This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/o7Mh-e1vqi6VEezsIe8usF1WqvY.roa File: o7Mh-e1vqi6VEezsIe8usF1WqvY.roa (raw, json) Hash identifier: PFuzeZNfVF7MAR1EKpSC2koEaTw4wzxZUsj6BIdCeKE= Subject key identifier: A3:B3:21:F9:ED:6F:AA:2E:95:11:EC:EC:21:EF:2E:B0:5D:56:AA:F6 Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B7E3874F20F2EB17A1A087B6EECEA7800 Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/o7Mh-e1vqi6VEezsIe8usF1WqvY.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 2a05:7a80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:74:f2:0f:2e:b1:7a:1a:08:7b:6e:ec:ea:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b321f9ed6faa2e9511ecec21ef2eb05d56aaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:b2:5b:e4:64:8a:02:c7:f8:40:a7:2e:d2: de:2d:85:3d:84:52:93:91:9d:67:d3:f4:16:7f:92: 48:19:62:88:90:ca:1e:65:62:45:1b:5b:27:6e:68: 3c:42:47:fe:de:1d:6e:0b:49:09:e9:1e:69:cc:2d: de:6a:e7:11:5c:b1:5b:03:2a:5a:18:71:c4:d2:7d: 35:bd:ee:c1:c9:06:51:cb:d5:d7:67:97:04:84:11: 3e:de:77:f6:4b:62:74:73:64:37:c3:20:82:e0:b0: 48:b4:ad:89:fd:04:6f:41:c6:a8:b3:f9:a8:7c:23: 4d:18:3e:07:50:70:8a:a9:97:fd:20:4d:8f:aa:1b: 44:12:e8:82:2d:e4:50:31:1f:45:a9:5b:25:f3:79: 2e:8b:0f:87:55:18:13:58:19:a8:06:7f:40:48:ea: 02:f0:e1:b5:da:85:74:99:2b:0d:6e:23:64:a5:3b: 26:c9:dc:13:bb:63:33:7b:bc:18:ff:ec:84:93:f9: 75:84:2e:71:cf:db:03:23:57:37:26:6f:9f:4a:c8: 6f:cc:d7:35:9d:03:88:7e:8f:76:51:7b:7d:59:db: d1:cb:bc:f1:72:ac:bb:9b:43:83:7f:f5:68:e8:f2: ec:1f:48:13:29:d9:7b:40:d5:1a:21:db:5d:3c:b6: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B3:21:F9:ED:6F:AA:2E:95:11:EC:EC:21:EF:2E:B0:5D:56:AA:F6 X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/o7Mh-e1vqi6VEezsIe8usF1WqvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:7a80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 45:87:9b:d7:f0:a3:2c:53:c2:22:69:14:83:4b:57:75:0a:94: f1:cc:58:68:50:6f:e3:0a:94:55:b1:0c:a6:f9:e9:47:62:49: c5:f7:e3:a6:f1:27:5a:b6:6b:f2:8c:13:04:c6:a5:3b:b0:a6: da:2a:fd:a7:92:d0:25:06:9d:15:9f:4a:be:65:88:9f:ac:36: 9d:7e:9f:5d:2d:a6:79:d9:e2:c3:07:1b:f5:b7:7f:57:e1:7d: fe:58:71:a5:32:4a:80:28:82:9c:4d:ba:b1:80:cb:7c:ab:6a: 8b:0b:7f:2c:5f:55:4b:87:af:59:c4:4d:2e:17:3e:a2:b7:94: b7:81:39:23:c9:17:2e:9f:00:b5:4a:d8:b5:a9:a8:cc:62:56: df:a5:c8:55:96:17:44:89:24:35:e1:c0:7b:78:86:b4:91:a2: 74:ee:48:79:2d:9b:ec:88:f6:38:95:72:f8:d0:13:69:fa:1e: 18:f7:69:31:e3:4b:2e:75:8b:35:c4:8f:1d:cc:63:4f:e4:4e: f3:26:ea:f9:e7:be:5a:6a:94:38:43:21:80:f5:42:65:23:f1: c6:48:07:13:6a:a8:61:51:ac:cc:07:82:d1:62:56:0e:93:31: 3b:47:85:c8:ac:72:9f:9f:01:a9:e0:4c:bb:f7:20:25:83:58: 15:3e:17:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OHTyDy6xehoIe27s6ngAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2IzMjFmOWVkNmZhYTJlOTUxMWVjZWMyMWVmMmViMDVkNTZhYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA+yW+RkigLH+ECnLtLeLYU9hFKT kZ1n0/QWf5JIGWKIkMoeZWJFG1snbmg8Qkf+3h1uC0kJ6R5pzC3eaucRXLFbAypa GHHE0n01ve7ByQZRy9XXZ5cEhBE+3nf2S2J0c2Q3wyCC4LBItK2J/QRvQcaos/mo fCNNGD4HUHCKqZf9IE2PqhtEEuiCLeRQMR9FqVsl83kuiw+HVRgTWBmoBn9ASOoC 8OG12oV0mSsNbiNkpTsmydwTu2Mze7wY/+yEk/l1hC5xz9sDI1c3Jm+fSshvzNc1 nQOIfo92UXt9WdvRy7zxcqy7m0ODf/Vo6PLsH0gTKdl7QNUaIdtdPLYpUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKOzIfntb6oulRHs7CHvLrBdVqr2MB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvbzdNaC1lMXZxaTZWRWV6c0llOHVzRjFXcXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgV6gP/+ MA0GCSqGSIb3DQEBCwUAA4IBAQBFh5vX8KMsU8IiaRSDS1d1CpTxzFhoUG/jCpRV sQym+elHYknF9+Om8SdatmvyjBMExqU7sKbaKv2nktAlBp0Vn0q+ZYifrDadfp9d LaZ52eLDBxv1t39X4X3+WHGlMkqAKIKcTbqxgMt8q2qLC38sX1VLh69ZxE0uFz6i t5S3gTkjyRcunwC1Sti1qajMYlbfpchVlhdEiSQ14cB7eIa0kaJ07kh5LZvsiPY4 lXL40BNp+h4Y92kx40sudYs1xI8dzGNP5E7zJur5575aapQ4QyGA9UJlI/HGSAcT aqhhUazMB4LRYlYOkzE7R4XIrHKfnwGp4Ey79yAlg1gVPhdj -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:07 2026 by rpki-client