This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa File: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (raw, json) Hash identifier: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk= Subject key identifier: ED:B1:CA:B2:D6:B8:0E:9D:58:A2:9E:73:FD:31:38:1A:EC:85:FA:9C Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Certificate serial: 019B7CEE3D1184E16BA85914FFA4D1EF6ABA Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a04:3840::/32 maxlen: 32 2a04:3841::/32 maxlen: 32 2a04:3842::/32 maxlen: 32 2a04:3843::/32 maxlen: 32 2a04:3844::/32 maxlen: 32 2a04:3845::/32 maxlen: 32 2a04:3846::/32 maxlen: 32 2a04:3847::/32 maxlen: 32 2a05:1900::/32 maxlen: 32 2a05:1901::/32 maxlen: 32 2a05:1902::/32 maxlen: 32 2a05:1903::/32 maxlen: 32 2a05:1904::/32 maxlen: 32 2a05:1905::/32 maxlen: 32 2a05:1906::/32 maxlen: 32 2a05:1907::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3d:11:84:e1:6b:a8:59:14:ff:a4:d1:ef:6a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb1cab2d6b80e9d58a29e73fd31381aec85fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:b7:69:12:e8:4b:cd:18:b4:29:ad:62:f6: 24:6a:c0:e2:86:7e:2e:3e:b3:25:77:4a:77:90:1e: be:f8:e4:5d:3b:32:16:8c:3e:17:49:65:fa:25:2f: 9f:bc:f3:ea:ed:e9:17:d3:1b:c5:63:55:08:28:ae: 0f:49:c2:f2:59:dc:bf:ef:da:c2:18:ce:a0:ba:84: 3c:a1:82:c9:8f:af:61:d5:aa:24:40:b9:30:38:89: f3:bf:cf:23:52:a9:ad:00:35:72:69:a9:70:b0:66: 18:da:f1:82:b2:3b:37:15:ee:85:39:01:88:35:db: 8d:e1:11:0a:20:d0:7a:1d:5d:f0:6a:a5:47:3f:d8: 80:a0:f6:81:7b:b5:95:2d:6d:04:4a:01:79:ff:fe: 49:f3:a5:2e:c7:05:ba:84:4b:d4:17:3a:8a:21:64: 6e:83:dc:bf:19:e6:4d:60:b1:f9:45:63:09:85:e4: 60:5c:a7:34:34:79:88:13:1f:fd:de:71:17:3a:66: 5a:0c:25:28:85:4a:d0:ad:b0:1d:eb:5d:87:ce:e0: f9:26:4f:f9:e3:ba:bb:bd:51:86:a1:d9:88:ac:d3: 44:46:91:f0:1c:b4:5c:59:a6:5d:b0:c7:3d:6b:99: 15:26:0d:d6:24:e8:00:68:b5:50:f2:9b:9f:ae:d7: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B1:CA:B2:D6:B8:0E:9D:58:A2:9E:73:FD:31:38:1A:EC:85:FA:9C X509v3 Authority Key Identifier: keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:3840::/29 2a05:1900::/29 Signature Algorithm: sha256WithRSAEncryption 55:9d:09:94:14:ba:d7:70:cc:25:0c:e9:b5:76:e0:da:2f:ce: 37:f6:92:64:0c:a2:41:f1:f9:2b:b8:ad:26:a8:09:f8:53:b1: ec:0f:13:6b:6e:b0:c4:82:49:69:2c:46:d5:23:3f:2c:14:df: 71:7a:1c:db:b2:5f:da:63:ff:a9:7f:e8:c2:ed:05:7e:29:d2: b3:4f:e3:77:be:ca:26:d2:65:c1:8e:7b:14:f5:cf:0c:24:6f: ba:62:ed:14:85:f5:87:fe:65:15:2e:4e:84:eb:e7:ff:1c:79: f6:93:09:44:17:37:5c:25:4d:de:1a:e6:a0:99:19:df:6a:e5: e9:06:cd:5a:3b:19:77:73:ea:3d:36:8a:d4:f3:ad:1f:31:99: aa:f0:98:f1:16:0e:cc:33:c7:87:ef:e4:66:7c:08:bb:ef:4d: 48:36:79:7a:0a:c5:ff:b9:2e:0f:48:e1:49:4b:7c:20:f9:46: 26:79:0d:9d:55:1e:b6:a5:e9:4f:cc:8c:97:08:74:5a:ca:e6: 54:6f:43:4d:07:29:29:60:f6:13:5f:2a:80:59:81:8d:a3:26: c3:98:39:a2:6c:20:a1:43:d3:6f:d8:44:da:df:8e:75:b6:30: 64:4e:6f:7c:1f:1f:63:92:68:f6:4c:f7:ee:1e:e2:87:4a:54: 04:3a:25:54 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87j0RhOFrqFkU/6TR72q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj MTE2M2IwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGIxY2FiMmQ2YjgwZTlkNThhMjllNzNmZDMxMzgxYWVjODVmYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnS3aRLoS80YtCmtYvYkasDihn4u PrMld0p3kB6++ORdOzIWjD4XSWX6JS+fvPPq7ekX0xvFY1UIKK4PScLyWdy/79rC GM6guoQ8oYLJj69h1aokQLkwOInzv88jUqmtADVyaalwsGYY2vGCsjs3Fe6FOQGI NduN4REKINB6HV3waqVHP9iAoPaBe7WVLW0ESgF5//5J86UuxwW6hEvUFzqKIWRu g9y/GeZNYLH5RWMJheRgXKc0NHmIEx/93nEXOmZaDCUohUrQrbAd612HzuD5Jk/5 47q7vVGGodmIrNNERpHwHLRcWaZdsMc9a5kVJg3WJOgAaLVQ8pufrtdf7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO2xyrLWuA6dWKKec/0xOBrshfqcMB8GA1UdIwQY MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt N2JlYmJiNzBjMDUwLzEvN2JIS3N0YTREcDFZb3A1el9URTRHdXlGLXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgQ4QAMF AyoFGQAwDQYJKoZIhvcNAQELBQADggEBAFWdCZQUutdwzCUM6bV24Novzjf2kmQM okHx+Su4rSaoCfhTsewPE2tusMSCSWksRtUjPywU33F6HNuyX9pj/6l/6MLtBX4p 0rNP43e+yibSZcGOexT1zwwkb7pi7RSF9Yf+ZRUuToTr5/8cefaTCUQXN1wlTd4a 5qCZGd9q5ekGzVo7GXdz6j02itTzrR8xmarwmPEWDswzx4fv5GZ8CLvvTUg2eXoK xf+5Lg9I4UlLfCD5RiZ5DZ1VHral6U/MjJcIdFrK5lRvQ00HKSlg9hNfKoBZgY2j JsOYOaJsIKFD02/YRNrfjnW2MGROb3wfH2OSaPZM9+4e4odKVAQ6JVQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:24 2026 by rpki-client