This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/7dUk_iTWyq-CeV5sugxsu_-uM24.roa File: 7dUk_iTWyq-CeV5sugxsu_-uM24.roa (raw, json) Hash identifier: M71kUmZZx7bac9nbXal3k/LyQr/8W0Eyw9aShrmuf9U= Subject key identifier: ED:D5:24:FE:24:D6:CA:AF:82:79:5E:6C:BA:0C:6C:BB:FF:AE:33:6E Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Certificate serial: 019B77C66999C84478CCCE62EF8BC742B0AD Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/7dUk_iTWyq-CeV5sugxsu_-uM24.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21416 IP address blocks: 2a0e:eac0:1000::/48 maxlen: 48 2a0e:eac0:1001::/48 maxlen: 48 2a0e:eac0:1002::/48 maxlen: 48 2a0e:eac0:1104::/48 maxlen: 48 2a0e:eac0:1105::/48 maxlen: 48 2a0e:eac0:1106::/48 maxlen: 48 2a0e:eac0:1107::/48 maxlen: 48 2a0e:eac0:1108::/48 maxlen: 48 2a0e:eac0:1109::/48 maxlen: 48 2a0e:eac0:1110::/48 maxlen: 48 2a0e:eac0:1111::/48 maxlen: 48 2a0e:eac0:1112::/48 maxlen: 48 2a0e:eac0:1113::/48 maxlen: 48 2a0e:eac0:1115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:99:c8:44:78:cc:ce:62:ef:8b:c7:42:b0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edd524fe24d6caaf82795e6cba0c6cbbffae336e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:51:ea:5d:a1:49:51:d3:4e:31:f2:d4:2c: 11:b7:24:95:19:c5:bd:d4:ec:af:a7:cd:64:02:f1: d5:ea:e4:01:b5:8b:3c:b8:33:7b:57:03:9d:10:08: 8a:76:18:53:50:af:06:43:c6:49:43:a9:c6:14:28: ec:85:88:af:b1:63:0b:5a:15:68:de:58:80:32:8a: 00:53:f8:6d:76:c1:79:da:a7:ba:90:1d:ea:73:2c: 3c:6b:d5:43:1b:5d:a4:60:9b:b6:f9:4a:fa:64:c2: 5c:07:a0:81:a7:eb:d3:13:1a:36:ef:d8:3a:8b:00: 56:c4:b6:79:fb:f1:99:8a:da:8d:97:b8:a8:5e:1b: f1:5b:dd:21:6f:4b:0e:f8:33:9f:2f:c6:2d:48:d2: 79:82:57:23:7b:ea:44:b2:60:9f:9c:35:e5:48:dc: 47:7d:c2:fb:17:1c:7a:11:04:51:8c:1b:0a:14:83: 6e:da:2b:f9:8f:f6:0d:0a:81:26:4f:07:93:39:c5: 30:20:c0:00:f3:fd:27:9e:de:73:ea:db:34:23:c5: 50:fb:7e:02:7c:a5:65:d1:15:07:53:2c:7a:4b:53: 8a:64:9c:5e:11:24:f1:34:50:32:d6:8b:0c:c8:ec: d4:4f:5a:5e:78:c2:04:25:e2:37:6c:d0:6a:01:51: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D5:24:FE:24:D6:CA:AF:82:79:5E:6C:BA:0C:6C:BB:FF:AE:33:6E X509v3 Authority Key Identifier: keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/7dUk_iTWyq-CeV5sugxsu_-uM24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:eac0:1000::-2a0e:eac0:1002:ffff:ffff:ffff:ffff:ffff 2a0e:eac0:1104::-2a0e:eac0:1109:ffff:ffff:ffff:ffff:ffff 2a0e:eac0:1110::/46 2a0e:eac0:1115::/48 Signature Algorithm: sha256WithRSAEncryption 64:fd:95:16:47:a0:86:a6:79:8e:9d:54:13:53:ea:17:c9:5a: ce:0b:4b:d0:6d:24:96:39:36:ee:94:62:48:f0:87:d0:06:4a: b8:78:99:a5:d2:2b:8a:03:7c:bf:b3:96:23:da:1b:ba:21:ed: 88:ee:4c:d3:f1:1d:55:36:e1:13:9b:49:ba:5b:3f:96:ab:9e: 25:4c:86:ca:50:8c:25:79:29:56:08:8d:17:be:6d:ae:2c:e9: 5c:8c:02:55:e4:9b:10:a2:e6:b2:4e:b0:dd:b8:bb:e2:c9:ed: de:06:18:8c:65:71:c1:fb:7c:c7:0c:6a:7d:0e:5c:8b:70:86: fc:9f:88:7c:b0:4c:8c:8a:28:47:fa:7d:c7:ea:ba:f0:a1:ab: 97:fc:48:be:86:d1:12:1c:f2:58:36:1d:37:38:6f:76:c2:bc: 23:7d:85:1d:d7:2b:ac:2a:3e:41:62:53:77:9b:88:89:4e:02: 3f:1d:6b:29:50:05:e6:c4:61:14:3a:a1:41:80:15:06:c8:3f: c9:0a:c7:ba:5e:21:a8:ae:57:c9:80:f9:eb:69:29:36:79:9d: 94:ae:a9:2a:dc:64:64:28:fe:dc:87:45:f0:c6:f4:41:bf:ff: 7a:6a:c4:9e:33:1e:84:5d:a4:c4:84:03:88:6b:73:48:a6:bb: b4:4c:4d:05 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt3xmmZyER4zM5i74vHQrCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw ZWEzYTAwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGQ1MjRmZTI0ZDZjYWFmODI3OTVlNmNiYTBjNmNiYmZmYWUzMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ9R6l2hSVHTTjHy1CwRtySVGcW9 1Oyvp81kAvHV6uQBtYs8uDN7VwOdEAiKdhhTUK8GQ8ZJQ6nGFCjshYivsWMLWhVo 3liAMooAU/htdsF52qe6kB3qcyw8a9VDG12kYJu2+Ur6ZMJcB6CBp+vTExo279g6 iwBWxLZ5+/GZitqNl7ioXhvxW90hb0sO+DOfL8YtSNJ5glcje+pEsmCfnDXlSNxH fcL7Fxx6EQRRjBsKFINu2iv5j/YNCoEmTweTOcUwIMAA8/0nnt5z6ts0I8VQ+34C fKVl0RUHUyx6S1OKZJxeESTxNFAy1osMyOzUT1peeMIEJeI3bNBqAVGu1wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFO3VJP4k1sqvgnlebLoMbLv/rjNuMB8GA1UdIwQY MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt MDBjYTMxMjZiM2ZlLzEvN2RVa19pVFd5cS1DZVY1c3VneHN1Xy11TTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5MBEDBgQqDurA EAMHACoO6sAQAjASAwcCKg7qwBEEAwcBKg7qwBEIAwcCKg7qwBEQAwcAKg7qwBEV MA0GCSqGSIb3DQEBCwUAA4IBAQBk/ZUWR6CGpnmOnVQTU+oXyVrOC0vQbSSWOTbu lGJI8IfQBkq4eJml0iuKA3y/s5Yj2hu6Ie2I7kzT8R1VNuETm0m6Wz+Wq54lTIbK UIwleSlWCI0Xvm2uLOlcjAJV5JsQouayTrDduLviye3eBhiMZXHB+3zHDGp9DlyL cIb8n4h8sEyMiihH+n3H6rrwoauX/Ei+htESHPJYNh03OG92wrwjfYUd1yusKj5B YlN3m4iJTgI/HWspUAXmxGEUOqFBgBUGyD/JCse6XiGorlfJgPnraSk2eZ2Urqkq 3GRkKP7ch0XwxvRBv/96asSeMx6EXaTEhAOIa3NIpru0TE0F -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:36 2026 by rpki-client