This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7_XH1imbuVzjUyRk9CSpvxW0Svo.roa File: 7_XH1imbuVzjUyRk9CSpvxW0Svo.roa (raw, json) Hash identifier: TX4VSZW0xRHUi4Z2w07uNFphDMo4/xkc6CxkcAL4QKI= Subject key identifier: EF:F5:C7:D6:29:9B:B9:5C:E3:53:24:64:F4:24:A9:BF:15:B4:4A:FA Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791090F54FF3EAC404F0C65F71C160A5 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7_XH1imbuVzjUyRk9CSpvxW0Svo.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199175 IP address blocks: 2a12:bec0:2b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:f5:4f:f3:ea:c4:04:f0:c6:5f:71:c1:60:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eff5c7d6299bb95ce3532464f424a9bf15b44afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:cb:d5:ec:42:0d:49:65:68:b4:4d:71:b0: 91:c0:6d:ca:4f:05:3e:11:d9:24:7e:62:96:d4:e5: 31:c8:c5:65:53:8b:99:19:05:0d:5c:22:41:95:38: ee:e7:cf:5a:31:38:61:ec:2c:9e:23:f1:4c:4d:e9: ba:cc:c2:36:02:fa:9d:6f:d5:84:c3:15:5e:93:24: b8:4d:7f:92:bf:d3:b1:4a:89:99:43:99:23:83:34: 1d:e0:f1:0f:fc:b9:c6:e0:74:55:6c:a8:92:8e:c6: de:d3:ae:27:d5:f3:fa:d8:ba:ea:3e:7c:75:d1:1d: aa:71:85:a3:7f:cc:28:a5:13:fa:50:2d:41:d0:04: 59:14:42:59:46:5b:be:7a:ad:9e:75:74:b8:b9:ad: b4:6c:c0:f5:95:82:98:78:cb:b1:8a:78:96:67:90: 7d:1f:f2:3a:36:28:71:a8:c1:ca:33:69:2b:6d:89: 65:6e:bb:67:02:3b:e6:2d:1d:48:43:06:b3:25:c7: b0:ff:4d:91:12:0c:49:2f:62:df:de:db:b3:80:99: e2:f8:f2:82:05:ff:08:f6:5c:ce:a8:de:32:a8:97: ec:e2:f9:97:5f:c3:5e:49:a6:ea:5d:86:65:1b:2f: 43:0c:79:4b:60:a5:cf:c6:14:c9:8b:5e:36:05:ef: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F5:C7:D6:29:9B:B9:5C:E3:53:24:64:F4:24:A9:BF:15:B4:4A:FA X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7_XH1imbuVzjUyRk9CSpvxW0Svo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:2b0::/44 Signature Algorithm: sha256WithRSAEncryption 92:8c:9d:15:27:9a:c7:37:dd:b3:e4:67:58:00:81:8a:e1:ba: bb:ae:f4:42:72:9e:cd:a7:22:d0:d2:77:ee:ab:26:c5:89:c1: ee:e4:ac:d3:4e:4d:a4:c2:55:37:aa:6b:5f:09:cb:ee:9c:d1: 2a:af:72:91:42:fe:b2:89:20:31:5e:da:18:c7:ca:7a:5b:b1: 0b:44:ab:7e:22:ca:33:25:74:00:94:e9:db:29:15:14:2b:e3: 5a:93:4d:7d:ad:a3:fb:4f:44:ee:c1:7d:22:60:ad:94:0d:de: 84:f6:d2:0d:da:df:30:7a:37:e0:ac:9f:7a:c7:08:df:fb:4a: a2:7b:3b:20:16:5c:a4:48:ab:0b:aa:42:8e:0a:42:b9:da:47: f1:2a:db:32:fb:ae:54:51:e4:4d:4e:c2:14:a9:10:9a:41:0b: 82:b0:16:51:14:6b:d0:cf:b4:92:80:67:ed:49:ca:4f:aa:94: 14:ac:2a:fc:fe:a3:4e:94:6e:50:7d:aa:26:f4:7d:f5:30:c9: e6:a6:17:c1:38:30:8c:34:b7:c2:63:51:7f:08:24:c6:6b:56: 38:6f:b5:aa:26:13:67:64:c7:e1:a7:8e:99:ba:73:75:f1:f6: f2:43:27:57:63:56:3a:37:64:ad:10:a3:b2:f5:5b:2d:64:be: 4b:71:34:5f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJD1T/PqxATwxl9xwWClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmY1YzdkNjI5OWJiOTVjZTM1MzI0NjRmNDI0YTliZjE1YjQ0YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HLL1exCDUllaLRNcbCRwG3KTwU+ EdkkfmKW1OUxyMVlU4uZGQUNXCJBlTju589aMThh7CyeI/FMTem6zMI2Avqdb9WE wxVekyS4TX+Sv9OxSomZQ5kjgzQd4PEP/LnG4HRVbKiSjsbe064n1fP62LrqPnx1 0R2qcYWjf8wopRP6UC1B0ARZFEJZRlu+eq2edXS4ua20bMD1lYKYeMuxiniWZ5B9 H/I6NihxqMHKM2krbYllbrtnAjvmLR1IQwazJcew/02REgxJL2Lf3tuzgJni+PKC Bf8I9lzOqN4yqJfs4vmXX8NeSabqXYZlGy9DDHlLYKXPxhTJi142Be8HzQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO/1x9Ypm7lc41MkZPQkqb8VtEr6MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvN19YSDFpbWJ1VnpqVXlSazlDU3B2eFcwU3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAKw MA0GCSqGSIb3DQEBCwUAA4IBAQCSjJ0VJ5rHN92z5GdYAIGK4bq7rvRCcp7NpyLQ 0nfuqybFicHu5KzTTk2kwlU3qmtfCcvunNEqr3KRQv6yiSAxXtoYx8p6W7ELRKt+ IsozJXQAlOnbKRUUK+Nak019raP7T0TuwX0iYK2UDd6E9tIN2t8wejfgrJ96xwjf +0qiezsgFlykSKsLqkKOCkK52kfxKtsy+65UUeRNTsIUqRCaQQuCsBZRFGvQz7SS gGftScpPqpQUrCr8/qNOlG5Qfaom9H31MMnmphfBODCMNLfCY1F/CCTGa1Y4b7Wq JhNnZMfhp46ZunN18fbyQydXY1Y6N2StEKOy9VstZL5LcTRf -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:07 2026 by rpki-client