This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa File: 7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa (raw, json) Hash identifier: Pq6qLtXzClwLxML1ozcVt+Ip73JNmGPve9pIBAJv6IA= Subject key identifier: EE:B9:45:59:5B:CC:58:A2:C0:B3:FF:82:C0:47:C5:C7:51:C1:9D:86 Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Certificate serial: 019B7C111B1450B088413A34BF5508CE90E4 Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50190 IP address blocks: 2a06:a880:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1b:14:50:b0:88:41:3a:34:bf:55:08:ce:90:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeb945595bcc58a2c0b3ff82c047c5c751c19d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:be:a0:3a:fb:d4:ba:94:c5:3d:7e:76:e7: 2b:24:00:49:5f:fa:71:ac:f2:d4:b8:27:5c:af:f8: f5:74:9d:9c:11:da:2a:b0:fb:6b:1b:65:c1:64:6c: 6b:9c:dc:7c:84:e3:f9:cb:5e:15:a8:31:b4:cb:b3: 9f:68:33:13:5b:de:33:78:54:69:fd:d7:08:c8:20: 87:46:27:8b:50:b5:c6:68:3d:b2:d9:e8:37:eb:b6: d7:0f:56:e9:4e:d7:70:c4:1f:24:4f:d3:45:d5:04: 3a:34:90:7d:29:68:6c:8e:91:74:88:81:73:14:a9: e3:0d:ae:a2:50:49:d8:93:32:29:80:a2:a1:9c:ad: 43:6b:e4:90:af:5a:67:c1:f9:7c:6a:1a:46:b5:7f: c5:cc:de:e5:c5:dc:01:40:f0:7b:ba:cd:97:24:0c: 27:b2:e1:d7:52:50:8d:3b:69:aa:e5:0a:2d:51:fa: d4:9e:b4:dc:13:b7:df:3b:ac:9a:91:64:96:f8:71: 9f:e0:b0:f9:aa:11:7e:c2:5a:72:0d:b4:a3:14:94: f9:4f:61:98:64:f1:24:2c:50:64:79:e5:45:15:2d: c8:1e:5b:f8:e4:7f:96:59:9c:d9:79:cb:4f:2b:98: 4f:41:b1:20:15:f0:ef:40:4b:b5:2a:9b:b6:d6:c9: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B9:45:59:5B:CC:58:A2:C0:B3:FF:82:C0:47:C5:C7:51:C1:9D:86 X509v3 Authority Key Identifier: keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a880:1::/48 Signature Algorithm: sha256WithRSAEncryption aa:53:bf:ca:12:c4:07:d9:8b:65:47:8e:d0:e1:f1:a5:10:c7: cf:54:09:cb:85:14:c9:00:98:4c:18:03:0c:35:d6:a0:25:00: 84:b8:05:49:d1:b4:70:40:0a:f0:17:01:5a:6f:36:c0:4a:2b: aa:67:fd:86:d2:48:34:05:02:e0:ab:b6:0a:01:b4:de:71:81: aa:ae:5f:58:6d:1a:4d:00:51:7f:bd:61:d2:55:73:4b:6d:cf: 7f:8d:ee:57:57:0a:c1:00:c2:ac:10:af:4a:ed:06:91:39:c4: 1e:d5:40:9b:47:7a:68:9c:2b:54:e8:1a:08:c3:f4:0d:1f:27: 01:eb:b7:87:51:01:39:44:38:29:90:70:34:6d:2a:2f:db:52: 62:a7:0a:05:f0:58:d5:88:2c:e9:b1:b7:e7:67:4a:a7:ec:31: b1:bf:df:0f:6a:e9:38:9e:c4:09:d8:fc:e4:ad:f5:fb:a7:b0: e5:54:d6:80:1d:f3:69:06:20:1d:34:8a:92:ef:0c:5c:97:d0: 7c:db:8f:94:0e:07:d6:e6:49:1e:5a:25:c9:1a:b1:2a:41:b4: 3b:c3:36:96:18:b1:0d:ca:82:97:9a:7e:b2:16:56:1e:f5:44: 58:df:39:4c:78:a5:2c:74:3d:96:3c:9a:59:08:17:34:63:40: 1f:3f:65:58 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ERsUULCIQTo0v1UIzpDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1 OWJhNmYwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWI5NDU1OTViY2M1OGEyYzBiM2ZmODJjMDQ3YzVjNzUxYzE5ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWy+oDr71LqUxT1+ducrJABJX/px rPLUuCdcr/j1dJ2cEdoqsPtrG2XBZGxrnNx8hOP5y14VqDG0y7OfaDMTW94zeFRp /dcIyCCHRieLULXGaD2y2eg367bXD1bpTtdwxB8kT9NF1QQ6NJB9KWhsjpF0iIFz FKnjDa6iUEnYkzIpgKKhnK1Da+SQr1pnwfl8ahpGtX/FzN7lxdwBQPB7us2XJAwn suHXUlCNO2mq5QotUfrUnrTcE7ffO6yakWSW+HGf4LD5qhF+wlpyDbSjFJT5T2GY ZPEkLFBkeeVFFS3IHlv45H+WWZzZectPK5hPQbEgFfDvQEu1Kpu21sk8NwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO65RVlbzFiiwLP/gsBHxcdRwZ2GMB8GA1UdIwQY MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt ZTM0MDcxNzQ2NjNiLzEvN3JsRldWdk1XS0xBc18tQ3dFZkZ4MUhCbllZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaogAAB MA0GCSqGSIb3DQEBCwUAA4IBAQCqU7/KEsQH2YtlR47Q4fGlEMfPVAnLhRTJAJhM GAMMNdagJQCEuAVJ0bRwQArwFwFabzbASiuqZ/2G0kg0BQLgq7YKAbTecYGqrl9Y bRpNAFF/vWHSVXNLbc9/je5XVwrBAMKsEK9K7QaROcQe1UCbR3ponCtU6BoIw/QN HycB67eHUQE5RDgpkHA0bSov21JipwoF8FjViCzpsbfnZ0qn7DGxv98Pauk4nsQJ 2PzkrfX7p7DlVNaAHfNpBiAdNIqS7wxcl9B824+UDgfW5kkeWiXJGrEqQbQ7wzaW GLENyoKXmn6yFlYe9URY3zlMeKUsdD2WPJpZCBc0Y0AfP2VY -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:05 2026 by rpki-client