This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/k7XF40zhle5kjqdNYKbYYYKaQdA.roa File: k7XF40zhle5kjqdNYKbYYYKaQdA.roa (raw, json) Hash identifier: H1ISQoUYEx5xf7RHFchYAma93wLgNSg6R3jiPn6Q1zM= Subject key identifier: 93:B5:C5:E3:4C:E1:95:EE:64:8E:A7:4D:60:A6:D8:61:82:9A:41:D0 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E9352D142BAFA50C37A2DF326D79 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/k7XF40zhle5kjqdNYKbYYYKaQdA.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208127 IP address blocks: 2a0f:5707:ac00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e9:35:2d:14:2b:af:a5:0c:37:a2:df:32:6d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b5c5e34ce195ee648ea74d60a6d861829a41d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:67:ea:ec:84:55:7a:9e:81:f1:99:ae:2f: aa:a6:44:11:d8:69:f6:39:5e:62:73:f9:4d:51:50: bf:93:60:9b:9f:72:6f:d9:27:7e:78:2b:4e:0b:a2: b7:2b:79:9a:3f:fa:29:d2:8c:d9:7d:39:1e:79:67: af:e3:3e:04:0b:00:87:6e:bd:33:9d:58:bf:56:f9: b5:ed:d1:4a:e1:90:13:6e:15:fe:af:d9:37:c8:d0: fd:a5:c0:f2:18:c0:91:74:c8:3b:71:5c:aa:d5:35: a4:86:5c:95:b3:6d:8e:b3:10:46:ba:70:c4:ee:f3: 86:41:dd:11:9e:ce:29:50:18:d7:51:a9:86:d4:f1: 8e:f8:a4:18:82:87:43:c1:6b:cd:7a:9e:9e:68:2e: fa:e1:d4:d3:36:d9:da:ff:3a:bf:34:95:1b:59:72: 08:de:43:79:6e:85:7c:ae:aa:04:11:83:2c:cc:fa: b1:f4:bf:f8:be:b9:0d:99:07:1b:ec:87:92:e7:5b: 53:54:c6:72:75:3f:77:79:0f:aa:d5:c6:b2:15:a8: 71:62:04:92:48:db:88:fd:6a:8a:73:aa:fd:4c:9d: b6:6d:8a:5f:9f:d5:03:45:8e:57:10:de:30:31:57: c1:0c:58:e6:52:51:34:c0:2c:f5:49:c6:3e:1b:02: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B5:C5:E3:4C:E1:95:EE:64:8E:A7:4D:60:A6:D8:61:82:9A:41:D0 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/k7XF40zhle5kjqdNYKbYYYKaQdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ac00::/44 Signature Algorithm: sha256WithRSAEncryption 72:25:61:86:6d:2c:a3:8d:06:f6:d7:22:75:f3:f9:d5:fc:4f: 1b:62:2f:23:69:d7:c4:b0:55:e5:f5:9d:0c:17:09:59:27:43: 4b:ca:02:6e:06:36:b2:e1:6f:2d:c8:52:cb:4b:10:fe:d5:0a: be:e8:a6:81:c6:46:c0:7f:8f:f3:c3:c8:94:4d:1d:d1:43:fa: 7c:d3:75:f5:28:d4:c0:36:b1:f6:7e:e9:28:42:96:51:09:27: 7f:0a:21:78:34:69:12:91:33:a0:a1:8d:74:66:51:77:97:d0: 13:94:65:93:e9:eb:03:4b:e3:1c:71:1c:55:cf:c6:95:bb:f2: f7:cf:92:93:c8:f3:fd:05:62:11:83:1b:8f:0a:07:02:ce:db: 66:71:4b:34:94:48:f4:67:67:8c:b1:68:6e:e3:cb:80:71:87: 22:86:c6:68:6b:7c:e9:2f:5d:6d:e7:44:89:ec:58:3f:72:b0: c4:7c:9f:9c:bc:db:42:47:21:be:e9:a9:7f:b9:ba:32:bd:35: e8:8e:06:8e:e8:9f:3b:7c:ae:34:99:68:bb:1e:f1:ab:3e:a5: 28:b7:05:70:80:9d:5a:81:5e:4a:e9:61:42:fc:86:1a:d6:80: 99:e7:ff:5f:cb:23:51:0e:bb:6f:a0:a5:99:92:12:8e:3b:59: ed:a1:29:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOk1LRQrr6UMN6LfMm15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2I1YzVlMzRjZTE5NWVlNjQ4ZWE3NGQ2MGE2ZDg2MTgyOWE0MWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweJn6uyEVXqegfGZri+qpkQR2Gn2 OV5ic/lNUVC/k2Cbn3Jv2Sd+eCtOC6K3K3maP/op0ozZfTkeeWev4z4ECwCHbr0z nVi/Vvm17dFK4ZATbhX+r9k3yND9pcDyGMCRdMg7cVyq1TWkhlyVs22OsxBGunDE 7vOGQd0Rns4pUBjXUamG1PGO+KQYgodDwWvNep6eaC764dTTNtna/zq/NJUbWXII 3kN5boV8rqoEEYMszPqx9L/4vrkNmQcb7IeS51tTVMZydT93eQ+q1cayFahxYgSS SNuI/WqKc6r9TJ22bYpfn9UDRY5XEN4wMVfBDFjmUlE0wCz1ScY+GwJJKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJO1xeNM4ZXuZI6nTWCm2GGCmkHQMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvazdYRjQwemhsZTVranFkTllLYllZWUthUWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6wA MA0GCSqGSIb3DQEBCwUAA4IBAQByJWGGbSyjjQb21yJ18/nV/E8bYi8jadfEsFXl 9Z0MFwlZJ0NLygJuBjay4W8tyFLLSxD+1Qq+6KaBxkbAf4/zw8iUTR3RQ/p803X1 KNTANrH2fukoQpZRCSd/CiF4NGkSkTOgoY10ZlF3l9ATlGWT6esDS+MccRxVz8aV u/L3z5KTyPP9BWIRgxuPCgcCzttmcUs0lEj0Z2eMsWhu48uAcYcihsZoa3zpL11t 50SJ7Fg/crDEfJ+cvNtCRyG+6al/uboyvTXojgaO6J87fK40mWi7HvGrPqUotwVw gJ1agV5K6WFC/IYa1oCZ5/9fyyNRDrtvoKWZkhKOO1ntoSmt -----END CERTIFICATE-----Generated at Mon Jan 26 12:32:28 2026 by rpki-client