This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa File: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (raw, json) Hash identifier: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o= Subject key identifier: EC:88:81:EB:02:D8:70:1A:DA:1B:0F:EE:11:1A:DB:65:97:99:E1:57 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE37221AB432AD66C241C158E7644 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa Signing time: Fri 02 Jan 2026 04:17:38 +0000 ROA not before: Fri 02 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197595 IP address blocks: 2a02:20c8:4750::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e3:72:21:ab:43:2a:d6:6c:24:1c:15:8e:76:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec8881eb02d8701ada1b0fee111adb659799e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:53:49:ad:6a:4b:13:eb:10:53:c1:ee:77: b7:cf:b5:93:f3:bd:dd:b4:49:74:ca:0a:38:e8:a2: 88:fd:64:68:fb:16:f7:55:4a:4f:c7:4f:00:93:f7: b7:1c:c7:d4:79:8c:10:ef:bd:8c:bd:87:72:4c:6a: d5:30:4c:1a:40:c8:df:6b:2e:a7:92:8d:f5:01:37: 45:2f:cc:9d:6e:b3:87:83:a6:79:ed:c5:cd:ca:3b: 18:2d:31:59:d5:47:dd:3c:83:e6:da:4f:80:22:84: 81:09:31:45:08:08:74:e8:b4:06:07:a9:e0:16:77: 7b:55:42:11:8b:d3:b2:7a:0e:88:08:8e:4e:3d:38: 9b:bf:6c:d6:1e:b6:9e:e1:e8:d1:5d:96:2d:9e:f4: 68:5e:89:ad:ba:b8:a2:21:4f:e4:b2:fc:33:40:47: 6f:9d:cf:77:dd:fa:3f:8e:01:9a:da:a3:ac:3b:c6: 75:00:6f:7f:69:43:47:ff:d0:f9:56:e4:cc:8d:4d: e5:1e:24:f6:49:b9:84:b0:72:5b:ac:69:a3:79:4c: c4:50:74:08:38:03:c5:0d:05:39:d1:69:11:20:db: 1b:e8:ac:9d:1e:2b:12:8e:e2:d7:cf:94:52:8a:f9: 90:bc:be:d4:a0:00:a4:33:ab:ab:4f:0d:5b:4b:9e: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:88:81:EB:02:D8:70:1A:DA:1B:0F:EE:11:1A:DB:65:97:99:E1:57 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:20c8:4750::/48 Signature Algorithm: sha256WithRSAEncryption 49:f4:09:10:ff:63:c8:36:ac:da:37:e6:89:fb:2f:fd:02:ac: ce:41:47:a1:55:a8:b4:57:71:e0:c0:80:a2:5b:0f:b7:8f:71: 6d:c6:a2:81:cc:8c:c7:99:01:a3:d6:6b:4d:a5:77:c4:38:fe: ee:76:0e:3f:50:21:63:6d:f7:d2:06:08:38:34:9b:b0:e1:bc: e0:52:5d:6d:70:86:40:35:69:82:b4:93:fc:50:be:29:e4:d7: 59:60:d6:7c:8b:08:8c:24:5d:e6:0e:1c:61:1e:ba:20:e1:1a: 36:26:bc:33:2d:c9:cc:24:5d:84:c4:22:fc:98:50:ab:8b:7c: 37:f1:27:2b:72:f1:0c:b6:05:26:6e:1c:bb:b2:60:2e:ee:74: 8d:3a:c7:5a:c1:8f:20:29:b0:06:6c:c6:72:aa:9f:75:1f:c7: df:bc:84:07:d4:d7:72:2b:79:eb:a2:19:9a:79:6f:f6:6e:5d: e7:24:e8:7c:3c:a4:5d:f1:78:f4:87:77:13:59:d2:10:44:75: 08:97:c2:f1:0d:ae:a2:94:b7:36:60:18:22:0f:42:c2:7e:c4: 7a:4f:42:7f:6d:f2:3f:7c:a9:05:18:2a:4a:26:c8:72:47:e7: f4:5c:c9:62:4d:21:a4:7d:60:44:ad:d5:bf:55:3b:7f:58:54: 3c:34:0d:7f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87ONyIatDKtZsJBwVjnZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzg4ODFlYjAyZDg3MDFhZGExYjBmZWUxMTFhZGI2NTk3OTllMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCRTSa1qSxPrEFPB7ne3z7WT873d tEl0ygo46KKI/WRo+xb3VUpPx08Ak/e3HMfUeYwQ772MvYdyTGrVMEwaQMjfay6n ko31ATdFL8ydbrOHg6Z57cXNyjsYLTFZ1UfdPIPm2k+AIoSBCTFFCAh06LQGB6ng Fnd7VUIRi9Oyeg6ICI5OPTibv2zWHrae4ejRXZYtnvRoXomturiiIU/ksvwzQEdv nc933fo/jgGa2qOsO8Z1AG9/aUNH/9D5VuTMjU3lHiT2SbmEsHJbrGmjeUzEUHQI OAPFDQU50WkRINsb6KydHisSjuLXz5RSivmQvL7UoACkM6urTw1bS561dQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOyIgesC2HAa2hsP7hEa22WXmeFXMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvN0lpQjZ3TFljQnJhR3dfdUVScmJaWmVaNFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgyEdQ MA0GCSqGSIb3DQEBCwUAA4IBAQBJ9AkQ/2PINqzaN+aJ+y/9AqzOQUehVai0V3Hg wICiWw+3j3FtxqKBzIzHmQGj1mtNpXfEOP7udg4/UCFjbffSBgg4NJuw4bzgUl1t cIZANWmCtJP8UL4p5NdZYNZ8iwiMJF3mDhxhHrog4Ro2JrwzLcnMJF2ExCL8mFCr i3w38ScrcvEMtgUmbhy7smAu7nSNOsdawY8gKbAGbMZyqp91H8ffvIQH1NdyK3nr ohmaeW/2bl3nJOh8PKRd8Xj0h3cTWdIQRHUIl8LxDa6ilLc2YBgiD0LCfsR6T0J/ bfI/fKkFGCpKJshyR+f0XMliTSGkfWBErdW/VTt/WFQ8NA1/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:43 2026 by rpki-client