This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa File: 7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa (raw, json) Hash identifier: jnzYvaFScNPNn/hYq4GU8Vjj7fRUWEERctCQEuyXXJ8= Subject key identifier: ED:7A:F0:9A:1A:E0:FE:09:35:4D:27:DB:E4:74:16:B4:B7:98:4B:2C Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F8299A4B9296A68FCC3FDAC94998 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa Signing time: Fri 02 Jan 2026 14:19:33 +0000 ROA not before: Fri 02 Jan 2026 14:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51645 IP address blocks: 2a02:2698:2000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f8:29:9a:4b:92:96:a6:8f:cc:3f:da:c9:49:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed7af09a1ae0fe09354d27dbe47416b4b7984b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:85:a9:76:5f:3a:44:65:72:2c:d2:d1:23: 38:ec:c9:b1:dd:92:35:0f:3f:c2:ed:a1:81:7b:ef: 53:f8:e7:6f:81:49:9d:d2:a8:c5:ba:37:03:8f:e2: 0c:d1:b9:60:af:2f:27:da:4b:4e:36:72:57:95:6c: 28:70:5a:aa:52:20:0c:80:bd:8c:8d:70:5d:9e:76: 16:9d:6c:31:86:07:df:be:1d:47:f4:1f:35:81:bd: 4b:0a:81:80:0a:07:ea:9c:ca:07:88:d6:cc:c7:fd: eb:e1:9f:76:19:e0:1e:2c:29:40:26:38:45:b2:96: 05:10:48:33:ab:ea:f3:b8:37:c1:46:c4:26:5c:22: 76:12:f5:18:91:22:76:0e:3d:a0:5f:f5:d9:da:95: e5:63:40:50:37:c7:13:2b:13:9e:40:f5:da:7f:eb: fc:bf:2b:2d:7d:18:33:c7:c2:35:6b:f6:43:bc:26: 2f:81:3d:3d:be:10:b2:7f:62:37:ce:f2:33:a6:90: 75:d1:61:52:b1:70:c0:c1:a3:73:a0:e3:fe:68:2f: ea:6f:c5:fd:21:9c:a0:04:fa:62:99:18:67:0a:19: c6:af:e1:fe:a6:8b:5d:54:38:05:dc:ca:ca:62:d9: 46:2b:37:d2:9c:1d:32:54:14:4c:d0:66:ee:5b:9a: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:F0:9A:1A:E0:FE:09:35:4D:27:DB:E4:74:16:B4:B7:98:4B:2C X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:2000::/38 Signature Algorithm: sha256WithRSAEncryption b7:2c:30:87:8a:8d:f0:9e:6f:5d:c4:5e:31:50:f9:e2:8e:da: 5d:d3:74:fd:f0:fa:67:21:10:b9:e2:31:74:09:ca:d2:d0:79: 32:b2:49:d2:75:1e:c7:d3:52:0d:06:9a:97:55:5e:9e:d8:57: 99:b3:d1:bb:a9:9d:a4:f3:c3:ab:e9:d7:c6:25:b5:1e:e8:52: a5:af:f9:48:46:05:51:a6:f6:aa:89:ad:e5:cf:46:6d:43:f1: 3a:fb:66:4e:34:c6:b7:32:dd:50:7e:2d:84:be:05:6e:24:0f: 87:8f:30:26:40:f8:98:44:3c:12:b9:26:90:60:7b:08:05:f0: 7d:de:f9:21:f0:c4:69:2c:74:f0:67:d8:18:4e:d7:2b:04:1a: ba:50:f2:53:a2:51:75:49:ed:c3:01:89:05:db:53:99:b9:ce: 02:0a:d9:63:a6:ee:73:db:52:4a:9e:52:34:b6:ac:1f:51:82: d6:41:03:39:e6:9b:47:65:67:7a:83:79:04:81:27:07:56:30: 81:9e:57:e2:27:1b:6d:25:83:91:fc:35:3a:ec:26:cd:75:be: d1:96:fc:ee:27:7a:34:d6:76:a5:0f:61:42:3f:fb:63:1b:fd: 83:32:a9:a9:8a:19:6d:15:71:c2:ef:9c:94:a5:ac:54:6c:b2: 4d:92:6a:3a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/gpmkuSlqaPzD/ayUmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDdhZjA5YTFhZTBmZTA5MzU0ZDI3ZGJlNDc0MTZiNGI3OTg0YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9eFqXZfOkRlcizS0SM47Mmx3ZI1 Dz/C7aGBe+9T+OdvgUmd0qjFujcDj+IM0blgry8n2ktONnJXlWwocFqqUiAMgL2M jXBdnnYWnWwxhgffvh1H9B81gb1LCoGACgfqnMoHiNbMx/3r4Z92GeAeLClAJjhF spYFEEgzq+rzuDfBRsQmXCJ2EvUYkSJ2Dj2gX/XZ2pXlY0BQN8cTKxOeQPXaf+v8 vystfRgzx8I1a/ZDvCYvgT09vhCyf2I3zvIzppB10WFSsXDAwaNzoOP+aC/qb8X9 IZygBPpimRhnChnGr+H+potdVDgF3MrKYtlGKzfSnB0yVBRM0GbuW5pxtQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFO168Joa4P4JNU0n2+R0FrS3mEssMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvN1hyd21ocmdfZ2sxVFNmYjVIUVd0TGVZU3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmCAw DQYJKoZIhvcNAQELBQADggEBALcsMIeKjfCeb13EXjFQ+eKO2l3TdP3w+mchELni MXQJytLQeTKySdJ1HsfTUg0GmpdVXp7YV5mz0bupnaTzw6vp18YltR7oUqWv+UhG BVGm9qqJreXPRm1D8Tr7Zk40xrcy3VB+LYS+BW4kD4ePMCZA+JhEPBK5JpBgewgF 8H3e+SHwxGksdPBn2BhO1ysEGrpQ8lOiUXVJ7cMBiQXbU5m5zgIK2WOm7nPbUkqe UjS2rB9RgtZBAznmm0dlZ3qDeQSBJwdWMIGeV+InG20lg5H8NTrsJs11vtGW/O4n ejTWdqUPYUI/+2Mb/YMyqamKGW0VccLvnJSlrFRssk2Sajo= -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:02 2026 by rpki-client