This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/7lQobzQt-5q29EiSIIISjIEGm7I.roa File: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (raw, json) Hash identifier: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8= Subject key identifier: EE:54:28:6F:34:2D:FB:9A:B6:F4:48:92:20:82:12:8C:81:06:9B:B2 Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Certificate serial: 019B79ED05D18F269732778609CE76903B37 Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/7lQobzQt-5q29EiSIIISjIEGm7I.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215131 IP address blocks: 2001:67c:e5c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:05:d1:8f:26:97:32:77:86:09:ce:76:90:3b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee54286f342dfb9ab6f448922082128c81069bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:25:ff:27:17:92:78:a6:99:26:46:fb:2e: 70:3f:ee:76:5e:0d:9c:44:25:ef:15:4a:3b:5b:a1: b2:32:08:89:89:db:a9:d5:25:0b:37:6c:7b:cc:c4: 8b:ac:e0:b5:4e:f6:6b:63:7c:e1:a5:17:a1:41:56: 65:1e:62:05:97:78:95:25:4d:a1:df:aa:d1:c0:fd: a9:75:2f:e9:53:3c:74:67:06:e1:d8:71:75:d5:49: d2:44:b8:7f:eb:a1:c5:d7:55:f1:91:a8:a9:1f:9d: f9:5d:20:90:5b:79:f6:68:80:a9:b8:ec:2f:8f:fc: b2:1c:91:ee:ac:c9:fd:f8:87:b5:38:ad:87:98:8c: b4:17:db:25:a2:07:53:96:39:b2:5e:72:4b:dd:a2: c2:ea:0c:a7:b1:72:dc:e0:f9:ed:eb:4a:dd:9e:8f: 26:87:1b:ae:8e:0a:ff:eb:b0:0e:0b:01:70:f8:98: 47:2f:ed:ce:2b:6a:af:c1:3c:fd:20:e4:0f:e6:e5: 06:f5:04:98:41:c5:5b:f6:62:57:26:9d:5f:79:e3: 45:59:a0:bb:13:96:06:48:12:b4:2e:21:0b:a4:aa: e4:e8:33:c9:d8:6d:0c:90:77:6e:10:23:ea:91:4e: a0:30:17:bc:47:01:5c:08:7d:0e:44:6a:b1:ca:41: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:28:6F:34:2D:FB:9A:B6:F4:48:92:20:82:12:8C:81:06:9B:B2 X509v3 Authority Key Identifier: keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/7lQobzQt-5q29EiSIIISjIEGm7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e5c::/48 Signature Algorithm: sha256WithRSAEncryption b3:b5:aa:7c:46:da:44:a2:58:71:dd:49:46:71:ad:07:b1:1e: 62:1e:af:23:e6:46:50:4a:c0:d2:e5:e4:8f:8d:bc:a7:e2:a3: d0:20:7a:31:3b:f9:1a:9b:87:5b:c4:66:08:3a:c6:68:f4:bf: c7:bd:6b:59:a4:8c:e7:15:96:9b:4d:b1:88:0f:5a:20:1a:2c: 3e:e5:25:43:57:02:30:92:ea:6d:48:fc:82:38:72:27:f8:83: 5b:1a:2b:e5:5c:4f:8d:e2:61:a5:a7:8f:7c:aa:50:b5:00:16: a3:86:8d:be:72:ea:85:3d:cf:77:90:fe:3b:47:33:29:c5:4b: b3:52:15:49:8e:09:c6:e6:c1:35:04:6c:2f:9f:5b:d4:39:e7: 29:00:5f:0d:52:23:05:53:0d:35:a7:69:e2:fe:b5:34:4f:17: 25:d4:1c:34:dd:e0:cf:0c:a6:7a:52:3d:e6:6e:20:f5:65:a8: 05:43:a5:77:4c:a1:a0:1e:90:3b:fa:ac:7a:c6:e2:8e:12:14: 67:88:c2:e1:ef:00:89:39:bb:9b:f0:bd:43:1d:c5:35:4c:7f: 7c:07:b0:f0:20:38:1e:cf:08:9d:33:7c:9e:c7:3a:02:bb:bf: 00:58:9c:b1:6e:d2:97:02:50:37:40:6e:6c:3d:30:a8:c1:27: 92:13:5a:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57QXRjyaXMneGCc52kDs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzIwZWI0MDdkNWIxYjliMjQ0NTNiODI2Y2FhNmYwNzRl N2QxMmQwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTU0Mjg2ZjM0MmRmYjlhYjZmNDQ4OTIyMDgyMTI4YzgxMDY5YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE8l/ycXknimmSZG+y5wP+52Xg2c RCXvFUo7W6GyMgiJidup1SULN2x7zMSLrOC1TvZrY3zhpRehQVZlHmIFl3iVJU2h 36rRwP2pdS/pUzx0Zwbh2HF11UnSRLh/66HF11XxkaipH535XSCQW3n2aICpuOwv j/yyHJHurMn9+Ie1OK2HmIy0F9slogdTljmyXnJL3aLC6gynsXLc4Pnt60rdno8m hxuujgr/67AOCwFw+JhHL+3OK2qvwTz9IOQP5uUG9QSYQcVb9mJXJp1feeNFWaC7 E5YGSBK0LiELpKrk6DPJ2G0MkHduECPqkU6gMBe8RwFcCH0ORGqxykEGIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO5UKG80LfuatvRIkiCCEoyBBpuyMB8GA1UdIwQY MBaAFAZyDrQH1bG5skRTuCbKpvB059EtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzct NzhjMGMwMmY3OGEyLzEvN2xRb2J6UXQtNXEyOUVpU0lJSVNqSUVHbTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzctNzhjMGMwMmY3OGEy LzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA5c MA0GCSqGSIb3DQEBCwUAA4IBAQCztap8RtpEolhx3UlGca0HsR5iHq8j5kZQSsDS 5eSPjbyn4qPQIHoxO/kam4dbxGYIOsZo9L/HvWtZpIznFZabTbGID1ogGiw+5SVD VwIwkuptSPyCOHIn+INbGivlXE+N4mGlp498qlC1ABajho2+cuqFPc93kP47RzMp xUuzUhVJjgnG5sE1BGwvn1vUOecpAF8NUiMFUw01p2ni/rU0Txcl1Bw03eDPDKZ6 Uj3mbiD1ZagFQ6V3TKGgHpA7+qx6xuKOEhRniMLh7wCJObub8L1DHcU1TH98B7Dw IDgezwidM3yexzoCu78AWJyxbtKXAlA3QG5sPTCowSeSE1o1 -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:25 2026 by rpki-client