This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/yaf29NVIhqCdkvttoww7qyjFE_A.roa File: yaf29NVIhqCdkvttoww7qyjFE_A.roa (raw, json) Hash identifier: irGoc61alZ1PWSj6VyeZR9D2OQ0SUu0n7A530YUuqMw= Subject key identifier: C9:A7:F6:F4:D5:48:86:A0:9D:92:FB:6D:A3:0C:3B:AB:28:C5:13:F0 Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Certificate serial: 019B7CECC8C4C69DF737E86DE436C2A0A2AA Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/yaf29NVIhqCdkvttoww7qyjFE_A.roa Signing time: Fri 02 Jan 2026 04:17:31 +0000 ROA not before: Fri 02 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196954 IP address blocks: 130.255.120.0/21 maxlen: 21 185.63.124.0/22 maxlen: 22 2a04:9740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c8:c4:c6:9d:f7:37:e8:6d:e4:36:c2:a0:a2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Validity Not Before: Jan 2 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9a7f6f4d54886a09d92fb6da30c3bab28c513f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:89:c6:23:72:0e:12:bd:87:4a:20:9f:d8: 0a:99:ac:c4:74:38:2d:bb:6b:7f:54:8d:a8:5b:65: bd:09:24:4e:8d:ac:94:ec:e3:db:29:16:8c:6c:9f: ac:a5:85:bf:14:59:df:1f:88:70:9a:0b:81:9f:13: 18:3a:b5:7e:c8:a1:73:6e:13:e6:f7:4a:de:76:93: 2e:20:19:7d:88:7a:7f:90:63:fd:f3:88:15:ad:53: f8:97:b4:64:4d:79:af:03:14:23:03:4f:ac:46:96: 21:f6:ce:5d:d8:0f:92:9f:3d:90:cc:f6:ab:31:2c: 57:c6:b0:1d:9f:d0:b6:9b:59:00:c1:44:aa:67:f7: da:a1:df:1d:09:5e:fd:bb:26:af:8b:53:dc:c8:3e: c1:cb:d9:22:75:98:cb:e5:3e:fb:8e:9b:7e:a2:53: 1b:da:cf:97:bd:77:b5:1d:d2:99:98:88:84:1f:64: 66:87:50:80:4e:66:3d:e9:4f:39:9a:44:db:37:4c: 13:99:45:5f:4f:ff:75:3d:69:6e:cf:a2:c3:f9:7e: 0b:17:2e:a7:05:33:16:3a:a4:a8:ab:4e:27:8e:73: e5:cb:f8:6e:07:1d:59:35:b5:78:1b:df:a1:10:ff: 71:01:45:71:16:96:0e:32:1e:6c:07:a0:0e:e1:c9: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:F6:F4:D5:48:86:A0:9D:92:FB:6D:A3:0C:3B:AB:28:C5:13:F0 X509v3 Authority Key Identifier: keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/yaf29NVIhqCdkvttoww7qyjFE_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.120.0/21 185.63.124.0/22 IPv6: 2a04:9740::/29 Signature Algorithm: sha256WithRSAEncryption 12:b9:af:75:8c:3f:f0:f0:3c:7e:b1:b2:85:b7:5f:f1:ab:6d: 16:8a:71:47:1f:45:4d:63:eb:5e:59:2b:c7:ef:f5:3a:62:b3: 50:55:f4:c2:de:25:a5:5c:d5:6f:5a:18:e6:4a:e2:d5:47:55: 97:20:ad:a3:e3:ab:bd:dd:95:63:21:23:ab:48:f1:9f:f9:f2: 5c:70:da:d8:4b:83:1d:44:00:83:cd:94:bb:74:a0:ae:08:68: b3:89:32:a8:9d:16:28:49:96:0e:e6:d1:ce:b2:06:d3:45:bd: 75:4e:45:7c:60:aa:69:32:9d:4a:dc:7f:eb:5b:0d:7a:1c:2d: c1:be:3a:d4:28:d1:d3:b3:38:54:01:32:4c:fa:46:97:6a:69: 5d:db:45:0f:da:5b:0a:cc:50:43:78:d0:70:a0:78:ed:ee:a7: d5:82:06:f7:de:b1:9c:cc:01:bb:6d:e0:20:03:a5:e1:cb:06: 06:e6:38:93:fd:2b:07:42:3f:cb:b0:42:05:e2:cb:c0:67:40: e0:85:a7:9e:9a:83:34:41:be:b2:8c:2f:8e:60:74:d9:df:b7: 8e:f0:d4:58:92:ee:08:1f:fc:c3:37:8b:0c:b4:59:4d:c8:b7: 12:7c:9a:fb:58:9a:51:8c:13:03:d7:15:9e:8b:fc:63:10:42: cb:4e:67:0a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87MjExp33N+ht5DbCoKKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOWUwYTU5MWNjNTI5MTRjYzcwMGUzODc1ZWQ3NWE5MWVj OThjMjgwHhcNMjYwMTAyMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWE3ZjZmNGQ1NDg4NmEwOWQ5MmZiNmRhMzBjM2JhYjI4YzUxM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBeJxiNyDhK9h0ogn9gKmazEdDgt u2t/VI2oW2W9CSROjayU7OPbKRaMbJ+spYW/FFnfH4hwmguBnxMYOrV+yKFzbhPm 90redpMuIBl9iHp/kGP984gVrVP4l7RkTXmvAxQjA0+sRpYh9s5d2A+Snz2QzPar MSxXxrAdn9C2m1kAwUSqZ/faod8dCV79uyavi1PcyD7By9kidZjL5T77jpt+olMb 2s+XvXe1HdKZmIiEH2Rmh1CATmY96U85mkTbN0wTmUVfT/91PWluz6LD+X4LFy6n BTMWOqSoq04njnPly/huBx1ZNbV4G9+hEP9xAUVxFpYOMh5sB6AO4ckidwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMmn9vTVSIagnZL7baMMO6soxRPwMB8GA1UdIwQY MBaAFH2eClkcxSkUzHAOOHXtdakeyYwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDIt YzRkODhiMTNmMTNhLzEveWFmMjlOVklocUNka3Z0dG93dzdxeWpGRV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDItYzRkODhiMTNmMTNh LzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDgv94AwQC uT98MA0EAgACMAcDBQMqBJdAMA0GCSqGSIb3DQEBCwUAA4IBAQASua91jD/w8Dx+ sbKFt1/xq20WinFHH0VNY+teWSvH7/U6YrNQVfTC3iWlXNVvWhjmSuLVR1WXIK2j 46u93ZVjISOrSPGf+fJccNrYS4MdRACDzZS7dKCuCGiziTKonRYoSZYO5tHOsgbT Rb11TkV8YKppMp1K3H/rWw16HC3BvjrUKNHTszhUATJM+kaXamld20UP2lsKzFBD eNBwoHjt7qfVggb33rGczAG7beAgA6XhywYG5jiT/SsHQj/LsEIF4svAZ0Dghaee moM0Qb6yjC+OYHTZ37eO8NRYku4IH/zDN4sMtFlNyLcSfJr7WJpRjBMD1xWei/xj EELLTmcK -----END CERTIFICATE-----Generated at Wed Jan 28 17:05:12 2026 by rpki-client