This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/7UycSOA2fNBupvFy-hFdJV1v7Io.roa File: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (raw, json) Hash identifier: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM= Subject key identifier: ED:4C:9C:48:E0:36:7C:D0:6E:A6:F1:72:FA:11:5D:25:5D:6F:EC:8A Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Certificate serial: 019B7AC867843ECAECA8C5CAF3D3AFD650D4 Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/7UycSOA2fNBupvFy-hFdJV1v7Io.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8519 IP address blocks: 2001:638:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:67:84:3e:ca:ec:a8:c5:ca:f3:d3:af:d6:50:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed4c9c48e0367cd06ea6f172fa115d255d6fec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:72:43:f9:91:6a:64:e3:90:6e:15:65:9c: 49:00:81:fa:b6:cb:5b:8b:7a:0d:c6:b4:e9:36:4b: 54:37:e4:1f:0d:5f:58:12:1d:3a:04:8f:db:51:27: 3c:45:2a:49:f9:96:fd:d8:e0:2c:ed:4f:b9:eb:85: 38:dd:03:13:42:ab:a5:29:8a:b5:8e:a4:16:2f:95: 43:0f:62:87:5e:02:14:2a:8d:0a:d1:a3:31:7c:b0: 5d:8c:b6:d5:43:e0:8f:2c:5e:4f:34:d6:f0:fe:86: 7e:ab:6d:f9:0e:18:5c:87:db:9b:c0:24:50:8f:68: 1c:bc:a8:32:69:72:9e:9d:32:ff:df:46:4c:e5:8a: e8:01:2b:34:57:16:2f:fa:75:ab:54:67:87:5f:b6: 8a:65:1d:5d:bd:77:83:09:b4:0e:72:08:9a:7a:2d: f8:22:94:0c:e2:a8:7f:eb:d4:f5:6f:48:6d:a8:68: 94:83:6c:2d:6f:64:80:b5:c6:42:4a:e2:57:88:84: 89:64:a2:7a:06:9d:ae:6d:94:66:58:28:00:10:d6: b0:24:45:89:4e:32:b9:7c:a9:fa:da:13:15:5f:a8: 6c:32:ed:0a:ab:54:7f:21:de:b3:38:af:2b:ae:eb: f9:c0:02:fd:27:5a:1c:44:16:ee:c7:cb:a0:91:88: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4C:9C:48:E0:36:7C:D0:6E:A6:F1:72:FA:11:5D:25:5D:6F:EC:8A X509v3 Authority Key Identifier: keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/7UycSOA2fNBupvFy-hFdJV1v7Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:638:30d::/48 Signature Algorithm: sha256WithRSAEncryption 8d:fa:00:a4:19:c6:94:8c:b2:8a:de:43:fe:1f:7b:ec:2b:5c: b7:0b:10:7b:7b:16:0d:a5:53:83:ca:f9:04:7c:7e:21:61:80: e8:20:af:49:0f:71:2b:9f:96:ff:f6:5f:c8:e5:33:5c:12:f1: 12:b4:5a:81:ea:67:69:c9:d1:04:5f:5b:ff:ee:da:6b:93:1f: 79:fa:03:b3:9f:b5:5f:f8:93:8a:8b:b9:77:a4:d9:8d:5a:59: 87:3f:00:05:9c:0d:ce:84:d1:7d:fb:bc:19:c1:26:3c:a8:cd: 53:7b:ff:0a:1b:a9:d9:91:e3:62:43:68:41:dc:a9:5d:74:34: a2:4a:53:43:b6:82:ad:b3:dd:95:0a:41:4e:4c:0c:a0:43:f2: 7d:7f:91:67:b9:76:1a:7d:06:65:fc:e8:d1:f1:ac:37:39:b7: f7:92:19:b0:da:ce:0b:5c:66:fd:6d:ad:65:64:33:5e:31:49: 5b:70:ce:2d:c2:1a:31:34:a1:da:f2:ee:4e:64:f6:b1:9f:ca: 2c:8a:37:b6:75:3b:8e:52:c4:3f:a5:18:f0:a7:8c:97:6e:32: b2:1b:95:c7:49:95:63:cb:8b:8c:d4:86:56:5b:bd:de:73:e9: 98:ec:2d:61:ca:05:6c:0d:88:f8:b9:17:28:2b:e7:a0:c4:ac: e6:3b:00:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yGeEPsrsqMXK89Ov1lDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh ZjU3YzQwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDRjOWM0OGUwMzY3Y2QwNmVhNmYxNzJmYTExNWQyNTVkNmZlYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGhyQ/mRamTjkG4VZZxJAIH6tstb i3oNxrTpNktUN+QfDV9YEh06BI/bUSc8RSpJ+Zb92OAs7U+564U43QMTQqulKYq1 jqQWL5VDD2KHXgIUKo0K0aMxfLBdjLbVQ+CPLF5PNNbw/oZ+q235Dhhch9ubwCRQ j2gcvKgyaXKenTL/30ZM5YroASs0VxYv+nWrVGeHX7aKZR1dvXeDCbQOcgiaei34 IpQM4qh/69T1b0htqGiUg2wtb2SAtcZCSuJXiISJZKJ6Bp2ubZRmWCgAENawJEWJ TjK5fKn62hMVX6hsMu0Kq1R/Id6zOK8rruv5wAL9J1ocRBbux8ugkYinWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO1MnEjgNnzQbqbxcvoRXSVdb+yKMB8GA1UdIwQY MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt NTdlYzEyZTg2NDFlLzEvN1V5Y1NPQTJmTkJ1cHZGeS1oRmRKVjF2N0lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGOAMN MA0GCSqGSIb3DQEBCwUAA4IBAQCN+gCkGcaUjLKK3kP+H3vsK1y3CxB7exYNpVOD yvkEfH4hYYDoIK9JD3Ern5b/9l/I5TNcEvEStFqB6mdpydEEX1v/7tprkx95+gOz n7Vf+JOKi7l3pNmNWlmHPwAFnA3OhNF9+7wZwSY8qM1Te/8KG6nZkeNiQ2hB3Kld dDSiSlNDtoKts92VCkFOTAygQ/J9f5FnuXYafQZl/OjR8aw3Obf3khmw2s4LXGb9 ba1lZDNeMUlbcM4twhoxNKHa8u5OZPaxn8osije2dTuOUsQ/pRjwp4yXbjKyG5XH SZVjy4uM1IZWW73ec+mY7C1hygVsDYj4uRcoK+egxKzmOwAV -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:48 2026 by rpki-client