This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa File: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (raw, json) Hash identifier: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU= Subject key identifier: CF:BC:FD:34:F7:66:D8:6F:E0:84:E3:3C:F0:CA:6C:7F:3D:A0:0D:64 Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb Certificate serial: 019B79112BE2AA45E467399A0B5B02F9AE6E Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197962 IP address blocks: 2a10:503::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2b:e2:aa:45:e4:67:39:9a:0b:5b:02:f9:ae:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfbcfd34f766d86fe084e33cf0ca6c7f3da00d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6e:5f:db:95:62:f1:a2:df:76:ff:8c:fe:9b: 6c:6f:91:10:5f:f8:7d:18:fe:51:de:f0:f4:9b:e7: 88:6d:17:a9:c9:f7:c7:ea:ae:61:ca:38:68:63:ee: f9:a5:29:9e:5a:2b:98:4b:b8:b8:1b:b7:bd:dc:1b: 60:25:6f:2f:e4:2f:49:80:9b:22:f3:e1:f2:0b:85: 3a:13:33:38:a2:d9:1d:ba:45:4d:a4:33:6a:78:42: d4:73:7c:9c:98:43:ef:f4:14:9a:2f:10:fc:a8:7d: df:90:26:6f:e7:ec:df:9e:5b:c9:5c:f7:06:f6:34: 01:a1:47:a9:1f:dd:a9:f1:f2:a1:96:19:12:e3:ec: 0b:54:fa:a0:29:90:c4:1c:18:7d:c6:16:9c:2d:4e: 97:68:d1:63:7b:bd:ec:a4:c4:04:3f:2b:b9:0b:8b: c1:84:5d:2f:8b:71:82:55:f1:e0:1d:d4:85:a9:50: 96:fc:26:d2:f3:98:e5:83:1a:a0:db:b5:ee:ff:c6: 89:36:02:4d:85:4e:ef:c5:40:42:00:3f:24:e9:6a: da:30:54:ad:71:e5:21:5e:17:3f:cb:6d:c6:33:7c: 3b:0a:ba:31:ba:3d:13:41:8a:16:a5:65:c0:c4:2b: e4:3f:ed:48:73:a3:ba:69:4b:aa:09:10:1d:44:76: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:FD:34:F7:66:D8:6F:E0:84:E3:3C:F0:CA:6C:7F:3D:A0:0D:64 X509v3 Authority Key Identifier: keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:503::/32 Signature Algorithm: sha256WithRSAEncryption 50:41:2f:68:a4:59:0b:67:e3:16:86:b4:b6:bb:fd:e5:77:94: c8:08:aa:21:d3:f8:6c:de:47:ff:c2:d3:2f:0d:86:09:64:93: 23:cc:40:79:4b:f2:2a:1f:09:1b:ce:1b:f8:91:c0:54:28:28: b2:db:a1:b5:b8:55:e1:0b:4c:b5:98:e4:78:a8:56:b0:cd:ea: ca:f8:2b:08:26:ab:26:1c:f9:5d:69:a0:1f:06:96:07:28:27: 10:52:f6:40:75:a6:37:aa:6e:54:b2:e5:7e:d9:e5:e9:64:8c: d4:ec:b3:67:08:e3:5d:64:fb:42:76:6b:e6:30:f2:b4:6b:a1: 62:59:a4:40:8d:57:25:6b:00:39:bd:da:88:de:70:3a:fa:04: 1f:8d:44:58:e6:e0:2b:19:8b:69:5d:83:f9:25:5c:63:dc:c6: 28:12:a0:98:fd:30:0b:84:06:60:73:08:ce:52:b7:69:ff:56: 51:d1:88:b1:cb:10:09:a1:b5:a0:d3:03:cb:73:8b:0e:e4:cf: 3d:cd:f9:d9:6b:58:b2:03:21:68:ac:38:ed:5a:df:48:46:53: 01:1b:81:16:95:6c:7b:92:15:c0:43:27:7d:0c:8e:ae:14:79: 11:57:1b:d0:c4:dc:84:9b:c6:6d:3c:c3:c6:21:31:0a:73:34: 9a:ae:e6:0f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ESviqkXkZzmaC1sC+a5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw NzIwYmIwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmJjZmQzNGY3NjZkODZmZTA4NGUzM2NmMGNhNmM3ZjNkYTAwZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG5f25Vi8aLfdv+M/ptsb5EQX/h9 GP5R3vD0m+eIbRepyffH6q5hyjhoY+75pSmeWiuYS7i4G7e93BtgJW8v5C9JgJsi 8+HyC4U6EzM4otkdukVNpDNqeELUc3ycmEPv9BSaLxD8qH3fkCZv5+zfnlvJXPcG 9jQBoUepH92p8fKhlhkS4+wLVPqgKZDEHBh9xhacLU6XaNFje73spMQEPyu5C4vB hF0vi3GCVfHgHdSFqVCW/CbS85jlgxqg27Xu/8aJNgJNhU7vxUBCAD8k6WraMFSt ceUhXhc/y23GM3w7Croxuj0TQYoWpWXAxCvkP+1Ic6O6aUuqCRAdRHZtQwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM+8/TT3Zthv4ITjPPDKbH89oA1kMB8GA1UdIwQY MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt NzQwM2UxMzY3NWFiLzEvejd6OU5QZG0yR19naE9NODhNcHNmejJnRFdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhAFAzAN BgkqhkiG9w0BAQsFAAOCAQEAUEEvaKRZC2fjFoa0trv95XeUyAiqIdP4bN5H/8LT Lw2GCWSTI8xAeUvyKh8JG84b+JHAVCgostuhtbhV4QtMtZjkeKhWsM3qyvgrCCar Jhz5XWmgHwaWBygnEFL2QHWmN6puVLLlftnl6WSM1OyzZwjjXWT7QnZr5jDytGuh YlmkQI1XJWsAOb3aiN5wOvoEH41EWObgKxmLaV2D+SVcY9zGKBKgmP0wC4QGYHMI zlK3af9WUdGIscsQCaG1oNMDy3OLDuTPPc352WtYsgMhaKw47VrfSEZTARuBFpVs e5IVwEMnfQyOrhR5EVcb0MTchJvGbTzDxiExCnM0mq7mDw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:58 2026 by rpki-client