This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/e7up283J__q-8ybnr7R8WhiF42M.roa File: e7up283J__q-8ybnr7R8WhiF42M.roa (raw, json) Hash identifier: yYsux+esGn7RAsUJPqGG0WbN9n37yOCgPbEaAyyBios= Subject key identifier: 7B:BB:A9:DB:CD:C9:FF:FA:BE:F3:26:E7:AF:B4:7C:5A:18:85:E3:63 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB706CA290BAAB49253CE71F0F9A2 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/e7up283J__q-8ybnr7R8WhiF42M.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211647 IP address blocks: 2a0e:aa07:e04a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b7:06:ca:29:0b:aa:b4:92:53:ce:71:f0:f9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bbba9dbcdc9fffabef326e7afb47c5a1885e363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:a9:d0:8e:bc:6d:bc:cb:f6:6a:d4:25:af: 74:86:97:68:18:12:58:03:9b:b7:0a:b9:d6:6a:f2: 7d:df:eb:88:2b:2a:75:c1:46:76:8b:61:9b:80:4b: 5a:e5:a1:4b:00:91:78:c9:7c:b2:43:a8:d9:fb:30: 2f:55:39:17:dd:f2:a2:d3:2a:10:13:91:8e:34:67: b7:6a:bc:14:1f:ea:0e:2c:12:0a:6b:34:ce:19:f6: d6:e7:5b:a4:38:ce:28:e7:9a:68:b4:1d:8a:54:22: 60:3b:e8:60:96:7f:c3:9c:17:b4:5f:b3:46:e4:6e: c0:18:bf:f9:39:b9:7b:54:06:68:d2:51:1e:94:43: 6c:7e:99:71:7e:e6:66:9e:65:69:a9:fd:1d:a9:55: 1b:e6:39:23:94:85:19:87:6b:d4:d7:1e:3b:e2:34: d5:88:d0:54:8b:32:2b:c4:e6:a1:43:e4:4d:e6:f3: 47:77:df:1a:77:7c:b5:7f:4c:54:ac:cc:10:1e:17: 98:ea:22:b9:38:02:4a:6b:39:73:b6:e3:d4:29:8b: 22:85:02:b3:df:c5:ea:42:f3:b2:fd:1c:be:bd:d8: b6:28:91:d5:08:1a:5c:8e:79:db:04:d2:3c:7c:9a: e4:f6:10:af:b3:95:2e:cf:05:7f:ac:b3:80:26:6a: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BB:A9:DB:CD:C9:FF:FA:BE:F3:26:E7:AF:B4:7C:5A:18:85:E3:63 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/e7up283J__q-8ybnr7R8WhiF42M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e04a::/48 Signature Algorithm: sha256WithRSAEncryption 65:4a:8a:08:2d:d0:3a:34:73:c8:06:44:fd:24:04:b7:2a:bd: a9:2c:ed:db:b9:da:70:54:a5:f4:a3:fb:f2:ec:3d:4f:8e:6c: cd:38:77:5e:1d:a1:62:66:8c:d4:44:90:f1:83:d2:cd:53:e9: 73:7c:6d:01:28:17:44:e8:ee:ff:6d:5e:c1:87:82:c1:08:9f: 53:58:fc:fd:d3:65:0f:a6:ac:d7:36:ee:9b:ac:27:f6:2a:37: 15:9d:3a:81:71:60:c4:23:0d:41:f6:ef:78:5d:31:60:9b:e6: b0:37:a3:3b:06:e2:f5:05:00:82:ab:9d:a3:3e:8e:2a:f7:1e: 49:94:34:a5:56:2a:95:53:84:c2:6d:c2:96:8f:89:83:02:e0: 5d:e9:9f:3d:c9:00:16:b6:b0:d2:59:33:f6:68:5d:63:21:88: 72:03:96:63:2d:48:2b:f0:ac:15:f3:38:02:26:5d:dd:bc:a4: 00:e8:0a:7b:7a:93:d9:0a:8a:2e:f7:37:b0:a3:4b:f0:fe:37: cd:32:7d:db:60:83:b3:23:e2:b9:e7:b9:5a:97:6f:47:bb:95: b8:4f:f3:58:5c:bf:eb:cd:5b:e7:5b:75:1d:12:33:d8:3e:c6: ea:f0:70:28:02:19:e4:60:a9:ba:bb:64:88:5a:a8:d6:c6:eb: ad:e6:5a:3a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frcGyikLqrSSU85x8PmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmJiYTlkYmNkYzlmZmZhYmVmMzI2ZTdhZmI0N2M1YTE4ODVlMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ip0I68bbzL9mrUJa90hpdoGBJY A5u3CrnWavJ93+uIKyp1wUZ2i2GbgEta5aFLAJF4yXyyQ6jZ+zAvVTkX3fKi0yoQ E5GONGe3arwUH+oOLBIKazTOGfbW51ukOM4o55potB2KVCJgO+hgln/DnBe0X7NG 5G7AGL/5Obl7VAZo0lEelENsfplxfuZmnmVpqf0dqVUb5jkjlIUZh2vU1x474jTV iNBUizIrxOahQ+RN5vNHd98ad3y1f0xUrMwQHheY6iK5OAJKazlztuPUKYsihQKz 38XqQvOy/Ry+vdi2KJHVCBpcjnnbBNI8fJrk9hCvs5UuzwV/rLOAJmrjeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHu7qdvNyf/6vvMm56+0fFoYheNjMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvZTd1cDI4M0pfX3EtOHlibnI3UjhXaGlGNDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+BK MA0GCSqGSIb3DQEBCwUAA4IBAQBlSooILdA6NHPIBkT9JAS3Kr2pLO3budpwVKX0 o/vy7D1PjmzNOHdeHaFiZozURJDxg9LNU+lzfG0BKBdE6O7/bV7Bh4LBCJ9TWPz9 02UPpqzXNu6brCf2KjcVnTqBcWDEIw1B9u94XTFgm+awN6M7BuL1BQCCq52jPo4q 9x5JlDSlViqVU4TCbcKWj4mDAuBd6Z89yQAWtrDSWTP2aF1jIYhyA5ZjLUgr8KwV 8zgCJl3dvKQA6Ap7epPZCoou9zewo0vw/jfNMn3bYIOzI+K557lal29Hu5W4T/NY XL/rzVvnW3UdEjPYPsbq8HAoAhnkYKm6u2SIWqjWxuut5lo6 -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:58 2026 by rpki-client