This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7cviz2yvJ9P4v4mVmUXmJE9g18w.roa File: 7cviz2yvJ9P4v4mVmUXmJE9g18w.roa (raw, json) Hash identifier: y42Gu6pVqGuPaBfvKVrp3f77gseGbMBY71U4V+lvq9A= Subject key identifier: ED:CB:E2:CF:6C:AF:27:D3:F8:BF:89:95:99:45:E6:24:4F:60:D7:CC Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9A5805390C89C840E81E017AF380 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7cviz2yvJ9P4v4mVmUXmJE9g18w.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 2a0e:aa06:504::/48 maxlen: 48 2a0e:aa06:505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9a:58:05:39:0c:89:c8:40:e8:1e:01:7a:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcbe2cf6caf27d3f8bf89959945e6244f60d7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:c0:50:38:cd:ea:c0:ab:db:cd:a8:65:c2: 31:b7:cb:ff:13:d0:e5:ea:a4:90:65:51:7f:f3:f0: e0:4e:a1:80:23:e5:89:19:2d:f8:d1:c0:86:97:e5: 70:e0:0a:d4:62:63:a3:89:57:8a:3d:29:14:e4:4e: 16:79:c8:d7:02:06:94:9a:2f:d5:40:0e:ce:66:03: 13:a8:35:7b:70:c8:71:a1:bb:a9:e3:8a:3a:5f:f2: e7:6e:4c:1b:a7:c0:c6:94:82:d3:19:cb:2c:16:ef: 21:34:9d:3f:2c:9b:bf:01:5a:7f:1b:73:eb:f3:f2: a5:2e:57:37:c5:cb:8c:f2:3d:f9:20:92:be:63:58: 2e:9b:d1:99:75:54:28:e7:c9:f0:73:43:bf:4b:af: 88:66:26:db:45:c8:c7:5d:c4:38:1b:cc:b8:46:6b: 3e:4b:cf:97:ac:ed:cf:27:90:92:77:b9:7a:9c:51: 69:7c:0c:e8:89:63:dc:b2:a5:b7:25:c9:4e:69:1d: 29:d6:e4:ad:bd:e7:0e:17:c1:b0:e3:d7:b4:ba:0a: e3:c2:c6:ca:01:b3:74:7b:65:b9:7c:8b:a6:79:ae: d3:43:9f:1d:6d:68:d6:5d:81:ce:cb:f5:df:fd:ac: fe:3f:96:77:b9:8c:46:b7:55:9e:b2:d6:cb:ba:02: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:E2:CF:6C:AF:27:D3:F8:BF:89:95:99:45:E6:24:4F:60:D7:CC X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/7cviz2yvJ9P4v4mVmUXmJE9g18w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:504::/47 Signature Algorithm: sha256WithRSAEncryption 29:13:99:af:aa:be:67:34:8c:97:9a:c4:97:09:bb:75:60:53: 21:a6:e9:a2:7b:9b:c9:bd:3f:83:59:28:35:64:05:82:c4:ff: 46:f7:52:3c:ae:71:2c:30:cf:c7:10:2e:cb:cc:87:a6:0e:f9: 19:8b:bd:cd:de:5a:4d:64:a2:62:11:e6:ca:1a:d4:d5:00:e9: 56:29:c4:1e:18:56:49:c5:0a:7d:42:c4:b6:1a:13:6a:79:07: 30:30:60:81:ed:f1:28:7e:f8:28:da:40:80:53:42:0e:b3:bc: a6:37:c5:9e:d0:0a:92:74:db:64:0b:79:be:f6:fc:f6:63:65: 48:1d:6b:80:4b:12:93:c7:75:ba:0b:4d:5a:2d:5f:b4:d5:fa: b0:d1:f1:e7:9d:79:b2:74:32:dd:e6:15:78:6a:d1:59:fb:c4: c6:52:1a:96:ac:c3:32:b9:93:f3:e1:3f:36:fa:be:78:ca:a8: d9:53:f1:6e:ff:cc:87:cc:c2:df:71:3f:b3:62:dc:08:c3:14: 79:e2:b2:d9:92:f4:c5:67:da:24:37:02:05:fe:e3:da:d2:a2: cf:f1:b0:ae:a6:6a:d4:07:b5:b2:ce:d9:32:dc:b5:7b:c8:15: 5a:c7:0c:3a:86:06:19:68:1c:18:c9:dd:fe:2d:ed:72:99:04: bb:63:82:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fppYBTkMichA6B4BevOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNiZTJjZjZjYWYyN2QzZjhiZjg5OTU5OTQ1ZTYyNDRmNjBkN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw3AUDjN6sCr282oZcIxt8v/E9Dl 6qSQZVF/8/DgTqGAI+WJGS340cCGl+Vw4ArUYmOjiVeKPSkU5E4WecjXAgaUmi/V QA7OZgMTqDV7cMhxobup44o6X/Lnbkwbp8DGlILTGcssFu8hNJ0/LJu/AVp/G3Pr 8/KlLlc3xcuM8j35IJK+Y1gum9GZdVQo58nwc0O/S6+IZibbRcjHXcQ4G8y4Rms+ S8+XrO3PJ5CSd7l6nFFpfAzoiWPcsqW3JclOaR0p1uStvecOF8Gw49e0ugrjwsbK AbN0e2W5fIumea7TQ58dbWjWXYHOy/Xf/az+P5Z3uYxGt1WestbLugICDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO3L4s9sryfT+L+JlZlF5iRPYNfMMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvN2N2aXoyeXZKOVA0djRtVm1VWG1KRTlnMTh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6qBgUE MA0GCSqGSIb3DQEBCwUAA4IBAQApE5mvqr5nNIyXmsSXCbt1YFMhpumie5vJvT+D WSg1ZAWCxP9G91I8rnEsMM/HEC7LzIemDvkZi73N3lpNZKJiEebKGtTVAOlWKcQe GFZJxQp9QsS2GhNqeQcwMGCB7fEofvgo2kCAU0IOs7ymN8We0AqSdNtkC3m+9vz2 Y2VIHWuASxKTx3W6C01aLV+01fqw0fHnnXmydDLd5hV4atFZ+8TGUhqWrMMyuZPz 4T82+r54yqjZU/Fu/8yHzMLfcT+zYtwIwxR54rLZkvTFZ9okNwIF/uPa0qLP8bCu pmrUB7Wyztky3LV7yBVaxww6hgYZaBwYyd3+Le1ymQS7Y4K4 -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client