This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/rn7LDn_3TIuJ6_nV4YeL1VVnvBU.roa File: rn7LDn_3TIuJ6_nV4YeL1VVnvBU.roa (raw, json) Hash identifier: qwTsKePGZVoR+2BoWJdeN5jR/mfrUPxGkb8IXH3ZPvI= Subject key identifier: AE:7E:CB:0E:7F:F7:4C:8B:89:EB:F9:D5:E1:87:8B:D5:55:67:BC:15 Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2 Certificate serial: 019B7F15DA62B5271B15BB7C9ABA7DAD497F Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/rn7LDn_3TIuJ6_nV4YeL1VVnvBU.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214189 IP address blocks: 2001:67c:2dd4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:da:62:b5:27:1b:15:bb:7c:9a:ba:7d:ad:49:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae7ecb0e7ff74c8b89ebf9d5e1878bd55567bc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:6b:60:6c:cb:70:b4:f0:eb:68:da:69:a3: 56:82:98:06:5d:67:28:06:62:7b:c0:c0:da:78:e3: a2:6d:c9:39:cd:8d:75:8c:ed:f2:36:95:18:0b:89: 21:ae:73:04:92:7a:3e:d6:f6:84:00:05:e2:c1:72: 3a:2e:40:f8:29:29:cc:d1:e6:ff:29:1b:0a:19:4d: 6f:2e:3f:52:4f:3d:f9:a0:62:52:90:ec:7c:ba:07: 58:79:e7:76:db:71:88:52:fd:79:52:ab:58:99:99: 63:41:57:2b:15:fb:c3:9c:4f:1a:9d:c8:8b:60:66: 17:ac:cc:8a:9d:20:09:1d:ad:06:85:a6:7d:17:3b: 93:6d:5e:f8:20:0e:2f:f0:3b:03:37:e8:a8:46:8d: 1a:cb:df:28:75:c9:49:eb:ea:cb:57:85:46:34:19: 00:85:53:2c:86:e4:e4:cc:28:05:2c:0f:73:44:32: c0:c7:99:f7:bb:25:a6:a5:b4:7d:d3:27:02:b1:c5: 16:e7:02:5b:ef:b3:fa:2f:ac:4e:6d:01:14:a7:48: ee:37:19:c5:58:57:4b:09:38:c6:1a:77:18:b9:b1: a4:8b:11:f9:26:fe:5b:88:9d:f6:60:32:59:58:1b: e9:2f:ec:8b:00:ec:6d:2e:f2:64:cb:a3:06:23:ef: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7E:CB:0E:7F:F7:4C:8B:89:EB:F9:D5:E1:87:8B:D5:55:67:BC:15 X509v3 Authority Key Identifier: keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/rn7LDn_3TIuJ6_nV4YeL1VVnvBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2dd4::/48 Signature Algorithm: sha256WithRSAEncryption 83:df:74:4e:8d:47:f0:0a:bb:bb:ee:6d:d0:e6:c7:7b:fb:e1: 5b:08:7a:01:b6:a7:2c:72:68:19:5e:49:84:42:4b:29:04:95: bc:7e:40:05:d4:92:49:9b:1b:0c:29:22:90:3d:61:13:1a:1b: 45:a6:e0:10:d3:08:f7:75:04:fa:b2:df:47:3c:c9:b0:19:0a: 5f:44:2f:d5:3d:f2:cb:c9:5b:15:41:83:a8:dc:e8:bd:b1:aa: 80:a4:50:3d:88:3b:af:ad:74:eb:ea:dd:4a:08:d8:1c:54:04: 0c:be:7e:7f:0e:d0:20:d8:22:85:4c:f0:35:f0:92:a5:c2:2c: 9d:aa:71:31:91:86:13:bc:a1:40:04:28:f7:77:49:d2:e0:5d: 3a:56:29:1d:6c:3f:96:0c:07:8a:fb:57:ac:94:62:e4:21:33: 3a:be:37:bd:23:2b:05:de:bc:a6:ba:fc:65:fd:32:65:aa:6a: 92:5f:85:71:92:ab:ea:16:40:6a:87:2b:de:4f:af:df:29:08: 78:e5:ab:cf:a3:16:4c:4f:ce:19:4e:92:ca:6b:2e:9d:09:55: 0e:c6:07:70:41:35:8c:52:50:35:09:72:94:8e:81:fc:ec:89: ea:7c:76:d9:22:3c:2c:4b:ad:65:3d:a5:47:cd:e1:d7:6e:a0: 9d:08:a9:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FdpitScbFbt8mrp9rUl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWZkMWJmZTM4ODQwYTY5ZmY1NjcxZDU5YmYzZGIyMmI5 OGRkZTIwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTdlY2IwZTdmZjc0YzhiODllYmY5ZDVlMTg3OGJkNTU1NjdiYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw71rYGzLcLTw62jaaaNWgpgGXWco BmJ7wMDaeOOibck5zY11jO3yNpUYC4khrnMEkno+1vaEAAXiwXI6LkD4KSnM0eb/ KRsKGU1vLj9STz35oGJSkOx8ugdYeed223GIUv15UqtYmZljQVcrFfvDnE8anciL YGYXrMyKnSAJHa0GhaZ9FzuTbV74IA4v8DsDN+ioRo0ay98odclJ6+rLV4VGNBkA hVMshuTkzCgFLA9zRDLAx5n3uyWmpbR90ycCscUW5wJb77P6L6xObQEUp0juNxnF WFdLCTjGGncYubGkixH5Jv5biJ32YDJZWBvpL+yLAOxtLvJky6MGI+8IvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK5+yw5/90yLiev51eGHi9VVZ7wVMB8GA1UdIwQY MBaAFLWv0b/jiECmn/VnHVm/PbIrmN3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFfUnYtT0lRS2FmOVdjZFdiODlzaXVZM2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNzQ4NDgtOWM4Mi00ODU1LWE4YTkt MzdlZjkyZDA3MTIzLzEvcm43TERuXzNUSXVKNl9uVjRZZUwxVlZudkJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lNzQ4NDgtOWM4Mi00ODU1LWE4YTktMzdlZjkyZDA3MTIz LzEvdGFfUnYtT0lRS2FmOVdjZFdiODlzaXVZM2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3U MA0GCSqGSIb3DQEBCwUAA4IBAQCD33ROjUfwCru77m3Q5sd7++FbCHoBtqcscmgZ XkmEQkspBJW8fkAF1JJJmxsMKSKQPWETGhtFpuAQ0wj3dQT6st9HPMmwGQpfRC/V PfLLyVsVQYOo3Oi9saqApFA9iDuvrXTr6t1KCNgcVAQMvn5/DtAg2CKFTPA18JKl wiydqnExkYYTvKFABCj3d0nS4F06VikdbD+WDAeK+1eslGLkITM6vje9IysF3rym uvxl/TJlqmqSX4VxkqvqFkBqhyveT6/fKQh45avPoxZMT84ZTpLKay6dCVUOxgdw QTWMUlA1CXKUjoH87InqfHbZIjwsS61lPaVHzeHXbqCdCKnD -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:43 2026 by rpki-client