This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/7dyvMJC9soHwC2C-qKBNN8Swy1E.roa File: 7dyvMJC9soHwC2C-qKBNN8Swy1E.roa (raw, json) Hash identifier: ThU9QlnbHrk5sj3VeLKsVi1YledN8CGPHeD+PwkC7Pk= Subject key identifier: ED:DC:AF:30:90:BD:B2:81:F0:0B:60:BE:A8:A0:4D:37:C4:B0:CB:51 Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039 Certificate serial: 019B7E376ED557F8CB275322FE1B7091E176 Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/7dyvMJC9soHwC2C-qKBNN8Swy1E.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47147 IP address blocks: 2001:67c:2850::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6e:d5:57:f8:cb:27:53:22:fe:1b:70:91:e1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039 Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eddcaf3090bdb281f00b60bea8a04d37c4b0cb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:99:cd:60:a6:2e:e8:89:3d:ed:13:b5:92: 84:ed:0d:13:c0:c0:7c:91:db:39:0c:8a:f7:01:8f: 7c:d3:9e:bf:fa:d8:9c:c0:a3:03:8b:12:cb:d1:38: b9:c5:1f:cc:82:8c:84:ca:80:b1:20:e3:c2:6e:73: 34:46:ff:b6:75:29:e3:30:59:f5:3b:a7:14:6d:4f: 93:f2:0e:f8:7d:a6:fa:8d:3f:18:1f:70:03:5e:e9: 68:0f:71:aa:b4:6b:b5:e9:f5:2e:73:3f:e9:92:6d: 45:23:b9:da:d4:8d:a5:27:91:fc:e8:ba:67:4f:46: b0:05:2f:f1:3c:eb:58:31:5b:65:71:0d:5b:b8:5a: e1:d4:07:8f:b0:a0:1b:73:46:4c:04:93:7e:2d:ff: 52:0c:19:54:da:fd:b1:83:d1:e3:88:84:d6:2e:3e: 17:0a:4f:85:ca:ff:54:9d:f5:ba:39:5c:9a:42:4a: e2:4e:a5:43:eb:82:f5:ed:52:17:db:29:0e:81:b0: 09:dd:f0:54:44:e2:d6:c3:a5:26:02:9d:d5:65:a2: 3b:77:86:e7:56:ea:48:51:75:be:35:17:ce:cc:14: 25:9b:9f:00:12:8f:47:d2:f9:c0:3c:92:b4:31:04: 5f:2a:07:67:d4:1f:89:59:62:00:67:c2:4b:2d:c5: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:AF:30:90:BD:B2:81:F0:0B:60:BE:A8:A0:4D:37:C4:B0:CB:51 X509v3 Authority Key Identifier: keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/7dyvMJC9soHwC2C-qKBNN8Swy1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2850::/48 Signature Algorithm: sha256WithRSAEncryption 2b:a8:cb:ab:76:ba:e5:f8:d7:02:67:f9:28:93:46:bb:57:5f: ea:4b:70:5a:d3:1c:f0:ae:fb:86:05:ef:8a:e5:35:a6:47:05: 99:0b:bd:75:89:56:57:59:1d:08:54:3b:6f:2a:f2:05:0d:3d: a0:34:a6:ba:da:6b:07:9f:90:1a:c7:50:de:98:3f:fa:43:f7: 36:3a:52:1d:72:08:99:88:a2:e0:4c:2d:c2:6a:57:be:aa:e1: 50:f1:b2:3e:25:00:a5:de:14:95:08:59:f2:7a:7a:f3:dd:58: 56:53:f6:54:af:da:52:2e:b2:73:7f:d5:74:ba:38:c7:04:e7: 06:0d:ca:06:39:1c:43:77:2b:c9:6e:c5:67:6b:61:8c:34:71: 73:71:9a:72:a8:87:ef:b4:10:25:83:4b:2c:d8:20:72:8b:43: b9:07:b3:59:e5:88:dc:bc:f5:08:2d:16:47:e9:2f:a9:23:51: a8:b3:ed:e4:7a:ca:0f:45:86:88:40:08:a0:f5:11:76:54:87: 6c:ea:47:10:83:97:e8:dd:66:a8:f7:53:02:f5:65:d2:19:60: 75:7b:5b:a2:db:fb:cf:f5:67:a0:3d:31:0b:32:31:b4:e0:0b: 37:76:2a:d4:a0:48:ae:bd:cd:e2:de:5f:b9:d9:79:ef:cd:00: 18:9c:65:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N27VV/jLJ1Mi/htwkeF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODJjODE2ZjcyNjg2ZmY3YWVkZTUzNTM4NjE4Y2MyZTg4 NjEwMzkwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGRjYWYzMDkwYmRiMjgxZjAwYjYwYmVhOGEwNGQzN2M0YjBjYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqeZzWCmLuiJPe0TtZKE7Q0TwMB8 kds5DIr3AY98056/+ticwKMDixLL0Ti5xR/MgoyEyoCxIOPCbnM0Rv+2dSnjMFn1 O6cUbU+T8g74fab6jT8YH3ADXuloD3GqtGu16fUucz/pkm1FI7na1I2lJ5H86Lpn T0awBS/xPOtYMVtlcQ1buFrh1AePsKAbc0ZMBJN+Lf9SDBlU2v2xg9HjiITWLj4X Ck+Fyv9UnfW6OVyaQkriTqVD64L17VIX2ykOgbAJ3fBUROLWw6UmAp3VZaI7d4bn VupIUXW+NRfOzBQlm58AEo9H0vnAPJK0MQRfKgdn1B+JWWIAZ8JLLcWhfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO3crzCQvbKB8AtgvqigTTfEsMtRMB8GA1UdIwQY MBaAFCaCyBb3Job/eu3lNThhjMLohhA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmIt NjYxZThmZTNjMWU5LzEvN2R5dk1KQzlzb0h3QzJDLXFLQk5OOFN3eTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmItNjYxZThmZTNjMWU5 LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfChQ MA0GCSqGSIb3DQEBCwUAA4IBAQArqMurdrrl+NcCZ/kok0a7V1/qS3Ba0xzwrvuG Be+K5TWmRwWZC711iVZXWR0IVDtvKvIFDT2gNKa62msHn5Aax1DemD/6Q/c2OlId cgiZiKLgTC3Cale+quFQ8bI+JQCl3hSVCFnyenrz3VhWU/ZUr9pSLrJzf9V0ujjH BOcGDcoGORxDdyvJbsVna2GMNHFzcZpyqIfvtBAlg0ss2CByi0O5B7NZ5YjcvPUI LRZH6S+pI1Gos+3kesoPRYaIQAig9RF2VIds6kcQg5fo3Wao91MC9WXSGWB1e1ui 2/vP9WegPTELMjG04As3dirUoEiuvc3i3l+52XnvzQAYnGWA -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:50 2026 by rpki-client