This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/07nzJiStUklre2gjRSuEsrJ4Zo4.roa File: 07nzJiStUklre2gjRSuEsrJ4Zo4.roa (raw, json) Hash identifier: rQvNMNnZa2B5OerGzQN/EN/yLHPs56WcqOKnh4bLfDY= Subject key identifier: D3:B9:F3:26:24:AD:52:49:6B:7B:68:23:45:2B:84:B2:B2:78:66:8E Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791093435AFA15154D52940DAF072D72 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/07nzJiStUklre2gjRSuEsrJ4Zo4.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199457 IP address blocks: 2a12:bec0:220::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:93:43:5a:fa:15:15:4d:52:94:0d:af:07:2d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3b9f32624ad52496b7b6823452b84b2b278668e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:0e:e5:79:ef:ae:6d:1e:26:73:b0:bf:60: d4:de:80:79:90:60:ed:14:87:66:bf:df:6c:90:9d: df:63:4b:b5:aa:57:cb:92:e6:89:dc:51:c2:69:5f: e7:b7:73:e8:30:bb:b3:96:51:9c:18:1c:5a:60:df: 4b:f4:f4:6c:94:11:8f:6a:e0:73:8c:6c:33:e5:fa: 7f:0a:35:d7:ee:89:80:e6:69:ce:23:32:b4:5b:0a: 8b:42:4e:9d:05:38:0a:30:cd:95:7f:78:f0:6e:95: 8f:df:26:92:cb:39:53:04:32:b7:52:93:bc:9a:3c: 81:33:e3:25:44:6d:79:2e:93:a5:5d:8f:7f:ff:e1: 66:e6:51:86:38:a1:2e:e1:5e:a5:34:91:a8:d4:ac: 80:76:82:74:61:9b:25:1c:cf:77:41:49:ce:5d:6c: 4e:8a:bf:54:7f:2a:13:8e:33:45:36:2e:93:2f:a6: b4:58:2c:ff:14:3d:73:76:79:48:da:a9:17:f8:2b: de:99:c6:ba:9b:33:cb:3f:d5:4a:88:a7:5a:1e:05: 5f:24:dd:a3:d9:4a:20:96:88:8d:70:6e:10:81:28: 79:ff:a4:21:90:9b:e4:1c:1d:89:83:fe:cf:aa:71: 76:ef:f4:38:1d:6b:c4:ac:c9:ea:e1:26:44:2b:16: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B9:F3:26:24:AD:52:49:6B:7B:68:23:45:2B:84:B2:B2:78:66:8E X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/07nzJiStUklre2gjRSuEsrJ4Zo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:220::/44 Signature Algorithm: sha256WithRSAEncryption c3:3b:b4:68:a2:79:af:6b:01:3a:2e:1f:e4:6a:0a:16:2f:87: ad:81:15:7d:10:69:45:1d:6e:c1:34:53:4b:53:01:8a:57:55: 94:ec:69:26:80:4f:19:66:08:c9:67:79:a7:7f:bb:96:e1:d8: 2b:93:6e:81:70:12:62:2b:13:1b:8e:c1:5e:04:16:3d:25:13: c8:54:c7:57:37:95:a8:af:09:d1:4e:db:2e:c1:95:78:f2:23: ea:88:65:44:6b:2c:f8:6f:23:87:cb:0a:f0:17:50:b2:c3:ae: c5:b7:04:49:dc:67:22:45:4a:da:33:40:e3:a4:ec:66:2e:ba: d4:f3:f7:8e:8d:f9:68:34:ff:26:c4:f4:ed:a8:0f:0c:1b:62: c7:9f:24:e6:3e:f8:13:1a:7c:83:c5:6c:67:8c:02:08:95:b2: 2a:02:e5:63:ed:7e:1b:cd:45:4e:d5:f1:c7:18:ea:1d:73:b9: 97:16:3f:98:0b:53:cd:ae:2a:a3:2b:d9:99:c9:56:22:cb:ba: b8:8e:22:14:37:c9:f5:10:16:37:91:48:c1:52:11:c4:90:12: 03:2d:71:6b:a0:18:a1:63:13:2c:24:9e:bf:4c:b9:59:78:fd: b9:d1:a9:39:4b:d9:eb:6a:0a:75:ce:a4:59:c8:88:d1:bf:31: 25:da:eb:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJNDWvoVFU1SlA2vBy1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2I5ZjMyNjI0YWQ1MjQ5NmI3YjY4MjM0NTJiODRiMmIyNzg2NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA040O5Xnvrm0eJnOwv2DU3oB5kGDt FIdmv99skJ3fY0u1qlfLkuaJ3FHCaV/nt3PoMLuzllGcGBxaYN9L9PRslBGPauBz jGwz5fp/CjXX7omA5mnOIzK0WwqLQk6dBTgKMM2Vf3jwbpWP3yaSyzlTBDK3UpO8 mjyBM+MlRG15LpOlXY9//+Fm5lGGOKEu4V6lNJGo1KyAdoJ0YZslHM93QUnOXWxO ir9UfyoTjjNFNi6TL6a0WCz/FD1zdnlI2qkX+Cvemca6mzPLP9VKiKdaHgVfJN2j 2UogloiNcG4QgSh5/6QhkJvkHB2Jg/7PqnF27/Q4HWvErMnq4SZEKxZsJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNO58yYkrVJJa3toI0UrhLKyeGaOMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMDduekppU3RVa2xyZTJnalJTdUVzcko0Wm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAIg MA0GCSqGSIb3DQEBCwUAA4IBAQDDO7RoonmvawE6Lh/kagoWL4etgRV9EGlFHW7B NFNLUwGKV1WU7GkmgE8ZZgjJZ3mnf7uW4dgrk26BcBJiKxMbjsFeBBY9JRPIVMdX N5WorwnRTtsuwZV48iPqiGVEayz4byOHywrwF1Cyw67FtwRJ3GciRUraM0DjpOxm LrrU8/eOjfloNP8mxPTtqA8MG2LHnyTmPvgTGnyDxWxnjAIIlbIqAuVj7X4bzUVO 1fHHGOodc7mXFj+YC1PNriqjK9mZyVYiy7q4jiIUN8n1EBY3kUjBUhHEkBIDLXFr oBihYxMsJJ6/TLlZeP250ak5S9nragp1zqRZyIjRvzEl2usu -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:57 2026 by rpki-client