This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7jyDLAtQDPRnePssUnPNp8-v_WU.roa File: 7jyDLAtQDPRnePssUnPNp8-v_WU.roa (raw, json) Hash identifier: HIYNOdUmJ5KBDltBBxyA6lQK+sFxySFYFSoEFTzjhtg= Subject key identifier: EE:3C:83:2C:0B:50:0C:F4:67:78:FB:2C:52:73:CD:A7:CF:AF:FD:65 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381C6A37F8E9EFEF8FA8D62D40BA64 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7jyDLAtQDPRnePssUnPNp8-v_WU.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39047 IP address blocks: 5.101.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1c:6a:37:f8:e9:ef:ef:8f:a8:d6:2d:40:ba:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3c832c0b500cf46778fb2c5273cda7cfaffd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:ca:b6:2b:b4:19:09:2c:b6:29:00:45:c8: c7:20:75:4b:a1:c3:95:5b:d4:bd:24:16:9a:ba:b4: 7e:57:60:5f:fa:c7:6b:b7:32:9f:f0:b9:66:1d:e7: 4d:99:1f:38:d4:63:28:16:c8:62:84:9f:03:6f:95: f5:b0:aa:92:6f:6f:da:4a:c6:85:ce:b8:64:24:0a: a2:93:98:4e:29:5b:95:c0:7a:59:9e:ae:bb:92:a0: 50:94:27:d7:c8:72:52:ce:43:17:65:5d:75:89:58: 4f:00:c6:65:2b:da:60:38:b2:69:81:fc:b7:8d:12: f8:57:31:8b:7d:65:ac:9e:c9:c6:42:b2:9a:1c:cc: 36:0b:e1:09:c7:87:5b:57:ff:b3:52:04:2e:9a:61: a1:38:31:ec:b2:3c:51:e3:55:37:d9:d9:ea:3d:cb: 3c:76:c1:32:b6:ce:14:23:6c:9e:1c:a6:f9:84:2b: 08:d2:c2:65:6d:1b:a3:29:65:83:d1:01:13:e4:07: 8b:a5:ba:55:aa:cb:e1:a9:71:c0:fc:26:1e:6e:99: 29:0c:f8:bd:f1:ca:59:cc:60:f2:bb:a7:98:c4:6f: 16:c1:2e:fd:85:67:7c:8e:36:43:cb:87:93:61:09: 8d:79:12:89:eb:de:68:ab:1b:e8:4c:6a:71:cd:28: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3C:83:2C:0B:50:0C:F4:67:78:FB:2C:52:73:CD:A7:CF:AF:FD:65 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7jyDLAtQDPRnePssUnPNp8-v_WU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:f2:26:a1:f7:c8:2d:00:1f:ed:dd:a9:a0:89:66:c0:80:14: cc:54:f7:d4:b8:61:cd:54:70:00:09:14:77:08:52:86:69:cf: dc:92:8e:59:08:84:e6:73:71:e7:da:08:ab:a6:6f:86:32:b4: 3e:db:ac:20:99:f4:f5:44:32:32:49:b2:78:ca:53:78:ef:01: cf:b5:e9:fd:e9:b6:cf:2f:de:36:86:ff:e9:84:29:b3:e4:2d: 34:c6:94:81:93:d8:c3:fe:68:a6:19:5e:f8:9d:95:de:54:e3: 96:ec:47:30:e1:3d:34:c0:91:ef:31:0b:8d:4c:d6:40:7e:f4: 8e:8a:3e:d6:84:4b:e1:1d:7c:bc:ec:27:69:49:36:e5:4a:33: b1:cb:d3:7f:3a:bf:42:c0:d5:7a:fa:a7:94:ed:b0:8e:1d:d6: 31:c0:90:76:75:85:24:27:0d:42:97:81:bb:71:90:f7:ab:de: 77:d9:51:ca:c5:c7:c6:14:3b:77:75:38:f3:8a:e0:ba:81:be: 77:1d:51:65:b5:ea:aa:77:b3:4f:1b:69:e7:e1:84:51:60:f5: bd:d1:90:2b:93:75:22:60:6f:80:91:93:71:2a:84:38:8c:40: e7:b4:14:a1:9b:92:c1:af:d1:f6:84:8b:43:56:4d:71:60:3c: 02:34:3c:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBxqN/jp7++PqNYtQLpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTNjODMyYzBiNTAwY2Y0Njc3OGZiMmM1MjczY2RhN2NmYWZmZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZjKtiu0GQkstikARcjHIHVLocOV W9S9JBaaurR+V2Bf+sdrtzKf8LlmHedNmR841GMoFshihJ8Db5X1sKqSb2/aSsaF zrhkJAqik5hOKVuVwHpZnq67kqBQlCfXyHJSzkMXZV11iVhPAMZlK9pgOLJpgfy3 jRL4VzGLfWWsnsnGQrKaHMw2C+EJx4dbV/+zUgQummGhODHssjxR41U32dnqPcs8 dsEyts4UI2yeHKb5hCsI0sJlbRujKWWD0QET5AeLpbpVqsvhqXHA/CYebpkpDPi9 8cpZzGDyu6eYxG8WwS79hWd8jjZDy4eTYQmNeRKJ695oqxvoTGpxzSjbRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO48gywLUAz0Z3j7LFJzzafPr/1lMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvN2p5RExBdFFEUFJuZVBzc1VuUE5wOC12X1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBWXQMA0G CSqGSIb3DQEBCwUAA4IBAQAK8iah98gtAB/t3amgiWbAgBTMVPfUuGHNVHAACRR3 CFKGac/cko5ZCITmc3Hn2girpm+GMrQ+26wgmfT1RDIySbJ4ylN47wHPten96bbP L942hv/phCmz5C00xpSBk9jD/mimGV74nZXeVOOW7Ecw4T00wJHvMQuNTNZAfvSO ij7WhEvhHXy87CdpSTblSjOxy9N/Or9CwNV6+qeU7bCOHdYxwJB2dYUkJw1Cl4G7 cZD3q9532VHKxcfGFDt3dTjziuC6gb53HVFlteqqd7NPG2nn4YRRYPW90ZArk3Ui YG+AkZNxKoQ4jEDntBShm5LBr9H2hItDVk1xYDwCNDzH -----END CERTIFICATE-----Generated at Tue Jan 20 09:20:26 2026 by rpki-client