This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UpV7owB0QjsMCHrecLll6DIdyag.roa File: UpV7owB0QjsMCHrecLll6DIdyag.roa (raw, json) Hash identifier: dU0A3n2sEfKPYXROAl/KO8ibzX5+YrckCb6r3oD9mgs= Subject key identifier: 52:95:7B:A3:00:74:42:3B:0C:08:7A:DE:70:B9:65:E8:32:1D:C9:A8 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB311DA5A50719259D11675557EDE Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UpV7owB0QjsMCHrecLll6DIdyag.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210041 IP address blocks: 2a0e:aa07:e030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b3:11:da:5a:50:71:92:59:d1:16:75:55:7e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52957ba30074423b0c087ade70b965e8321dc9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:33:8f:c8:31:e6:73:a4:63:36:9f:5d:c5: b6:45:dd:f3:50:aa:d1:df:fa:3b:b8:64:90:1f:70: a5:b6:8a:fb:97:e1:e8:a4:94:59:e7:9d:8c:a2:20: 79:f1:f7:1e:d9:1e:cb:08:e4:0a:ec:d9:5b:a2:f4: c9:06:c7:dc:9d:95:0e:bf:1b:0d:27:8b:6e:6b:de: 42:38:c5:01:33:50:00:2a:6b:f4:3b:79:58:d6:07: 7a:91:70:ff:27:04:a7:c8:c9:f5:24:4e:16:e9:13: 42:1b:e1:7f:3f:ee:07:a9:b2:0d:33:8e:cf:9c:be: bf:df:36:87:ae:53:7f:ff:45:11:33:8b:8d:e9:f2: 7d:f5:1e:2e:15:95:4b:3b:3b:e8:97:7e:ec:d7:d3: 1e:c1:b8:80:9c:70:06:36:4f:94:9e:eb:2f:1b:e0: bb:36:58:65:6e:a0:54:f7:60:7b:c0:f9:34:62:aa: 65:c2:b7:f9:31:a3:d7:80:a6:f7:88:39:b5:d5:34: 16:d7:9e:91:61:1a:f6:53:90:06:a5:f5:36:a3:54: 22:f4:01:82:1e:77:a6:50:bd:4e:69:67:30:13:62: 6b:c0:2c:29:24:db:77:96:22:fa:0a:35:7a:78:81: ea:ce:77:ec:77:ee:77:07:e0:4d:c8:a0:ef:00:1b: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:95:7B:A3:00:74:42:3B:0C:08:7A:DE:70:B9:65:E8:32:1D:C9:A8 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UpV7owB0QjsMCHrecLll6DIdyag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e030::/48 Signature Algorithm: sha256WithRSAEncryption 36:c5:01:7f:cb:d8:93:aa:d3:a9:ec:c7:04:a5:ff:e7:9d:ac: 0e:82:8b:52:3e:1c:9e:c1:6a:a6:51:c3:a7:f6:0c:45:99:5a: 8e:e1:15:a0:b2:31:9c:81:c3:58:89:91:81:b6:2e:b8:34:36: 28:b5:48:89:6f:31:25:c1:4b:ba:13:5f:4e:89:ec:80:a5:c4: 4b:86:a8:43:8d:33:12:96:8d:69:50:d1:bb:11:95:69:1f:e1: fd:22:96:f1:b4:09:e0:86:b7:cb:3c:d6:55:0a:f8:50:65:9d: f7:4b:21:d3:e6:1b:42:1c:42:14:7d:ed:fc:5e:8b:59:44:83: 3f:0a:39:8c:d3:ee:14:4c:d1:d5:ac:5f:f1:28:6f:6b:a8:61: c3:ee:5e:de:77:66:ea:ae:1e:39:c7:36:40:65:45:02:6c:a4: 62:24:51:b2:76:1d:53:e9:d9:b4:f3:a2:65:c4:8c:83:61:85: 70:16:5c:9e:ee:5c:bb:c0:ef:a8:c7:1e:9c:89:09:16:a2:e2: 74:f7:c2:9b:b4:eb:27:5d:07:c8:40:1c:90:8b:b0:95:5c:ed: 2b:58:1e:f2:c8:d5:ea:c9:9d:aa:a6:73:7e:27:f7:ba:2d:16: ad:1d:13:35:9c:de:7a:ef:07:49:6c:35:70:93:6a:16:54:f0: d3:3f:de:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frMR2lpQcZJZ0RZ1VX7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjk1N2JhMzAwNzQ0MjNiMGMwODdhZGU3MGI5NjVlODMyMWRjOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOUzj8gx5nOkYzafXcW2Rd3zUKrR 3/o7uGSQH3Cltor7l+HopJRZ552MoiB58fce2R7LCOQK7NlbovTJBsfcnZUOvxsN J4tua95COMUBM1AAKmv0O3lY1gd6kXD/JwSnyMn1JE4W6RNCG+F/P+4HqbINM47P nL6/3zaHrlN//0URM4uN6fJ99R4uFZVLOzvol37s19MewbiAnHAGNk+UnusvG+C7 NlhlbqBU92B7wPk0Yqplwrf5MaPXgKb3iDm11TQW156RYRr2U5AGpfU2o1Qi9AGC HnemUL1OaWcwE2JrwCwpJNt3liL6CjV6eIHqznfsd+53B+BNyKDvABvT5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFKVe6MAdEI7DAh63nC5ZegyHcmoMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvVXBWN293QjBRanNNQ0hyZWNMbGw2RElkeWFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Aw MA0GCSqGSIb3DQEBCwUAA4IBAQA2xQF/y9iTqtOp7McEpf/nnawOgotSPhyewWqm UcOn9gxFmVqO4RWgsjGcgcNYiZGBti64NDYotUiJbzElwUu6E19OieyApcRLhqhD jTMSlo1pUNG7EZVpH+H9IpbxtAnghrfLPNZVCvhQZZ33SyHT5htCHEIUfe38XotZ RIM/CjmM0+4UTNHVrF/xKG9rqGHD7l7ed2bqrh45xzZAZUUCbKRiJFGydh1T6dm0 86JlxIyDYYVwFlye7ly7wO+oxx6ciQkWouJ098KbtOsnXQfIQByQi7CVXO0rWB7y yNXqyZ2qpnN+J/e6LRatHRM1nN567wdJbDVwk2oWVPDTP94t -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client