This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/P_7nMxZMM7y4KXX_mCBDZ7js_QI.roa File: P_7nMxZMM7y4KXX_mCBDZ7js_QI.roa (raw, json) Hash identifier: iGjx0O2mQCwsWD5wHQrIoNmlbRTh0061OVc3dbeJuto= Subject key identifier: 3F:FE:E7:33:16:4C:33:BC:B8:29:75:FF:98:20:43:67:B8:EC:FD:02 Certificate issuer: /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Certificate serial: 019BBCD33CEC94CAD1737B8652DDCB301A95 Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/P_7nMxZMM7y4KXX_mCBDZ7js_QI.roa Signing time: Wed 14 Jan 2026 14:05:18 +0000 ROA not before: Wed 14 Jan 2026 14:05:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215930 IP address blocks: 2001:3b80:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:d3:3c:ec:94:ca:d1:73:7b:86:52:dd:cb:30:1a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Validity Not Before: Jan 14 14:05:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ffee733164c33bcb82975ff98204367b8ecfd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:5b:1c:ee:b3:be:45:6c:96:36:8e:67:66: 3f:89:16:d2:a5:3c:f8:70:58:c8:b0:fa:41:36:f9: 28:ca:b3:39:d0:3e:89:46:3e:ab:9b:02:8a:0f:ea: ca:96:77:e3:9e:63:30:83:73:cd:55:53:fd:cc:04: 5e:fd:d7:6a:d9:30:dc:d9:04:f9:16:c5:a4:a6:4f: 7d:a3:e2:73:95:50:4e:83:b3:4a:cc:f6:ee:0d:cc: 7f:f6:12:fb:4d:20:6f:f2:f0:bc:ea:01:21:36:f7: 52:4e:35:a3:78:bf:db:86:d9:c1:e6:2d:28:29:15: a7:19:c5:b7:df:6f:fa:68:f2:31:e6:e0:7d:49:20: 0a:58:ed:10:31:09:57:ae:b2:fb:26:e8:fa:ad:57: 68:25:82:24:1d:97:f1:7f:38:14:62:28:c7:4d:47: 69:cf:bc:3e:09:4e:d5:2a:18:06:d5:64:83:be:ed: 8a:2a:b6:1e:91:dc:ab:ab:c3:68:2b:37:3e:2f:1b: a6:d4:be:60:22:3f:49:5b:3f:0c:33:03:35:78:87: 05:91:04:47:00:3d:1c:bc:a2:2e:ae:a1:ec:fe:c4: 10:4f:0e:1a:b1:7e:88:b2:73:08:d0:ab:75:06:a2: 47:db:0f:b7:9b:76:ed:4e:59:9c:44:f5:8f:da:44: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:E7:33:16:4C:33:BC:B8:29:75:FF:98:20:43:67:B8:EC:FD:02 X509v3 Authority Key Identifier: keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/P_7nMxZMM7y4KXX_mCBDZ7js_QI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3b80:d000::/36 Signature Algorithm: sha256WithRSAEncryption 75:1a:d3:9b:de:94:6b:44:c2:b4:05:db:9e:f3:f9:be:dc:ad: eb:92:d4:ba:af:4d:0e:01:bd:af:84:8e:89:51:c5:70:5a:ad: 8f:d1:77:df:21:db:d6:2a:03:a7:91:1a:40:04:29:09:65:82: 75:ef:26:7a:90:2a:9f:88:13:99:58:aa:60:1b:94:60:5d:b7: 09:99:74:47:52:5b:ee:13:45:fe:0b:89:cd:ab:37:7e:7d:6f: b5:99:2d:45:2f:18:31:61:e1:c5:90:28:23:8a:6e:17:26:3a: 27:85:49:0a:20:4d:13:fc:4a:e6:83:1c:40:ee:f7:e1:5a:4a: 58:17:6c:0d:07:1b:a0:5c:45:79:bb:5a:8d:d8:18:e2:3a:70: d5:b4:b9:b7:ad:15:43:21:cc:b9:ec:7e:d1:6f:04:c9:e9:f5: 8f:40:78:db:ac:2a:02:ee:75:29:2a:6d:d5:1f:01:cc:63:9a: 0f:1c:05:84:74:9f:37:bb:01:02:fa:64:e2:79:7f:35:59:2a: d6:bd:ae:58:7a:0a:56:c7:94:47:55:fc:a1:cc:fb:8c:d6:0c: aa:06:2f:90:5f:a9:eb:b8:49:74:d5:ca:2f:d4:d4:30:1b:1a: 0b:49:f5:e3:a6:57:c7:87:13:1d:98:bb:28:08:89:1a:18:1c: a2:df:94:dc -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZu80zzslMrRc3uGUt3LMBqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx ZjVmNmUwHhcNMjYwMTE0MTQwNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZlZTczMzE2NGMzM2JjYjgyOTc1ZmY5ODIwNDM2N2I4ZWNmZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu1bHO6zvkVsljaOZ2Y/iRbSpTz4 cFjIsPpBNvkoyrM50D6JRj6rmwKKD+rKlnfjnmMwg3PNVVP9zARe/ddq2TDc2QT5 FsWkpk99o+JzlVBOg7NKzPbuDcx/9hL7TSBv8vC86gEhNvdSTjWjeL/bhtnB5i0o KRWnGcW332/6aPIx5uB9SSAKWO0QMQlXrrL7Juj6rVdoJYIkHZfxfzgUYijHTUdp z7w+CU7VKhgG1WSDvu2KKrYekdyrq8NoKzc+Lxum1L5gIj9JWz8MMwM1eIcFkQRH AD0cvKIurqHs/sQQTw4asX6IsnMI0Kt1BqJH2w+3m3btTlmcRPWP2kTJpQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD/+5zMWTDO8uCl1/5ggQ2e47P0CMB8GA1UdIwQY MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt MGY3OTY0MzIxY2UxLzEvUF83bk14Wk1NN3k0S1hYX21DQkRaN2pzX1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEIAE7gNAw DQYJKoZIhvcNAQELBQADggEBAHUa05velGtEwrQF257z+b7creuS1LqvTQ4Bva+E jolRxXBarY/Rd98h29YqA6eRGkAEKQllgnXvJnqQKp+IE5lYqmAblGBdtwmZdEdS W+4TRf4Lic2rN359b7WZLUUvGDFh4cWQKCOKbhcmOieFSQogTRP8SuaDHEDu9+Fa SlgXbA0HG6BcRXm7Wo3YGOI6cNW0ubetFUMhzLnsftFvBMnp9Y9AeNusKgLudSkq bdUfAcxjmg8cBYR0nze7AQL6ZOJ5fzVZKta9rlh6ClbHlEdV/KHM+4zWDKoGL5Bf qeu4SXTVyi/U1DAbGgtJ9eOmV8eHEx2YuygIiRoYHKLflNw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:24 2026 by rpki-client