This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/494mSBMHkFzIQ1a4BCxZtyF_kA0.roa File: 494mSBMHkFzIQ1a4BCxZtyF_kA0.roa (raw, json) Hash identifier: JcCJMPJhATBcyhp7NsuGNv4YJDvmGmho7s3jbCzqdr0= Subject key identifier: E3:DE:26:48:13:07:90:5C:C8:43:56:B8:04:2C:59:B7:21:7F:90:0D Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA9851C0500EC2139FEE133E2C8A7 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/494mSBMHkFzIQ1a4BCxZtyF_kA0.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203664 IP address blocks: 2a0e:aa07:e044::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:85:1c:05:00:ec:21:39:fe:e1:33:e2:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3de26481307905cc84356b8042c59b7217f900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:f1:11:66:c3:21:8d:4d:02:28:64:77:7b: 5e:42:37:8f:38:d7:85:d2:2c:a2:2e:7e:ca:09:d6: 38:79:78:35:6e:36:3f:30:5c:63:27:07:18:22:34: 66:d4:ac:a5:d0:0a:09:ca:14:fe:ef:fa:ab:94:3f: 7a:63:aa:03:20:a7:4a:bb:54:fa:e0:0f:93:1a:c1: 74:35:9c:cc:4d:01:98:bd:7b:da:9c:12:68:1d:d6: 18:a4:67:25:24:13:55:1a:84:dc:17:68:cb:8e:60: e1:4a:54:8a:08:d2:38:dc:37:f7:7c:65:10:37:d3: db:1f:9c:53:ce:ea:e4:76:49:4d:6c:75:5c:7e:84: 9a:95:63:43:73:12:1c:75:4a:a7:11:5d:f8:32:b8: 02:c3:09:66:39:55:64:b9:8f:17:19:56:b1:74:50: a6:b8:15:f4:3e:42:d6:64:22:d1:f5:3f:49:cf:68: b3:09:76:77:74:3e:a1:fa:cd:38:7f:8b:0e:e2:e2: 49:c3:a3:76:a1:f6:ed:85:6c:e6:53:65:69:32:6e: fd:30:9f:8a:7d:f4:cc:8d:19:ac:14:6e:36:cd:99: c0:c1:ad:ac:4e:76:24:65:3b:75:25:56:61:e6:30: 1c:b0:ff:bc:0f:58:21:97:15:c4:f2:60:bf:28:96: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:26:48:13:07:90:5C:C8:43:56:B8:04:2C:59:B7:21:7F:90:0D X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/494mSBMHkFzIQ1a4BCxZtyF_kA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e044::/48 Signature Algorithm: sha256WithRSAEncryption c7:27:87:37:c6:44:c8:b1:f7:36:8e:5f:f5:de:ab:ca:ae:56: 5b:ee:87:63:d2:f5:06:89:09:c5:d1:66:1a:80:91:1d:c7:ec: df:f1:ef:34:51:f5:f4:8a:61:41:32:30:61:7c:ca:c4:29:7b: 26:a0:d6:e6:cb:b8:3d:f9:ec:65:e7:08:d7:78:1f:c3:eb:8e: 21:d9:17:80:94:b6:d7:19:38:b7:46:de:18:a9:72:7f:fd:a9: 08:d8:dc:e7:f3:07:11:6a:17:9e:a3:80:32:c7:1d:52:d3:5f: 0a:30:66:79:1d:7c:96:74:b8:ee:39:e0:5a:28:e4:b8:37:09: b5:3f:cf:8d:3e:b1:80:75:ee:7d:56:9b:b4:aa:b4:22:3d:6b: 69:dd:0a:60:72:fd:57:26:f8:49:99:cc:45:a5:fc:6b:18:19: 32:30:01:96:4e:6d:e5:3f:cd:63:23:87:90:76:b4:82:ad:14: c8:eb:87:89:4a:5d:66:65:be:06:d8:c9:89:34:14:f0:7a:be: 81:77:75:4f:a1:75:a0:dd:27:5d:c7:15:83:eb:39:d5:c2:c2: 94:85:59:ff:48:6c:27:6a:e0:c1:de:2b:c7:33:51:34:18:3a: f3:6a:07:db:6e:c8:1a:6c:5c:ac:21:76:fc:00:bc:d1:d9:f6: f0:46:0d:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqmFHAUA7CE5/uEz4sinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2RlMjY0ODEzMDc5MDVjYzg0MzU2YjgwNDJjNTliNzIxN2Y5MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNfxEWbDIY1NAihkd3teQjePONeF 0iyiLn7KCdY4eXg1bjY/MFxjJwcYIjRm1Kyl0AoJyhT+7/qrlD96Y6oDIKdKu1T6 4A+TGsF0NZzMTQGYvXvanBJoHdYYpGclJBNVGoTcF2jLjmDhSlSKCNI43Df3fGUQ N9PbH5xTzurkdklNbHVcfoSalWNDcxIcdUqnEV34MrgCwwlmOVVkuY8XGVaxdFCm uBX0PkLWZCLR9T9Jz2izCXZ3dD6h+s04f4sO4uJJw6N2ofbthWzmU2VpMm79MJ+K ffTMjRmsFG42zZnAwa2sTnYkZTt1JVZh5jAcsP+8D1ghlxXE8mC/KJbReQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOPeJkgTB5BcyENWuAQsWbchf5ANMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvNDk0bVNCTUhrRnpJUTFhNEJDeFp0eUZfa0EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+BE MA0GCSqGSIb3DQEBCwUAA4IBAQDHJ4c3xkTIsfc2jl/13qvKrlZb7odj0vUGiQnF 0WYagJEdx+zf8e80UfX0imFBMjBhfMrEKXsmoNbmy7g9+exl5wjXeB/D644h2ReA lLbXGTi3Rt4YqXJ//akI2Nzn8wcRaheeo4Ayxx1S018KMGZ5HXyWdLjuOeBaKOS4 Nwm1P8+NPrGAde59Vpu0qrQiPWtp3Qpgcv1XJvhJmcxFpfxrGBkyMAGWTm3lP81j I4eQdrSCrRTI64eJSl1mZb4G2MmJNBTwer6Bd3VPoXWg3SddxxWD6znVwsKUhVn/ SGwnauDB3ivHM1E0GDrzagfbbsgabFysIXb8ALzR2fbwRg2M -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client