This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/L7z1z3kD8b7F1K7aacc1gzUm6kI.roa File: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (raw, json) Hash identifier: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E= Subject key identifier: 2F:BC:F5:CF:79:03:F1:BE:C5:D4:AE:DA:69:C7:35:83:35:26:EA:42 Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7 Certificate serial: 019B7E382BFE2783C10427D28F165CD6A30A Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/L7z1z3kD8b7F1K7aacc1gzUm6kI.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21159 IP address blocks: 2a0a:e680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:fe:27:83:c1:04:27:d2:8f:16:5c:d6:a3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fbcf5cf7903f1bec5d4aeda69c735833526ea42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:bf:ba:79:6a:20:51:73:98:6e:5c:0b:6a: 89:cb:1b:c8:c0:be:58:c9:ab:92:13:e2:7c:b7:a4: 07:c2:0e:dd:ea:aa:96:d7:99:38:1b:6e:28:9e:89: 0e:8d:cf:42:b0:e0:49:63:cf:b5:42:b0:5a:db:81: 46:37:de:3a:22:21:34:b3:c4:01:ce:41:2f:0e:38: 7e:b3:46:50:75:4f:95:51:3e:23:0c:bf:03:ea:18: de:4a:22:a6:65:49:22:d0:c2:b5:7b:76:68:b4:bc: ba:0c:d9:1e:cc:16:21:30:80:bc:a2:73:61:7b:89: e6:c1:7d:6b:1a:3c:fa:b7:ba:4d:f1:59:a8:cf:16: ee:41:95:5f:2d:09:1b:e0:60:ed:c2:5d:8a:32:20: 62:9b:f7:4a:ae:44:a4:c1:7b:33:93:53:f4:ef:fb: b0:1a:3a:00:31:de:0a:3c:1e:4c:b9:3d:c5:d5:7b: ab:a9:64:2e:04:d3:4e:82:22:54:62:30:72:29:b4: 64:4a:86:4e:d8:de:1a:3a:f6:63:70:92:13:59:19: e3:0b:9f:59:27:64:f1:3f:24:c0:0b:0f:eb:d0:f1: b7:c5:32:6d:b6:35:99:b3:b3:d7:6f:fc:ef:9d:a6: bd:7d:45:1e:07:10:ef:d8:1e:e9:59:69:c0:a7:fc: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BC:F5:CF:79:03:F1:BE:C5:D4:AE:DA:69:C7:35:83:35:26:EA:42 X509v3 Authority Key Identifier: keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/L7z1z3kD8b7F1K7aacc1gzUm6kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e680::/29 Signature Algorithm: sha256WithRSAEncryption 90:76:25:7b:2c:0c:d7:d9:b5:f6:86:49:31:1a:26:cd:fc:3e: ca:11:4e:17:6d:81:5b:26:6a:f3:2a:5e:c3:b1:ca:47:44:09: 58:30:e8:25:d6:74:6d:40:d6:e1:0f:92:fa:df:48:2e:c2:97: 4d:ff:76:4c:31:02:20:80:03:f1:d1:9f:e1:2e:d8:94:1b:81: 69:33:1a:94:c8:7c:d2:51:59:91:d6:d9:4e:06:03:57:9c:b3: 7f:29:ba:c3:44:74:24:7c:d5:2f:34:0c:be:51:79:a0:2d:cf: c5:81:bc:61:9c:30:68:a9:b3:5a:79:e8:7f:3b:ad:3d:1b:ed: 2c:23:f1:7b:a2:76:b4:f5:ed:ea:c0:df:ad:39:1c:b2:5f:04: 90:26:e2:8a:d1:ed:12:64:ba:7b:83:cb:7a:45:2e:b5:94:73: 6c:ae:c8:bf:c1:00:4a:c2:37:4c:2d:1e:b8:c9:2f:fd:1c:f6: 0b:f3:3f:9f:0f:35:43:6f:80:1c:a5:a9:28:76:bd:a7:3d:31: fa:f5:77:78:e9:12:0a:09:71:08:7d:4d:e4:d7:75:ba:97:60: 0b:c2:3a:eb:39:13:21:36:76:3a:2f:c4:10:59:ee:89:e1:9b: 35:78:3b:16:87:98:af:a9:23:a9:08:3d:80:8f:cb:65:21:59: 71:46:3d:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OCv+J4PBBCfSjxZc1qMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl NzE2ZDcwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmJjZjVjZjc5MDNmMWJlYzVkNGFlZGE2OWM3MzU4MzM1MjZlYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vi/unlqIFFzmG5cC2qJyxvIwL5Y yauSE+J8t6QHwg7d6qqW15k4G24onokOjc9CsOBJY8+1QrBa24FGN946IiE0s8QB zkEvDjh+s0ZQdU+VUT4jDL8D6hjeSiKmZUki0MK1e3ZotLy6DNkezBYhMIC8onNh e4nmwX1rGjz6t7pN8VmozxbuQZVfLQkb4GDtwl2KMiBim/dKrkSkwXszk1P07/uw GjoAMd4KPB5MuT3F1XurqWQuBNNOgiJUYjByKbRkSoZO2N4aOvZjcJITWRnjC59Z J2TxPyTACw/r0PG3xTJttjWZs7PXb/zvnaa9fUUeBxDv2B7pWWnAp/zl9QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFC+89c95A/G+xdSu2mnHNYM1JupCMB8GA1UdIwQY MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt NjQzYzFmZTM4Mzg1LzEvTDd6MXoza0Q4YjdGMUs3YWFjYzFnelVtNmtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1 LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrmgDAN BgkqhkiG9w0BAQsFAAOCAQEAkHYleywM19m19oZJMRomzfw+yhFOF22BWyZq8ype w7HKR0QJWDDoJdZ0bUDW4Q+S+t9ILsKXTf92TDECIIAD8dGf4S7YlBuBaTMalMh8 0lFZkdbZTgYDV5yzfym6w0R0JHzVLzQMvlF5oC3PxYG8YZwwaKmzWnnofzutPRvt LCPxe6J2tPXt6sDfrTkcsl8EkCbiitHtEmS6e4PLekUutZRzbK7Iv8EASsI3TC0e uMkv/Rz2C/M/nw81Q2+AHKWpKHa9pz0x+vV3eOkSCglxCH1N5Nd1updgC8I66zkT ITZ2Oi/EEFnuieGbNXg7FoeYr6kjqQg9gI/LZSFZcUY9bg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:47 2026 by rpki-client