This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa File: 72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa (raw, json) Hash identifier: vZhU/38tVfKMQXtXEf0zL9xQr8OezLicNnuxASDwPqs= Subject key identifier: EF:65:9B:E4:AC:B4:D6:4B:E1:97:84:21:7C:B4:39:2F:FC:A5:4A:22 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76C214EBB5D8909E2A54CCA2D688B Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211852 IP address blocks: 2a11:15c7::/32 maxlen: 32 2a11:4a02::/32 maxlen: 32 2a11:8506::/32 maxlen: 32 2a12:4146::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:21:4e:bb:5d:89:09:e2:a5:4c:ca:2d:68:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef659be4acb4d64be19784217cb4392ffca54a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:d7:2f:47:6d:fd:ac:ed:e5:ea:52:a9:0f: 91:7a:64:81:f5:9b:32:a8:6d:fa:d9:2b:91:78:c6: a9:90:5d:28:15:21:49:e0:55:aa:71:bd:91:aa:70: c7:ee:9b:f0:a8:e8:94:16:2a:cd:62:96:5c:9e:21: aa:09:ca:ce:51:f0:b6:ad:57:17:19:9d:e0:0d:8a: d9:f7:74:a0:6c:7c:77:91:dd:76:38:d5:c5:22:04: 65:79:bb:fc:0b:ed:36:94:ed:20:27:5b:25:a2:e7: f8:1c:82:e8:9a:e5:59:32:24:d4:b2:60:2f:a8:e9: f8:0d:c6:4c:86:d6:c4:f5:bb:f3:13:2a:20:37:46: b3:d8:c9:5b:d6:9e:1f:14:df:1b:92:ed:54:d7:d5: 50:0b:b8:12:2f:57:80:0a:8a:eb:d0:ae:6b:15:50: c2:2f:92:1b:28:3c:b9:95:6b:2e:87:f6:ff:72:1b: 1a:80:f8:7c:f5:ec:5b:3f:50:00:86:13:f5:be:fc: b7:a9:44:1b:fc:6b:d1:19:c2:77:fd:cd:1c:18:47: 80:1c:2e:92:47:84:15:88:66:e2:c0:45:1e:32:95: e0:72:86:fb:0b:7d:3e:40:c9:56:c9:c2:90:e1:ba: b3:fc:ab:06:50:85:99:35:0b:d4:bd:d4:10:f3:3e: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:65:9B:E4:AC:B4:D6:4B:E1:97:84:21:7C:B4:39:2F:FC:A5:4A:22 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:15c7::/32 2a11:4a02::/32 2a11:8506::/32 2a12:4146::/32 Signature Algorithm: sha256WithRSAEncryption 57:bf:38:7b:b5:9c:0d:4c:16:c8:b9:3b:ec:1b:00:86:09:e1: d3:bc:ef:2d:52:3a:89:aa:be:a4:1d:4f:97:40:81:05:df:d4: 4a:a5:e7:94:a2:0d:13:49:e3:79:d1:b9:8a:60:ac:a0:28:10: 38:7c:92:fa:82:19:5a:5f:3d:08:0b:39:d2:ea:bc:90:8d:ee: 7b:65:9c:ff:59:77:93:a4:90:7c:35:45:8f:37:b4:49:b2:11: df:a3:a6:b7:08:e7:e6:68:fb:02:66:46:73:f4:ba:ce:76:7d: f3:82:5e:80:7d:78:37:13:f7:5d:5a:3a:0f:4c:b6:5d:c2:76: d3:b0:25:e2:2e:69:b5:fe:98:51:ac:b0:2f:12:45:35:5f:21: e3:7d:db:4c:73:2c:74:ae:93:f4:7d:d2:45:79:dc:3e:10:c7: 95:59:45:41:f3:be:b1:12:80:13:5f:43:55:1e:f4:64:ed:59: c4:ce:19:3d:50:07:d1:d1:ec:bd:25:da:17:f3:08:84:bf:49: 9d:fd:0e:07:d4:4b:a6:65:2e:45:4b:df:dc:95:ac:2e:0d:ef: 9a:22:af:3a:06:8a:24:05:be:38:33:12:30:e4:3c:62:f5:de: 25:83:e2:15:c8:6a:54:bd:d6:d4:a4:96:98:55:e4:ba:46:de: 40:aa:51:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3x2whTrtdiQnipUzKLWiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjY1OWJlNGFjYjRkNjRiZTE5Nzg0MjE3Y2I0MzkyZmZjYTU0YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDrXL0dt/azt5epSqQ+RemSB9Zsy qG362SuReMapkF0oFSFJ4FWqcb2RqnDH7pvwqOiUFirNYpZcniGqCcrOUfC2rVcX GZ3gDYrZ93SgbHx3kd12ONXFIgRlebv8C+02lO0gJ1slouf4HILomuVZMiTUsmAv qOn4DcZMhtbE9bvzEyogN0az2Mlb1p4fFN8bku1U19VQC7gSL1eACorr0K5rFVDC L5IbKDy5lWsuh/b/chsagPh89exbP1AAhhP1vvy3qUQb/GvRGcJ3/c0cGEeAHC6S R4QViGbiwEUeMpXgcob7C30+QMlWycKQ4bqz/KsGUIWZNQvUvdQQ8z6tFwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFO9lm+SstNZL4ZeEIXy0OS/8pUoiMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvNzJXYjVLeTAxa3ZobDRRaGZMUTVMX3lsU2lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhEVxwMF ACoRSgIDBQAqEYUGAwUAKhJBRjANBgkqhkiG9w0BAQsFAAOCAQEAV784e7WcDUwW yLk77BsAhgnh07zvLVI6iaq+pB1Pl0CBBd/USqXnlKINE0njedG5imCsoCgQOHyS +oIZWl89CAs50uq8kI3ue2Wc/1l3k6SQfDVFjze0SbIR36Omtwjn5mj7AmZGc/S6 znZ984JegH14NxP3XVo6D0y2XcJ207Al4i5ptf6YUaywLxJFNV8h433bTHMsdK6T 9H3SRXncPhDHlVlFQfO+sRKAE19DVR70ZO1ZxM4ZPVAH0dHsvSXaF/MIhL9Jnf0O B9RLpmUuRUvf3JWsLg3vmiKvOgaKJAW+ODMSMOQ8YvXeJYPiFchqVL3W1KSWmFXk ukbeQKpRhA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:50 2026 by rpki-client