This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/7mGTdfSt5D2I1-pgMkYXbHkUo14.roa File: 7mGTdfSt5D2I1-pgMkYXbHkUo14.roa (raw, json) Hash identifier: 56fEaxev/I7dsJK+mfU+7Ju9wrWdc2gQ+WgHM+P0aEI= Subject key identifier: EE:61:93:75:F4:AD:E4:3D:88:D7:EA:60:32:46:17:6C:79:14:A3:5E Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B7EA6D87D5DD3091025CE1121E2581884 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/7mGTdfSt5D2I1-pgMkYXbHkUo14.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31130 IP address blocks: 2001:3785::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:7d:5d:d3:09:10:25:ce:11:21:e2:58:18:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee619375f4ade43d88d7ea603246176c7914a35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1d:ea:48:75:4b:7c:80:97:ad:74:44:07:98: dc:b3:2c:79:af:66:f0:37:7c:92:6b:e7:f6:4c:a2: ab:2a:a5:68:f7:ed:46:9c:86:81:14:2b:37:b0:1e: 0b:41:81:4d:d0:b4:b0:3d:2d:92:86:3b:26:6a:d5: 59:71:67:f7:96:0d:ea:55:64:7a:1e:03:9f:67:33: 40:6c:8a:12:94:4a:04:38:3e:00:01:ba:04:d3:d0: 72:9a:29:d0:31:b7:e2:ae:99:0c:ea:f3:3c:3e:30: 36:39:81:5b:a0:07:da:ed:52:a8:0b:74:f5:2a:5b: 77:be:27:f5:1a:37:f3:93:d5:9c:4c:b7:d3:93:92: ff:95:e6:2f:f7:10:ee:d9:18:98:28:75:91:98:45: 4a:d8:32:c7:54:52:ad:66:9f:32:6e:8b:1c:b2:30: f7:97:27:f8:97:a8:c4:e5:bb:99:95:99:f6:d2:62: 9b:80:99:71:2e:8f:c9:09:99:14:49:33:78:59:11: 7e:77:19:64:fe:a8:3d:cc:43:4d:f5:63:a7:29:ef: 81:73:df:ff:c1:0a:96:9c:97:6b:a0:9b:9c:c5:63: 8c:6e:56:1f:58:16:bb:1f:4a:1b:81:db:dd:b5:c8: 83:d1:93:9c:9e:a7:00:93:5d:73:4a:9f:c0:af:c7: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:61:93:75:F4:AD:E4:3D:88:D7:EA:60:32:46:17:6C:79:14:A3:5E X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/7mGTdfSt5D2I1-pgMkYXbHkUo14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3785::/32 Signature Algorithm: sha256WithRSAEncryption bb:af:ff:24:ca:32:8b:9e:de:46:97:65:7b:91:c6:5d:f5:f5: 0b:03:54:de:72:60:08:de:79:3e:e3:8f:cb:a9:8e:da:7d:d2: 29:72:ee:76:72:d6:9b:b8:ab:01:41:fa:49:b4:b2:6f:74:53: f6:26:27:0a:1a:64:52:eb:91:b3:c8:ea:9c:95:65:f6:85:07: 06:2e:0a:c5:f7:f4:a3:3b:2c:11:dc:06:40:94:27:97:3a:6d: 40:2e:1b:2b:e6:f9:19:85:49:d4:0d:c5:3c:26:1f:71:64:36: 29:84:30:26:40:9c:a8:a6:99:0b:c3:a4:a5:db:9d:b5:b0:89: ae:ea:f3:4f:59:48:62:0f:0f:e0:75:50:5f:f1:ec:49:d6:59: c7:44:56:05:d0:4f:af:2f:0e:0c:ef:e0:c6:26:aa:b5:8f:98: 14:d2:19:21:6c:2f:80:49:45:a9:98:de:b9:3c:bd:ed:23:77: 29:fc:d3:fb:f3:15:13:b2:4c:75:6b:8d:f4:c2:c7:b0:a1:4c: 84:e6:d5:04:75:9e:85:17:a8:ec:86:1d:7c:1f:8a:65:5a:57: b7:71:b2:c7:a7:c0:c0:7a:17:e4:b9:97:73:84:c7:56:7f:26: 91:cb:ca:07:eb:cd:ff:f4:84:48:52:09:2e:c1:f0:22:4b:05: 2e:e4:a6:ef -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pth9XdMJECXOESHiWBiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTYxOTM3NWY0YWRlNDNkODhkN2VhNjAzMjQ2MTc2Yzc5MTRhMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B3qSHVLfICXrXREB5jcsyx5r2bw N3ySa+f2TKKrKqVo9+1GnIaBFCs3sB4LQYFN0LSwPS2ShjsmatVZcWf3lg3qVWR6 HgOfZzNAbIoSlEoEOD4AAboE09ByminQMbfirpkM6vM8PjA2OYFboAfa7VKoC3T1 Klt3vif1Gjfzk9WcTLfTk5L/leYv9xDu2RiYKHWRmEVK2DLHVFKtZp8yboscsjD3 lyf4l6jE5buZlZn20mKbgJlxLo/JCZkUSTN4WRF+dxlk/qg9zENN9WOnKe+Bc9// wQqWnJdroJucxWOMblYfWBa7H0obgdvdtciD0ZOcnqcAk11zSp/Ar8chGwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFO5hk3X0reQ9iNfqYDJGF2x5FKNeMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvN21HVGRmU3Q1RDJJMS1wZ01rWVhiSGtVbzE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAE3hTAN BgkqhkiG9w0BAQsFAAOCAQEAu6//JMoyi57eRpdle5HGXfX1CwNU3nJgCN55PuOP y6mO2n3SKXLudnLWm7irAUH6SbSyb3RT9iYnChpkUuuRs8jqnJVl9oUHBi4Kxff0 ozssEdwGQJQnlzptQC4bK+b5GYVJ1A3FPCYfcWQ2KYQwJkCcqKaZC8OkpdudtbCJ rurzT1lIYg8P4HVQX/HsSdZZx0RWBdBPry8ODO/gxiaqtY+YFNIZIWwvgElFqZje uTy97SN3KfzT+/MVE7JMdWuN9MLHsKFMhObVBHWehReo7IYdfB+KZVpXt3Gyx6fA wHoX5LmXc4THVn8mkcvKB+vN//SESFIJLsHwIksFLuSm7w== -----END CERTIFICATE-----Generated at Sun Jan 18 04:48:21 2026 by rpki-client