This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/t7vqBSGhovS4012cVOMWJBs1sqw.roa File: t7vqBSGhovS4012cVOMWJBs1sqw.roa (raw, json) Hash identifier: /XopIYi0JbnszG1jIAU2dDD3+WTYzo0tSbwoFenxjUc= Subject key identifier: B7:BB:EA:05:21:A1:A2:F4:B8:D3:5D:9C:54:E3:16:24:1B:35:B2:AC Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B8433ADDA92FFF43D54CE4F9E031A3D09 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/t7vqBSGhovS4012cVOMWJBs1sqw.roa Signing time: Sat 03 Jan 2026 14:12:17 +0000 ROA not before: Sat 03 Jan 2026 14:12:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207567 IP address blocks: 2a0d:d940:90a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:84:33:ad:da:92:ff:f4:3d:54:ce:4f:9e:03:1a:3d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 3 14:12:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7bbea0521a1a2f4b8d35d9c54e316241b35b2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:9f:e9:2a:c9:bc:66:24:d9:a2:1d:b4:b5: 2c:0f:10:68:51:5d:be:e8:ff:20:c8:68:de:7c:e4: 63:03:61:9d:c0:a4:f3:e0:4d:a9:36:4a:30:b9:23: 85:26:b3:ed:f9:e0:e5:0a:3f:66:3e:dd:c1:0d:3a: d7:2e:ab:bc:7c:cb:11:60:b0:f6:3f:bc:fb:3c:f6: a3:bf:a0:32:9a:f5:d0:72:f5:60:97:30:2f:f9:7d: 61:df:a1:b9:93:b8:43:27:93:5a:1e:fb:fc:2a:d0: 1b:fc:25:c2:43:3d:a3:96:da:ee:01:f2:cb:14:f4: d3:0a:2d:d3:9c:22:e5:0c:1e:fd:1b:68:6a:10:f9: c7:f3:a8:c1:19:7f:98:1b:91:ab:b5:0b:6a:04:ea: 97:15:59:16:c3:42:8c:a0:aa:60:98:7e:77:cd:18: 0c:3b:57:58:cb:22:c5:cf:88:d6:a4:78:19:8f:23: 8d:96:e8:13:00:86:30:70:18:36:4e:93:4f:98:5b: 17:4f:78:15:86:df:1f:d5:c4:6c:61:05:12:98:7b: 6f:f6:11:54:c8:de:24:dd:1b:f9:d4:39:69:ee:38: 9f:0d:5d:05:60:cc:aa:64:4f:42:7e:35:61:68:c6: 34:c1:1f:3f:af:f3:07:a1:da:7d:28:60:34:52:35: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:EA:05:21:A1:A2:F4:B8:D3:5D:9C:54:E3:16:24:1B:35:B2:AC X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/t7vqBSGhovS4012cVOMWJBs1sqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:90a0::/48 Signature Algorithm: sha256WithRSAEncryption e6:53:b1:26:8d:f2:63:6d:3a:25:a5:39:db:81:fe:5b:a6:d2: c9:22:c5:07:9a:d5:21:c3:66:7a:d2:a0:01:2f:c3:94:5a:ae: e8:a4:85:1c:cf:8b:e8:63:22:a5:09:a7:0d:bf:1c:5f:21:d9: 65:5a:13:bf:77:c1:17:70:48:5a:93:36:ea:83:24:33:8b:94: 70:b9:b2:e5:e9:14:8d:05:b1:ca:f9:0c:c9:69:76:82:bc:1e: e9:5c:8c:41:38:bb:5f:e8:19:f3:68:ac:25:1d:91:84:76:96: 8c:de:11:2b:0d:c0:2a:e5:52:32:ee:6e:2f:32:fa:db:0d:77: e5:56:de:a1:27:f7:bb:7b:96:2b:fb:f0:c3:d5:30:11:79:6d: 89:26:5e:87:c8:e5:b3:ec:82:5a:52:87:d7:a0:aa:d1:0b:d4: 79:cd:ef:c0:c8:9e:12:e2:fd:89:08:44:64:3d:fe:cc:a4:2e: 47:3e:5f:c4:f5:f5:2d:2c:c2:92:c3:3b:83:38:77:0a:f2:19: ec:83:f2:90:5d:50:1d:82:3a:59:9a:76:f2:e9:9b:27:5c:ed: 04:b3:14:05:71:60:64:cb:c2:82:c5:a8:ba:32:5c:ea:fb:d3: 81:6c:42:26:77:75:24:b0:21:b9:f7:a0:1f:fc:79:85:1e:6e: 41:27:32:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuEM63akv/0PVTOT54DGj0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAzMTQxMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2JiZWEwNTIxYTFhMmY0YjhkMzVkOWM1NGUzMTYyNDFiMzViMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt+f6SrJvGYk2aIdtLUsDxBoUV2+ 6P8gyGjefORjA2GdwKTz4E2pNkowuSOFJrPt+eDlCj9mPt3BDTrXLqu8fMsRYLD2 P7z7PPajv6AymvXQcvVglzAv+X1h36G5k7hDJ5NaHvv8KtAb/CXCQz2jltruAfLL FPTTCi3TnCLlDB79G2hqEPnH86jBGX+YG5GrtQtqBOqXFVkWw0KMoKpgmH53zRgM O1dYyyLFz4jWpHgZjyONlugTAIYwcBg2TpNPmFsXT3gVht8f1cRsYQUSmHtv9hFU yN4k3Rv51Dlp7jifDV0FYMyqZE9CfjVhaMY0wR8/r/MHodp9KGA0UjVUdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLe76gUhoaL0uNNdnFTjFiQbNbKsMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvdDd2cUJTR2hvdlM0MDEyY1ZPTVdKQnMxc3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJCg MA0GCSqGSIb3DQEBCwUAA4IBAQDmU7EmjfJjbTolpTnbgf5bptLJIsUHmtUhw2Z6 0qABL8OUWq7opIUcz4voYyKlCacNvxxfIdllWhO/d8EXcEhakzbqgyQzi5RwubLl 6RSNBbHK+QzJaXaCvB7pXIxBOLtf6BnzaKwlHZGEdpaM3hErDcAq5VIy7m4vMvrb DXflVt6hJ/e7e5Yr+/DD1TAReW2JJl6HyOWz7IJaUofXoKrRC9R5ze/AyJ4S4v2J CERkPf7MpC5HPl/E9fUtLMKSwzuDOHcK8hnsg/KQXVAdgjpZmnby6ZsnXO0EsxQF cWBky8KCxai6Mlzq+9OBbEImd3UksCG596Af/HmFHm5BJzLO -----END CERTIFICATE-----Generated at Wed Jan 21 08:21:25 2026 by rpki-client