This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/x942DM7OLOWbs0K4oiTX3Wf9Dm0.roa File: x942DM7OLOWbs0K4oiTX3Wf9Dm0.roa (raw, json) Hash identifier: LuKzjg2ztT+ZHjVBUTMvuvAS97fKdxP+FcUpdFDCjRI= Subject key identifier: C7:DE:36:0C:CE:CE:2C:E5:9B:B3:42:B8:A2:24:D7:DD:67:FD:0E:6D Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA53DECE71ACC47EB50D6FCAEE38D90 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/x942DM7OLOWbs0K4oiTX3Wf9Dm0.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6233 IP address blocks: 2a07:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3d:ec:e7:1a:cc:47:eb:50:d6:fc:ae:e3:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7de360ccece2ce59bb342b8a224d7dd67fd0e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:cd:ac:09:74:db:b4:3c:10:15:72:aa:3e: 7a:4b:9f:cd:bc:6c:3e:ea:5b:ea:ba:6e:a6:fd:11: 2d:c2:8f:94:54:d6:f0:3d:e7:b7:52:3e:20:ca:81: ba:a2:c5:49:3c:19:d7:d1:32:40:71:e7:82:42:d6: e2:ab:d3:a3:4a:4b:f8:6d:61:54:56:05:de:fb:96: 0d:89:22:30:1e:cc:34:a8:21:79:ed:f6:45:e3:20: a5:6d:32:c7:37:ef:3a:30:34:98:48:7b:15:06:31: f5:6d:1c:99:95:f7:1e:af:2c:77:da:3e:d1:7f:98: b0:cc:98:01:22:cb:bf:c4:c4:d6:6e:d5:d6:f4:f2: 30:c8:2e:b8:6c:d7:b8:6a:1c:81:e3:44:dd:0b:18: 76:a1:92:bc:ba:6f:14:28:85:2b:8e:f7:fb:11:16: 2b:81:82:4c:61:37:69:bf:03:0b:14:40:9c:78:f3: 37:8f:c7:00:d7:7a:8b:3f:d1:ff:f9:72:eb:aa:3f: c9:f6:a1:2a:4d:be:11:26:f4:2b:8f:c6:a7:0c:dd: de:05:8f:35:88:e2:86:f7:cc:07:13:94:61:d1:ab: 16:5e:46:ae:8e:28:de:1a:f1:3c:35:e6:de:f7:f5: b6:e6:4e:d0:90:b7:8c:be:2a:03:4e:5d:90:3a:3b: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:36:0C:CE:CE:2C:E5:9B:B3:42:B8:A2:24:D7:DD:67:FD:0E:6D X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/x942DM7OLOWbs0K4oiTX3Wf9Dm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:e340::/32 Signature Algorithm: sha256WithRSAEncryption bf:ae:72:df:47:bd:1f:5c:5f:74:ca:3c:f2:71:f3:a6:3c:22: 4b:2c:9a:ed:d2:00:bf:c7:79:54:26:e0:ce:0b:ff:4f:15:31: 14:c3:ae:81:66:a2:e7:09:3e:d1:c0:87:7e:e8:6d:8e:21:56: 0e:26:e2:22:7e:b4:92:5b:2c:8d:67:28:7f:82:68:1b:37:ff: 6e:31:ee:8d:56:15:5f:2f:1c:c7:66:02:87:cb:6e:a5:be:f1: 18:fe:1d:88:55:6f:bd:b8:d7:b4:d4:cc:f9:d3:7d:7d:cb:ab: 4a:a0:5c:e1:fa:a8:d9:ee:9b:61:4e:7c:29:fb:14:58:d4:99: 9e:1c:1b:f8:65:3e:af:39:9d:44:b3:89:2a:65:b4:60:48:5e: 77:df:72:1f:48:d5:71:f9:78:b1:66:73:eb:eb:01:49:f5:d1: 9a:5a:dd:e5:9f:f0:ba:73:12:5a:ab:3e:26:f3:22:5c:fb:c6: 0f:c7:19:01:44:4b:cd:e4:c8:04:11:90:5f:4e:a3:15:56:c8: 0c:55:39:13:da:3a:2a:7d:15:17:d9:86:a0:e0:08:c8:31:44: e8:f8:1e:ce:5e:4f:3a:2a:97:ac:85:ed:ea:4b:f4:b0:03:80: e4:8c:74:52:01:50:f5:4a:c6:4a:9d:3c:a4:a8:6b:62:3c:5a: 12:0f:67:00 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pT3s5xrMR+tQ1vyu442QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2RlMzYwY2NlY2UyY2U1OWJiMzQyYjhhMjI0ZDdkZDY3ZmQwZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVbNrAl027Q8EBVyqj56S5/NvGw+ 6lvqum6m/REtwo+UVNbwPee3Uj4gyoG6osVJPBnX0TJAceeCQtbiq9OjSkv4bWFU VgXe+5YNiSIwHsw0qCF57fZF4yClbTLHN+86MDSYSHsVBjH1bRyZlfceryx32j7R f5iwzJgBIsu/xMTWbtXW9PIwyC64bNe4ahyB40TdCxh2oZK8um8UKIUrjvf7ERYr gYJMYTdpvwMLFECcePM3j8cA13qLP9H/+XLrqj/J9qEqTb4RJvQrj8anDN3eBY81 iOKG98wHE5Rh0asWXkaujijeGvE8Nebe9/W25k7QkLeMvioDTl2QOjuR2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMfeNgzOzizlm7NCuKIk191n/Q5tMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEveDk0MkRNN09MT1diczBLNG9pVFgzV2Y5RG0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgfjQDAN BgkqhkiG9w0BAQsFAAOCAQEAv65y30e9H1xfdMo88nHzpjwiSyya7dIAv8d5VCbg zgv/TxUxFMOugWai5wk+0cCHfuhtjiFWDibiIn60klssjWcof4JoGzf/bjHujVYV Xy8cx2YCh8tupb7xGP4diFVvvbjXtNTM+dN9fcurSqBc4fqo2e6bYU58KfsUWNSZ nhwb+GU+rzmdRLOJKmW0YEhed99yH0jVcfl4sWZz6+sBSfXRmlrd5Z/wunMSWqs+ JvMiXPvGD8cZAURLzeTIBBGQX06jFVbIDFU5E9o6Kn0VF9mGoOAIyDFE6Pgezl5P OiqXrIXt6kv0sAOA5Ix0UgFQ9UrGSp08pKhrYjxaEg9nAA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:27 2026 by rpki-client