This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ByECkTOkcSKtjJyCxcIHdBlOajc.roa File: ByECkTOkcSKtjJyCxcIHdBlOajc.roa (raw, json) Hash identifier: /rEejBzZIZd06TTM0OMmFpsp8CnvtlM/xUoi84WMl2A= Subject key identifier: 07:21:02:91:33:A4:71:22:AD:8C:9C:82:C5:C2:07:74:19:4E:6A:37 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA576A6710F58E7B7681AE5498330 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ByECkTOkcSKtjJyCxcIHdBlOajc.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198516 IP address blocks: 2a0e:aa06:4e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:76:a6:71:0f:58:e7:b7:68:1a:e5:49:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0721029133a47122ad8c9c82c5c20774194e6a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:8d:be:c4:7c:e5:89:fb:31:01:87:10:d6: fd:a5:9b:71:fd:bc:d5:d0:23:4f:c4:3a:0a:1c:3a: e2:7c:7e:6d:45:c9:8c:0f:30:47:c6:7e:47:8e:15: f4:db:06:a5:7d:45:93:d9:31:2a:9f:1d:25:55:7f: ed:ce:ae:5a:bc:7b:5b:87:0c:5f:27:82:c7:87:76: 2c:b0:df:f4:7a:ab:7d:b6:08:ee:3a:08:bb:22:9d: 58:74:7f:10:29:d4:3d:5f:e0:6d:6b:60:76:64:ad: 7a:96:43:65:29:bf:da:62:4c:35:66:71:b1:d8:62: 3a:9e:ad:3f:a2:11:5c:71:4b:92:44:fc:53:02:c0: e9:c8:bc:04:01:45:3e:e3:2f:94:de:e8:24:a8:07: ec:a1:57:1b:a8:e7:1a:24:85:06:9e:3c:4e:b0:0f: e4:91:57:90:94:e4:60:91:b4:ef:92:29:52:42:26: ab:93:48:69:db:1a:4e:83:f9:7d:e2:7b:cc:9f:1f: 7a:95:a4:db:6b:cf:f8:75:84:d3:d1:99:97:65:ee: af:22:26:64:8c:9b:8a:b6:eb:a3:cc:83:94:7d:1f: ab:9e:70:d0:c9:5d:12:5f:e1:36:71:8a:01:37:4e: 99:2b:3d:2d:89:09:67:cb:63:d8:fa:92:20:35:3c: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:02:91:33:A4:71:22:AD:8C:9C:82:C5:C2:07:74:19:4E:6A:37 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ByECkTOkcSKtjJyCxcIHdBlOajc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:4e0::/44 Signature Algorithm: sha256WithRSAEncryption c4:f0:2f:2b:f6:f0:3d:87:67:79:8c:1a:1c:00:9f:52:0d:9d: 4f:57:e8:e7:42:54:49:f8:d0:eb:9b:9b:88:a0:d7:ac:86:8f: e7:0d:5a:e6:60:c7:57:fa:02:e3:d5:34:21:c0:e7:3c:d4:d0: 1d:83:8d:17:48:7e:7c:a7:8e:a6:dd:42:dd:c5:6a:9e:c1:77: 79:81:b2:ce:e6:ad:00:0c:8b:43:1a:a8:cb:aa:fc:cf:00:3b: 83:6e:8b:6d:0d:fa:f5:4d:38:74:5d:04:99:f0:f6:37:7e:d4: d0:f5:1a:b9:bd:fb:2d:cd:88:e9:88:fa:55:20:a9:8d:4d:3c: 86:f1:b1:d3:53:12:1e:00:5c:06:7e:ca:b2:42:6a:14:1c:20: e9:81:24:fe:6a:69:e4:9d:ec:9e:60:81:a5:2a:be:a2:dc:6c: 22:b1:c9:86:97:3a:2e:2a:a4:59:12:d4:3c:87:27:6c:60:be: 1a:45:c0:ea:42:36:44:ec:dd:84:7a:8a:f9:a5:86:d8:53:a9: 92:30:4d:4d:ff:5c:e5:54:e8:2d:4e:93:2d:7e:ff:e3:1c:81: 7c:9d:06:dc:b0:6b:eb:b3:26:3f:91:51:f2:55:96:fc:e2:8a: 49:a3:32:c9:23:34:8b:12:6c:cd:2c:93:ca:2f:7b:35:19:34: 2f:e4:7d:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqV2pnEPWOe3aBrlSYMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzIxMDI5MTMzYTQ3MTIyYWQ4YzljODJjNWMyMDc3NDE5NGU2YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbuNvsR85Yn7MQGHENb9pZtx/bzV 0CNPxDoKHDrifH5tRcmMDzBHxn5HjhX02walfUWT2TEqnx0lVX/tzq5avHtbhwxf J4LHh3YssN/0eqt9tgjuOgi7Ip1YdH8QKdQ9X+Bta2B2ZK16lkNlKb/aYkw1ZnGx 2GI6nq0/ohFccUuSRPxTAsDpyLwEAUU+4y+U3ugkqAfsoVcbqOcaJIUGnjxOsA/k kVeQlORgkbTvkilSQiark0hp2xpOg/l94nvMnx96laTba8/4dYTT0ZmXZe6vIiZk jJuKtuujzIOUfR+rnnDQyV0SX+E2cYoBN06ZKz0tiQlny2PY+pIgNTxgwQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAchApEzpHEirYycgsXCB3QZTmo3MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvQnlFQ2tUT2tjU0t0akp5Q3hjSUhkQmxPYWpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgTg MA0GCSqGSIb3DQEBCwUAA4IBAQDE8C8r9vA9h2d5jBocAJ9SDZ1PV+jnQlRJ+NDr m5uIoNesho/nDVrmYMdX+gLj1TQhwOc81NAdg40XSH58p46m3ULdxWqewXd5gbLO 5q0ADItDGqjLqvzPADuDbottDfr1TTh0XQSZ8PY3ftTQ9Rq5vfstzYjpiPpVIKmN TTyG8bHTUxIeAFwGfsqyQmoUHCDpgST+amnkneyeYIGlKr6i3GwiscmGlzouKqRZ EtQ8hydsYL4aRcDqQjZE7N2Eeor5pYbYU6mSME1N/1zlVOgtTpMtfv/jHIF8nQbc sGvrsyY/kVHyVZb84opJozLJIzSLEmzNLJPKL3s1GTQv5H2K -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:57 2026 by rpki-client