This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7_ACcC0QG8tggp9_yvEo0cb5QYw.roa File: 7_ACcC0QG8tggp9_yvEo0cb5QYw.roa (raw, json) Hash identifier: hfxOmSA+e4PcRqcx93imjQZD/iErphAI9TuJ47l1OjI= Subject key identifier: EF:F0:02:70:2D:10:1B:CB:60:82:9F:7F:CA:F1:28:D1:C6:F9:41:8C Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAA35379E87D55D33A6A8ABA55A25 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7_ACcC0QG8tggp9_yvEo0cb5QYw.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205298 IP address blocks: 2a0e:aa01:ab04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:aa:35:37:9e:87:d5:5d:33:a6:a8:ab:a5:5a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eff002702d101bcb60829f7fcaf128d1c6f9418c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:01:39:9b:38:0b:f4:75:76:2a:49:af:72: 87:dc:87:64:e1:11:ad:d9:ca:13:3c:c5:c5:c9:b4: 82:75:df:0b:7c:a9:18:e4:cc:1f:78:e9:f9:77:f3: fe:0f:3b:be:1e:39:3a:60:b5:4d:b7:27:75:7c:39: 00:64:53:ab:40:06:01:c2:fd:1f:fd:3c:b1:af:8a: 4b:45:c1:d6:57:b3:4b:e7:01:06:c4:d4:8a:29:a8: a1:b4:0a:c8:88:84:dc:09:3b:1c:2e:4d:fc:2d:20: 0d:96:95:a2:80:da:35:75:13:53:66:50:3f:03:c2: 8e:40:59:7d:ba:09:5a:fd:71:b1:f3:0b:a8:f8:13: 7a:cc:07:41:71:94:ec:31:d8:e8:53:12:aa:e7:40: c4:a1:38:bb:6d:73:56:f6:c6:d1:e2:4a:dd:5f:cf: c8:16:f1:70:a7:3e:80:a5:f6:2f:5b:03:fd:ab:cf: 7b:5e:1a:cf:3b:ce:24:cf:cf:58:fb:02:04:e0:ee: da:40:c6:c6:08:85:30:0c:65:2c:fc:a4:60:35:1b: 9e:fd:07:76:e0:7c:5c:6f:05:1b:67:3b:d5:a2:fa: c6:77:34:34:0e:69:1d:8a:03:68:28:d7:07:f8:08: 54:fa:ff:4f:cb:41:55:aa:04:e0:f1:6a:5e:11:d4: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F0:02:70:2D:10:1B:CB:60:82:9F:7F:CA:F1:28:D1:C6:F9:41:8C X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7_ACcC0QG8tggp9_yvEo0cb5QYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:ab04::/48 Signature Algorithm: sha256WithRSAEncryption 2a:53:71:07:50:82:4a:78:7f:ed:cc:70:5b:30:68:1c:ce:9e: a1:65:31:e8:e4:f5:34:c9:e6:4b:0c:7e:e3:00:a0:d6:8a:ff: 66:86:6f:26:e2:cb:c6:e3:a4:15:63:cc:7c:4b:6c:a4:be:ff: 85:15:0d:47:59:31:d7:ac:94:b7:6e:bc:8e:da:9e:18:e4:36: 26:16:de:d0:db:9c:27:fd:ce:13:51:e4:ab:04:5e:a5:ee:b6: 62:ad:c5:11:b1:e2:1a:2b:4e:e8:23:b3:8d:a6:c5:d6:35:f4: 83:64:ad:2f:01:f9:2d:3e:1b:8e:f9:38:fb:85:0d:92:bf:89: 99:9e:f3:62:57:53:67:e8:dc:26:b9:ce:16:5b:b6:6c:26:82: 45:a8:07:57:b2:4c:2d:82:0c:36:73:c9:cf:5e:ff:e7:a2:19: 5d:7f:03:e9:ef:27:a6:aa:f0:fe:62:36:92:42:a6:f2:a3:65: 5c:51:3c:8d:36:cf:46:20:88:89:00:5e:c3:59:dc:46:61:71: f8:04:5e:b2:77:2b:ab:61:78:55:57:71:31:d3:d9:37:50:e9: b0:35:31:98:ab:3b:4c:a7:f5:1f:57:6b:dd:f3:c9:e7:9a:51: ec:49:8a:9c:43:b4:ee:73:f6:bc:7c:50:4b:bc:e2:f2:4c:36: d2:4a:74:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqo1N56H1V0zpqirpVolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmYwMDI3MDJkMTAxYmNiNjA4MjlmN2ZjYWYxMjhkMWM2Zjk0MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN4BOZs4C/R1dipJr3KH3Idk4RGt 2coTPMXFybSCdd8LfKkY5MwfeOn5d/P+Dzu+Hjk6YLVNtyd1fDkAZFOrQAYBwv0f /Tyxr4pLRcHWV7NL5wEGxNSKKaihtArIiITcCTscLk38LSANlpWigNo1dRNTZlA/ A8KOQFl9ugla/XGx8wuo+BN6zAdBcZTsMdjoUxKq50DEoTi7bXNW9sbR4krdX8/I FvFwpz6ApfYvWwP9q897XhrPO84kz89Y+wIE4O7aQMbGCIUwDGUs/KRgNRue/Qd2 4HxcbwUbZzvVovrGdzQ0DmkdigNoKNcH+AhU+v9Py0FVqgTg8WpeEdTLjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO/wAnAtEBvLYIKff8rxKNHG+UGMMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvN19BQ2NDMFFHOHRnZ3A5X3l2RW8wY2I1UVl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qAasE MA0GCSqGSIb3DQEBCwUAA4IBAQAqU3EHUIJKeH/tzHBbMGgczp6hZTHo5PU0yeZL DH7jAKDWiv9mhm8m4svG46QVY8x8S2ykvv+FFQ1HWTHXrJS3bryO2p4Y5DYmFt7Q 25wn/c4TUeSrBF6l7rZircURseIaK07oI7ONpsXWNfSDZK0vAfktPhuO+Tj7hQ2S v4mZnvNiV1Nn6Nwmuc4WW7ZsJoJFqAdXskwtggw2c8nPXv/nohldfwPp7yemqvD+ YjaSQqbyo2VcUTyNNs9GIIiJAF7DWdxGYXH4BF6ydyurYXhVV3Ex09k3UOmwNTGY qztMp/UfV2vd88nnmlHsSYqcQ7Tuc/a8fFBLvOLyTDbSSnSI -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:11 2026 by rpki-client