This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/476cp-mWIu1bVun3jZtj5Ncwvdw.roa File: 476cp-mWIu1bVun3jZtj5Ncwvdw.roa (raw, json) Hash identifier: IoOiMA21c+z5riXnsno8GmSoKbkDrLpnuAfrPnv1Bkk= Subject key identifier: E3:BE:9C:A7:E9:96:22:ED:5B:56:E9:F7:8D:9B:63:E4:D7:30:BD:DC Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B791131B1088BF5ADB0633A30E3E79571 Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/476cp-mWIu1bVun3jZtj5Ncwvdw.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211776 IP address blocks: 2a07:22c1:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:31:b1:08:8b:f5:ad:b0:63:3a:30:e3:e7:95:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3be9ca7e99622ed5b56e9f78d9b63e4d730bddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9b:f7:cc:af:65:ea:74:23:d6:96:a7:88:1d: cd:94:22:79:12:70:3c:5f:df:ac:2a:bf:a2:ae:49: f2:d6:4c:12:15:c4:57:e8:4b:20:3e:b7:86:0f:aa: c8:4b:8c:6b:0d:0e:1a:01:17:84:8e:39:92:b4:fe: 52:9d:4a:11:f4:3f:04:b4:65:b7:6e:04:84:ce:81: c9:04:75:12:d1:68:a9:eb:b6:eb:4b:7c:df:5f:f7: cc:19:f5:98:a7:4a:5a:36:05:18:2d:25:7a:9b:82: bc:9a:8c:5c:f7:b3:0b:c2:c9:68:4a:09:94:32:21: 22:31:c2:e4:09:ad:2c:bf:8b:1a:79:b9:c6:fc:b9: 41:db:ed:40:58:fd:ff:d2:ee:0d:1d:02:57:f7:4b: 41:ca:92:40:ea:73:21:76:7d:7c:52:5d:20:33:aa: 5d:0d:3d:30:fc:66:d3:56:3a:3a:1b:9d:12:f6:77: 28:5b:61:b5:f4:aa:a4:83:26:b7:bf:6e:5a:be:4b: 9e:ef:f0:ec:23:de:cc:59:4b:29:8b:d6:4c:21:a9: 8a:d8:6d:92:07:71:fa:03:4a:3a:34:3c:d9:11:9d: 1a:f5:27:63:f3:b2:8a:9d:92:4f:5c:ae:30:ce:f6: 99:d3:ae:31:5d:46:44:82:3a:24:82:90:5d:1c:55: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BE:9C:A7:E9:96:22:ED:5B:56:E9:F7:8D:9B:63:E4:D7:30:BD:DC X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/476cp-mWIu1bVun3jZtj5Ncwvdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c1:34::/48 Signature Algorithm: sha256WithRSAEncryption 97:70:7a:ec:3c:06:76:71:8f:8b:c7:89:6f:36:a8:af:7a:2a: 36:4f:8f:68:33:45:33:cf:72:36:55:64:37:63:44:a4:4c:3e: 7b:28:ec:30:c4:84:0b:5a:97:c2:42:1a:c7:bc:36:0f:2a:e0: b1:eb:4b:4b:40:16:06:8f:fc:3f:1a:7d:6c:7a:85:fa:83:f8: bf:c1:47:2d:3b:1a:18:ab:9f:d8:82:15:bc:bf:ea:b3:d8:96: 34:cc:1e:0b:e0:1e:75:50:b4:f1:b2:4c:c3:b4:cc:88:df:bd: 1b:db:a2:bf:6a:e8:e7:b1:5a:41:ae:99:c2:f5:1d:db:12:e3: a7:72:bf:fa:29:94:ff:2c:86:4e:15:23:91:a0:2e:fa:1e:0b: 74:70:97:4b:82:b4:17:30:e0:e6:8b:09:d4:03:41:4a:2e:51: 9b:3b:55:24:5a:db:d9:34:15:bb:18:b4:e0:3f:b7:f3:2e:7a: 2c:89:15:43:6b:96:39:92:40:f4:3b:3f:00:c4:a4:29:06:84: 97:25:f7:9a:0c:0b:de:84:8c:c1:a9:29:14:cf:f9:a1:b4:a4: 64:1b:ac:c7:2b:7f:1f:27:26:db:87:19:2a:29:c9:34:80:e5: d6:18:91:4c:d8:e3:b3:27:78:8c:95:98:69:60:c2:08:de:dc: 21:a8:29:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ETGxCIv1rbBjOjDj55VxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2JlOWNhN2U5OTYyMmVkNWI1NmU5Zjc4ZDliNjNlNGQ3MzBiZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pv3zK9l6nQj1paniB3NlCJ5EnA8 X9+sKr+irkny1kwSFcRX6EsgPreGD6rIS4xrDQ4aAReEjjmStP5SnUoR9D8EtGW3 bgSEzoHJBHUS0Wip67brS3zfX/fMGfWYp0paNgUYLSV6m4K8moxc97MLwsloSgmU MiEiMcLkCa0sv4saebnG/LlB2+1AWP3/0u4NHQJX90tBypJA6nMhdn18Ul0gM6pd DT0w/GbTVjo6G50S9ncoW2G19Kqkgya3v25avkue7/DsI97MWUspi9ZMIamK2G2S B3H6A0o6NDzZEZ0a9Sdj87KKnZJPXK4wzvaZ064xXUZEgjokgpBdHFV5ZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOO+nKfpliLtW1bp942bY+TXML3cMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvNDc2Y3AtbVdJdTFiVnVuM2padGo1TmN3dmR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwQA0 MA0GCSqGSIb3DQEBCwUAA4IBAQCXcHrsPAZ2cY+Lx4lvNqiveio2T49oM0Uzz3I2 VWQ3Y0SkTD57KOwwxIQLWpfCQhrHvDYPKuCx60tLQBYGj/w/Gn1seoX6g/i/wUct OxoYq5/YghW8v+qz2JY0zB4L4B51ULTxskzDtMyI370b26K/aujnsVpBrpnC9R3b EuOncr/6KZT/LIZOFSORoC76Hgt0cJdLgrQXMODmiwnUA0FKLlGbO1UkWtvZNBW7 GLTgP7fzLnosiRVDa5Y5kkD0Oz8AxKQpBoSXJfeaDAvehIzBqSkUz/mhtKRkG6zH K38fJybbhxkqKck0gOXWGJFM2OOzJ3iMlZhpYMII3twhqCnt -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:04 2026 by rpki-client