This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7gDvAvcsnsZoQDRo8XIaBeBGk_Q.roa File: 7gDvAvcsnsZoQDRo8XIaBeBGk_Q.roa (raw, json) Hash identifier: 8BRMiC063lC/D3Du1ZKQGD0kHOtJtOSLPyx+hdLZOe0= Subject key identifier: EE:00:EF:02:F7:2C:9E:C6:68:40:34:68:F1:72:1A:05:E0:46:93:F4 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019BE598C85E294D80505C5ADDD95382DC7B Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7gDvAvcsnsZoQDRo8XIaBeBGk_Q.roa Signing time: Thu 22 Jan 2026 12:05:53 +0000 ROA not before: Thu 22 Jan 2026 12:05:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202119 IP address blocks: 2a12:bec0:6a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:98:c8:5e:29:4d:80:50:5c:5a:dd:d9:53:82:dc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 22 12:05:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee00ef02f72c9ec668403468f1721a05e04693f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:04:d0:34:e1:69:d0:68:82:ed:2b:e0:af: 1c:e9:69:be:ed:fa:2b:a3:46:88:fe:f3:00:83:e8: b3:4b:aa:31:ef:97:bd:0d:07:c3:ec:14:25:97:87: e9:d4:71:01:74:83:75:d8:9a:07:72:8e:74:11:2c: 78:02:0b:0b:de:ca:6c:a5:c8:5f:0a:22:dd:5f:71: e2:e6:b9:b9:69:f0:43:bc:ef:a2:58:7b:e2:53:f4: 64:de:69:35:66:5c:64:68:ad:51:a9:91:3e:60:c8: 57:af:c6:f0:00:45:94:9e:02:d5:c6:21:a2:36:3f: d8:80:ae:90:24:81:55:62:e7:56:c5:a5:92:02:4a: b0:39:e8:f6:77:9e:4d:ba:06:9e:7b:c6:0c:92:94: fb:eb:e1:69:d6:6d:b2:dc:2c:d8:b6:32:35:3b:57: be:cb:78:cc:d7:33:e4:23:9e:15:e3:71:47:2c:d3: 23:19:5c:51:95:fc:84:8d:2e:5a:a7:42:65:2e:5b: ce:93:f6:87:9f:eb:5d:a8:d0:6a:63:92:16:4f:06: ba:8f:9f:7e:99:58:45:05:13:e7:2b:8c:21:f5:1c: 00:2a:d2:31:65:09:76:83:3b:96:8a:86:7c:d7:64: ab:3e:2e:ec:d4:7e:60:07:a2:08:93:7d:15:fa:3c: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:00:EF:02:F7:2C:9E:C6:68:40:34:68:F1:72:1A:05:E0:46:93:F4 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7gDvAvcsnsZoQDRo8XIaBeBGk_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:6a0::/44 Signature Algorithm: sha256WithRSAEncryption c4:7d:97:53:fb:84:30:36:cd:f7:0f:94:2f:cf:95:3c:c6:ed: 82:28:47:3a:c2:76:69:b2:cf:f5:58:90:90:36:a3:d0:42:a5: 0b:ee:d7:1c:ac:3b:b0:ad:b2:78:75:e0:3f:4b:3c:cf:ba:f7: 86:68:0d:41:66:b6:d6:e2:b1:f8:ab:c6:7f:f4:c4:6c:c9:6c: f3:c8:0c:1d:a0:24:3b:90:f1:d8:90:45:b0:68:d6:b8:ae:23: 82:a4:19:d7:0f:e7:20:f5:2c:3f:af:48:04:68:f5:d5:d7:60: 81:c6:dd:63:5a:4d:ec:5d:9e:f7:f9:29:7b:6d:cb:d1:0b:a9: 0e:cc:74:c0:00:d5:42:24:9c:3f:05:fa:f4:ff:56:95:bf:6d: 85:46:c2:ec:49:b4:2f:bd:0a:38:40:a1:6e:86:a9:4f:29:f4: 50:6a:94:44:03:2f:b1:47:b1:f5:a4:15:db:66:0b:b2:32:25: e6:e8:9c:22:9f:ad:19:27:c1:69:08:80:9e:7c:0e:61:b7:b1: 94:b4:83:ab:b0:56:13:f6:34:42:fe:7e:6f:e8:b7:28:c6:6b: 1a:eb:67:74:e9:35:06:65:8c:18:78:11:91:96:41:d8:3f:be: 01:bf:73:a3:4d:1a:c3:a3:ad:38:57:36:3a:aa:c5:a6:22:71: b7:20:05:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvlmMheKU2AUFxa3dlTgtx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTIyMTIwNTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTAwZWYwMmY3MmM5ZWM2Njg0MDM0NjhmMTcyMWEwNWUwNDY5M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjgE0DThadBogu0r4K8c6Wm+7for o0aI/vMAg+izS6ox75e9DQfD7BQll4fp1HEBdIN12JoHco50ESx4AgsL3spspchf CiLdX3Hi5rm5afBDvO+iWHviU/Rk3mk1ZlxkaK1RqZE+YMhXr8bwAEWUngLVxiGi Nj/YgK6QJIFVYudWxaWSAkqwOej2d55Nugaee8YMkpT76+Fp1m2y3CzYtjI1O1e+ y3jM1zPkI54V43FHLNMjGVxRlfyEjS5ap0JlLlvOk/aHn+tdqNBqY5IWTwa6j59+ mVhFBRPnK4wh9RwAKtIxZQl2gzuWioZ812SrPi7s1H5gB6IIk30V+jynuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO4A7wL3LJ7GaEA0aPFyGgXgRpP0MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvN2dEdkF2Y3Nuc1pvUURSbzhYSWFCZUJHa19RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAag MA0GCSqGSIb3DQEBCwUAA4IBAQDEfZdT+4QwNs33D5Qvz5U8xu2CKEc6wnZpss/1 WJCQNqPQQqUL7tccrDuwrbJ4deA/SzzPuveGaA1BZrbW4rH4q8Z/9MRsyWzzyAwd oCQ7kPHYkEWwaNa4riOCpBnXD+cg9Sw/r0gEaPXV12CBxt1jWk3sXZ73+Sl7bcvR C6kOzHTAANVCJJw/Bfr0/1aVv22FRsLsSbQvvQo4QKFuhqlPKfRQapREAy+xR7H1 pBXbZguyMiXm6Jwin60ZJ8FpCICefA5ht7GUtIOrsFYT9jRC/n5v6Lcoxmsa62d0 6TUGZYwYeBGRlkHYP74Bv3OjTRrDo604VzY6qsWmInG3IAWR -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:59 2026 by rpki-client