This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/7M34N_8c18kwYN5DXzfuwEhrmZA.roa File: 7M34N_8c18kwYN5DXzfuwEhrmZA.roa (raw, json) Hash identifier: ldXuTTIrM9/cmADJD+iI7DaLo5yereXOVCE9PkpSmcA= Subject key identifier: EC:CD:F8:37:FF:1C:D7:C9:30:60:DE:43:5F:37:EE:C0:48:6B:99:90 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BDD4455DC9601245080F06C548DD53062 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/7M34N_8c18kwYN5DXzfuwEhrmZA.roa Signing time: Tue 20 Jan 2026 21:16:41 +0000 ROA not before: Tue 20 Jan 2026 21:16:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206208 IP address blocks: 2a0d:d940:90a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:44:55:dc:96:01:24:50:80:f0:6c:54:8d:d5:30:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 20 21:16:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eccdf837ff1cd7c93060de435f37eec0486b9990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5e:bb:94:32:e8:4c:6f:fa:82:4e:b6:c1:6f: 77:5e:5e:8d:21:82:8d:cc:d0:1d:0d:cd:c7:3e:57: 83:10:98:56:98:d7:bd:99:03:f4:b2:8b:f3:88:65: 4f:bd:c3:c0:be:04:20:37:bf:09:0b:61:67:43:df: 93:66:ee:5c:56:7b:4b:1d:5e:31:7c:67:6a:82:c4: 23:e3:66:d9:3e:47:cd:ea:32:dc:63:3f:7d:e8:9b: 6a:ac:ef:45:05:1a:f2:ff:bb:d5:e9:b5:9b:c7:a8: 9a:0f:38:df:58:aa:83:2f:37:ec:8e:77:92:36:d1: 24:06:5f:e5:55:e9:56:01:95:1c:43:bb:85:46:f5: 2f:b7:16:a8:e0:10:08:58:41:42:04:0f:35:06:21: 17:c2:e1:0f:d9:14:8c:ea:60:4e:7b:61:56:9f:0a: 7f:4e:51:46:83:e4:7a:7f:70:42:e0:2d:f1:e9:60: 46:39:cb:3a:af:0a:69:d4:b2:3f:e9:80:b0:49:0b: de:6c:11:c5:3b:c2:69:f8:76:ea:c5:bd:7d:ec:f8: 5c:29:9d:00:4b:27:97:0d:cf:a2:2b:4a:e8:d2:34: 93:93:e5:fc:ac:95:f4:25:91:9d:35:34:f2:56:a0: 05:c9:99:00:fb:1f:1f:02:66:30:5f:8d:2b:fa:7e: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CD:F8:37:FF:1C:D7:C9:30:60:DE:43:5F:37:EE:C0:48:6B:99:90 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/7M34N_8c18kwYN5DXzfuwEhrmZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:90a7::/48 Signature Algorithm: sha256WithRSAEncryption 73:56:83:5d:3f:fa:dc:02:19:04:51:02:61:78:6e:57:b8:47: 7f:b0:bd:58:28:84:70:e2:d4:00:79:d1:4b:de:11:93:c0:22: 65:95:48:52:42:0a:06:bf:7b:6a:cf:cf:5e:00:ca:c2:ca:12: 85:51:cc:71:40:57:7c:dd:77:6d:21:52:fd:5b:f9:66:0b:13: 02:6e:54:06:71:d7:55:69:38:e9:1d:f3:e7:b1:c6:30:ef:2f: 9e:73:f6:c7:e7:07:1f:3c:77:b6:fc:e3:25:81:4b:c6:0a:c6: 64:39:4c:a2:01:64:8d:5b:6e:63:f6:31:37:be:8b:fe:cc:f2: d5:b0:2c:68:5c:e3:21:54:a0:73:27:07:91:90:79:d3:c3:6b: 8b:f6:68:3f:16:4d:07:fd:2a:c4:37:22:7d:bc:67:aa:14:f7: 6c:46:00:69:86:5a:ae:31:2e:8d:0c:d7:d5:85:a0:2c:1d:d9: 9d:f4:a6:75:93:1b:e9:3b:a1:b9:fd:20:2e:e9:d5:9a:3b:7e: 3f:9b:ac:d9:7c:71:53:50:e8:12:56:72:38:1f:24:34:00:13: c4:9e:c4:7c:c0:ef:20:f6:52:08:1d:3e:c8:0e:42:6c:d6:78: 0b:b0:28:05:41:a3:1e:02:4a:6d:46:9c:ff:e9:d4:ca:82:0d: 39:1c:10:3d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvdRFXclgEkUIDwbFSN1TBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTIwMjExNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2NkZjgzN2ZmMWNkN2M5MzA2MGRlNDM1ZjM3ZWVjMDQ4NmI5OTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l67lDLoTG/6gk62wW93Xl6NIYKN zNAdDc3HPleDEJhWmNe9mQP0sovziGVPvcPAvgQgN78JC2FnQ9+TZu5cVntLHV4x fGdqgsQj42bZPkfN6jLcYz996JtqrO9FBRry/7vV6bWbx6iaDzjfWKqDLzfsjneS NtEkBl/lVelWAZUcQ7uFRvUvtxao4BAIWEFCBA81BiEXwuEP2RSM6mBOe2FWnwp/ TlFGg+R6f3BC4C3x6WBGOcs6rwpp1LI/6YCwSQvebBHFO8Jp+Hbqxb197PhcKZ0A SyeXDc+iK0ro0jSTk+X8rJX0JZGdNTTyVqAFyZkA+x8fAmYwX40r+n7yNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOzN+Df/HNfJMGDeQ1837sBIa5mQMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvN00zNE5fOGMxOGt3WU41RFh6ZnV3RWhybVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJCn MA0GCSqGSIb3DQEBCwUAA4IBAQBzVoNdP/rcAhkEUQJheG5XuEd/sL1YKIRw4tQA edFL3hGTwCJllUhSQgoGv3tqz89eAMrCyhKFUcxxQFd83XdtIVL9W/lmCxMCblQG cddVaTjpHfPnscYw7y+ec/bH5wcfPHe2/OMlgUvGCsZkOUyiAWSNW25j9jE3vov+ zPLVsCxoXOMhVKBzJweRkHnTw2uL9mg/Fk0H/SrENyJ9vGeqFPdsRgBphlquMS6N DNfVhaAsHdmd9KZ1kxvpO6G5/SAu6dWaO34/m6zZfHFTUOgSVnI4HyQ0ABPEnsR8 wO8g9lIIHT7IDkJs1ngLsCgFQaMeAkptRpz/6dTKgg05HBA9 -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:55 2026 by rpki-client