This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/i7My9jnabP2BbLq-P1dWCC8qXAY.roa File: i7My9jnabP2BbLq-P1dWCC8qXAY.roa (raw, json) Hash identifier: R20UohkOneliRpwAUf7Pv+c5QnvrZshoQdlOYXbF8DQ= Subject key identifier: 8B:B3:32:F6:39:DA:6C:FD:81:6C:BA:BE:3F:57:56:08:2F:2A:5C:06 Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106 Certificate serial: 019B7E3934DF2B236C006417827AC55389AB Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/i7My9jnabP2BbLq-P1dWCC8qXAY.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 2a14:4c42::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:34:df:2b:23:6c:00:64:17:82:7a:c5:53:89:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bb332f639da6cfd816cbabe3f5756082f2a5c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:ee:ff:e9:b1:00:22:ef:28:24:fa:a5:8e: 9c:4b:08:53:ee:85:8e:60:ef:75:12:5a:c1:e9:0d: 07:3c:1f:c1:1a:fb:3d:7c:33:18:04:da:cb:8c:c5: 24:b8:d0:6b:a3:26:50:5c:fd:ff:fc:09:a6:37:93: 87:36:75:99:83:a3:99:9c:18:15:90:09:b6:2e:88: e0:e2:20:5b:67:5d:43:d0:af:e0:89:2e:e1:b5:6e: 70:aa:66:c3:63:b0:6e:aa:fb:9b:50:1e:b2:a5:74: 72:a6:ac:f8:f1:dd:e0:d6:ce:b7:04:cb:6d:5e:aa: 63:cf:06:bb:d4:9e:f4:07:f8:ad:e1:dd:1d:56:57: 5c:f2:14:1b:db:07:f9:b1:0a:fc:3a:f5:c3:b7:29: f7:52:1f:86:72:e1:b1:a7:b8:56:c2:27:be:8e:32: cb:c2:64:7c:b1:52:f5:c3:52:5e:a8:7f:07:51:49: 74:51:83:ee:c3:41:e0:0d:45:f2:dd:74:ef:1d:9b: e6:d2:c3:5d:09:46:d1:40:02:bc:a1:2b:c9:d1:32: f9:28:09:a0:0f:00:18:6b:5a:c8:03:00:cd:15:63: d7:ab:1f:4d:42:be:98:c2:ad:39:90:8a:fb:b7:48: a2:11:df:30:27:c8:99:ff:52:26:fd:06:ef:d6:3c: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B3:32:F6:39:DA:6C:FD:81:6C:BA:BE:3F:57:56:08:2F:2A:5C:06 X509v3 Authority Key Identifier: keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/i7My9jnabP2BbLq-P1dWCC8qXAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4c42::/32 Signature Algorithm: sha256WithRSAEncryption 72:a2:a4:63:dc:29:45:fb:47:49:54:5d:e6:d8:d3:8f:73:b4: 21:e5:2f:2b:cc:49:67:28:a9:18:b3:aa:b3:09:89:9f:c2:d5: 94:b4:aa:26:b8:95:ad:87:42:8d:5d:1b:d5:d6:84:9b:ae:b9: ec:fe:b9:00:68:d8:8f:a0:09:e0:0e:f3:c1:8c:bf:d6:c0:94: 56:1c:8e:b9:20:8b:fa:6e:b0:3e:4d:ab:c1:97:c2:31:60:76: b8:34:07:d5:4f:79:a1:09:dc:1c:d8:eb:69:82:21:f1:ce:9c: 48:f7:40:6e:bb:75:4e:85:6e:f6:f1:7c:c4:c5:8b:22:90:4b: 2f:99:e6:d9:82:f6:78:7c:4b:72:50:7c:1c:c7:55:f8:fa:a3: 1f:2a:fa:56:18:ce:d7:6c:a7:b2:53:30:c7:23:87:5e:0d:72: 89:3f:bc:2c:0b:0c:71:4e:53:c6:f5:a2:ad:5d:f9:ba:15:77: 45:69:b2:db:79:a0:b5:65:89:9f:2c:6c:45:04:36:4a:2e:7b: d0:ce:21:77:d2:53:60:92:94:55:25:36:61:45:8f:a4:c0:a1: c1:01:52:cc:7b:89:65:92:31:4d:26:33:c4:a1:a2:e7:f5:96: 1b:f4:bb:8b:bf:2a:2b:29:f5:28:06:4d:e6:2a:ca:b0:97:be: f2:61:18:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OTTfKyNsAGQXgnrFU4mrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjU3ZWFhYmJmNjA0ZDQ1NzAwNTVjMmNkOGFjMjQ5YmIy OWMxMDYwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmIzMzJmNjM5ZGE2Y2ZkODE2Y2JhYmUzZjU3NTYwODJmMmE1YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwju/+mxACLvKCT6pY6cSwhT7oWO YO91ElrB6Q0HPB/BGvs9fDMYBNrLjMUkuNBroyZQXP3//AmmN5OHNnWZg6OZnBgV kAm2Lojg4iBbZ11D0K/giS7htW5wqmbDY7BuqvubUB6ypXRypqz48d3g1s63BMtt Xqpjzwa71J70B/it4d0dVldc8hQb2wf5sQr8OvXDtyn3Uh+GcuGxp7hWwie+jjLL wmR8sVL1w1JeqH8HUUl0UYPuw0HgDUXy3XTvHZvm0sNdCUbRQAK8oSvJ0TL5KAmg DwAYa1rIAwDNFWPXqx9NQr6Ywq05kIr7t0iiEd8wJ8iZ/1Im/Qbv1jwm1QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIuzMvY52mz9gWy6vj9XVggvKlwGMB8GA1UdIwQY MBaAFOElfqq79gTUVwBVws2Kwkm7KcEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYt ODFmYTg3NGVlMmVkLzEvaTdNeTlqbmFiUDJCYkxxLVAxZFdDQzhxWEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYtODFmYTg3NGVlMmVk LzEvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRMQjAN BgkqhkiG9w0BAQsFAAOCAQEAcqKkY9wpRftHSVRd5tjTj3O0IeUvK8xJZyipGLOq swmJn8LVlLSqJriVrYdCjV0b1daEm6657P65AGjYj6AJ4A7zwYy/1sCUVhyOuSCL +m6wPk2rwZfCMWB2uDQH1U95oQncHNjraYIh8c6cSPdAbrt1ToVu9vF8xMWLIpBL L5nm2YL2eHxLclB8HMdV+PqjHyr6VhjO12ynslMwxyOHXg1yiT+8LAsMcU5TxvWi rV35uhV3RWmy23mgtWWJnyxsRQQ2Si570M4hd9JTYJKUVSU2YUWPpMChwQFSzHuJ ZZIxTSYzxKGi5/WWG/S7i78qKyn1KAZN5irKsJe+8mEYYA== -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:01 2026 by rpki-client