This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa File: vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa (raw, json) Hash identifier: u4s3et3xRD7wegNnSUcKT73wjZJAhCGvvUbznbj46B0= Subject key identifier: BC:FE:EF:94:79:65:D2:95:2C:01:80:E7:03:B1:D9:05:AF:03:BF:F0 Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2 Certificate serial: 019B7EA572DD5918D4309FB3452C101E1354 Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa Signing time: Fri 02 Jan 2026 12:18:50 +0000 ROA not before: Fri 02 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8434 IP address blocks: 138.14.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:72:dd:59:18:d4:30:9f:b3:45:2c:10:1e:13:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2 Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcfeef947965d2952c0180e703b1d905af03bff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:ce:67:a7:ab:1f:33:ca:88:a2:37:63:20: bb:24:78:35:9a:87:69:38:7e:91:bc:04:2a:d0:f9: 7f:15:a6:91:1b:ed:e7:38:ce:5c:7d:01:1e:aa:74: 33:fb:d9:84:9d:d1:c3:ad:ac:f6:e6:14:f6:b6:7f: 8e:2f:03:58:f9:37:67:64:e5:c0:75:c2:97:73:35: bb:54:ea:e8:c5:1f:2a:68:07:73:00:f3:77:2b:89: 5c:3e:b7:17:15:87:8b:8b:8a:8b:8d:3b:73:b7:39: c4:fd:0b:6a:e2:6a:72:83:a2:ed:ff:70:e0:eb:76: 7e:d5:b6:47:3b:53:4b:ca:28:9b:9e:83:5a:21:85: 81:8f:e8:8e:e0:ad:95:3e:65:ea:f4:4b:e5:94:f0: b2:a6:e0:6a:63:d9:76:67:11:d5:b0:5b:55:b0:35: 61:de:95:b6:87:0a:44:01:90:7a:fe:cf:ec:1c:8f: df:83:d4:37:cd:34:e2:a8:c3:28:32:e3:88:95:52: 5e:e2:04:79:d0:50:a6:27:2f:d2:eb:53:48:3e:ea: 66:26:e0:46:ac:62:cb:20:a2:38:d1:31:a9:54:17: 63:df:de:e0:0f:f1:3e:62:e8:a5:d7:6c:21:28:7a: 8f:51:e7:80:e3:b6:c5:18:91:6f:e8:b7:fb:9f:d4: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FE:EF:94:79:65:D2:95:2C:01:80:E7:03:B1:D9:05:AF:03:BF:F0 X509v3 Authority Key Identifier: keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:b8:82:b4:1a:7b:90:99:fb:a5:0a:26:26:cd:1b:32:8f:bb: 0e:5c:ca:14:30:41:38:c5:21:0c:70:d4:5d:cf:3e:73:43:bf: f4:b3:f4:00:b8:23:27:09:52:b4:35:15:b8:ab:8e:85:d3:a8: 1b:33:e4:e9:fd:90:d7:96:ac:e3:45:1e:15:45:76:5a:1e:a1: 55:7b:e4:58:e1:54:28:ee:c6:83:27:14:cf:b9:ed:2a:74:14: f0:24:35:40:4c:9c:15:39:b0:b2:b8:ce:65:e1:97:57:aa:f4: e2:a7:ca:a1:6f:43:d5:89:2f:5c:72:1a:c0:a2:76:7f:ce:c5: df:10:00:ad:a2:7f:cb:67:ab:d1:c0:e4:41:b1:24:81:e7:4f: 45:e5:68:4b:f2:a0:3e:4f:3b:c1:87:a1:c1:06:71:eb:42:b3: 98:ea:65:7d:ed:31:f8:6d:62:19:e8:43:e4:28:c2:fb:58:8e: b2:43:a3:80:d8:24:18:68:9a:f1:1c:f5:21:f8:80:09:53:84: 34:7b:e6:b0:16:75:31:5e:a6:70:9f:5f:df:b2:22:a0:1f:50: d2:ca:43:ad:ec:a9:ac:bf:b0:ce:70:2d:46:ae:42:26:b9:d8: da:b0:d4:af:5b:14:56:5a:3d:f5:2e:1c:3b:bf:e1:01:c0:a4: 02:5a:30:cc -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+pXLdWRjUMJ+zRSwQHhNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNGMzZmMwMTIyZDgzMWZiZWE4YWJiMjBhNGU5YjY1YzU0 MDM5YjIwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ZlZWY5NDc5NjVkMjk1MmMwMTgwZTcwM2IxZDkwNWFmMDNiZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriHOZ6erHzPKiKI3YyC7JHg1modp OH6RvAQq0Pl/FaaRG+3nOM5cfQEeqnQz+9mEndHDraz25hT2tn+OLwNY+TdnZOXA dcKXczW7VOroxR8qaAdzAPN3K4lcPrcXFYeLi4qLjTtztznE/Qtq4mpyg6Lt/3Dg 63Z+1bZHO1NLyiibnoNaIYWBj+iO4K2VPmXq9EvllPCypuBqY9l2ZxHVsFtVsDVh 3pW2hwpEAZB6/s/sHI/fg9Q3zTTiqMMoMuOIlVJe4gR50FCmJy/S61NIPupmJuBG rGLLIKI40TGpVBdj397gD/E+Yuil12whKHqPUeeA47bFGJFv6Lf7n9SDgwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFLz+75R5ZdKVLAGA5wOx2QWvA7/wMB8GA1UdIwQY MBaAFO5MP8ASLYMfvqirsgpOm2XFQDmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjkt M2FjN2Q5NjIzMjkxLzEvdlA3dmxIbGwwcFVzQVlEbkE3SFpCYThEdl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjktM2FjN2Q5NjIzMjkx LzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAig4wDQYJ KoZIhvcNAQELBQADggEBADa4grQae5CZ+6UKJibNGzKPuw5cyhQwQTjFIQxw1F3P PnNDv/Sz9AC4IycJUrQ1FbirjoXTqBsz5On9kNeWrONFHhVFdloeoVV75FjhVCju xoMnFM+57Sp0FPAkNUBMnBU5sLK4zmXhl1eq9OKnyqFvQ9WJL1xyGsCidn/Oxd8Q AK2if8tnq9HA5EGxJIHnT0XlaEvyoD5PO8GHocEGcetCs5jqZX3tMfhtYhnoQ+Qo wvtYjrJDo4DYJBhomvEc9SH4gAlThDR75rAWdTFepnCfX9+yIqAfUNLKQ63sqay/ sM5wLUauQia52Nqw1K9bFFZaPfUuHDu/4QHApAJaMMw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:05 2026 by rpki-client