This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/47hJsASozRDqhuCU5AfmHwpSaeM.roa File: 47hJsASozRDqhuCU5AfmHwpSaeM.roa (raw, json) Hash identifier: 3xuZAzw3KETa+bwqpnJGB1vDRHOPpTU+lO61TYMy18I= Subject key identifier: E3:B8:49:B0:04:A8:CD:10:EA:86:E0:94:E4:07:E6:1F:0A:52:69:E3 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019B7CEE6F3E16FD0E156B1D23E190A330C0 Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/47hJsASozRDqhuCU5AfmHwpSaeM.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208707 IP address blocks: 2a14:ae00:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6f:3e:16:fd:0e:15:6b:1d:23:e1:90:a3:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3b849b004a8cd10ea86e094e407e61f0a5269e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:aa:83:b4:82:1a:37:36:79:cd:a4:a3:79: 7c:5c:de:17:ee:eb:2d:c4:44:45:fb:64:b6:79:58: a5:51:4e:47:0c:c3:63:0e:c2:32:84:33:f1:9b:5e: a2:50:4b:94:1a:1e:16:d4:14:8a:f1:3d:58:08:d3: 17:8c:8d:c6:51:fd:e2:b3:d9:04:20:ef:68:7b:40: 66:12:4e:ed:0f:7e:ca:d2:c9:f6:ef:fe:32:91:71: 64:15:f0:e2:6c:ac:87:75:c9:89:3f:44:f0:f0:54: 30:fe:cb:1b:df:5a:17:9d:d3:66:3b:9c:59:fc:6c: f6:3e:28:b0:b1:1c:0e:f3:9d:0b:c3:ca:92:a3:58: 69:61:4d:be:d9:77:37:49:48:a5:32:e3:36:8b:a9: 3b:8f:bc:bc:05:bf:81:bd:ce:f9:5b:24:f0:f7:db: c2:b6:87:64:d8:bf:95:d5:31:c4:9c:8c:d1:1d:c6: b4:d4:13:7e:1f:b0:30:d1:4e:2e:26:89:2c:5f:c4: 4b:6e:3c:4e:aa:d6:76:fc:fd:a0:d7:83:52:0e:dd: 7d:fb:9b:d0:41:08:30:ed:76:b8:49:ad:11:01:fd: 3b:69:5d:4c:60:42:53:bc:52:ca:06:f0:1f:8b:af: 38:ae:0a:b0:57:69:43:cb:1f:1c:1d:b5:c9:87:e3: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B8:49:B0:04:A8:CD:10:EA:86:E0:94:E4:07:E6:1F:0A:52:69:E3 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/47hJsASozRDqhuCU5AfmHwpSaeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:20::/44 Signature Algorithm: sha256WithRSAEncryption 73:49:9f:f0:0f:98:00:f3:da:43:75:64:13:7f:10:0a:95:20: de:b0:ae:9d:7e:50:1c:a0:54:30:92:7f:93:7c:c3:7b:b8:f4: 47:c3:c5:b3:b3:8a:05:45:76:29:27:d7:6d:21:02:ac:18:73: c4:bf:01:a1:0f:6b:4e:7d:b3:71:0a:5d:a2:67:54:45:d4:d4: 50:32:da:32:84:4c:7e:4a:c8:85:6d:42:8e:a3:7c:0a:2d:f8: 15:95:d5:77:f8:bb:2f:f1:6f:2e:f7:c8:5e:74:25:4a:47:82: a1:a4:cc:d3:cb:a8:7d:82:c4:f4:b0:51:e6:5e:8a:b1:09:e8: a7:57:30:d4:6f:ec:ea:02:2a:ae:16:f1:9a:11:ef:62:a8:22: 13:a5:0d:96:3a:7d:6e:57:01:b5:b2:3d:03:be:f5:53:c5:7c: 19:d9:29:bd:ea:4c:9b:89:ed:cf:fd:f2:25:91:75:aa:9c:b0: 2b:07:c0:e4:61:09:06:8b:ee:4f:54:ca:e9:64:88:ab:d0:bb: 6d:e1:74:44:4b:3d:94:86:24:49:57:a4:6a:8f:67:dd:69:48: 62:6b:01:ee:78:db:7c:a0:99:4d:a5:ee:2f:b2:6b:f4:54:e6: ed:f9:a8:05:c9:b2:d7:e6:71:89:f6:ac:e3:00:6e:ad:b9:c1: 4a:77:df:b3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87m8+Fv0OFWsdI+GQozDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2I4NDliMDA0YThjZDEwZWE4NmUwOTRlNDA3ZTYxZjBhNTI2OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUuqg7SCGjc2ec2ko3l8XN4X7ust xERF+2S2eVilUU5HDMNjDsIyhDPxm16iUEuUGh4W1BSK8T1YCNMXjI3GUf3is9kE IO9oe0BmEk7tD37K0sn27/4ykXFkFfDibKyHdcmJP0Tw8FQw/ssb31oXndNmO5xZ /Gz2PiiwsRwO850Lw8qSo1hpYU2+2Xc3SUilMuM2i6k7j7y8Bb+Bvc75WyTw99vC todk2L+V1THEnIzRHca01BN+H7Aw0U4uJoksX8RLbjxOqtZ2/P2g14NSDt19+5vQ QQgw7Xa4Sa0RAf07aV1MYEJTvFLKBvAfi684rgqwV2lDyx8cHbXJh+P1ZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOO4SbAEqM0Q6obglOQH5h8KUmnjMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvNDdoSnNBU296UkRxaHVDVTVBZm1Id3BTYWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhSuAAAg MA0GCSqGSIb3DQEBCwUAA4IBAQBzSZ/wD5gA89pDdWQTfxAKlSDesK6dflAcoFQw kn+TfMN7uPRHw8Wzs4oFRXYpJ9dtIQKsGHPEvwGhD2tOfbNxCl2iZ1RF1NRQMtoy hEx+SsiFbUKOo3wKLfgVldV3+Lsv8W8u98hedCVKR4KhpMzTy6h9gsT0sFHmXoqx CeinVzDUb+zqAiquFvGaEe9iqCITpQ2WOn1uVwG1sj0DvvVTxXwZ2Sm96kybie3P /fIlkXWqnLArB8DkYQkGi+5PVMrpZIir0Ltt4XRESz2UhiRJV6Rqj2fdaUhiawHu eNt8oJlNpe4vsmv0VObt+agFybLX5nGJ9qzjAG6tucFKd9+z -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:53 2026 by rpki-client