This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa File: S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa (raw, json) Hash identifier: JK/8ld2vkFnKBCJeP74SV+/N5f0fLHlt3L2e82GsaP4= Subject key identifier: 4B:B6:CD:D6:B3:C9:EF:F5:4E:CC:CD:AA:D4:6C:6C:D7:1E:00:02:C0 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019BC46827FC694E626DA36F2F5F4A705A4D Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa Signing time: Fri 16 Jan 2026 01:25:18 +0000 ROA not before: Fri 16 Jan 2026 01:25:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 833 IP address blocks: 2a14:ae00:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c4:68:27:fc:69:4e:62:6d:a3:6f:2f:5f:4a:70:5a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 16 01:25:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bb6cdd6b3c9eff54ecccdaad46c6cd71e0002c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:85:5a:8a:09:e3:c9:d3:fc:52:0c:43:f5: e4:17:0a:fd:5c:dc:a8:3b:7f:f9:6d:da:87:70:62: b8:b4:08:67:65:ac:b8:1c:84:66:6c:95:2a:6a:3f: 16:5e:b6:0f:ce:6a:96:4d:68:13:c7:6c:e7:bc:06: a1:b0:0a:27:bc:b4:16:a4:db:c9:e5:92:36:be:ee: ca:2e:a2:e6:fd:45:48:bc:c7:ac:63:93:a9:20:01: 5c:c5:b9:4e:3f:eb:b0:f8:58:fe:44:7f:fa:25:87: 50:0d:0c:a6:e7:47:f1:0c:49:21:d9:9b:42:84:f5: c3:63:96:db:39:da:d3:aa:83:be:ed:7d:97:72:d7: 5f:25:fa:08:94:39:eb:d8:2c:10:3d:0d:46:4f:9d: af:51:86:c9:c8:95:a8:c7:a5:cf:05:a4:97:f9:e8: 53:8e:c5:4e:30:5c:0c:b9:5a:8a:d1:55:97:f4:4c: 57:9a:f8:2c:ba:28:da:d9:0e:37:82:58:93:8b:37: 35:17:5f:5b:a3:63:fe:6c:83:7f:fe:40:1c:c0:2c: df:12:ad:5a:63:5c:2c:b5:e8:23:b8:19:ad:ff:ac: 60:db:a2:64:4d:24:5b:d9:6e:45:f4:f3:70:24:7c: 2b:ea:9e:8b:6e:24:ba:6b:f5:ba:a1:fe:93:73:b4: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B6:CD:D6:B3:C9:EF:F5:4E:CC:CD:AA:D4:6C:6C:D7:1E:00:02:C0 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:40::/44 Signature Algorithm: sha256WithRSAEncryption 14:e0:57:e0:03:e6:6d:87:b7:95:97:12:9a:09:b2:d2:ab:ea: fc:c7:52:dd:c8:78:30:22:3e:4d:81:26:43:98:e3:cb:44:37: 3a:5c:54:ed:0a:63:d0:e1:2b:cc:1c:c5:47:d7:2d:d0:67:c0: 26:08:24:af:30:a3:92:01:a1:bd:b3:f1:ed:16:f5:47:a4:3c: 4a:f4:8e:56:55:e6:ce:e7:f9:d4:3a:af:83:61:46:95:24:4f: ca:93:4f:21:f7:63:74:b9:93:25:4d:f6:92:78:bb:ec:02:7a: 3b:48:4b:03:4b:c0:a0:07:cc:ff:b9:ea:10:1f:30:c5:41:0a: 3b:41:ed:c1:97:42:4a:21:b2:b3:4a:e1:d4:12:48:ab:f8:a4: ed:86:60:f3:cd:5d:ff:08:5c:28:17:a6:50:53:0f:07:ef:b7: 22:87:44:92:47:89:1b:e0:0c:af:c7:35:ea:f4:c4:1b:02:04: e6:0a:42:3c:ec:a4:cb:6d:63:a9:37:af:d6:3b:41:5f:05:94: 20:08:05:96:fd:2f:1e:c6:34:89:82:d9:0f:eb:c0:30:77:d4: e4:45:58:d1:9a:a2:ab:ba:d4:13:74:96:af:e1:b6:7b:be:e5: bb:bb:03:fa:0a:6a:9b:bc:4e:0b:f2:29:ea:b7:86:4b:54:e4: 14:bb:38:50 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvEaCf8aU5ibaNvL19KcFpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTE2MDEyNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmI2Y2RkNmIzYzllZmY1NGVjY2NkYWFkNDZjNmNkNzFlMDAwMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOFWooJ48nT/FIMQ/XkFwr9XNyo O3/5bdqHcGK4tAhnZay4HIRmbJUqaj8WXrYPzmqWTWgTx2znvAahsAonvLQWpNvJ 5ZI2vu7KLqLm/UVIvMesY5OpIAFcxblOP+uw+Fj+RH/6JYdQDQym50fxDEkh2ZtC hPXDY5bbOdrTqoO+7X2XctdfJfoIlDnr2CwQPQ1GT52vUYbJyJWox6XPBaSX+ehT jsVOMFwMuVqK0VWX9ExXmvgsuija2Q43gliTizc1F19bo2P+bIN//kAcwCzfEq1a Y1wstegjuBmt/6xg26JkTSRb2W5F9PNwJHwr6p6LbiS6a/W6of6Tc7QwZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEu2zdazye/1TszNqtRsbNceAALAMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvUzdiTjFyUEo3X1ZPek0ycTFHeHMxeDRBQXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhSuAABA MA0GCSqGSIb3DQEBCwUAA4IBAQAU4FfgA+Zth7eVlxKaCbLSq+r8x1LdyHgwIj5N gSZDmOPLRDc6XFTtCmPQ4SvMHMVH1y3QZ8AmCCSvMKOSAaG9s/HtFvVHpDxK9I5W VebO5/nUOq+DYUaVJE/Kk08h92N0uZMlTfaSeLvsAno7SEsDS8CgB8z/ueoQHzDF QQo7Qe3Bl0JKIbKzSuHUEkir+KTthmDzzV3/CFwoF6ZQUw8H77cih0SSR4kb4Ayv xzXq9MQbAgTmCkI87KTLbWOpN6/WO0FfBZQgCAWW/S8exjSJgtkP68Awd9TkRVjR mqKrutQTdJav4bZ7vuW7uwP6CmqbvE4L8inqt4ZLVOQUuzhQ -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:03 2026 by rpki-client