This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa File: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (raw, json) Hash identifier: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk= Subject key identifier: ED:D8:66:D9:97:1D:E1:8A:7E:4C:D0:A0:71:F3:C4:74:6D:3B:79:4D Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Certificate serial: 019B7A5AC761069310FAAE93DB8968C57D96 Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203017 IP address blocks: 2001:678:154::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:61:06:93:10:fa:ae:93:db:89:68:c5:7d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edd866d9971de18a7e4cd0a071f3c4746d3b794d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:37:49:5b:99:1f:e2:63:01:e5:f9:16:d9: d3:51:61:35:ca:c5:e8:0f:a2:00:40:26:33:55:f6: d8:15:cc:88:2f:32:2f:58:85:2e:df:69:0f:1c:98: f6:f0:85:ca:c3:5a:a3:21:1d:d5:29:47:a7:77:31: aa:df:b3:54:7a:09:39:a8:ed:a2:a4:4d:6e:b8:75: 2b:b1:76:8e:ba:75:b8:83:8e:4d:8a:cb:80:4a:d1: db:cb:f7:8d:3f:33:22:a1:8a:84:0f:dd:72:a5:36: 74:1c:a0:8f:23:9b:c5:3f:99:ef:74:9f:7d:d9:aa: 90:5a:f4:88:1b:38:51:c8:30:b1:41:29:85:d6:fe: ba:2c:23:33:92:f2:3a:00:56:36:c9:d7:6a:dd:81: 6a:85:12:12:84:1c:52:cb:82:6e:e7:ee:06:3c:85: 35:12:ad:c0:bd:d7:e1:9a:18:9d:0b:f7:53:a3:44: 45:0d:a3:e7:f9:4b:4b:83:e7:db:5b:92:a7:3e:a5: ba:62:1f:7b:48:1b:4c:f6:46:9c:36:33:03:62:c3: 7d:59:55:0b:52:f4:a5:08:42:db:a2:95:e9:94:11: 15:5d:44:bb:8a:d5:c0:90:b4:99:55:c0:39:4e:c2: c5:ed:00:42:7b:a5:4e:f5:86:d4:dd:30:8d:d9:33: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D8:66:D9:97:1D:E1:8A:7E:4C:D0:A0:71:F3:C4:74:6D:3B:79:4D X509v3 Authority Key Identifier: keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:154::/48 Signature Algorithm: sha256WithRSAEncryption 0b:3c:a7:88:61:3e:72:fe:d3:b2:22:6a:89:75:c7:e4:70:f3: 31:1e:da:2f:33:e2:3f:ed:93:1c:46:06:c5:1f:8d:d3:1e:46: 75:bd:5a:86:d0:ac:ca:ed:4a:39:07:ff:52:fe:e3:72:70:83: 3e:0a:ac:a3:5c:e4:49:83:cd:3b:54:18:2b:44:92:50:71:b7: 80:25:6a:a5:29:45:97:92:86:8f:54:81:b1:32:fd:5e:05:3e: 19:61:17:91:67:27:44:f2:8d:f1:49:7f:8f:ba:12:e4:71:de: 08:6c:33:e6:aa:a4:c9:77:5c:1a:44:3a:37:02:b6:0a:35:ce: 83:a7:33:5f:98:fb:ad:fd:e8:58:a0:ee:91:74:d1:f3:f4:f3: fb:78:7e:1e:94:18:cd:84:7b:8d:f0:0f:4f:15:c9:ba:28:12: bb:cc:b2:2a:65:f2:2e:70:ac:f5:4a:e1:ce:78:59:5d:18:c2: 03:aa:0c:de:9b:93:69:63:b8:82:b9:ff:72:69:e7:2f:7e:09: 26:e5:38:dd:69:c3:39:a1:49:30:1a:7b:35:44:d8:75:c3:85: c0:8d:f2:03:a0:c8:9f:31:bc:4a:61:7f:fc:55:c3:27:6f:ec: 3e:3f:14:66:b2:50:c9:b1:7a:b6:97:c2:94:c8:2a:f8:60:14: 06:05:b4:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WsdhBpMQ+q6T24loxX2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDYwOWYyMTg1MWJkZjdmNzRlZDE4ZjBmMDlkZjkyZWRi NzUzNTUwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGQ4NjZkOTk3MWRlMThhN2U0Y2QwYTA3MWYzYzQ3NDZkM2I3OTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6g3SVuZH+JjAeX5FtnTUWE1ysXo D6IAQCYzVfbYFcyILzIvWIUu32kPHJj28IXKw1qjIR3VKUendzGq37NUegk5qO2i pE1uuHUrsXaOunW4g45NisuAStHby/eNPzMioYqED91ypTZ0HKCPI5vFP5nvdJ99 2aqQWvSIGzhRyDCxQSmF1v66LCMzkvI6AFY2yddq3YFqhRIShBxSy4Ju5+4GPIU1 Eq3AvdfhmhidC/dTo0RFDaPn+UtLg+fbW5KnPqW6Yh97SBtM9kacNjMDYsN9WVUL UvSlCELbopXplBEVXUS7itXAkLSZVcA5TsLF7QBCe6VO9YbU3TCN2TMNsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO3YZtmXHeGKfkzQoHHzxHRtO3lNMB8GA1UdIwQY MBaAFMgGCfIYUb33907Rjw8J35Ltt1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMt NGNiY2U1YmFiYWE3LzEvN2RobTJaY2Q0WXAtVE5DZ2NmUEVkRzA3ZVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMtNGNiY2U1YmFiYWE3 LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAFU MA0GCSqGSIb3DQEBCwUAA4IBAQALPKeIYT5y/tOyImqJdcfkcPMxHtovM+I/7ZMc RgbFH43THkZ1vVqG0KzK7Uo5B/9S/uNycIM+CqyjXORJg807VBgrRJJQcbeAJWql KUWXkoaPVIGxMv1eBT4ZYReRZydE8o3xSX+PuhLkcd4IbDPmqqTJd1waRDo3ArYK Nc6DpzNfmPut/ehYoO6RdNHz9PP7eH4elBjNhHuN8A9PFcm6KBK7zLIqZfIucKz1 SuHOeFldGMIDqgzem5NpY7iCuf9yaecvfgkm5TjdacM5oUkwGns1RNh1w4XAjfID oMifMbxKYX/8VcMnb+w+PxRmslDJsXq2l8KUyCr4YBQGBbSS -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:57 2026 by rpki-client