This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/7hJafOPCpVSEdxOE76y6niPbYbg.roa File: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (raw, json) Hash identifier: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc= Subject key identifier: EE:12:5A:7C:E3:C2:A5:54:84:77:13:84:EF:AC:BA:9E:23:DB:61:B8 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7DDF53AEC841FBEED8181B7E3AF7 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/7hJafOPCpVSEdxOE76y6niPbYbg.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200078 IP address blocks: 2a13:b487:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7d:df:53:ae:c8:41:fb:ee:d8:18:1b:7e:3a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee125a7ce3c2a55484771384efacba9e23db61b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:4c:2b:c3:49:f9:3d:12:2a:46:b0:90:26: d4:62:f7:54:27:be:54:a4:6c:18:77:fe:18:7d:bf: 12:4d:07:77:19:93:a8:30:ac:00:06:e8:93:f5:ac: 94:91:2d:6d:8e:44:8b:73:4b:bc:d4:3a:c0:b2:58: d2:14:39:99:08:f6:2f:63:fb:16:b8:52:c2:71:21: d2:50:e9:63:6a:4f:34:7a:6b:70:0a:a0:29:3f:61: ff:4d:30:5f:b8:5c:3e:c1:a6:63:90:5f:57:a3:7a: a1:86:4a:97:5a:eb:3e:f9:e7:90:21:77:17:fd:7c: 53:9d:21:b5:1c:44:84:f4:15:6f:22:e5:16:0a:e3: 08:e7:19:2e:93:19:51:e2:dd:78:82:1b:5b:d9:9b: 13:86:6a:56:9e:a3:7b:b4:27:91:74:70:45:15:a7: 4b:06:a6:0b:23:ea:aa:e5:79:3b:21:02:3c:e7:dd: f6:b4:c9:fe:1b:eb:44:59:a6:91:85:6a:b2:24:79: fb:91:db:5e:c3:30:21:2c:56:54:c7:56:16:f2:9e: c5:92:93:2c:c5:0e:a4:31:68:81:72:40:d1:68:94: 85:f7:c4:ef:bc:94:09:73:00:a3:a0:49:37:e4:a4: ce:12:3f:f8:5c:25:75:01:2b:76:8a:17:cd:09:bb: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:5A:7C:E3:C2:A5:54:84:77:13:84:EF:AC:BA:9E:23:DB:61:B8 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/7hJafOPCpVSEdxOE76y6niPbYbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:1100::/40 Signature Algorithm: sha256WithRSAEncryption 2e:0d:cc:e9:5b:0d:27:df:95:fa:ad:05:ed:74:1c:e5:0b:61: 9e:a1:2b:b4:5e:3b:2b:44:d9:8d:45:38:b7:f6:76:97:06:f0: 37:b9:a1:af:f5:81:ab:cf:09:22:36:82:94:cb:b9:50:38:b5: f7:96:a7:e6:b3:c7:cb:44:bb:a1:ee:81:81:96:cb:ec:b7:5f: cc:57:51:95:0e:32:0e:08:77:40:83:a5:38:e5:6a:75:c5:0a: 52:30:cb:a8:b5:9c:41:2d:59:c1:2e:8b:9a:34:f7:9d:b8:2b: f0:57:bc:c0:e4:62:63:95:06:d2:b5:33:5a:f7:a1:f4:c4:d8: d9:ca:b1:98:b1:17:78:c1:4c:e5:77:5c:68:ec:c1:b4:f4:b3: cb:76:0d:a9:d5:ba:90:5f:20:c8:fd:31:79:6a:6c:d4:66:48: 77:38:ad:56:7b:2c:27:71:a2:ba:fb:7b:d0:9f:df:b4:00:94: cf:1d:e7:37:80:d1:c6:a2:14:29:7c:fc:9e:c0:41:22:d2:04: e4:dd:2f:1e:64:3f:8b:45:e1:e9:0f:df:86:ad:99:cd:6a:c0: 62:37:e0:90:c2:58:d9:30:36:35:7b:22:3b:cf:bc:ee:bd:33: 8c:1c:2f:5d:b6:c0:78:9b:ce:83:9e:42:0b:ee:95:66:10:9e: fd:f9:0c:88 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XH3fU67IQfvu2Bgbfjr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTEyNWE3Y2UzYzJhNTU0ODQ3NzEzODRlZmFjYmE5ZTIzZGI2MWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fVMK8NJ+T0SKkawkCbUYvdUJ75U pGwYd/4Yfb8STQd3GZOoMKwABuiT9ayUkS1tjkSLc0u81DrAsljSFDmZCPYvY/sW uFLCcSHSUOljak80emtwCqApP2H/TTBfuFw+waZjkF9Xo3qhhkqXWus++eeQIXcX /XxTnSG1HESE9BVvIuUWCuMI5xkukxlR4t14ghtb2ZsThmpWnqN7tCeRdHBFFadL BqYLI+qq5Xk7IQI85932tMn+G+tEWaaRhWqyJHn7kdtewzAhLFZUx1YW8p7FkpMs xQ6kMWiBckDRaJSF98TvvJQJcwCjoEk35KTOEj/4XCV1ASt2ihfNCbuImwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFO4SWnzjwqVUhHcThO+sup4j22G4MB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvN2hKYWZPUENwVlNFZHhPRTc2eTZuaVBiWWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxEw DQYJKoZIhvcNAQELBQADggEBAC4NzOlbDSfflfqtBe10HOULYZ6hK7ReOytE2Y1F OLf2dpcG8De5oa/1gavPCSI2gpTLuVA4tfeWp+azx8tEu6HugYGWy+y3X8xXUZUO Mg4Id0CDpTjlanXFClIwy6i1nEEtWcEui5o09524K/BXvMDkYmOVBtK1M1r3ofTE 2NnKsZixF3jBTOV3XGjswbT0s8t2DanVupBfIMj9MXlqbNRmSHc4rVZ7LCdxorr7 e9Cf37QAlM8d5zeA0caiFCl8/J7AQSLSBOTdLx5kP4tF4ekP34atmc1qwGI34JDC WNkwNjV7IjvPvO69M4wcL122wHibzoOeQgvulWYQnv35DIg= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:41 2026 by rpki-client