This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/m7FhPhHs11a2vSve5xnlsfFohsw.roa File: m7FhPhHs11a2vSve5xnlsfFohsw.roa (raw, json) Hash identifier: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds= Subject key identifier: 9B:B1:61:3E:11:EC:D7:56:B6:BD:2B:DE:E7:19:E5:B1:F1:68:86:CC Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4 Certificate serial: 019B7EA4FAFFCB34C5857A2196ACE03158B6 Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/m7FhPhHs11a2vSve5xnlsfFohsw.roa Signing time: Fri 02 Jan 2026 12:18:19 +0000 ROA not before: Fri 02 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211052 IP address blocks: 2001:678:1074::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:fa:ff:cb:34:c5:85:7a:21:96:ac:e0:31:58:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4 Validity Not Before: Jan 2 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb1613e11ecd756b6bd2bdee719e5b1f16886cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:02:61:a5:a5:5b:19:6b:31:42:8f:39:ae:20: 66:1b:dc:e7:d4:e4:8a:f1:e9:66:75:4b:56:29:d4: f9:f5:d9:e6:af:c5:57:21:c9:c1:bb:10:11:be:44: 53:8e:ca:ff:2a:ce:39:39:41:fe:6d:6d:3d:9f:38: ca:4b:5a:36:60:91:f0:75:5a:11:75:83:68:96:9a: 5d:b6:77:1c:9c:66:62:de:a5:05:c9:bc:b0:0d:f9: 90:46:c4:32:20:a7:fc:10:55:c0:d4:e9:a5:5f:5b: 95:3e:1f:48:f8:8b:5c:c6:3c:bb:a9:17:1f:93:5c: 75:46:d2:e5:09:68:fd:93:a3:99:de:ca:f4:b4:ae: 57:bf:1e:ad:91:f1:35:68:29:37:8a:f5:6e:a2:23: 3d:6a:c4:1e:10:19:2c:ee:9a:cd:f9:4c:43:ab:13: 4f:84:5e:bd:48:4a:30:33:a6:6e:4e:14:2f:8e:c2: 13:29:fe:9c:6f:9a:26:1e:26:f5:40:c9:25:37:05: 5c:dc:41:ae:d9:03:fc:92:d4:ee:58:40:29:7d:6f: 55:c8:07:1a:83:eb:2d:79:df:88:28:34:02:ac:de: 1e:e1:1e:be:90:89:b1:fb:9d:20:f1:0b:e3:0e:84: 4d:10:39:7e:6f:8d:4e:04:0b:ec:81:71:a0:8d:71: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:61:3E:11:EC:D7:56:B6:BD:2B:DE:E7:19:E5:B1:F1:68:86:CC X509v3 Authority Key Identifier: keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/m7FhPhHs11a2vSve5xnlsfFohsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1074::/48 Signature Algorithm: sha256WithRSAEncryption 4d:c8:49:86:6f:df:04:29:6a:69:53:54:51:7c:30:63:ab:08: de:59:b1:53:21:89:44:e8:be:04:e9:65:ff:96:ed:41:ad:28: 57:3e:1b:92:b0:dd:15:71:00:4a:2e:bd:90:4f:69:85:e8:13: 60:76:61:ca:25:3e:36:02:b4:a7:31:aa:f9:dc:c1:92:40:04: 05:fe:ad:3a:0d:5d:d3:f3:88:e6:9f:25:3f:95:39:05:e1:29: bc:fe:c9:8c:b6:cf:c2:90:29:30:91:34:68:7a:78:09:12:aa: 2e:5c:e2:22:37:14:27:ea:c8:a4:d4:87:58:ff:48:c7:f1:27: 2e:2a:e5:ae:87:21:37:40:f5:d3:11:f8:be:73:97:3f:8b:b8: f0:47:1a:1c:65:24:e0:ac:03:6b:b9:0a:6d:e8:40:ed:6c:f6: 22:9d:db:cf:7d:87:8c:1c:b0:e4:00:ae:cb:2e:ef:ee:e6:d8: d6:97:c3:af:10:8d:a7:42:84:c6:a1:8e:0e:55:a2:33:51:23: 5a:33:f7:28:51:18:7f:ef:35:e7:4a:29:78:a6:20:a8:1e:e4: d1:b2:3e:33:97:15:10:08:42:97:68:ad:d4:82:02:e2:3a:9a: 81:53:ae:cf:11:32:dc:78:17:9a:4f:d5:d5:5e:a3:b8:91:8c: 18:01:c1:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pPr/yzTFhXohlqzgMVi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzgyNjUwODljYmRkZTZhNmM1NzljZDc3NmI1ZjgwYzBm OGFkZDQwHhcNMjYwMTAyMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmIxNjEzZTExZWNkNzU2YjZiZDJiZGVlNzE5ZTViMWYxNjg4NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QJhpaVbGWsxQo85riBmG9zn1OSK 8elmdUtWKdT59dnmr8VXIcnBuxARvkRTjsr/Ks45OUH+bW09nzjKS1o2YJHwdVoR dYNolppdtnccnGZi3qUFybywDfmQRsQyIKf8EFXA1OmlX1uVPh9I+Itcxjy7qRcf k1x1RtLlCWj9k6OZ3sr0tK5Xvx6tkfE1aCk3ivVuoiM9asQeEBks7prN+UxDqxNP hF69SEowM6ZuThQvjsITKf6cb5omHib1QMklNwVc3EGu2QP8ktTuWEApfW9VyAca g+sted+IKDQCrN4e4R6+kImx+50g8QvjDoRNEDl+b41OBAvsgXGgjXGiaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJuxYT4R7NdWtr0r3ucZ5bHxaIbMMB8GA1UdIwQY MBaAFMXIJlCJy93mpsV5zXdrX4DA+K3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEt NDM4ODIwZmJhMjU0LzEvbTdGaFBoSHMxMWEydlN2ZTV4bmxzZkZvaHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEtNDM4ODIwZmJhMjU0 LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBB0 MA0GCSqGSIb3DQEBCwUAA4IBAQBNyEmGb98EKWppU1RRfDBjqwjeWbFTIYlE6L4E 6WX/lu1BrShXPhuSsN0VcQBKLr2QT2mF6BNgdmHKJT42ArSnMar53MGSQAQF/q06 DV3T84jmnyU/lTkF4Sm8/smMts/CkCkwkTRoengJEqouXOIiNxQn6sik1IdY/0jH 8ScuKuWuhyE3QPXTEfi+c5c/i7jwRxocZSTgrANruQpt6EDtbPYindvPfYeMHLDk AK7LLu/u5tjWl8OvEI2nQoTGoY4OVaIzUSNaM/coURh/7zXnSil4piCoHuTRsj4z lxUQCEKXaK3UggLiOpqBU67PETLceBeaT9XVXqO4kYwYAcFC -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:02 2026 by rpki-client