This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/x_MESfhEqxOpfv7-RrmmKFZTQsM.roa File: x_MESfhEqxOpfv7-RrmmKFZTQsM.roa (raw, json) Hash identifier: CgnbbvmY6nJeIwGOkAE0qQBeAzVO6strLDPz3xd7ol8= Subject key identifier: C7:F3:04:49:F8:44:AB:13:A9:7E:FE:FE:46:B9:A6:28:56:53:42:C3 Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Certificate serial: 019B77C66E887EEE14E6CB872B4C964A1A34 Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/x_MESfhEqxOpfv7-RrmmKFZTQsM.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39753 IP address blocks: 2a0d:2406:400::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6e:88:7e:ee:14:e6:cb:87:2b:4c:96:4a:1a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7f30449f844ab13a97efefe46b9a628565342c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:e4:52:be:86:92:f9:1b:f4:23:e7:9d:9d: ca:e7:31:b6:77:66:3b:dc:36:9e:09:3d:89:e9:bb: cb:b9:fd:79:5d:c0:0b:63:cd:d7:f6:78:03:38:f1: 93:ec:be:a5:34:cd:d3:87:6d:d3:8b:25:02:de:8b: 20:3f:02:74:60:4e:6d:18:65:ee:ed:8f:01:eb:2c: 4c:3e:d7:69:57:77:01:d2:12:f6:d5:55:d6:98:4b: 46:a4:83:20:c7:0e:9f:50:d7:e7:34:2b:2b:04:aa: cd:70:9c:e3:0d:f8:43:6b:aa:1c:a6:90:15:dc:ad: 89:91:76:e8:63:3c:ee:8d:ea:d5:c5:14:af:ba:d4: c2:48:03:85:41:f3:69:14:a6:7a:64:cc:13:70:cc: cc:11:c4:39:0e:37:2d:e9:93:f8:80:aa:93:21:38: cb:0e:5d:66:d5:4a:79:fe:80:50:89:a0:84:f2:e2: dd:d3:d2:64:fa:3c:bd:ba:a4:fc:41:c2:e5:fd:54: 55:a5:c5:e3:6d:87:29:31:92:0d:8c:63:42:27:04: d1:ab:87:11:3d:16:49:dd:23:40:c2:d5:94:d1:33: 5c:ce:94:90:ef:8a:0b:d8:0f:70:d9:65:5c:76:7e: 4e:fe:37:5b:c0:29:8f:3f:04:7c:ec:5a:cd:96:27: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F3:04:49:F8:44:AB:13:A9:7E:FE:FE:46:B9:A6:28:56:53:42:C3 X509v3 Authority Key Identifier: keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/x_MESfhEqxOpfv7-RrmmKFZTQsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2406:400::/39 Signature Algorithm: sha256WithRSAEncryption 85:a2:63:0a:07:bb:91:1f:d3:5e:8d:bb:7a:d5:84:d0:34:35: 7c:1e:63:ef:6e:d7:e5:3d:62:5d:b0:09:10:b3:5b:a8:09:d1: f8:5a:80:20:f2:67:22:1d:92:14:39:43:f2:54:00:a0:28:7a: 5d:35:2c:53:37:5a:da:8f:e5:1c:a3:e3:67:39:05:dd:ee:49: 30:f7:9c:df:44:77:71:e5:f6:cf:ed:78:49:14:8e:5c:43:35: eb:11:08:70:8d:3e:97:8c:94:05:f7:dd:82:89:10:5f:47:94: 62:6c:1d:1b:f8:a4:3d:1f:dd:66:29:bb:75:ed:9e:3e:3a:62: 31:d5:93:b6:66:47:dd:dc:4c:05:83:4f:49:db:a8:10:d7:57: 0d:a0:e2:dc:b7:b0:a1:96:7d:ce:b3:20:c8:9f:b3:80:aa:11: f9:f3:fd:85:dd:a4:bd:96:94:fb:ac:4a:35:b2:69:3a:e6:68: 20:e2:cf:5b:7e:08:e2:da:ab:fd:27:c8:36:c9:60:34:64:79: f2:b6:df:e2:0a:53:29:41:f3:0c:b1:d4:0b:7d:2d:dd:a0:81: 9a:93:26:a5:2e:86:c3:2c:73:53:81:ec:91:1f:63:ea:e9:8b: 69:a1:8d:0f:ad:73:29:34:9c:c5:60:76:d2:42:1b:9c:31:38: 33:5c:9d:5c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xm6Ifu4U5suHK0yWSho0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1 OGE0YzAwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2YzMDQ0OWY4NDRhYjEzYTk3ZWZlZmU0NmI5YTYyODU2NTM0MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgzkUr6Gkvkb9CPnnZ3K5zG2d2Y7 3DaeCT2J6bvLuf15XcALY83X9ngDOPGT7L6lNM3Th23TiyUC3osgPwJ0YE5tGGXu 7Y8B6yxMPtdpV3cB0hL21VXWmEtGpIMgxw6fUNfnNCsrBKrNcJzjDfhDa6ocppAV 3K2JkXboYzzujerVxRSvutTCSAOFQfNpFKZ6ZMwTcMzMEcQ5Djct6ZP4gKqTITjL Dl1m1Up5/oBQiaCE8uLd09Jk+jy9uqT8QcLl/VRVpcXjbYcpMZINjGNCJwTRq4cR PRZJ3SNAwtWU0TNczpSQ74oL2A9w2WVcdn5O/jdbwCmPPwR87FrNliekcwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMfzBEn4RKsTqX7+/ka5pihWU0LDMB8GA1UdIwQY MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt Y2U1NzE1MDY5NWE5LzEveF9NRVNmaEVxeE9wZnY3LVJybW1LRlpUUXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5 LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg0kBgQw DQYJKoZIhvcNAQELBQADggEBAIWiYwoHu5Ef016Nu3rVhNA0NXweY+9u1+U9Yl2w CRCzW6gJ0fhagCDyZyIdkhQ5Q/JUAKAoel01LFM3WtqP5Ryj42c5Bd3uSTD3nN9E d3Hl9s/teEkUjlxDNesRCHCNPpeMlAX33YKJEF9HlGJsHRv4pD0f3WYpu3Xtnj46 YjHVk7ZmR93cTAWDT0nbqBDXVw2g4ty3sKGWfc6zIMifs4CqEfnz/YXdpL2WlPus SjWyaTrmaCDiz1t+COLaq/0nyDbJYDRkefK23+IKUylB8wyx1At9Ld2ggZqTJqUu hsMsc1OB7JEfY+rpi2mhjQ+tcyk0nMVgdtJCG5wxODNcnVw= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:17 2026 by rpki-client