This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/U7dOPr8aIxZqqFvoN6CicfjLnZI.roa File: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (raw, json) Hash identifier: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E= Subject key identifier: 53:B7:4E:3E:BF:1A:23:16:6A:A8:5B:E8:37:A0:A2:71:F8:CB:9D:92 Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Certificate serial: 019B7911103B5C0DD7E7E35BEE03C2AB4F35 Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/U7dOPr8aIxZqqFvoN6CicfjLnZI.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202818 IP address blocks: 2a01:8280:3330::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:10:3b:5c:0d:d7:e7:e3:5b:ee:03:c2:ab:4f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b74e3ebf1a23166aa85be837a0a271f8cb9d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:a3:5c:7f:56:2b:dd:3c:24:c6:34:86:1f: 29:9d:0d:24:2f:05:8c:24:33:01:29:4d:7d:90:64: 58:8c:87:e0:49:eb:8e:83:95:65:07:27:41:61:68: 7b:3f:c9:c8:86:9d:48:d7:e2:97:5f:66:fa:b6:36: 4d:17:15:8e:87:7a:ef:8a:d7:46:c3:f7:80:c9:a2: df:1e:56:b3:5a:39:76:b9:ed:2c:f5:54:af:54:28: b8:99:ab:3a:8d:69:78:62:9c:d6:8c:0e:d5:01:1b: 91:d5:88:be:8b:ec:19:b4:dd:a1:3b:46:d0:6c:e9: 15:36:c1:4e:84:11:fa:ad:42:38:9c:48:31:d1:1e: a2:b4:42:e4:07:c6:c7:8c:b1:2a:89:04:a5:3c:fd: 42:da:43:8f:90:c5:ea:ce:5d:50:dc:55:ce:3e:d3: 16:5a:45:13:bc:be:f2:53:46:18:55:66:77:2a:30: 38:2b:f8:c8:0f:b5:c7:33:31:e5:ac:84:7c:9b:d4: b4:1b:6a:d2:1c:8a:ed:48:a2:55:9d:38:ff:99:66: d3:3d:9a:c8:64:05:f2:6b:53:54:d6:99:70:0a:a0: 64:4a:1c:44:c8:b7:93:a8:fc:41:79:c7:bf:d6:7e: 07:21:93:c9:76:e1:03:56:40:ab:41:51:6c:ad:bb: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B7:4E:3E:BF:1A:23:16:6A:A8:5B:E8:37:A0:A2:71:F8:CB:9D:92 X509v3 Authority Key Identifier: keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/U7dOPr8aIxZqqFvoN6CicfjLnZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8280:3330::/48 Signature Algorithm: sha256WithRSAEncryption 2f:ac:ca:72:c1:c5:bf:a9:6f:b2:ec:0c:8f:70:9d:25:00:b9: 58:7b:21:b5:b8:25:44:80:a2:94:1c:2d:0b:e1:b3:67:46:35: 55:25:c9:e6:fa:6a:8c:4a:a5:47:60:55:d4:c1:96:87:04:2b: 1a:88:86:8a:01:9e:9d:fa:14:6d:cb:6e:69:2a:66:31:70:7d: 44:39:23:08:c2:23:84:6c:7e:65:be:2b:b4:05:5b:5d:93:65: 47:22:ed:8a:71:3c:72:a7:34:31:a0:d7:2c:8c:81:e4:62:75: f4:6c:35:f1:59:db:9c:3a:16:a4:95:5d:14:3d:9c:20:ca:80: 6d:f3:21:ae:71:ff:99:44:27:75:cf:da:1b:24:97:d4:b0:2f: 39:4e:1d:cd:64:67:64:d4:af:b4:68:cd:45:08:fd:ae:c2:84: 0c:e3:f3:ae:59:18:29:81:e5:f7:29:23:45:95:f1:c2:b9:63: 3e:4a:d4:97:f7:32:a1:f8:96:cf:df:7f:f2:34:7d:49:13:07: 33:1b:8d:cb:36:2b:03:81:70:f0:c5:4d:d6:7f:54:b9:80:a3: 84:47:3d:81:c8:d4:f6:a0:e9:a9:48:2a:83:87:d5:e1:8b:81: f0:d0:a3:07:62:17:99:5e:52:a6:2a:b3:be:79:eb:2d:30:71: dc:ee:ef:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ERA7XA3X5+Nb7gPCq081MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTc5NTE2N2QyZDlmYjQyMDk0MWYxNzI4N2JkZjNjNWVl ZDhkZjkwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I3NGUzZWJmMWEyMzE2NmFhODViZTgzN2EwYTI3MWY4Y2I5ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0yjXH9WK908JMY0hh8pnQ0kLwWM JDMBKU19kGRYjIfgSeuOg5VlBydBYWh7P8nIhp1I1+KXX2b6tjZNFxWOh3rvitdG w/eAyaLfHlazWjl2ue0s9VSvVCi4mas6jWl4YpzWjA7VARuR1Yi+i+wZtN2hO0bQ bOkVNsFOhBH6rUI4nEgx0R6itELkB8bHjLEqiQSlPP1C2kOPkMXqzl1Q3FXOPtMW WkUTvL7yU0YYVWZ3KjA4K/jID7XHMzHlrIR8m9S0G2rSHIrtSKJVnTj/mWbTPZrI ZAXya1NU1plwCqBkShxEyLeTqPxBece/1n4HIZPJduEDVkCrQVFsrbvN3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFO3Tj6/GiMWaqhb6DegonH4y52SMB8GA1UdIwQY MBaAFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDkt N2I3ZTk3NmM4NDEyLzEvVTdkT1ByOGFJeFpxcUZ2b042Q2ljZmpMblpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDktN2I3ZTk3NmM4NDEy LzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgGCgDMw MA0GCSqGSIb3DQEBCwUAA4IBAQAvrMpywcW/qW+y7AyPcJ0lALlYeyG1uCVEgKKU HC0L4bNnRjVVJcnm+mqMSqVHYFXUwZaHBCsaiIaKAZ6d+hRty25pKmYxcH1EOSMI wiOEbH5lviu0BVtdk2VHIu2KcTxypzQxoNcsjIHkYnX0bDXxWducOhaklV0UPZwg yoBt8yGucf+ZRCd1z9obJJfUsC85Th3NZGdk1K+0aM1FCP2uwoQM4/OuWRgpgeX3 KSNFlfHCuWM+StSX9zKh+JbP33/yNH1JEwczG43LNisDgXDwxU3Wf1S5gKOERz2B yNT2oOmpSCqDh9Xhi4Hw0KMHYheZXlKmKrO+eestMHHc7u+d -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:26 2026 by rpki-client