This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa File: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (raw, json) Hash identifier: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c= Subject key identifier: ED:0A:D6:B3:D8:E9:42:19:85:63:73:F2:64:2A:FA:FA:71:1E:30:7F Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019B7AC870DEAF058E15A5872D24E5351F77 Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.5.0.0/16 maxlen: 24 192.68.254.0/24 maxlen: 24 2a02:d480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:70:de:af:05:8e:15:a5:87:2d:24:e5:35:1f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed0ad6b3d8e94219856373f2642afafa711e307f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:06:78:29:c5:8b:6f:f7:9a:09:54:f9:7f: 83:e6:18:54:65:dc:f3:7a:a6:31:72:91:cc:f7:3b: 6b:6d:f3:33:d5:49:31:7a:20:34:f6:ed:a8:39:f6: 6f:e4:71:2b:ab:b6:ca:65:65:3a:af:a1:6b:28:3a: 18:c1:bd:0e:4e:cb:49:e5:85:42:2a:6a:6b:dd:31: bf:4f:79:1e:b2:30:44:6e:ec:ce:9a:47:41:f8:c9: 7c:46:e3:c8:7c:34:30:1c:0f:cb:cd:aa:1f:b7:62: e5:28:93:d4:61:63:07:63:90:cb:27:0e:5c:56:f9: c5:be:4f:8b:b7:c1:83:f1:cb:d5:fe:b7:bf:45:c5: dc:d2:64:c1:e3:a3:33:60:f3:b2:2d:65:5d:68:07: d5:4a:f9:b6:85:5e:9a:21:8d:e6:fb:41:26:2c:6e: ee:da:80:4e:8e:0a:b9:0d:6d:d8:bf:4b:0b:2d:3f: 69:6d:1f:f5:ac:5d:09:8f:65:8a:ab:5b:a4:78:a5: 3c:86:81:95:b6:d3:ce:8b:4c:96:ad:86:17:99:2a: 49:68:d1:b9:0d:f4:91:d3:37:6b:09:64:2b:b0:6b: ed:63:97:0d:6a:d0:5e:70:cc:70:28:a3:73:50:53: d0:db:3a:8e:bf:50:65:6e:63:34:63:0f:37:51:a9: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0A:D6:B3:D8:E9:42:19:85:63:73:F2:64:2A:FA:FA:71:1E:30:7F X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.5.0.0/16 192.68.254.0/24 IPv6: 2a02:d480::/32 Signature Algorithm: sha256WithRSAEncryption 79:be:49:d8:aa:5b:90:22:75:cc:19:8e:ed:55:22:c5:cc:b0: 7c:73:98:26:67:97:ba:54:60:ae:29:d4:6c:38:46:3a:37:2e: 4e:bb:34:b1:b2:8b:2c:ff:32:72:c2:36:00:47:98:c9:a8:30: 83:13:83:a6:23:20:d7:4e:82:1b:55:07:2a:02:04:07:44:f7: 0f:d4:31:c8:d7:c8:2c:d3:d2:cc:38:96:71:ac:9f:ec:b6:ce: 85:fb:25:74:16:20:38:7a:31:63:e7:b6:38:07:96:eb:51:bf: 9c:a4:b8:1d:08:88:39:5d:06:36:50:70:00:bd:4b:37:29:6b: 83:d1:2e:de:3f:27:5a:16:4f:cc:db:65:92:bc:63:83:aa:ce: 16:dd:f7:b7:51:af:9a:03:56:93:17:66:66:4e:81:20:50:5a: f3:5a:e2:30:85:09:c8:6e:be:18:05:55:f9:fc:34:11:4b:ed: 38:28:13:46:dc:2f:61:2d:dc:f4:30:85:27:6f:59:49:22:ec: 3c:36:ab:90:e9:ca:82:30:a2:0b:cf:57:14:58:bf:c7:1b:17: aa:bd:11:f7:24:46:e8:d9:5d:29:4b:e3:5b:1f:35:ac:3d:e9: b7:7e:cb:94:cc:d4:48:c2:98:73:b7:ae:f2:49:72:b2:a4:bc: 35:d8:26:3b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6yHDerwWOFaWHLSTlNR93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDBhZDZiM2Q4ZTk0MjE5ODU2MzczZjI2NDJhZmFmYTcxMWUzMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9IGeCnFi2/3mglU+X+D5hhUZdzz eqYxcpHM9ztrbfMz1UkxeiA09u2oOfZv5HErq7bKZWU6r6FrKDoYwb0OTstJ5YVC Kmpr3TG/T3kesjBEbuzOmkdB+Ml8RuPIfDQwHA/Lzaoft2LlKJPUYWMHY5DLJw5c VvnFvk+Lt8GD8cvV/re/RcXc0mTB46MzYPOyLWVdaAfVSvm2hV6aIY3m+0EmLG7u 2oBOjgq5DW3Yv0sLLT9pbR/1rF0Jj2WKq1ukeKU8hoGVttPOi0yWrYYXmSpJaNG5 DfSR0zdrCWQrsGvtY5cNatBecMxwKKNzUFPQ2zqOv1BlbmM0Yw83UakaZwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFO0K1rPY6UIZhWNz8mQq+vpxHjB/MB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvN1FyV3M5anBRaG1GWTNQeVpDcjYtbkVlTUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAjQUDBADA RP4wDQQCAAIwBwMFACoC1IAwDQYJKoZIhvcNAQELBQADggEBAHm+SdiqW5AidcwZ ju1VIsXMsHxzmCZnl7pUYK4p1Gw4Rjo3Lk67NLGyiyz/MnLCNgBHmMmoMIMTg6Yj INdOghtVByoCBAdE9w/UMcjXyCzT0sw4lnGsn+y2zoX7JXQWIDh6MWPntjgHlutR v5ykuB0IiDldBjZQcAC9Szcpa4PRLt4/J1oWT8zbZZK8Y4Oqzhbd97dRr5oDVpMX ZmZOgSBQWvNa4jCFCchuvhgFVfn8NBFL7TgoE0bcL2Et3PQwhSdvWUki7Dw2q5Dp yoIwogvPVxRYv8cbF6q9EfckRujZXSlL41sfNaw96bd+y5TM1EjCmHO3rvJJcrKk vDXYJjs= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:08 2026 by rpki-client