This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/N7EY4toRbJlJs9qOY-cUEtjkCGk.roa File: N7EY4toRbJlJs9qOY-cUEtjkCGk.roa (raw, json) Hash identifier: /ubOQ+BQ4RyZZJ1s5Xu9VGxzIZIZrK2NV5Op1r2b3Z0= Subject key identifier: 37:B1:18:E2:DA:11:6C:99:49:B3:DA:8E:63:E7:14:12:D8:E4:08:69 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BE4CEFF8DCA37DF64B97D2987E1B Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/N7EY4toRbJlJs9qOY-cUEtjkCGk.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215630 IP address blocks: 2a12:bec0:690::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:be:4c:ef:f8:dc:a3:7d:f6:4b:97:d2:98:7e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37b118e2da116c9949b3da8e63e71412d8e40869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:f3:11:42:4a:94:36:45:12:bd:ec:e8:77: 53:27:cf:4a:09:42:42:76:a8:35:18:32:24:7f:1a: 6e:be:ff:2d:c2:e8:6e:51:cf:6a:c1:13:8f:d9:09: fb:ec:f0:99:66:dd:11:d0:2d:f9:98:e4:5b:13:f0: 4d:81:79:cc:cc:f0:22:51:0d:ab:5f:9b:f4:54:76: a4:2f:a8:10:ab:f7:15:01:a7:90:db:f1:2d:c6:7f: db:2f:6c:e9:9b:bf:5b:7a:c7:9b:d6:a3:28:4b:3e: 08:73:79:12:fe:4b:b6:4c:45:04:dd:52:e8:87:ff: ce:f6:49:df:47:b3:c7:4f:47:2d:0e:a4:04:97:91: 02:01:af:d7:75:98:50:22:b8:0e:ab:23:85:d4:3d: 54:a1:3e:e6:df:68:94:a6:eb:08:78:14:5b:81:da: 41:e1:69:0e:e7:e8:82:55:3c:62:9f:26:fc:f1:46: 47:96:a1:b0:37:49:b0:37:53:ac:3f:0a:10:b8:fc: 6d:65:c9:9a:bc:76:ae:34:b9:db:65:97:4e:7d:8d: 85:20:f4:6c:32:b7:a0:33:43:c0:bc:36:c4:5e:cd: 10:a8:e1:4a:3f:29:26:4b:ca:4a:bc:7c:e5:3e:14: 90:c5:69:24:c2:1b:ab:af:73:4a:28:bc:66:0d:6f: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B1:18:E2:DA:11:6C:99:49:B3:DA:8E:63:E7:14:12:D8:E4:08:69 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/N7EY4toRbJlJs9qOY-cUEtjkCGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:690::/44 Signature Algorithm: sha256WithRSAEncryption 13:e2:aa:7a:66:6a:b2:00:c7:90:a9:09:c8:9e:f9:18:08:d9: 98:2a:d1:27:6d:ab:fc:d4:d5:68:3d:af:6d:1e:f4:fe:d8:d8: 1c:f0:2d:b6:82:ed:37:1d:57:6d:05:15:fc:d8:b9:be:b8:40: ab:24:24:66:c0:3e:6c:5b:de:ef:2f:9c:04:e3:1b:50:46:89: 19:97:0e:8e:a8:1f:0c:dc:21:a0:83:67:2c:c4:f8:6a:46:74: 92:8a:be:94:41:cf:b4:30:13:bb:f0:ec:c0:e2:f2:11:5d:ae: 3f:f1:56:58:0f:1f:7e:f5:1a:d8:44:cf:62:17:2c:db:96:cd: 4c:02:06:1f:1d:97:54:a4:62:7f:02:b4:4d:77:ee:8a:bc:8d: 4b:39:b7:db:ca:ce:49:f6:53:67:aa:6e:f4:d8:d1:00:7f:35: 27:02:9f:eb:68:cb:2d:27:c0:fd:a4:88:95:95:e0:e8:68:c9: 1e:ca:f7:99:d5:91:79:ed:b8:a1:83:f1:25:6f:00:53:3b:fc: bb:dd:47:dc:49:59:16:ec:1d:a4:e7:07:ca:97:38:87:de:8e: aa:06:f6:af:d2:43:9e:5b:8f:f5:90:48:0b:54:3f:34:cb:ca: a6:c5:03:99:b4:54:da:fd:c5:68:14:df:ac:db:9c:c2:38:9b: 07:60:73:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EL5M7/jco332S5fSmH4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2IxMThlMmRhMTE2Yzk5NDliM2RhOGU2M2U3MTQxMmQ4ZTQwODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNjzEUJKlDZFEr3s6HdTJ89KCUJC dqg1GDIkfxpuvv8twuhuUc9qwROP2Qn77PCZZt0R0C35mORbE/BNgXnMzPAiUQ2r X5v0VHakL6gQq/cVAaeQ2/Etxn/bL2zpm79beseb1qMoSz4Ic3kS/ku2TEUE3VLo h//O9knfR7PHT0ctDqQEl5ECAa/XdZhQIrgOqyOF1D1UoT7m32iUpusIeBRbgdpB 4WkO5+iCVTxinyb88UZHlqGwN0mwN1OsPwoQuPxtZcmavHauNLnbZZdOfY2FIPRs MregM0PAvDbEXs0QqOFKPykmS8pKvHzlPhSQxWkkwhurr3NKKLxmDW9XRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDexGOLaEWyZSbPajmPnFBLY5AhpMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvTjdFWTR0b1JiSmxKczlxT1ktY1VFdGprQ0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAaQ MA0GCSqGSIb3DQEBCwUAA4IBAQAT4qp6ZmqyAMeQqQnInvkYCNmYKtEnbav81NVo Pa9tHvT+2Ngc8C22gu03HVdtBRX82Lm+uECrJCRmwD5sW97vL5wE4xtQRokZlw6O qB8M3CGgg2csxPhqRnSSir6UQc+0MBO78OzA4vIRXa4/8VZYDx9+9RrYRM9iFyzb ls1MAgYfHZdUpGJ/ArRNd+6KvI1LObfbys5J9lNnqm702NEAfzUnAp/raMstJ8D9 pIiVleDoaMkeyveZ1ZF57bihg/ElbwBTO/y73UfcSVkW7B2k5wfKlziH3o6qBvav 0kOeW4/1kEgLVD80y8qmxQOZtFTa/cVoFN+s25zCOJsHYHOa -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client