This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7cxH_654soScVmpVpvBzqNrFl9A.roa File: 7cxH_654soScVmpVpvBzqNrFl9A.roa (raw, json) Hash identifier: vNpRQRhkE/Ms5NbB0iVmsMf5Y2EVOxfj26SuU7gse4g= Subject key identifier: ED:CC:47:FF:AE:78:B2:84:9C:56:6A:55:A6:F0:73:A8:DA:C5:97:D0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE1D295E1883712C82C77967A9A68 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7cxH_654soScVmpVpvBzqNrFl9A.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199956 IP address blocks: 2a0e:97c0:850::/44 maxlen: 48 2a0e:b107:1db0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e1:d2:95:e1:88:37:12:c8:2c:77:96:7a:9a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcc47ffae78b2849c566a55a6f073a8dac597d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:7c:0b:1a:b0:e8:6b:44:85:ac:21:1a:b4: 9e:d3:c6:4e:bc:0f:25:6c:2c:f0:8a:cb:fd:97:02: dc:3e:29:5d:21:b8:95:be:e1:f1:1c:df:7f:30:85: 19:a6:ce:58:bd:b5:23:ff:18:66:e8:b9:ed:c4:c3: d3:07:6f:49:8b:a6:b1:15:26:24:12:a3:d3:be:97: 0f:57:21:95:08:6e:a9:17:e4:71:be:8b:93:77:29: b2:5f:7d:e9:29:8d:a0:76:a1:c7:01:4d:43:5a:20: e2:2d:25:8e:63:7e:50:e3:df:9b:6a:7f:ac:24:87: ac:5a:3b:f3:51:ba:3b:94:a4:a7:cb:4d:a4:ae:16: 9f:6b:e6:4d:21:44:5b:38:83:58:90:44:ac:75:5c: 93:8c:61:b3:f8:6a:fd:4c:9e:19:9d:f0:ef:46:02: f6:b1:fc:33:9e:05:22:08:1a:9d:d4:19:15:14:7d: db:c3:7a:d1:9e:fd:1c:62:4f:67:75:a1:0a:f0:45: 3a:4a:8a:dd:ad:27:d0:db:f1:cc:20:0b:9c:27:fd: b6:34:c7:60:2b:99:71:23:7f:a2:0d:a4:59:76:c8: c7:05:86:c8:56:3f:24:71:39:8c:19:47:91:e8:36: aa:c0:6d:86:d2:2d:c7:bb:de:e9:a5:b0:76:2b:00: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CC:47:FF:AE:78:B2:84:9C:56:6A:55:A6:F0:73:A8:DA:C5:97:D0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7cxH_654soScVmpVpvBzqNrFl9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:850::/44 2a0e:b107:1db0::/44 Signature Algorithm: sha256WithRSAEncryption 9a:57:cf:60:f1:4d:da:27:da:50:84:f4:4b:f4:a4:78:ab:60: 89:15:3a:f5:80:75:64:97:00:4d:47:38:37:58:56:5e:72:a0: 69:4c:ad:71:e8:71:0f:32:48:f3:5e:f8:8e:da:ac:29:50:6f: 0d:8b:de:46:ae:43:72:4c:e9:db:88:26:6c:6b:40:97:d0:71: 91:3a:61:84:8c:07:ff:48:91:ca:2a:62:38:98:a4:06:d2:c2: b1:c1:02:05:72:c4:c9:49:96:db:3f:a1:2a:39:82:f5:6b:43: d4:c1:8b:27:c4:64:60:f6:0b:86:a5:d5:ec:2b:8b:9d:fa:45: e0:b9:56:6c:24:3e:23:6d:eb:6c:6b:4a:52:1c:e7:5a:8f:e7: 54:dd:1c:8a:66:7d:f4:2f:c7:d3:04:8a:b0:98:10:d5:ba:c7: 8d:c7:1d:d5:ce:2f:25:93:cf:c4:c0:8e:b8:89:45:3c:34:2d: 35:92:92:55:65:f7:62:7f:ad:0c:6c:27:c9:ef:4e:66:d2:80: 00:3a:b2:aa:f3:7a:dd:00:c1:d6:dd:5b:2e:3f:b3:ef:b1:56: 7c:04:cd:01:84:34:9f:25:29:15:c3:7e:7d:3e:47:c1:a1:3f: c5:c9:8c:6f:d9:c8:cf:d1:e8:92:19:dc:19:40:07:fd:28:ae: 13:10:f4:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XOHSleGINxLILHeWeppoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNjNDdmZmFlNzhiMjg0OWM1NjZhNTVhNmYwNzNhOGRhYzU5N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2058Cxqw6GtEhawhGrSe08ZOvA8l bCzwisv9lwLcPildIbiVvuHxHN9/MIUZps5YvbUj/xhm6LntxMPTB29Ji6axFSYk EqPTvpcPVyGVCG6pF+RxvouTdymyX33pKY2gdqHHAU1DWiDiLSWOY35Q49+ban+s JIesWjvzUbo7lKSny02krhafa+ZNIURbOINYkESsdVyTjGGz+Gr9TJ4ZnfDvRgL2 sfwzngUiCBqd1BkVFH3bw3rRnv0cYk9ndaEK8EU6SordrSfQ2/HMIAucJ/22NMdg K5lxI3+iDaRZdsjHBYbIVj8kcTmMGUeR6DaqwG2G0i3Hu97ppbB2KwCzrQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO3MR/+ueLKEnFZqVabwc6jaxZfQMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvN2N4SF82NTRzb1NjVm1wVnB2QnpxTnJGbDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAhQ AwcEKg6xBx2wMA0GCSqGSIb3DQEBCwUAA4IBAQCaV89g8U3aJ9pQhPRL9KR4q2CJ FTr1gHVklwBNRzg3WFZecqBpTK1x6HEPMkjzXviO2qwpUG8Ni95GrkNyTOnbiCZs a0CX0HGROmGEjAf/SJHKKmI4mKQG0sKxwQIFcsTJSZbbP6EqOYL1a0PUwYsnxGRg 9guGpdXsK4ud+kXguVZsJD4jbetsa0pSHOdaj+dU3RyKZn30L8fTBIqwmBDVuseN xx3Vzi8lk8/EwI64iUU8NC01kpJVZfdif60MbCfJ705m0oAAOrKq83rdAMHW3Vsu P7PvsVZ8BM0BhDSfJSkVw359PkfBoT/FyYxv2cjP0eiSGdwZQAf9KK4TEPSi -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:45 2026 by rpki-client