This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/7avrlJYrUSerPMTKzs3xP0drONc.roa File: 7avrlJYrUSerPMTKzs3xP0drONc.roa (raw, json) Hash identifier: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q= Subject key identifier: ED:AB:EB:94:96:2B:51:27:AB:3C:C4:CA:CE:CD:F1:3F:47:6B:38:D7 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF18D5DCEA3E9AD8B0FBFE58140110F Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/7avrlJYrUSerPMTKzs3xP0drONc.roa Signing time: Fri 02 Jan 2026 18:21:35 +0000 ROA not before: Fri 02 Jan 2026 18:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 46.38.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:8d:5d:ce:a3:e9:ad:8b:0f:bf:e5:81:40:11:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edabeb94962b5127ab3cc4cacecdf13f476b38d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:fd:6e:d7:e8:81:70:9b:3c:b6:8b:a1:86: 45:16:c0:a3:b2:77:9f:7b:08:30:a5:5c:fd:00:be: 43:a7:68:49:d3:e2:27:78:17:5d:cc:e9:50:95:82: 1b:b1:19:aa:77:74:a9:1f:5f:70:40:5c:79:38:c3: 3a:ba:8f:54:3e:5d:88:ad:87:5c:e9:a1:2a:25:16: 89:7a:a1:52:eb:06:30:4c:96:e8:bd:8c:18:fd:23: 82:e7:b6:67:7c:24:5c:60:09:83:79:88:86:e4:14: 27:8f:e0:3b:65:4b:6e:d4:ec:59:37:59:45:bc:d0: 71:0a:71:cf:cf:15:a7:b6:1e:18:9b:50:a6:8b:e8: e3:84:fb:8c:0a:fa:4f:be:c9:ff:ad:5a:89:47:b0: 5c:a7:75:aa:6c:99:dc:d1:d0:54:5f:3a:94:64:8a: f0:70:76:ee:b4:4a:e3:e4:c4:0e:48:89:cb:31:15: 7f:f4:48:f1:6a:55:34:93:31:ad:18:37:85:35:52: 14:08:ce:88:3d:f4:cd:fc:83:87:e0:e5:bb:98:24: 72:1f:d9:f5:70:f1:ea:85:df:e5:14:a9:b2:f4:06: 29:92:b3:56:73:00:68:70:7f:b3:a7:5c:d0:dd:a4: 68:21:1a:75:82:bf:15:d8:0e:d5:5c:70:19:14:57: 18:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AB:EB:94:96:2B:51:27:AB:3C:C4:CA:CE:CD:F1:3F:47:6B:38:D7 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/7avrlJYrUSerPMTKzs3xP0drONc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.157.0/24 Signature Algorithm: sha256WithRSAEncryption 74:81:48:fa:64:5a:47:cf:f8:aa:d9:9d:e0:fa:25:37:45:9e: 2a:79:bd:14:f3:70:70:cf:f0:68:0d:2b:e4:70:0e:0a:d5:f1: 3e:66:8a:f5:7a:0d:3e:19:bd:68:07:f6:15:5e:10:f5:41:55: ba:e8:48:db:71:90:4a:ab:38:41:76:e7:ed:ce:57:21:11:ca: 83:de:c4:92:ac:f3:c5:1c:d4:e6:26:4e:b7:05:59:1b:bf:b0: 6a:de:03:04:76:4c:c3:32:e5:68:83:f4:df:67:f4:32:8b:02: c7:3d:fc:8f:fd:f9:d2:1d:68:52:d7:02:3a:96:d5:90:60:aa: 82:ff:f2:c9:f6:d1:32:02:72:e7:51:e2:9d:e7:5f:ed:b0:7c: 93:92:e0:4e:11:0a:a6:63:6f:18:25:c7:14:0d:c0:84:b0:95: cc:64:1c:a9:df:ec:b2:f8:12:96:82:dd:33:cd:16:67:ff:f9: 93:dd:8c:9e:95:ae:ee:ee:95:ee:9b:ee:15:0e:f7:eb:6b:4f: 4d:34:02:94:1c:a4:b9:7a:6b:0f:df:ce:18:3d:f2:53:24:e8: 1b:63:3d:70:7d:22:46:a0:51:b3:b9:2d:0d:d0:24:73:2c:5e: 12:2b:4f:e6:1b:45:72:b7:75:cc:b3:af:0e:c8:77:1b:47:f6: 95:03:c0:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Y1dzqPprYsPv+WBQBEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGFiZWI5NDk2MmI1MTI3YWIzY2M0Y2FjZWNkZjEzZjQ3NmIzOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk79btfogXCbPLaLoYZFFsCjsnef ewgwpVz9AL5Dp2hJ0+IneBddzOlQlYIbsRmqd3SpH19wQFx5OMM6uo9UPl2IrYdc 6aEqJRaJeqFS6wYwTJbovYwY/SOC57ZnfCRcYAmDeYiG5BQnj+A7ZUtu1OxZN1lF vNBxCnHPzxWnth4Ym1Cmi+jjhPuMCvpPvsn/rVqJR7Bcp3WqbJnc0dBUXzqUZIrw cHbutErj5MQOSInLMRV/9EjxalU0kzGtGDeFNVIUCM6IPfTN/IOH4OW7mCRyH9n1 cPHqhd/lFKmy9AYpkrNWcwBocH+zp1zQ3aRoIRp1gr8V2A7VXHAZFFcYUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2r65SWK1EnqzzEys7N8T9HazjXMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvN2F2cmxKWXJVU2VyUE1US3pzM3hQMGRyT05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiadMA0G CSqGSIb3DQEBCwUAA4IBAQB0gUj6ZFpHz/iq2Z3g+iU3RZ4qeb0U83Bwz/BoDSvk cA4K1fE+Zor1eg0+Gb1oB/YVXhD1QVW66EjbcZBKqzhBduftzlchEcqD3sSSrPPF HNTmJk63BVkbv7Bq3gMEdkzDMuVog/TfZ/QyiwLHPfyP/fnSHWhS1wI6ltWQYKqC //LJ9tEyAnLnUeKd51/tsHyTkuBOEQqmY28YJccUDcCEsJXMZByp3+yy+BKWgt0z zRZn//mT3Yyela7u7pXum+4VDvfra09NNAKUHKS5emsP384YPfJTJOgbYz1wfSJG oFGzuS0N0CRzLF4SK0/mG0Vyt3XMs68OyHcbR/aVA8DC -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client