This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa File: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (raw, json) Hash identifier: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw= Subject key identifier: 8F:BA:B0:84:FA:D2:A3:EF:2E:78:2A:C5:26:8F:C6:5B:03:3D:DD:38 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B7C12721064A1C7A3B35F950A034FAFDC Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206446 IP address blocks: 2a10:1fc0:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:72:10:64:a1:c7:a3:b3:5f:95:0a:03:4f:af:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fbab084fad2a3ef2e782ac5268fc65b033ddd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:31:c9:80:4a:f2:f9:17:76:a4:9d:e5:b1: a8:d7:ec:ca:f9:69:ee:ee:a1:c5:77:28:8b:a7:58: d5:6f:bc:7c:99:19:ab:17:d4:bd:fe:85:0b:0d:41: c0:0c:d7:23:cb:42:6c:00:d9:57:93:5b:62:46:03: 7e:6c:57:ee:f7:3d:4f:f4:db:e4:a8:5a:ae:99:ef: b1:fd:f3:ec:f5:13:62:e2:fd:4c:96:4e:71:d6:39: 0f:08:01:c2:6a:93:f3:1a:d1:5c:8f:1f:69:c6:1d: c2:95:b3:c9:c8:c6:7e:83:4f:07:f8:ef:b2:16:c8: 78:86:fc:6d:3f:3a:06:09:df:2b:9f:b3:a1:a3:f5: 2f:df:14:55:6a:96:c8:32:e3:6e:ae:e3:75:82:19: 8c:20:cb:8f:f0:f3:58:01:b3:e5:1b:15:44:fd:44: 72:38:ad:47:b8:1a:39:1f:1e:f0:86:f3:a3:e5:8c: d8:a6:f9:c1:12:1e:2c:a8:ce:10:93:e9:58:ce:b5: c5:d8:fb:b3:38:1f:e6:a5:0d:4a:88:65:0c:17:7d: 8a:85:54:56:36:bb:49:9e:bf:26:d7:d6:62:79:c8: 77:1c:a4:e7:b8:13:29:6f:f5:56:f7:c1:84:88:24: f6:4d:1f:e7:2e:78:89:a8:33:94:05:d3:7b:66:b6: e7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BA:B0:84:FA:D2:A3:EF:2E:78:2A:C5:26:8F:C6:5B:03:3D:DD:38 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:1fc0:d::/48 Signature Algorithm: sha256WithRSAEncryption 5e:bb:dd:29:22:65:af:8b:f7:6f:db:e5:7b:c3:ec:1f:94:d8: ce:29:0a:65:eb:df:9e:d1:0b:0a:d8:e0:89:f0:e8:0c:87:2c: f3:c9:2e:c8:5f:94:ba:2b:bd:4f:22:fa:f2:0a:a6:4e:e9:78: 0c:1d:fd:1a:f7:6d:01:7f:31:ce:ae:eb:5d:95:70:48:5d:69: b2:7c:0e:84:76:28:de:3e:75:82:78:fb:64:b6:f7:a4:16:87: 7d:cd:20:24:f6:c3:2e:d5:90:9b:cf:f8:fb:8a:ba:0b:08:f8: 92:66:d2:4e:75:e4:37:53:49:7f:bc:d6:e4:ce:7b:39:d1:a4: 4b:4c:18:b3:1c:55:95:a6:38:77:2c:05:cc:6d:03:b4:f1:4a: c9:a4:bb:35:63:26:ea:1c:91:27:45:72:e9:40:3c:db:cc:43: d7:e0:49:99:04:32:92:15:95:98:cc:05:a5:96:bd:9d:7a:53: 6a:b3:30:5f:49:ea:88:44:8a:f7:dc:87:b8:25:be:02:a3:09: d4:1e:80:79:16:69:09:e1:99:f7:75:70:05:67:98:fc:3e:13: 4a:06:f5:d8:1c:12:90:21:5d:9e:d2:ef:48:df:ef:0c:e1:11: bd:d2:b5:8a:20:65:5e:66:2d:42:53:46:1c:12:fd:18:57:e5: 49:3c:47:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EnIQZKHHo7NflQoDT6/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmJhYjA4NGZhZDJhM2VmMmU3ODJhYzUyNjhmYzY1YjAzM2RkZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkExyYBK8vkXdqSd5bGo1+zK+Wnu 7qHFdyiLp1jVb7x8mRmrF9S9/oULDUHADNcjy0JsANlXk1tiRgN+bFfu9z1P9Nvk qFqume+x/fPs9RNi4v1Mlk5x1jkPCAHCapPzGtFcjx9pxh3ClbPJyMZ+g08H+O+y Fsh4hvxtPzoGCd8rn7Oho/Uv3xRVapbIMuNuruN1ghmMIMuP8PNYAbPlGxVE/URy OK1HuBo5Hx7whvOj5YzYpvnBEh4sqM4Qk+lYzrXF2PuzOB/mpQ1KiGUMF32KhVRW NrtJnr8m19Ziech3HKTnuBMpb/VW98GEiCT2TR/nLniJqDOUBdN7ZrbnuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI+6sIT60qPvLngqxSaPxlsDPd04MB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvajdxd2hQclNvLTh1ZUNyRkpvX0dXd005M1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAfwAAN MA0GCSqGSIb3DQEBCwUAA4IBAQBeu90pImWvi/dv2+V7w+wflNjOKQpl69+e0QsK 2OCJ8OgMhyzzyS7IX5S6K71PIvryCqZO6XgMHf0a920BfzHOrutdlXBIXWmyfA6E dijePnWCePtktvekFod9zSAk9sMu1ZCbz/j7iroLCPiSZtJOdeQ3U0l/vNbkzns5 0aRLTBizHFWVpjh3LAXMbQO08UrJpLs1YybqHJEnRXLpQDzbzEPX4EmZBDKSFZWY zAWllr2delNqszBfSeqIRIr33Ie4Jb4CownUHoB5FmkJ4Zn3dXAFZ5j8PhNKBvXY HBKQIV2e0u9I3+8M4RG90rWKIGVeZi1CU0YcEv0YV+VJPEcG -----END CERTIFICATE-----Generated at Tue Jan 20 12:12:21 2026 by rpki-client