This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/7V5o0G742Xx6wwekFHlHI_pH6s8.roa File: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (raw, json) Hash identifier: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4= Subject key identifier: ED:5E:68:D0:6E:F8:D9:7C:7A:C3:07:A4:14:79:47:23:FA:47:EA:CF Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C7637920B45F40EA053FF98962A048 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/7V5o0G742Xx6wwekFHlHI_pH6s8.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29182 IP address blocks: 2a0e:4346::/32 maxlen: 32 2a11:34c1::/32 maxlen: 32 2a12:41c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:63:79:20:b4:5f:40:ea:05:3f:f9:89:62:a0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed5e68d06ef8d97c7ac307a414794723fa47eacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:fb:c6:14:45:28:54:d4:b2:ac:3c:ce:24: b2:dc:90:ad:5e:8c:6f:96:e0:2d:a9:e8:cf:ae:ad: 12:d6:5a:4f:76:cc:42:88:92:fc:a8:36:1a:42:71: cf:80:68:85:c1:a5:1d:9c:8e:4f:92:16:5b:d6:b2: e0:30:f2:65:17:02:38:db:1b:9c:d2:40:bc:09:4e: 81:bd:e3:ed:ee:5e:21:07:26:d1:a5:55:5d:e9:85: a8:94:72:94:f7:4d:c8:43:a1:16:d9:38:4d:9b:b2: 49:ad:a0:4f:71:ce:ef:e8:00:fb:96:d9:fb:4c:cc: 7f:be:42:ff:c5:58:00:3d:d1:5e:33:63:e0:ce:6e: 86:bb:de:3b:ba:2d:e3:63:73:69:a0:1c:26:a1:e1: 98:3c:98:66:dc:bf:65:64:e6:61:d5:f3:45:c7:e3: bc:28:96:ff:34:54:cc:be:f6:6a:3f:06:c6:29:99: d5:5f:53:e0:84:c0:fc:62:ea:57:1b:ad:11:54:29: fc:f1:12:8a:9a:db:e8:a8:c5:60:ec:2a:70:ab:d8: 7b:66:de:95:8d:6d:ab:b4:31:be:20:69:c4:84:98: f8:0b:df:17:5c:8b:e1:79:53:88:2f:69:b4:a6:4f: a2:15:41:a2:7a:ee:23:28:5b:c0:16:7a:fc:d6:61: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5E:68:D0:6E:F8:D9:7C:7A:C3:07:A4:14:79:47:23:FA:47:EA:CF X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/7V5o0G742Xx6wwekFHlHI_pH6s8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4346::/32 2a11:34c1::/32 2a12:41c7::/32 Signature Algorithm: sha256WithRSAEncryption 61:6f:9b:da:ce:d5:94:dc:56:43:f6:98:50:54:74:ea:49:b5: 62:14:f0:56:a1:61:6a:df:90:78:f3:8f:2d:8f:2c:88:58:d1: 93:a0:54:85:e0:6f:34:a9:4b:81:c9:70:8a:f3:78:87:f1:4c: 9b:1a:e2:01:67:e2:2d:41:28:40:90:0c:93:6d:30:ae:e8:5d: d1:f1:08:30:d8:e5:f6:c5:17:10:b4:40:d3:cf:90:5c:4c:5c: be:c5:6b:52:76:58:5d:29:36:92:e0:01:94:ba:e8:df:f3:fd: 52:bd:65:7f:12:88:4f:a6:d4:5b:cb:89:f5:56:ae:6b:ba:df: 9e:95:23:26:85:c5:22:6b:9c:7a:15:2b:98:28:28:c8:27:51: 74:f8:9c:f0:1e:b5:1f:ba:c2:a8:ba:b2:1e:09:01:fb:48:b5: df:23:4e:b0:0f:cd:58:bd:d9:b5:3f:1f:b1:2d:d6:a0:66:17: 61:34:63:76:ef:b4:11:d6:e1:72:80:9d:0b:0f:75:eb:08:32: 81:25:ce:e5:61:62:26:36:61:f9:f4:1b:6b:29:4f:3d:94:8f: f2:3d:1c:c2:e5:f9:f4:7d:c3:f5:be:d5:3d:c1:7f:8a:87:8b: cb:19:f0:cf:73:6e:0a:bc:ed:08:e4:6a:1d:36:db:9d:fd:f1: 7e:de:5f:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x2N5ILRfQOoFP/mJYqBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDVlNjhkMDZlZjhkOTdjN2FjMzA3YTQxNDc5NDcyM2ZhNDdlYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucL7xhRFKFTUsqw8ziSy3JCtXoxv luAtqejPrq0S1lpPdsxCiJL8qDYaQnHPgGiFwaUdnI5PkhZb1rLgMPJlFwI42xuc 0kC8CU6BvePt7l4hBybRpVVd6YWolHKU903IQ6EW2ThNm7JJraBPcc7v6AD7ltn7 TMx/vkL/xVgAPdFeM2Pgzm6Gu947ui3jY3NpoBwmoeGYPJhm3L9lZOZh1fNFx+O8 KJb/NFTMvvZqPwbGKZnVX1PghMD8YupXG60RVCn88RKKmtvoqMVg7Cpwq9h7Zt6V jW2rtDG+IGnEhJj4C98XXIvheVOIL2m0pk+iFUGieu4jKFvAFnr81mGmKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO1eaNBu+Nl8esMHpBR5RyP6R+rPMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvN1Y1bzBHNzQyWHg2d3dla0ZIbEhJX3BINnM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKg5DRgMF ACoRNMEDBQAqEkHHMA0GCSqGSIb3DQEBCwUAA4IBAQBhb5vaztWU3FZD9phQVHTq SbViFPBWoWFq35B4848tjyyIWNGToFSF4G80qUuByXCK83iH8UybGuIBZ+ItQShA kAyTbTCu6F3R8Qgw2OX2xRcQtEDTz5BcTFy+xWtSdlhdKTaS4AGUuujf8/1SvWV/ EohPptRby4n1Vq5rut+elSMmhcUia5x6FSuYKCjIJ1F0+JzwHrUfusKourIeCQH7 SLXfI06wD81Yvdm1Px+xLdagZhdhNGN277QR1uFygJ0LD3XrCDKBJc7lYWImNmH5 9BtrKU89lI/yPRzC5fn0fcP1vtU9wX+Kh4vLGfDPc24KvO0I5GodNtud/fF+3l9y -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:00 2026 by rpki-client