3d:f6: e5:25:79:58:03:3f:78:a3:83:47:7a:77:62:ba:31:ca:a3:76: 32:1d:87:1a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57M9PgKTnVEc8weLFW4PeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1 OGQ2ZDUwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2U5MjVhYTc3NjBkN2FhZDMxNjhiYTU0MDlkOWU2ODY1ZjUwYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf0TYgayx7/w2I6aSSOC1EjFRd/T uaAD/o//EenINFlBHPbagLlJmNclEuz4j0jHoum64oR3TZd7KqZ+9ZvEr+XhbpuU fseCkNszCOc/sZNl3Z1S4piauGn2X7uTW4Hk6gDyBNyOdJYAEnwyikXdtrSrU01q /zxpvYywfgQVt+1O7Jdn1ESZZyqrOv+SZgJUa5hxN/Tjnjkka3TLQiouspf2YxGU zEZjTSynMnvgtPNsnVthG5JcbN1zTilxtZmLDVK3J0QmgW8e1Ln/NnpgLtnwddf1 z0g5rUzePrnUR7+dygKXyaTA2TT6ALmqPjgux7tIzff4FZYO+m/g61hK4QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOzpJap3YNeq0xaLpUCdnmhl9QoJMB8GA1UdIwQY MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct MTYyMGNmZGM3MTE3LzEvN09rbHFuZGcxNnJURm91bFFKMmVhR1gxQ2drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3 LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgu7ADAN BgkqhkiG9w0BAQsFAAOCAQEAKlkMQxKvcbftwKDpK43IdkqP2E2n+3zM3WF9+IER r4ow7aRohJpHPAorRPMLjRPZ38E+sKtp005VOz5izWcOtkVHQBOzayUDfmgTzQe3 /U3R1Fvt01+Gau6HjW/qd0thgLCzIxwtcRJbrBhAISlV3j5+bxy3MZ7S7R+y3NRU wMdzcV1soshIxrwaGhVvxZyn95GWxb3G2T3+z99aiqsaCztd2XgCLNjM4BvyUHu4 72Oz0w7Bx6VvWOSRxYgkgpZTOMcJHyzOe+9IK2R5oCLN6tjxR4bz6kCyBXBXXA1X +l8J0QxHUt18jz325SV5WAM/eKODR3p3YroxyqN2Mh2HGg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:44 2026 by rpki-client