This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/7H2mFDg6qfXpVYnxbXn0fEFWELs.roa File: 7H2mFDg6qfXpVYnxbXn0fEFWELs.roa (raw, json) Hash identifier: J9Hxga4uilgUHWboi+rXmCtEsrXocnGU8yxF/NAwyo4= Subject key identifier: EC:7D:A6:14:38:3A:A9:F5:E9:55:89:F1:6D:79:F4:7C:41:56:10:BB Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55F5DE2163C39CB014DA1B130ECD2 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/7H2mFDg6qfXpVYnxbXn0fEFWELs.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212065 IP address blocks: 2a10:4646:c::/48 maxlen: 48 2a10:4646:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5f:5d:e2:16:3c:39:cb:01:4d:a1:b1:30:ec:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec7da614383aa9f5e95589f16d79f47c415610bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:c0:50:96:4d:7f:5b:6d:53:be:92:3d:fa: a0:9e:89:35:ec:b0:ce:c0:25:a5:7d:78:23:c8:93: 2a:67:79:0a:f2:43:76:87:02:68:62:2d:15:ec:f7: 4b:9a:1c:f2:b9:4d:09:74:b9:f3:42:b0:c6:8d:2a: a9:2f:eb:d6:e1:f6:ed:a3:10:33:da:1a:cf:d0:db: f2:05:82:63:e3:4f:e2:e4:32:45:b3:94:6f:86:c7: a3:91:e0:a7:fb:b4:2b:93:54:72:81:42:1c:6f:69: 61:7a:6f:72:0a:8c:04:b9:3e:3c:61:55:ee:12:3c: ef:13:f6:b9:27:6c:94:c2:c4:95:c0:35:b3:97:ca: f5:a7:5b:8b:69:5f:23:c5:3e:70:db:73:df:9a:af: 47:87:de:c7:ab:a3:12:81:3c:0f:4b:68:6b:4b:17: fc:db:fc:7b:5b:21:57:4a:b6:92:1b:6c:24:ed:1c: b5:c7:ec:e1:d5:a2:54:cc:f4:ad:3f:9a:2b:4e:5f: e1:8d:a0:e1:75:7b:b7:56:c0:fd:0f:47:6c:7b:cd: b8:f6:46:21:ae:ba:26:e1:61:01:80:7b:10:9f:5b: e5:23:3f:77:9b:d8:b2:44:be:ec:bc:35:eb:a8:e5: 5f:22:71:98:77:78:99:4b:2c:bd:df:f1:e7:5f:aa: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7D:A6:14:38:3A:A9:F5:E9:55:89:F1:6D:79:F4:7C:41:56:10:BB X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/7H2mFDg6qfXpVYnxbXn0fEFWELs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:c::/48 2a10:4646:14::/48 Signature Algorithm: sha256WithRSAEncryption 20:af:c2:25:03:74:02:8d:a2:82:fb:44:0b:bb:7a:6f:d0:03: 03:9f:4c:df:1c:af:0d:5c:74:76:bb:e0:28:7f:2b:4f:60:ea: 0f:bf:f0:b6:14:a0:05:c2:ae:1f:17:db:13:c6:d1:f6:0b:42: a0:e3:64:94:e2:48:ed:0a:7f:07:7c:44:9e:a1:7a:03:33:48: 42:04:f6:17:07:3f:fb:9e:b9:e0:4f:e7:c4:1e:6d:58:b2:2e: be:e5:e8:3a:af:4b:80:78:9a:2a:f6:af:fc:44:c0:98:fa:a8: 09:08:60:78:97:f4:4c:89:ce:69:76:23:15:f9:e8:fa:e8:29: f7:1b:6c:73:52:fb:0b:ab:5f:55:45:b5:8d:ab:26:c9:07:66: 7d:c3:4c:9d:75:2b:60:7a:96:a0:2a:ef:2f:09:6b:0b:99:01: 91:9f:d7:6b:c0:00:71:a1:2b:8b:4c:13:7c:fb:f6:96:44:84: 65:24:f7:49:f4:58:d5:ef:bd:67:67:09:57:4d:9d:86:04:de: 05:ac:17:36:dd:67:7f:89:a3:a2:fb:d0:ab:fc:fa:4d:41:7b: 7e:3c:8d:c2:85:eb:a7:52:b5:93:cb:a7:60:d1:e3:65:67:c3: 0e:80:9b:6c:50:ee:e5:0f:e8:83:a0:33:e8:fd:db:77:59:68: 31:88:0b:59 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pV9d4hY8OcsBTaGxMOzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzdkYTYxNDM4M2FhOWY1ZTk1NTg5ZjE2ZDc5ZjQ3YzQxNTYxMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmbAUJZNf1ttU76SPfqgnok17LDO wCWlfXgjyJMqZ3kK8kN2hwJoYi0V7PdLmhzyuU0JdLnzQrDGjSqpL+vW4fbtoxAz 2hrP0NvyBYJj40/i5DJFs5RvhsejkeCn+7Qrk1RygUIcb2lhem9yCowEuT48YVXu EjzvE/a5J2yUwsSVwDWzl8r1p1uLaV8jxT5w23Pfmq9Hh97Hq6MSgTwPS2hrSxf8 2/x7WyFXSraSG2wk7Ry1x+zh1aJUzPStP5orTl/hjaDhdXu3VsD9D0dse8249kYh rrom4WEBgHsQn1vlIz93m9iyRL7svDXrqOVfInGYd3iZSyy93/HnX6qa7wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOx9phQ4Oqn16VWJ8W159HxBVhC7MB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvN0gybUZEZzZxZlhwVllueGJYbjBmRUZXRUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhBGRgAM AwcAKhBGRgAUMA0GCSqGSIb3DQEBCwUAA4IBAQAgr8IlA3QCjaKC+0QLu3pv0AMD n0zfHK8NXHR2u+AofytPYOoPv/C2FKAFwq4fF9sTxtH2C0Kg42SU4kjtCn8HfESe oXoDM0hCBPYXBz/7nrngT+fEHm1Ysi6+5eg6r0uAeJoq9q/8RMCY+qgJCGB4l/RM ic5pdiMV+ej66Cn3G2xzUvsLq19VRbWNqybJB2Z9w0yddStgepagKu8vCWsLmQGR n9drwABxoSuLTBN8+/aWRIRlJPdJ9FjV771nZwlXTZ2GBN4FrBc23Wd/iaOi+9Cr /PpNQXt+PI3CheunUrWTy6dg0eNlZ8MOgJtsUO7lD+iDoDPo/dt3WWgxiAtZ -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:36 2026 by rpki-client