This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/7z1tSf8I9u1vya-qzqnrFwA2jNM.roa File: 7z1tSf8I9u1vya-qzqnrFwA2jNM.roa (raw, json) Hash identifier: /WQm3fnxjA4ArGkSbC1Tat7ScQ2OaqKECXjtZq5aFo8= Subject key identifier: EF:3D:6D:49:FF:08:F6:ED:6F:C9:AF:AA:CE:A9:EB:17:00:36:8C:D3 Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c Certificate serial: 019B7DCA03FAB30E5E727300A64064368F2C Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/7z1tSf8I9u1vya-qzqnrFwA2jNM.roa Signing time: Fri 02 Jan 2026 08:19:09 +0000 ROA not before: Fri 02 Jan 2026 08:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49036 IP address blocks: 2a02:7980:306::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:03:fa:b3:0e:5e:72:73:00:a6:40:64:36:8f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c Validity Not Before: Jan 2 08:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef3d6d49ff08f6ed6fc9afaacea9eb1700368cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:fa:c0:e4:e0:eb:9a:86:ee:5b:57:c1:8b: 7a:58:5f:0c:58:dc:45:c2:58:3b:0e:ac:0a:e6:8c: 2a:a6:99:ef:c6:07:55:14:ba:4a:b5:1e:68:bc:eb: a3:4e:63:ba:d7:40:dc:37:c1:eb:d0:2a:c4:1e:69: 26:f3:5b:99:82:dc:83:73:49:cf:6d:7a:de:5e:90: ff:ab:b2:b9:b4:90:34:62:ef:4d:27:50:bb:27:67: 40:ef:c4:6b:43:ff:cc:98:ee:26:ad:b9:5c:67:5d: 31:5e:62:f8:6f:1d:23:9d:42:8d:20:46:b3:54:98: 3e:2a:0d:58:72:74:3a:94:05:66:61:4a:59:6a:67: c6:87:50:13:4a:d8:b4:41:c5:57:fb:3b:72:6d:7e: 23:8a:2e:c2:1f:f2:d3:e7:14:6b:c4:b6:1e:93:78: 30:03:fc:6d:d9:bd:d6:cc:fe:18:94:21:6b:21:3d: a6:b7:23:87:dc:75:51:9b:e2:3a:78:bd:06:35:64: 52:34:d3:2a:f8:f5:70:a6:35:7a:d3:73:04:ee:61: 87:f3:74:02:e0:ba:62:55:66:50:2b:52:31:6d:ad: 26:6d:24:6d:02:05:c8:a2:89:38:cf:e2:07:b4:44: 8f:21:42:41:28:78:6b:83:21:df:17:e7:31:3e:c7: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3D:6D:49:FF:08:F6:ED:6F:C9:AF:AA:CE:A9:EB:17:00:36:8C:D3 X509v3 Authority Key Identifier: keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/7z1tSf8I9u1vya-qzqnrFwA2jNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:7980:306::/48 Signature Algorithm: sha256WithRSAEncryption 05:86:c6:d8:59:cf:cf:1a:74:9c:de:91:6d:c2:9f:68:05:16: d0:16:88:58:c3:8f:14:2e:81:0a:c5:80:d1:82:5e:1c:53:e0: ac:b9:56:bd:33:cd:7b:81:2d:bb:2c:93:ef:18:cf:ee:5a:e8: 48:21:83:c6:02:e7:8b:da:f6:0a:5d:e4:c7:79:66:a9:26:99: 4c:37:f0:eb:c2:d1:03:4a:e2:0f:27:96:4e:b0:e5:02:71:9f: bd:7e:d0:22:b8:6c:13:82:c4:0a:e2:3e:e7:54:a4:f3:66:ee: 96:8f:4a:95:8c:44:93:f9:28:0c:91:94:45:34:57:0c:65:38: 8c:f1:6e:e8:f5:fd:9f:db:bb:81:29:13:72:d3:a4:c1:26:3f: 2c:38:5a:47:f7:03:5d:ee:2f:b7:b7:ab:a2:ce:fb:c3:c9:f9: dd:05:c9:5d:eb:9f:ff:a2:62:c4:61:62:fa:7d:cf:9a:d4:29: 76:cb:b4:c4:93:a6:40:b5:cc:02:43:1d:e1:46:40:4b:e1:b1: ff:0a:c3:8e:47:60:0e:95:1e:cb:79:6a:79:77:9a:b6:53:56: 2e:f2:f0:a7:c9:0b:b8:91:90:4a:4c:00:a3:d0:3f:c4:7e:fb: 20:b0:d3:fd:c4:6a:4a:81:99:5d:cb:a4:9e:18:3b:46:5b:45: a3:38:ec:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ygP6sw5ecnMApkBkNo8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh NzQzMWMwHhcNMjYwMTAyMDgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjNkNmQ0OWZmMDhmNmVkNmZjOWFmYWFjZWE5ZWIxNzAwMzY4Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPD6wOTg65qG7ltXwYt6WF8MWNxF wlg7DqwK5owqppnvxgdVFLpKtR5ovOujTmO610DcN8Hr0CrEHmkm81uZgtyDc0nP bXreXpD/q7K5tJA0Yu9NJ1C7J2dA78RrQ//MmO4mrblcZ10xXmL4bx0jnUKNIEaz VJg+Kg1YcnQ6lAVmYUpZamfGh1ATSti0QcVX+ztybX4jii7CH/LT5xRrxLYek3gw A/xt2b3WzP4YlCFrIT2mtyOH3HVRm+I6eL0GNWRSNNMq+PVwpjV603ME7mGH83QC 4LpiVWZQK1Ixba0mbSRtAgXIook4z+IHtESPIUJBKHhrgyHfF+cxPsezmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO89bUn/CPbtb8mvqs6p6xcANozTMB8GA1UdIwQY MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt NjE1YWNhNTFlMmY2LzEvN3oxdFNmOEk5dTF2eWEtcXpxbnJGd0Eyak5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2 LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJ5gAMG MA0GCSqGSIb3DQEBCwUAA4IBAQAFhsbYWc/PGnSc3pFtwp9oBRbQFohYw48ULoEK xYDRgl4cU+CsuVa9M817gS27LJPvGM/uWuhIIYPGAueL2vYKXeTHeWapJplMN/Dr wtEDSuIPJ5ZOsOUCcZ+9ftAiuGwTgsQK4j7nVKTzZu6Wj0qVjEST+SgMkZRFNFcM ZTiM8W7o9f2f27uBKRNy06TBJj8sOFpH9wNd7i+3t6uizvvDyfndBcld65//omLE YWL6fc+a1Cl2y7TEk6ZAtcwCQx3hRkBL4bH/CsOOR2AOlR7LeWp5d5q2U1Yu8vCn yQu4kZBKTACj0D/EfvsgsNP9xGpKgZldy6SeGDtGW0WjOOz7 -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:23 2026 by rpki-client