This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/7jGC3eByRg_Kov58Z9afFa1zFhk.roa File: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (raw, json) Hash identifier: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs= Subject key identifier: EE:31:82:DD:E0:72:46:0F:CA:A2:FE:7C:67:D6:9F:15:AD:73:16:19 Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Certificate serial: 019B7FF18929C3C2C14BCB4C444ECCAD83B3 Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/7jGC3eByRg_Kov58Z9afFa1zFhk.roa Signing time: Fri 02 Jan 2026 18:21:34 +0000 ROA not before: Fri 02 Jan 2026 18:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 2a14:4b41:1300::/48 maxlen: 48 2a14:4b41:1301::/48 maxlen: 48 2a14:4b41:1302::/48 maxlen: 48 2a14:4b41:1303::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:89:29:c3:c2:c1:4b:cb:4c:44:4e:cc:ad:83:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3182dde072460fcaa2fe7c67d69f15ad731619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:69:28:17:49:90:60:30:5f:71:d2:fa:fe: 6f:7c:b1:2d:c2:01:41:90:76:14:e5:62:b5:ae:d8: 6d:58:ed:12:58:e6:c2:2d:7a:71:e4:fd:a4:76:12: ff:10:23:5a:6f:b8:77:91:51:db:33:19:5f:4e:b7: ef:6b:48:f0:18:3f:40:f4:cd:02:18:4e:33:cc:1e: 9a:96:98:87:ed:84:8a:05:3c:19:88:6b:97:c0:fa: c3:66:c5:04:e7:49:32:52:07:08:71:46:40:36:a8: 6e:39:bf:33:e3:39:06:a4:29:4a:26:b4:5a:c2:bf: 95:f6:e8:66:42:3c:12:4f:cc:3d:61:fc:89:60:c3: d6:e8:2a:e9:63:b3:1c:45:74:c3:de:0d:f0:17:2f: 39:c9:d7:39:b8:95:56:53:d6:f0:78:22:32:8d:1c: 9b:13:b1:a7:2c:21:a9:91:ed:a6:0e:46:d9:af:87: 15:14:1d:8f:3a:05:6b:b3:34:9f:db:a7:78:fd:2b: 34:22:8c:4f:3a:f2:db:fd:cb:f7:b7:ae:f0:e6:5c: a9:69:75:19:c0:96:a2:06:cd:86:fc:a2:97:4a:07: f8:e3:b2:23:4e:9a:33:9f:ce:78:5b:72:b5:b1:49: ef:4d:81:ee:5c:54:81:32:e4:b8:70:b2:8f:f0:ea: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:82:DD:E0:72:46:0F:CA:A2:FE:7C:67:D6:9F:15:AD:73:16:19 X509v3 Authority Key Identifier: keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/7jGC3eByRg_Kov58Z9afFa1zFhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4b41:1300::/46 Signature Algorithm: sha256WithRSAEncryption a0:a7:5b:5b:c2:00:68:ae:44:65:d0:b6:00:f2:c8:b7:6d:aa: c5:a9:b9:0a:26:86:9c:13:39:78:bd:7b:bd:20:6d:55:eb:dc: 7a:14:e4:ce:c5:cb:72:69:fe:94:0a:f2:27:23:02:f6:24:f5: a2:6a:4b:95:6d:ef:ec:89:84:0e:ad:79:c7:e5:49:6b:8c:a3: db:2f:a3:7f:74:6e:9a:a0:77:62:1b:a8:32:eb:a3:d9:d5:90: 7b:16:1e:2c:bb:4f:36:98:31:e3:b2:d4:4d:54:d8:03:4a:6d: ba:ce:2e:ba:69:24:5b:fd:b6:52:e4:95:a2:e7:72:59:4a:e3: 1a:31:db:43:5c:89:5b:5d:2e:d5:01:47:8a:15:7a:78:d1:37: e0:98:12:49:56:8f:35:51:cc:ac:f9:22:03:6e:6c:73:02:68: 0d:a9:8c:54:5a:e6:15:df:83:f7:5c:b0:8e:04:d4:77:3d:53: 3d:d1:8c:2e:ab:e6:06:c0:70:2d:9d:d9:39:c7:74:92:17:25: 73:76:b2:dc:a9:ef:60:af:93:ee:e6:1a:d0:ec:ab:83:91:c4: f1:57:04:0a:29:62:0c:e4:b3:23:32:19:35:6a:9c:be:24:9c: 0a:53:5f:ef:5d:41:2d:fc:df:49:bb:32:68:1e:cc:9d:4d:6e: 17:19:bc:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8Ykpw8LBS8tMRE7MrYOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey YTlkNjQwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTMxODJkZGUwNzI0NjBmY2FhMmZlN2M2N2Q2OWYxNWFkNzMxNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R5pKBdJkGAwX3HS+v5vfLEtwgFB kHYU5WK1rthtWO0SWObCLXpx5P2kdhL/ECNab7h3kVHbMxlfTrfva0jwGD9A9M0C GE4zzB6alpiH7YSKBTwZiGuXwPrDZsUE50kyUgcIcUZANqhuOb8z4zkGpClKJrRa wr+V9uhmQjwST8w9YfyJYMPW6CrpY7McRXTD3g3wFy85ydc5uJVWU9bweCIyjRyb E7GnLCGpke2mDkbZr4cVFB2POgVrszSf26d4/Ss0IoxPOvLb/cv3t67w5lypaXUZ wJaiBs2G/KKXSgf447IjTpozn854W3K1sUnvTYHuXFSBMuS4cLKP8OoQQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO4xgt3gckYPyqL+fGfWnxWtcxYZMB8GA1UdIwQY MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt MWQ2N2MzMjQ1MDFmLzEvN2pHQzNlQnlSZ19Lb3Y1OFo5YWZGYTF6RmhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhRLQRMA MA0GCSqGSIb3DQEBCwUAA4IBAQCgp1tbwgBorkRl0LYA8si3barFqbkKJoacEzl4 vXu9IG1V69x6FOTOxctyaf6UCvInIwL2JPWiakuVbe/siYQOrXnH5UlrjKPbL6N/ dG6aoHdiG6gy66PZ1ZB7Fh4su082mDHjstRNVNgDSm26zi66aSRb/bZS5JWi53JZ SuMaMdtDXIlbXS7VAUeKFXp40TfgmBJJVo81Ucys+SIDbmxzAmgNqYxUWuYV34P3 XLCOBNR3PVM90Ywuq+YGwHAtndk5x3SSFyVzdrLcqe9gr5Pu5hrQ7KuDkcTxVwQK KWIM5LMjMhk1apy+JJwKU1/vXUEt/N9JuzJoHsydTW4XGby+ -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:36 2026 by rpki-client