This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K7oOfkifn4cLB8GBfTBhCLdOvGE.roa File: K7oOfkifn4cLB8GBfTBhCLdOvGE.roa (raw, json) Hash identifier: jPbRxWK6+F8qWRjPi20MOUU6cNmhE7tZPeaBnzc5Fyk= Subject key identifier: 2B:BA:0E:7E:48:9F:9F:87:0B:07:C1:81:7D:30:61:08:B7:4E:BC:61 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA9C4E87CB0D3869ACC69523D2C3C Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K7oOfkifn4cLB8GBfTBhCLdOvGE.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203737 IP address blocks: 2a0e:aa07:e230::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:c4:e8:7c:b0:d3:86:9a:cc:69:52:3d:2c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bba0e7e489f9f870b07c1817d306108b74ebc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:2c:cf:6d:6c:4d:59:4e:d9:94:bc:61:8e: 5e:a9:8b:d6:cc:ae:df:89:7a:9c:69:b9:9d:1f:87: 3d:27:fc:1f:26:f7:98:65:52:c2:0a:84:db:42:d8: d1:49:e9:5d:f9:e3:be:81:85:b3:ad:49:94:f3:05: 33:20:0d:9f:cb:8d:be:dd:e1:4d:59:a4:c3:6f:c2: ee:e8:67:b1:20:26:7a:7c:d6:5f:3b:47:a5:b9:83: 10:fb:13:fd:89:d2:05:ad:80:21:98:cb:ed:cf:db: ce:5f:0b:b4:c5:1c:c1:dd:e3:81:4e:1d:bd:47:a2: b7:87:3c:78:81:64:ab:d2:9e:1d:23:ed:8d:4c:c0: 59:83:15:91:5e:49:a6:48:98:d5:aa:83:d0:93:33: a0:0f:a6:c8:9d:74:dd:d6:91:c3:4b:8e:48:ad:dc: 5c:62:4b:66:09:54:ea:35:dd:43:8f:7b:55:d0:45: 3b:27:ec:14:d0:fa:b8:7d:2c:b2:18:fb:ef:a1:f7: 9c:1e:a7:b7:11:b6:ac:98:4a:72:11:57:a8:50:89: 4d:58:17:08:8b:77:85:a7:0f:0b:29:09:2a:1f:c2: 17:a9:32:f5:0e:f2:11:cb:70:b1:d6:9b:88:a4:08: 21:7b:8d:ca:23:39:ab:60:0f:55:e1:89:81:31:88: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BA:0E:7E:48:9F:9F:87:0B:07:C1:81:7D:30:61:08:B7:4E:BC:61 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K7oOfkifn4cLB8GBfTBhCLdOvGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e230::/44 Signature Algorithm: sha256WithRSAEncryption 2c:0a:a5:c9:9d:ab:2a:4d:52:13:28:75:c7:ab:4e:23:0f:47: b0:1d:32:a1:9f:b3:a9:27:c2:30:b4:32:a8:53:3c:f4:cf:e5: 38:53:b0:53:3a:ee:58:a1:1e:0f:53:ef:0a:c8:3c:a2:a5:9f: 6e:1e:8f:32:3b:cc:7c:d2:35:db:f3:c3:df:df:cb:50:eb:8a: 1d:a9:4d:6e:a3:ad:ae:32:85:22:c7:95:2e:9f:68:4f:25:6d: 97:ab:79:ed:bf:64:f5:07:9d:36:15:e6:70:8c:7d:6d:d9:46: 14:fc:19:9b:e4:05:4c:ee:3a:28:a7:7e:22:7a:ab:74:d2:b2: 35:fa:b2:6b:b4:fe:13:c8:2b:10:ed:45:c0:e5:0c:f6:da:6e: 34:e3:11:5d:92:34:ab:5d:2d:65:6c:ef:52:68:03:c9:15:18: 43:28:44:2d:18:9b:4b:62:23:a1:94:27:8c:c9:45:03:ab:b5: 69:c6:10:74:aa:40:21:20:b2:40:69:ce:e0:cb:a6:69:bc:f4: 4e:c8:ad:85:ba:d6:37:5c:61:34:c5:b2:dd:fe:04:cd:03:49: 59:68:d8:19:fd:b9:d1:41:4a:a7:aa:bc:2d:97:a2:f6:83:6f: 30:ae:70:5a:53:1d:31:ff:cc:53:c5:54:a2:8c:c7:83:59:2b: 65:6f:30:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqnE6Hyw04aazGlSPSw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmJhMGU3ZTQ4OWY5Zjg3MGIwN2MxODE3ZDMwNjEwOGI3NGViYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVcsz21sTVlO2ZS8YY5eqYvWzK7f iXqcabmdH4c9J/wfJveYZVLCCoTbQtjRSeld+eO+gYWzrUmU8wUzIA2fy42+3eFN WaTDb8Lu6GexICZ6fNZfO0eluYMQ+xP9idIFrYAhmMvtz9vOXwu0xRzB3eOBTh29 R6K3hzx4gWSr0p4dI+2NTMBZgxWRXkmmSJjVqoPQkzOgD6bInXTd1pHDS45Irdxc YktmCVTqNd1Dj3tV0EU7J+wU0Pq4fSyyGPvvofecHqe3EbasmEpyEVeoUIlNWBcI i3eFpw8LKQkqH8IXqTL1DvIRy3Cx1puIpAghe43KIzmrYA9V4YmBMYhLNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCu6Dn5In5+HCwfBgX0wYQi3TrxhMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSzdvT2ZraWZuNGNMQjhHQmZUQmhDTGRPdkdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Iw MA0GCSqGSIb3DQEBCwUAA4IBAQAsCqXJnasqTVITKHXHq04jD0ewHTKhn7OpJ8Iw tDKoUzz0z+U4U7BTOu5YoR4PU+8KyDyipZ9uHo8yO8x80jXb88Pf38tQ64odqU1u o62uMoUix5Uun2hPJW2Xq3ntv2T1B502FeZwjH1t2UYU/Bmb5AVM7joop34ieqt0 0rI1+rJrtP4TyCsQ7UXA5Qz22m404xFdkjSrXS1lbO9SaAPJFRhDKEQtGJtLYiOh lCeMyUUDq7VpxhB0qkAhILJAac7gy6ZpvPROyK2FutY3XGE0xbLd/gTNA0lZaNgZ /bnRQUqnqrwtl6L2g28wrnBaUx0x/8xTxVSijMeDWStlbzDB -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:04 2026 by rpki-client