This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/7fjKgyx9Yaxh1FmHZYJUH95301c.roa File: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (raw, json) Hash identifier: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA= Subject key identifier: ED:F8:CA:83:2C:7D:61:AC:61:D4:59:87:65:82:54:1F:DE:77:D3:57 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E391CD6C713DA0399BD87B32998E48C Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/7fjKgyx9Yaxh1FmHZYJUH95301c.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197481 IP address blocks: 2a0a:2c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1c:d6:c7:13:da:03:99:bd:87:b3:29:98:e4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edf8ca832c7d61ac61d459876582541fde77d357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:1c:b7:28:b1:33:2e:f2:04:a7:76:75:b4: 47:40:f9:14:0b:9a:5e:f6:9c:1d:33:ca:79:41:42: a9:9f:ec:25:07:2b:b5:69:c9:4f:01:17:59:ff:0d: 19:1d:9e:1a:c3:90:09:8c:ae:52:9f:35:81:0c:84: 07:2b:9d:32:8b:3b:ad:b0:ed:e1:da:18:c4:21:72: 10:26:b0:62:e9:c9:58:fd:0c:c3:61:9d:33:ca:fe: 19:ff:56:05:2c:b8:65:19:cc:b5:89:77:5c:a5:86: 38:2d:f8:a4:5a:d7:10:41:bf:91:c5:f9:55:20:9a: 52:2a:23:b9:cb:36:36:7d:f6:79:c6:8a:e0:09:72: 25:5e:00:6f:8e:74:f1:66:f6:69:14:11:ab:e9:e7: 6c:ac:62:f0:a1:de:d4:96:36:52:56:1b:d8:96:16: f6:f5:30:d6:7f:a2:2b:2d:f7:bc:84:99:ec:01:bf: d8:58:34:a9:cd:3e:ea:c5:01:e0:21:ef:f4:ec:4f: 98:f6:62:e7:af:2c:7a:75:ad:92:61:29:0b:48:3d: af:e2:91:5a:00:ea:38:8e:c5:57:29:99:86:2b:7d: 9d:1b:71:51:fa:d1:a4:9d:a0:04:ef:46:5e:d7:46: 47:01:84:94:45:43:ea:f8:7b:b6:75:46:43:95:fe: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:CA:83:2C:7D:61:AC:61:D4:59:87:65:82:54:1F:DE:77:D3:57 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/7fjKgyx9Yaxh1FmHZYJUH95301c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2c0:3::/48 Signature Algorithm: sha256WithRSAEncryption 32:22:b9:dd:ce:27:bf:b5:3c:dd:d3:ef:2e:c1:8f:01:36:7a: eb:3e:87:68:2a:96:74:15:bc:db:22:70:6a:fb:d5:76:1f:82: a3:37:0c:32:8d:de:1b:92:57:67:af:f4:de:b6:bc:82:7b:bd: 43:9c:48:f8:bd:6f:30:9b:c6:f8:50:99:f9:f8:57:c7:1a:62: f7:2c:a2:c2:84:22:6d:a4:93:a8:99:1c:23:13:a6:c5:33:9c: c3:49:bc:b1:07:9c:01:2d:c4:86:95:58:ac:73:b7:02:fb:94: 3c:7e:80:25:46:19:82:71:e6:e8:d0:4c:78:41:15:fe:c9:78: 60:44:e5:67:eb:9e:7c:f6:dd:55:26:77:19:ec:ce:ab:8b:f3: fe:02:61:43:88:ab:ee:ff:40:7c:32:ed:1c:a9:f3:2b:fe:4f: c4:31:50:e3:f2:c2:77:c8:51:5c:7d:13:ae:eb:61:94:d6:38: 79:69:66:4e:66:f6:19:a4:ac:9f:64:4f:ca:a7:b5:88:da:be: ef:52:e2:26:0a:f3:e4:3b:74:45:4f:1d:22:94:2b:08:63:c2: ca:89:00:a2:d6:f9:36:48:05:81:a4:04:72:d4:09:36:28:92: 6b:4f:14:9c:40:e4:94:fe:51:91:0f:c5:a7:4d:ca:18:b6:c7: 5d:54:e8:3f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ORzWxxPaA5m9h7MpmOSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGY4Y2E4MzJjN2Q2MWFjNjFkNDU5ODc2NTgyNTQxZmRlNzdkMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7EctyixMy7yBKd2dbRHQPkUC5pe 9pwdM8p5QUKpn+wlByu1aclPARdZ/w0ZHZ4aw5AJjK5SnzWBDIQHK50yizutsO3h 2hjEIXIQJrBi6clY/QzDYZ0zyv4Z/1YFLLhlGcy1iXdcpYY4LfikWtcQQb+RxflV IJpSKiO5yzY2ffZ5xorgCXIlXgBvjnTxZvZpFBGr6edsrGLwod7UljZSVhvYlhb2 9TDWf6IrLfe8hJnsAb/YWDSpzT7qxQHgIe/07E+Y9mLnryx6da2SYSkLSD2v4pFa AOo4jsVXKZmGK32dG3FR+tGknaAE70Ze10ZHAYSURUPq+Hu2dUZDlf5SNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO34yoMsfWGsYdRZh2WCVB/ed9NXMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvN2ZqS2d5eDlZYXhoMUZtSFpZSlVIOTUzMDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgoCwAAD MA0GCSqGSIb3DQEBCwUAA4IBAQAyIrndzie/tTzd0+8uwY8BNnrrPodoKpZ0Fbzb InBq+9V2H4KjNwwyjd4bkldnr/TetryCe71DnEj4vW8wm8b4UJn5+FfHGmL3LKLC hCJtpJOomRwjE6bFM5zDSbyxB5wBLcSGlVisc7cC+5Q8foAlRhmCcebo0Ex4QRX+ yXhgROVn65589t1VJncZ7M6ri/P+AmFDiKvu/0B8Mu0cqfMr/k/EMVDj8sJ3yFFc fROu62GU1jh5aWZOZvYZpKyfZE/Kp7WI2r7vUuImCvPkO3RFTx0ilCsIY8LKiQCi 1vk2SAWBpARy1Ak2KJJrTxScQOSU/lGRD8WnTcoYtsddVOg/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:58 2026 by rpki-client