This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7KvlC9MpVDGpPTtRA-b9oHVQcl0.roa File: 7KvlC9MpVDGpPTtRA-b9oHVQcl0.roa (raw, json) Hash identifier: w/iFT1WqmSGiXvzAVAgqZHyd90v/dC1zByVX1OF+ChQ= Subject key identifier: EC:AB:E5:0B:D3:29:54:31:A9:3D:3B:51:03:E6:FD:A0:75:50:72:5D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC76703D17A8433C45BE3B3C83A47 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7KvlC9MpVDGpPTtRA-b9oHVQcl0.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139328 IP address blocks: 2a0e:b107:1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c7:67:03:d1:7a:84:33:c4:5b:e3:b3:c8:3a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecabe50bd3295431a93d3b5103e6fda07550725d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c5:e3:79:95:d8:f8:50:08:7e:a7:09:74:60: d2:84:b0:43:4b:34:a3:68:49:34:d2:0c:e2:28:85: 1f:b3:fb:58:28:e6:9d:16:7d:d8:88:67:0d:70:37: bf:39:3f:4e:84:2b:4e:87:26:7d:9f:a2:7e:12:3c: 3e:8f:88:3a:c6:dd:01:e1:58:a6:14:f3:58:d3:a4: 75:ae:55:5f:24:44:6c:95:a2:29:32:76:e3:30:76: 4b:b6:23:67:f6:a0:47:3f:54:1a:e3:da:8d:a2:33: 9b:01:38:01:52:90:4b:9f:ac:d0:af:63:a1:b2:a0: d4:25:d3:57:6a:c2:5d:00:e5:42:44:68:6f:97:22: b7:6d:d8:8f:0c:9c:eb:67:bb:c9:97:68:0d:1c:98: 01:b2:b4:ab:01:ba:b5:e7:ae:f1:cd:7e:5a:69:37: 95:38:d0:cd:1b:ea:42:25:73:78:c2:f4:ba:19:a3: ac:b9:67:71:ae:8a:fa:b4:12:05:c6:2d:2f:e7:04: 9a:f7:4b:89:f4:b0:07:10:bc:12:fc:69:d1:b9:bc: 27:6f:67:9a:4c:1f:e2:e1:d4:83:d0:62:fa:09:d0: ac:20:af:1a:8c:ad:49:02:cf:8a:fc:f6:57:5d:e5: 9f:e8:f4:3a:4e:f3:a7:5d:3f:4b:f5:1d:8b:5f:3e: 7c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AB:E5:0B:D3:29:54:31:A9:3D:3B:51:03:E6:FD:A0:75:50:72:5D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7KvlC9MpVDGpPTtRA-b9oHVQcl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d0::/44 Signature Algorithm: sha256WithRSAEncryption b8:ce:e7:11:ec:ec:20:56:12:8f:66:41:e9:74:ff:c4:93:39: 9a:60:09:91:a2:01:1e:86:a7:48:3f:8a:ae:02:be:63:a0:f5: d3:a9:9d:8a:43:0d:e3:3f:2c:93:c8:67:65:1e:75:83:1b:6c: b5:cd:2d:85:ec:0b:3f:fc:ca:a9:ce:49:d7:9a:65:22:b8:81: 51:b1:0f:78:10:af:54:98:3d:15:3e:d8:92:3a:bb:1a:24:f8: eb:67:29:5f:6c:82:34:f1:53:5e:44:ea:d6:10:9f:5c:48:be: db:48:e5:6a:fc:6f:ac:fb:dd:62:36:19:e7:91:f2:a9:34:6f: 1c:6c:86:d0:bf:79:5d:4a:50:bd:33:ca:fb:b5:b2:ad:5a:3b: 4f:48:32:e0:05:df:f9:10:ef:27:4c:65:76:45:e6:05:41:28: c2:87:9c:c9:e0:32:09:4a:67:25:74:3e:f8:14:e7:02:fb:0f: 5b:94:15:ee:d1:ce:f7:0b:e6:0b:6b:9b:62:85:68:85:18:7b: 4a:cb:ea:b6:e7:fd:4d:49:02:21:7f:64:63:fa:dc:9b:c5:e9: 0b:f8:36:de:ec:43:7a:f6:8a:0b:b1:59:f7:08:dd:5a:fe:56: 93:9b:c3:16:9a:91:f6:32:1c:ad:77:2d:35:7e:07:ac:cf:d7: d5:fd:1c:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMdnA9F6hDPEW+OzyDpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2FiZTUwYmQzMjk1NDMxYTkzZDNiNTEwM2U2ZmRhMDc1NTA3MjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68XjeZXY+FAIfqcJdGDShLBDSzSj aEk00gziKIUfs/tYKOadFn3YiGcNcDe/OT9OhCtOhyZ9n6J+Ejw+j4g6xt0B4Vim FPNY06R1rlVfJERslaIpMnbjMHZLtiNn9qBHP1Qa49qNojObATgBUpBLn6zQr2Oh sqDUJdNXasJdAOVCRGhvlyK3bdiPDJzrZ7vJl2gNHJgBsrSrAbq1567xzX5aaTeV ONDNG+pCJXN4wvS6GaOsuWdxror6tBIFxi0v5wSa90uJ9LAHELwS/GnRubwnb2ea TB/i4dSD0GL6CdCsIK8ajK1JAs+K/PZXXeWf6PQ6TvOnXT9L9R2LXz582QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOyr5QvTKVQxqT07UQPm/aB1UHJdMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvN0t2bEM5TXBWREdwUFR0UkEtYjlvSFZRY2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwHQ MA0GCSqGSIb3DQEBCwUAA4IBAQC4zucR7OwgVhKPZkHpdP/EkzmaYAmRogEehqdI P4quAr5joPXTqZ2KQw3jPyyTyGdlHnWDG2y1zS2F7As//MqpzknXmmUiuIFRsQ94 EK9UmD0VPtiSOrsaJPjrZylfbII08VNeROrWEJ9cSL7bSOVq/G+s+91iNhnnkfKp NG8cbIbQv3ldSlC9M8r7tbKtWjtPSDLgBd/5EO8nTGV2ReYFQSjCh5zJ4DIJSmcl dD74FOcC+w9blBXu0c73C+YLa5tihWiFGHtKy+q25/1NSQIhf2Rj+tybxekL+Dbe 7EN69ooLsVn3CN1a/laTm8MWmpH2Mhytdy01fgesz9fV/RyE -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client