This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa File: 7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa (raw, json) Hash identifier: tsA7T7uUKe961SLeTegki9U2n20iYLa4g8HfcIi+a4Q= Subject key identifier: EC:97:1B:50:1E:92:CF:D5:27:81:90:71:5A:3D:D6:FE:0A:BE:2D:8B Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba Certificate serial: 019B7C1232D093B8FF3E7C15B1CAA8E81E4A Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202685 IP address blocks: 2a10:7dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:32:d0:93:b8:ff:3e:7c:15:b1:ca:a8:e8:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec971b501e92cfd5278190715a3dd6fe0abe2d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:5a:7d:7f:13:ab:79:db:db:d6:37:65:34: 5b:59:6b:d2:d4:79:da:01:23:eb:a1:a5:11:1f:8f: bf:d6:1c:e3:8c:83:ac:b4:d2:f0:d2:ce:66:38:38: c0:a1:f0:f9:c7:d0:fa:4f:06:54:48:24:d7:27:7a: 88:22:73:d4:eb:5c:03:7e:e1:52:39:28:02:46:5c: a5:5c:1f:8e:9f:2d:8a:23:aa:37:66:35:8b:61:c6: 64:ca:71:9a:22:f1:ac:8f:8d:b4:66:1f:76:ef:ae: f5:8a:42:08:3f:eb:8e:9b:48:fa:75:5d:e2:fc:84: 88:09:37:c6:70:b2:3d:26:e0:7b:67:77:97:9e:75: e2:3f:78:2d:24:c7:c2:90:5b:60:4d:8b:5c:c1:f5: 92:9e:77:81:76:42:bc:d8:a2:71:5b:7b:82:84:e8: 30:47:36:f5:cb:a1:ad:e9:9b:0a:41:b4:ec:f8:99: 9a:7e:3b:c2:a7:e2:e8:25:1b:30:c4:b8:a7:c1:e9: 8f:0e:26:46:da:4d:a9:6a:5c:cc:41:e2:6e:ea:48: 0d:4a:37:00:65:83:3e:c5:45:be:2a:e5:60:59:e0: 45:c2:bd:e8:81:f1:b7:30:04:53:f1:af:62:b6:d3: 6a:26:85:d0:46:95:09:38:d9:70:c7:2c:66:99:ef: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:97:1B:50:1E:92:CF:D5:27:81:90:71:5A:3D:D6:FE:0A:BE:2D:8B X509v3 Authority Key Identifier: keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:7dc0::/29 Signature Algorithm: sha256WithRSAEncryption 94:48:51:a2:f6:bb:e9:e9:ee:b7:b3:0d:48:4d:38:91:cf:0a: 8e:bd:60:c2:41:4e:e7:80:0e:97:6a:6f:a3:4b:44:ac:0f:95: e5:26:ea:35:11:18:d7:63:57:85:70:07:fd:9d:bc:ff:ca:fa: 9c:99:bc:d6:28:c4:55:17:71:c7:06:f7:51:35:8d:38:c7:be: 54:3d:fb:6b:cb:b4:e9:80:e3:b4:0b:33:cb:b0:81:ae:b7:6d: f0:86:19:61:db:37:7e:2a:86:01:c6:9a:0f:25:0c:b9:37:2e: 31:8e:aa:52:bb:b1:f5:e9:7a:da:00:76:58:40:09:2a:e7:5b: 16:4f:bc:2d:ff:fb:76:67:9b:89:e0:5b:68:af:5c:bf:6f:0f: f9:96:71:51:6a:a7:d2:1b:64:dd:e2:cb:b6:92:40:c0:c7:c7: f4:d1:89:3a:20:e1:73:2b:52:46:5b:32:6e:f1:dc:4c:47:6c: 59:f5:71:b0:d2:67:7c:e7:1c:2e:6e:3b:50:cb:39:04:40:9f: d8:33:25:81:c0:05:89:64:b5:0b:bb:07:fd:6e:cb:e2:3f:c0: ee:cb:df:ba:e6:68:f6:05:42:9c:90:6e:6b:79:a5:c8:7e:c5: ca:50:27:dc:26:a5:a8:c1:63:99:91:3e:6a:f9:25:e2:6d:e2: 30:20:1e:93 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EjLQk7j/PnwVscqo6B5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Zjc2MjExZjNjNThmNmM5OGFmOTljZjY1YTZmMWU4ZmY3 YzQzYmEwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzk3MWI1MDFlOTJjZmQ1Mjc4MTkwNzE1YTNkZDZmZTBhYmUyZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIxafX8Tq3nb29Y3ZTRbWWvS1Hna ASProaURH4+/1hzjjIOstNLw0s5mODjAofD5x9D6TwZUSCTXJ3qIInPU61wDfuFS OSgCRlylXB+Ony2KI6o3ZjWLYcZkynGaIvGsj420Zh927671ikIIP+uOm0j6dV3i /ISICTfGcLI9JuB7Z3eXnnXiP3gtJMfCkFtgTYtcwfWSnneBdkK82KJxW3uChOgw Rzb1y6Gt6ZsKQbTs+JmafjvCp+LoJRswxLinwemPDiZG2k2palzMQeJu6kgNSjcA ZYM+xUW+KuVgWeBFwr3ogfG3MART8a9ittNqJoXQRpUJONlwxyxmme+iFQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOyXG1Aeks/VJ4GQcVo91v4Kvi2LMB8GA1UdIwQY MBaAFDb3YhHzxY9smK+Zz2Wm8ej/fEO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUt MmZjZjM5NjI1M2I4LzEvN0pjYlVCNlN6OVVuZ1pCeFdqM1dfZ3EtTFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUtMmZjZjM5NjI1M2I4 LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhB9wDAN BgkqhkiG9w0BAQsFAAOCAQEAlEhRova76enut7MNSE04kc8Kjr1gwkFO54AOl2pv o0tErA+V5SbqNREY12NXhXAH/Z28/8r6nJm81ijEVRdxxwb3UTWNOMe+VD37a8u0 6YDjtAszy7CBrrdt8IYZYds3fiqGAcaaDyUMuTcuMY6qUrux9el62gB2WEAJKudb Fk+8Lf/7dmebieBbaK9cv28P+ZZxUWqn0htk3eLLtpJAwMfH9NGJOiDhcytSRlsy bvHcTEdsWfVxsNJnfOccLm47UMs5BECf2DMlgcAFiWS1C7sH/W7L4j/A7svfuuZo 9gVCnJBua3mlyH7FylAn3CalqMFjmZE+avkl4m3iMCAekw== -----END CERTIFICATE-----Generated at Tue Feb 3 02:09:04 2026 by rpki-client