This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/sr7WacAmmZWiXvAsDGzYF2vtdAU.roa File: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (raw, json) Hash identifier: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU= Subject key identifier: B2:BE:D6:69:C0:26:99:95:A2:5E:F0:2C:0C:6C:D8:17:6B:ED:74:05 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B7910C8E419A62901C0E041943C2FED3B Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/sr7WacAmmZWiXvAsDGzYF2vtdAU.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 2a07:290a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c8:e4:19:a6:29:01:c0:e0:41:94:3c:2f:ed:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2bed669c0269995a25ef02c0c6cd8176bed7405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:57:5b:ca:3d:78:c9:a6:ed:49:de:39:b5: e6:13:ba:7b:6d:4e:c5:8e:42:0f:34:b2:e5:d0:6e: 8c:7a:3d:02:d0:70:62:63:00:a3:cd:ee:b9:8a:8a: 61:65:d4:f7:ed:36:8e:49:b1:0d:9a:46:9f:1f:f6: 8d:fa:1f:a5:38:00:c7:53:47:61:86:68:b5:49:7f: 3c:de:87:c2:23:6a:2b:c8:e0:ca:c3:d2:3c:2f:60: 95:9e:a7:09:32:3a:bb:21:d3:71:5b:05:0b:44:97: f2:b9:a7:ed:61:4c:18:ba:3f:e0:b9:76:cd:2d:fb: 91:b1:48:91:50:7c:df:35:8b:68:ae:e5:1e:a0:83: 9a:86:06:e5:59:80:b9:34:04:e9:7c:a3:a7:3f:f1: ca:07:91:0e:21:a3:b3:de:e4:9e:ec:d2:2f:4d:5b: 4b:75:45:1f:e2:32:fd:64:83:03:dc:31:18:00:77: 83:03:31:e4:f3:1a:e2:14:8f:28:e0:3c:0e:4b:47: 24:99:de:6d:78:d1:67:76:88:2e:0c:77:67:ac:16: 12:74:0e:96:02:a8:7a:a2:8f:ce:7a:3a:2e:1f:3d: 81:26:52:7e:59:85:6e:bf:62:58:32:3a:22:ac:56: 1d:4f:a4:75:63:00:b7:94:88:9b:29:ec:64:4a:ba: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BE:D6:69:C0:26:99:95:A2:5E:F0:2C:0C:6C:D8:17:6B:ED:74:05 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/sr7WacAmmZWiXvAsDGzYF2vtdAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:290a::/32 Signature Algorithm: sha256WithRSAEncryption 78:f5:37:85:85:ef:b0:7e:b9:dd:7b:25:5b:fa:b3:64:10:e6: a0:1e:38:36:3e:7f:cc:4b:40:7b:73:9c:53:42:ca:bd:3e:15: 24:52:f8:e4:b4:5e:e8:d1:dc:c1:ca:7f:c5:4c:f8:ed:e3:a4: d0:c9:ff:e4:42:e5:5b:4a:1e:b0:31:4a:b5:c4:34:ae:77:e5: c6:51:25:8e:dd:e6:99:40:14:60:4f:7d:d9:58:ee:c4:ab:9d: a2:b7:00:b7:2b:d5:cb:14:46:34:de:ce:4e:c8:fa:bd:a0:fa: e3:d5:58:3e:e4:93:b9:5a:32:c8:b1:40:d7:ae:29:73:db:a2: 97:3a:4d:0e:21:fa:31:9b:c5:ba:95:cd:bb:fe:85:48:a4:c7: d0:9d:c7:49:88:06:68:b3:01:13:bc:b9:92:4a:0b:1b:8f:c4: 22:ee:39:e9:8a:ca:14:09:8a:28:16:48:ea:4f:b0:a6:aa:7a: 43:03:b3:1e:9f:e7:08:9b:3a:3a:3f:c3:ee:ad:b7:d7:42:89: ae:47:c2:6c:74:d9:54:51:85:98:5a:c5:7e:c3:e2:94:23:85: 9c:16:d9:df:d9:50:f4:2d:33:15:f3:97:34:3b:ac:97:d5:20: 64:62:3d:f7:88:f2:e3:13:37:0d:85:59:7a:d3:00:6d:85:56: 32:97:e0:31 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EMjkGaYpAcDgQZQ8L+07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmJlZDY2OWMwMjY5OTk1YTI1ZWYwMmMwYzZjZDgxNzZiZWQ3NDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqglXW8o9eMmm7UneObXmE7p7bU7F jkIPNLLl0G6Mej0C0HBiYwCjze65iophZdT37TaOSbENmkafH/aN+h+lOADHU0dh hmi1SX883ofCI2oryODKw9I8L2CVnqcJMjq7IdNxWwULRJfyuaftYUwYuj/guXbN LfuRsUiRUHzfNYtoruUeoIOahgblWYC5NATpfKOnP/HKB5EOIaOz3uSe7NIvTVtL dUUf4jL9ZIMD3DEYAHeDAzHk8xriFI8o4DwOS0ckmd5teNFndoguDHdnrBYSdA6W Aqh6oo/OejouHz2BJlJ+WYVuv2JYMjoirFYdT6R1YwC3lIibKexkSrpEnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLK+1mnAJpmVol7wLAxs2Bdr7XQFMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEvc3I3V2FjQW1tWldpWHZBc0RHellGMnZ0ZEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgcpCjAN BgkqhkiG9w0BAQsFAAOCAQEAePU3hYXvsH653XslW/qzZBDmoB44Nj5/zEtAe3Oc U0LKvT4VJFL45LRe6NHcwcp/xUz47eOk0Mn/5ELlW0oesDFKtcQ0rnflxlEljt3m mUAUYE992VjuxKudorcAtyvVyxRGNN7OTsj6vaD649VYPuSTuVoyyLFA164pc9ui lzpNDiH6MZvFupXNu/6FSKTH0J3HSYgGaLMBE7y5kkoLG4/EIu456YrKFAmKKBZI 6k+wpqp6QwOzHp/nCJs6Oj/D7q2310KJrkfCbHTZVFGFmFrFfsPilCOFnBbZ39lQ 9C0zFfOXNDusl9UgZGI994jy4xM3DYVZetMAbYVWMpfgMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:00 2026 by rpki-client