This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/7MPluVravo2Zg570yKX0YG2N3n8.roa File: 7MPluVravo2Zg570yKX0YG2N3n8.roa (raw, json) Hash identifier: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA= Subject key identifier: EC:C3:E5:B9:5A:DA:BE:8D:99:83:9E:F4:C8:A5:F4:60:6D:8D:DE:7F Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Certificate serial: 019B7FF24F88A4923CB28A876C0D3FA2D6C3 Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/7MPluVravo2Zg570yKX0YG2N3n8.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205964 IP address blocks: 2a13:6cc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4f:88:a4:92:3c:b2:8a:87:6c:0d:3f:a2:d6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecc3e5b95adabe8d99839ef4c8a5f4606d8dde7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:e4:90:23:0c:e2:d7:9c:ce:b7:1c:25:7e: c5:ea:12:f6:8c:78:7c:63:3c:47:41:22:a0:4e:79: e5:84:8a:e6:02:ae:15:33:35:f4:62:b7:74:72:9e: 7c:33:79:8b:ff:14:5f:12:c7:fa:f1:b3:60:78:8e: 2d:fc:c6:ab:c9:41:90:f0:dc:b6:49:63:07:5f:e1: 6f:4f:68:c1:24:6d:45:d4:33:d3:23:78:72:44:10: ed:b1:eb:c7:0c:90:ea:55:b0:17:8e:5e:64:07:09: d1:ac:26:ed:23:e9:84:68:f6:22:ff:64:bb:bc:98: 7d:6e:da:42:f2:93:30:7f:45:ef:36:4a:1b:26:10: 80:32:0f:f0:d0:fa:09:3c:22:dd:e1:97:80:88:80: 3b:47:b8:35:14:e6:5e:d3:9c:12:ad:ae:d9:28:71: ca:22:6b:92:14:41:1c:9f:73:44:3a:54:66:f3:da: 0b:06:b1:2f:ac:d8:b9:bb:c7:23:6c:23:93:38:4d: fa:bc:04:32:8f:9d:f1:c4:79:e6:3e:5e:c4:8f:30: f6:09:59:8a:e0:d6:cb:5b:34:0b:e8:62:a7:83:ab: 8b:8b:de:c9:69:28:7f:fe:ce:84:6f:d7:0e:07:f9: a1:13:2c:f5:9d:1f:c4:dc:0c:e8:a7:c6:05:bb:9f: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C3:E5:B9:5A:DA:BE:8D:99:83:9E:F4:C8:A5:F4:60:6D:8D:DE:7F X509v3 Authority Key Identifier: keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/7MPluVravo2Zg570yKX0YG2N3n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:6cc1::/32 Signature Algorithm: sha256WithRSAEncryption 2f:19:8c:2a:d6:d9:99:bc:56:43:6c:2e:2d:ff:4d:72:53:c5: bd:ad:13:13:b6:a7:72:f8:4d:89:03:42:b8:c1:7d:a3:65:73: 14:94:41:54:94:9a:9a:10:9b:82:b1:8c:86:d5:18:01:8b:8e: 09:8c:5b:9f:6f:96:93:ef:33:05:1f:6c:f0:84:a1:54:73:52: c1:a9:fe:c6:67:ca:0c:9a:c1:72:c9:db:14:3b:75:c3:f9:13: 6d:c7:e5:1f:64:49:c0:a2:f0:4d:d8:df:36:91:b6:f4:d0:a0: c0:c8:87:51:06:83:d5:f5:6a:1a:7e:51:c4:7d:50:5f:d1:c1: b3:c7:6c:ad:79:cf:95:87:fc:57:8e:0e:e2:a8:27:07:ac:97: ed:b4:20:16:06:56:25:ec:4f:e8:77:3a:c0:88:f7:86:56:6a: c4:95:56:7b:87:1d:ef:ae:bb:d6:a3:7b:a5:0e:bd:c0:52:45: 95:a3:ac:f2:f9:1f:8c:75:5c:f4:d2:db:e8:b9:8e:44:f8:70: 0d:ba:d4:7d:6b:36:b5:c0:4e:1a:dc:1b:06:fd:75:6d:ef:80: af:96:48:b5:eb:7c:d2:4a:6a:36:aa:83:d5:06:87:5f:98:89: 32:68:93:61:cc:c8:48:34:c2:82:96:81:65:67:0d:ad:b5:25: c8:51:7c:a1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8k+IpJI8soqHbA0/otbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw ZTY5MWQwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2MzZTViOTVhZGFiZThkOTk4MzllZjRjOGE1ZjQ2MDZkOGRkZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRXkkCMM4teczrccJX7F6hL2jHh8 YzxHQSKgTnnlhIrmAq4VMzX0Yrd0cp58M3mL/xRfEsf68bNgeI4t/MaryUGQ8Ny2 SWMHX+FvT2jBJG1F1DPTI3hyRBDtsevHDJDqVbAXjl5kBwnRrCbtI+mEaPYi/2S7 vJh9btpC8pMwf0XvNkobJhCAMg/w0PoJPCLd4ZeAiIA7R7g1FOZe05wSra7ZKHHK ImuSFEEcn3NEOlRm89oLBrEvrNi5u8cjbCOTOE36vAQyj53xxHnmPl7EjzD2CVmK 4NbLWzQL6GKng6uLi97JaSh//s6Eb9cOB/mhEyz1nR/E3Azop8YFu5/P1wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOzD5bla2r6NmYOe9Mil9GBtjd5/MB8GA1UdIwQY MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt MTk3NjlmNTc4ZWZkLzEvN01QbHVWcmF2bzJaZzU3MHlLWDBZRzJOM244LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhNswTAN BgkqhkiG9w0BAQsFAAOCAQEALxmMKtbZmbxWQ2wuLf9NclPFva0TE7ancvhNiQNC uMF9o2VzFJRBVJSamhCbgrGMhtUYAYuOCYxbn2+Wk+8zBR9s8IShVHNSwan+xmfK DJrBcsnbFDt1w/kTbcflH2RJwKLwTdjfNpG29NCgwMiHUQaD1fVqGn5RxH1QX9HB s8dsrXnPlYf8V44O4qgnB6yX7bQgFgZWJexP6Hc6wIj3hlZqxJVWe4cd76671qN7 pQ69wFJFlaOs8vkfjHVc9NLb6LmORPhwDbrUfWs2tcBOGtwbBv11be+Ar5ZItet8 0kpqNqqD1QaHX5iJMmiTYczISDTCgpaBZWcNrbUlyFF8oQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:38 2026 by rpki-client