This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/7ibKB30ikwfEiMsV2kX9XK2sS90.roa File: 7ibKB30ikwfEiMsV2kX9XK2sS90.roa (raw, json) Hash identifier: i/Ur2RhEA0n4safE13RlA94Dx6t9AGiAwPHx1ymDZ/8= Subject key identifier: EE:26:CA:07:7D:22:93:07:C4:88:CB:15:DA:45:FD:5C:AD:AC:4B:DD Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019B7F14FB7551835B984A804793F8C4DA4B Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/7ibKB30ikwfEiMsV2kX9XK2sS90.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a09:a702:ae::/48 maxlen: 48 2a09:a702:af::/48 maxlen: 48 2a09:a702:b2::/48 maxlen: 48 2a09:a702:b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fb:75:51:83:5b:98:4a:80:47:93:f8:c4:da:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee26ca077d229307c488cb15da45fd5cadac4bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:22:d0:61:89:03:ba:10:e3:a1:a3:17:ea: df:c5:53:4d:51:9c:df:4f:33:6a:fc:76:7e:17:96: 36:31:4a:68:71:f0:0a:5b:3b:3f:5e:50:20:c8:c4: ac:82:c7:b1:34:34:ba:ff:8b:15:d3:a2:c2:a4:3a: 52:1a:03:3d:39:0c:54:c7:2b:7f:6f:fc:79:fd:77: 8f:2d:8b:9a:de:d6:59:65:bb:72:46:8e:6f:81:ab: 77:0b:4d:79:bb:63:31:91:85:69:c9:17:62:45:be: 91:62:60:66:80:c2:37:f9:20:f3:88:22:5e:43:b6: ce:df:1f:93:8b:49:35:fb:e3:3f:99:31:7a:86:be: fa:bb:b3:de:bf:58:53:5f:de:11:45:03:ac:12:71: 05:be:09:15:09:44:a4:fb:29:88:99:00:5b:81:b7: b8:1a:61:f0:a3:2a:36:31:2a:64:1a:62:63:0a:86: 77:52:6b:03:00:9e:cb:c1:27:9d:82:e6:58:a3:95: b2:e3:fd:f2:fd:5e:85:f8:e6:ff:e3:16:b2:ab:41: 9c:9b:51:71:a1:50:61:39:ae:3e:73:6c:32:e0:22: 06:4a:ea:bf:d5:c1:a6:65:c6:8d:18:f6:10:38:8e: ff:c3:bd:ae:af:76:7d:5b:ed:56:0a:0f:0c:d9:47: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:26:CA:07:7D:22:93:07:C4:88:CB:15:DA:45:FD:5C:AD:AC:4B:DD X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/7ibKB30ikwfEiMsV2kX9XK2sS90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a702:ae::/47 2a09:a702:b2::/47 Signature Algorithm: sha256WithRSAEncryption 6e:36:fa:e0:78:b4:ac:eb:1f:8a:cd:dc:8c:7c:7f:3d:e3:35: d7:30:c1:c1:63:5a:30:34:17:e5:82:d3:3b:14:71:77:c1:19: 4a:99:c1:f8:6b:ac:d7:19:cf:36:d9:9e:d8:45:fd:60:ca:c1: 20:25:20:60:60:d9:f1:34:a8:d0:5d:a5:c3:da:df:0f:86:2b: 6b:80:b9:e5:18:d3:9e:d7:e0:d1:00:ea:80:96:e9:b0:9d:d0: 71:e6:c5:0a:9a:f1:af:cd:22:fe:e0:53:e6:6b:bf:f9:53:5d: d2:77:90:2b:6d:de:14:ae:a1:9b:33:2b:a2:7b:00:56:4e:88: 47:91:38:95:1a:a1:1d:47:b3:ac:5e:bc:31:dd:00:07:44:46: 9d:ef:42:23:84:77:f5:49:d0:ef:ab:70:55:f8:bc:41:2d:3c: b6:4e:c7:51:dc:b5:83:ed:a5:62:05:2a:aa:2b:5e:3a:b2:e5: e6:28:75:8b:78:54:90:63:be:67:29:07:dc:b8:fb:8d:3e:fb: 0d:a6:22:f0:6a:2d:53:47:01:30:0a:0b:a8:c0:c3:51:1e:c4: 7a:78:ff:20:69:6b:40:14:3c:1e:f6:5b:2c:8b:10:6d:0c:d8: e7:5c:e4:26:12:f4:b7:b8:69:7f:c4:d1:ff:f1:10:4d:85:00: 0b:0d:48:b6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FPt1UYNbmEqAR5P4xNpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTI2Y2EwNzdkMjI5MzA3YzQ4OGNiMTVkYTQ1ZmQ1Y2FkYWM0YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa4i0GGJA7oQ46GjF+rfxVNNUZzf TzNq/HZ+F5Y2MUpocfAKWzs/XlAgyMSsgsexNDS6/4sV06LCpDpSGgM9OQxUxyt/ b/x5/XePLYua3tZZZbtyRo5vgat3C015u2MxkYVpyRdiRb6RYmBmgMI3+SDziCJe Q7bO3x+Ti0k1++M/mTF6hr76u7Pev1hTX94RRQOsEnEFvgkVCUSk+ymImQBbgbe4 GmHwoyo2MSpkGmJjCoZ3UmsDAJ7LwSedguZYo5Wy4/3y/V6F+Ob/4xayq0Gcm1Fx oVBhOa4+c2wy4CIGSuq/1cGmZcaNGPYQOI7/w72ur3Z9W+1WCg8M2UfOjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO4mygd9IpMHxIjLFdpF/VytrEvdMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvN2liS0IzMGlrd2ZFaU1zVjJrWDlYSzJzUzkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgmnAgCu AwcBKgmnAgCyMA0GCSqGSIb3DQEBCwUAA4IBAQBuNvrgeLSs6x+KzdyMfH894zXX MMHBY1owNBflgtM7FHF3wRlKmcH4a6zXGc822Z7YRf1gysEgJSBgYNnxNKjQXaXD 2t8PhitrgLnlGNOe1+DRAOqAlumwndBx5sUKmvGvzSL+4FPma7/5U13Sd5Arbd4U rqGbMyuiewBWTohHkTiVGqEdR7OsXrwx3QAHREad70IjhHf1SdDvq3BV+LxBLTy2 TsdR3LWD7aViBSqqK146suXmKHWLeFSQY75nKQfcuPuNPvsNpiLwai1TRwEwCguo wMNRHsR6eP8gaWtAFDwe9lssixBtDNjnXOQmEvS3uGl/xNH/8RBNhQALDUi2 -----END CERTIFICATE-----Generated at Sun Jan 25 14:58:13 2026 by rpki-client