This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/7y0LOepFUcA8OxNwETjP06eOGqo.roa File: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (raw, json) Hash identifier: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0= Subject key identifier: EF:2D:0B:39:EA:45:51:C0:3C:3B:13:70:11:38:CF:D3:A7:8E:1A:AA Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2 Certificate serial: 019B7BA34907228D6799183EFA787439FC28 Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/7y0LOepFUcA8OxNwETjP06eOGqo.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204982 IP address blocks: 2a0e:3bc0:fa00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:49:07:22:8d:67:99:18:3e:fa:78:74:39:fc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef2d0b39ea4551c03c3b13701138cfd3a78e1aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:e0:ba:d6:d9:01:2b:13:44:e3:0e:4d:23: db:c2:47:37:6c:6d:8a:0f:c6:00:ea:9f:9a:ef:e8: 92:ee:28:a5:96:fc:d8:a6:a4:d5:a2:48:a9:a1:e3: 4c:da:75:8a:85:87:f4:2a:6b:30:cb:6c:4d:a7:13: d0:6c:58:c8:cb:39:f8:f2:ee:61:05:6f:30:c9:5a: 2a:80:3e:46:a2:11:18:8b:a4:61:ad:9a:a8:fd:72: b1:45:3e:db:ed:13:00:35:9e:dd:7f:78:c2:97:92: 3e:f4:1a:37:1d:86:21:e4:38:00:31:51:28:df:27: e8:65:4f:c5:b5:37:c3:ea:8a:90:37:c5:61:5d:c3: 5a:58:e1:15:10:cc:7e:83:a2:82:be:a4:b4:16:91: 9f:34:44:de:13:4a:a4:d9:ca:08:f0:69:3a:eb:e7: be:8f:55:54:f0:ca:85:c4:24:5e:5e:e6:e5:35:bc: 82:cd:8b:70:70:e6:85:1d:24:d3:60:e8:e1:3c:3b: 01:a4:52:87:69:6e:fa:8c:07:e3:74:41:8d:8f:c0: 92:ef:da:f3:70:4c:5f:d9:5d:1d:8c:71:2a:e6:25: d8:92:ee:05:fd:ad:79:6a:98:21:aa:ee:10:69:38: 31:12:a8:5b:e6:e2:c4:a4:74:33:fe:f7:ac:39:36: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2D:0B:39:EA:45:51:C0:3C:3B:13:70:11:38:CF:D3:A7:8E:1A:AA X509v3 Authority Key Identifier: keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/7y0LOepFUcA8OxNwETjP06eOGqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:3bc0:fa00::/42 Signature Algorithm: sha256WithRSAEncryption 80:97:11:87:df:c9:46:35:76:d1:e5:13:42:f0:3e:c7:33:c1: 38:e0:53:9b:c0:8a:8b:35:3f:80:0c:96:72:74:58:ce:41:f1: fd:90:51:dc:2c:e0:5f:3e:26:ee:bb:92:51:4d:b5:3e:56:7c: 73:51:91:20:0a:4f:09:9c:12:a3:f7:4b:c3:54:ca:6c:31:55: 0f:85:3d:b3:52:49:36:ee:42:d4:ad:a4:a6:50:3c:ba:4f:f7: 31:84:de:fa:d2:4a:d7:e8:76:ed:a3:a7:d0:26:35:e9:60:6b: e1:f5:3f:49:5d:13:f0:dd:0c:32:73:7e:b6:5c:45:ff:01:dd: 5a:36:5e:b5:0c:72:47:d4:32:62:4b:bf:99:c9:64:55:72:01: 84:01:38:5d:ab:b6:53:a4:36:2e:bb:14:66:9a:89:cc:36:ec: a5:60:20:c6:37:c5:6e:06:a7:03:e8:21:52:1a:90:cf:32:f3: 5f:52:34:5d:4a:1f:d6:f0:eb:bf:c5:b5:a9:f6:ce:6c:e2:f2: 3f:a2:15:6e:3a:96:65:90:0f:6c:3d:fb:f2:9d:33:bc:c7:38: 26:c3:a1:7a:1a:0f:a2:d1:42:d2:5b:77:69:d7:13:1e:da:38: 1b:08:5c:52:26:d8:94:19:b0:c2:fd:69:ac:73:cc:60:85:55: c2:e9:b0:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o0kHIo1nmRg++nh0OfwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5 YTViZTIwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjJkMGIzOWVhNDU1MWMwM2MzYjEzNzAxMTM4Y2ZkM2E3OGUxYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCDgutbZASsTROMOTSPbwkc3bG2K D8YA6p+a7+iS7iillvzYpqTVokipoeNM2nWKhYf0Kmswy2xNpxPQbFjIyzn48u5h BW8wyVoqgD5GohEYi6RhrZqo/XKxRT7b7RMANZ7df3jCl5I+9Bo3HYYh5DgAMVEo 3yfoZU/FtTfD6oqQN8VhXcNaWOEVEMx+g6KCvqS0FpGfNETeE0qk2coI8Gk66+e+ j1VU8MqFxCReXublNbyCzYtwcOaFHSTTYOjhPDsBpFKHaW76jAfjdEGNj8CS79rz cExf2V0djHEq5iXYku4F/a15apghqu4QaTgxEqhb5uLEpHQz/vesOTZMRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO8tCznqRVHAPDsTcBE4z9OnjhqqMB8GA1UdIwQY MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt MWI3NTg2N2U4ZGZmLzEvN3kwTE9lcEZVY0E4T3hOd0VUalAwNmVPR3FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKg47wPoA MA0GCSqGSIb3DQEBCwUAA4IBAQCAlxGH38lGNXbR5RNC8D7HM8E44FObwIqLNT+A DJZydFjOQfH9kFHcLOBfPibuu5JRTbU+VnxzUZEgCk8JnBKj90vDVMpsMVUPhT2z Ukk27kLUraSmUDy6T/cxhN760krX6Hbto6fQJjXpYGvh9T9JXRPw3Qwyc362XEX/ Ad1aNl61DHJH1DJiS7+ZyWRVcgGEAThdq7ZTpDYuuxRmmonMNuylYCDGN8VuBqcD 6CFSGpDPMvNfUjRdSh/W8Ou/xbWp9s5s4vI/ohVuOpZlkA9sPfvynTO8xzgmw6F6 Gg+i0ULSW3dp1xMe2jgbCFxSJtiUGbDC/Wmsc8xghVXC6bCC -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:59 2026 by rpki-client