This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ri7vBnojjQ27jO00MRAqT9x2NWY.roa File: Ri7vBnojjQ27jO00MRAqT9x2NWY.roa (raw, json) Hash identifier: WVsqPZrXhhYNP1u0R0UqHvl1wGDtQ1E7QVAB6vNkYcE= Subject key identifier: 46:2E:EF:06:7A:23:8D:0D:BB:8C:ED:34:31:10:2A:4F:DC:76:35:66 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C295A1E22D02486DA79E431AF4D2 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ri7vBnojjQ27jO00MRAqT9x2NWY.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 2a0e:c7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c2:95:a1:e2:2d:02:48:6d:a7:9e:43:1a:f4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=462eef067a238d0dbb8ced3431102a4fdc763566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:31:f7:50:59:7a:fa:73:62:be:94:ab:22: 80:12:a3:aa:f9:47:43:19:25:de:9c:29:2e:f7:62: cb:9f:23:31:0e:06:13:ea:52:5f:c5:6c:d1:f0:89: 5a:71:9f:72:65:47:6f:53:b2:53:7f:de:52:b6:04: 1b:ee:c8:04:2b:50:3b:73:ba:6e:e8:79:1d:47:1c: 16:ef:a5:91:72:ea:37:23:74:14:48:e8:bc:6b:9c: f7:75:4d:cc:f5:f3:d8:60:23:72:2a:32:65:ae:83: bc:e1:3a:c4:23:9f:1b:f2:13:54:1f:e2:0e:59:5f: 8d:de:e4:67:40:83:4e:92:c8:78:1c:7c:72:d5:2c: 5f:19:05:33:b4:ea:a9:a0:aa:2d:73:10:93:a1:e5: 5f:32:c6:cd:ad:6c:fe:58:97:6f:2c:05:84:29:56: e2:ce:f6:c9:3f:80:8f:8e:95:a0:b0:e7:aa:4a:de: c6:b5:0b:ab:6a:20:ce:4e:79:82:b6:a3:d2:96:db: 24:f5:b5:e6:a8:a0:3c:69:34:be:6a:db:5a:60:8c: cb:25:e4:03:7d:3f:d1:af:d3:3c:94:5c:d8:c7:29: 62:6d:39:b0:66:c4:d4:a2:db:59:bd:d4:0e:cf:d8: 82:cf:18:a1:6e:ac:9a:76:ce:60:b6:73:b5:c3:4b: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:EF:06:7A:23:8D:0D:BB:8C:ED:34:31:10:2A:4F:DC:76:35:66 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Ri7vBnojjQ27jO00MRAqT9x2NWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption 23:6a:bf:d6:31:9b:f0:1e:4c:ac:fd:b1:d3:65:7a:85:d3:40: ef:8e:48:38:a3:63:f4:dd:dd:ec:f2:8c:45:f7:89:17:9f:af: bd:d5:e8:0c:95:4f:0e:5c:d8:5e:62:6e:2c:ff:c1:30:a7:2b: 9b:39:4f:3f:cb:b3:50:97:72:b0:f6:6f:ff:9f:bd:85:86:df: a9:50:c6:6d:ea:dd:63:7a:b4:07:5f:05:3d:43:2f:4e:66:81: c1:a1:53:80:3a:82:63:f1:96:88:f1:5b:af:d0:d3:bb:ae:2f: 9f:d9:a9:59:36:2c:b5:28:8d:b2:94:5d:c0:20:0c:f1:25:60: 7b:84:db:87:22:ef:d6:6b:2d:f2:8a:0d:87:a4:e7:d0:5a:ab: bf:90:df:4a:d7:53:2f:ee:39:21:37:25:ce:0f:d3:ba:99:00: a3:9b:44:2d:7d:2b:d1:d4:95:62:1f:04:56:e5:14:9e:0f:27: 97:3b:66:d7:6f:0e:70:de:9a:4c:f7:75:0c:48:dc:81:4e:3c: 41:78:12:04:0e:a2:e5:17:d7:75:28:fa:db:81:55:9f:95:a6: dc:87:e0:cf:71:ab:2a:56:36:68:2b:87:e9:f8:b0:3f:89:7f: 34:3b:4a:27:48:4d:a8:c5:14:12:b9:74:2d:89:8d:c7:71:88: 1c:35:5a:f3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/gsKVoeItAkhtp55DGvTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjJlZWYwNjdhMjM4ZDBkYmI4Y2VkMzQzMTEwMmE0ZmRjNzYzNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qIx91BZevpzYr6UqyKAEqOq+UdD GSXenCku92LLnyMxDgYT6lJfxWzR8IlacZ9yZUdvU7JTf95StgQb7sgEK1A7c7pu 6HkdRxwW76WRcuo3I3QUSOi8a5z3dU3M9fPYYCNyKjJlroO84TrEI58b8hNUH+IO WV+N3uRnQINOksh4HHxy1SxfGQUztOqpoKotcxCToeVfMsbNrWz+WJdvLAWEKVbi zvbJP4CPjpWgsOeqSt7GtQuraiDOTnmCtqPSltsk9bXmqKA8aTS+attaYIzLJeQD fT/Rr9M8lFzYxylibTmwZsTUottZvdQOz9iCzxihbqyads5gtnO1w0sj0QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEYu7wZ6I40Nu4ztNDEQKk/cdjVmMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvUmk3dkJub2pqUTI3ak8wME1SQXFUOXgyTldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7HwDAN BgkqhkiG9w0BAQsFAAOCAQEAI2q/1jGb8B5MrP2x02V6hdNA745IOKNj9N3d7PKM RfeJF5+vvdXoDJVPDlzYXmJuLP/BMKcrmzlPP8uzUJdysPZv/5+9hYbfqVDGberd Y3q0B18FPUMvTmaBwaFTgDqCY/GWiPFbr9DTu64vn9mpWTYstSiNspRdwCAM8SVg e4TbhyLv1mst8ooNh6Tn0Fqrv5DfStdTL+45ITclzg/TupkAo5tELX0r0dSVYh8E VuUUng8nlztm128OcN6aTPd1DEjcgU48QXgSBA6i5RfXdSj624FVn5Wm3Ifgz3Gr KlY2aCuH6fiwP4l/NDtKJ0hNqMUUErl0LYmNx3GIHDVa8w== -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:58 2026 by rpki-client