This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/_dI7fAYNYvlzR2_TT35e3qHnTEg.roa File: _dI7fAYNYvlzR2_TT35e3qHnTEg.roa (raw, json) Hash identifier: fMLP46uHLpOTk8Ws3sC+augdPIpnziReWAy6AORNOyM= Subject key identifier: FD:D2:3B:7C:06:0D:62:F9:73:47:6F:D3:4F:7E:5E:DE:A1:E7:4C:48 Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Certificate serial: 019B7CED3D7E7632467797B3E222960AA9FF Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/_dI7fAYNYvlzR2_TT35e3qHnTEg.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 2a14:6:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3d:7e:76:32:46:77:97:b3:e2:22:96:0a:a9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdd23b7c060d62f973476fd34f7e5edea1e74c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:aa:4c:64:8a:63:e6:d6:e5:6b:35:9b:db: ef:71:ec:ca:44:49:ad:01:0c:72:d0:cf:ad:86:3c: 59:d8:93:cc:4b:a8:77:2e:12:7b:14:8a:c0:67:1a: 69:ed:05:d2:d4:52:b0:38:4a:6d:d9:43:4d:8a:48: 44:ad:cb:02:12:fa:42:47:37:e3:87:0b:b7:f5:44: f2:89:9c:a1:db:ca:b1:15:e3:6f:6d:c7:cc:e5:50: 86:d9:07:12:d7:1c:38:89:4f:57:9e:4e:32:97:9b: 45:b7:4d:d0:26:31:49:9b:13:24:a9:a0:b0:e1:4b: f3:cf:2b:11:ea:86:b4:03:54:84:f9:83:e2:38:b7: 9e:48:09:64:ba:a8:45:57:9d:ee:47:c1:25:90:05: a0:31:ac:f1:e7:ad:57:8a:d1:32:9e:83:0a:ce:e9: c9:a3:37:90:78:8e:6c:f4:e1:55:7f:f8:c7:76:0f: 31:34:c3:c8:e2:da:63:3d:83:6c:22:a3:27:b2:ba: d9:35:be:94:b3:ef:b1:5e:db:48:db:0c:92:06:60: 44:eb:cf:0e:3c:98:64:87:8e:30:55:89:db:0f:ba: 7e:54:32:16:0b:84:e3:8c:c7:ae:d7:b9:75:45:78: 24:48:68:ea:a8:4d:c9:82:e6:29:2a:9e:a6:bd:a0: 7c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D2:3B:7C:06:0D:62:F9:73:47:6F:D3:4F:7E:5E:DE:A1:E7:4C:48 X509v3 Authority Key Identifier: keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/_dI7fAYNYvlzR2_TT35e3qHnTEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6:12::/48 Signature Algorithm: sha256WithRSAEncryption ca:98:3c:86:ca:35:9e:08:0b:d2:11:48:85:14:fa:7b:89:28: 49:89:75:80:2b:cb:46:34:4f:90:9d:00:1d:b1:21:3f:7b:4f: 5c:67:fc:00:2a:79:c8:95:9d:d9:bb:ac:33:f8:55:df:d4:b0: 01:0e:0c:47:b7:d9:52:6f:e3:d0:f1:0a:c5:2a:f8:90:02:bc: 47:bc:f4:05:7f:35:34:79:f3:12:9f:d2:0d:59:80:50:19:1a: 2d:69:1f:44:34:de:80:60:ac:bb:0f:43:2e:21:98:9c:fa:b6: f2:cf:e7:f8:17:aa:c1:3b:6a:f4:fb:71:f9:78:d2:6e:73:d6: 71:33:a7:b2:0a:fb:09:1e:eb:b2:70:0b:05:08:e2:e8:94:2b: e1:e5:6b:be:a3:5e:2e:13:e7:63:ae:f6:d4:89:25:e6:0a:e5: 2f:8e:3a:9e:56:c2:17:82:d7:f3:a3:d9:c4:38:5c:90:d7:38: b3:8c:37:c5:4e:a1:be:d6:a4:ca:e9:45:de:b7:74:25:b2:e7: 63:25:33:04:72:66:ec:2b:01:f7:b6:48:bc:d0:b2:62:39:2e: 6f:b8:6f:92:9d:b4:17:6d:97:2f:54:a4:6e:d8:6a:16:ad:02: 15:d6:ef:a8:2d:db:30:34:16:55:d3:3d:f1:7b:a4:3c:b0:ff: cb:7c:1f:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87T1+djJGd5ez4iKWCqn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy YzI2YmEwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQyM2I3YzA2MGQ2MmY5NzM0NzZmZDM0ZjdlNWVkZWExZTc0YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3iqTGSKY+bW5Ws1m9vvcezKREmt AQxy0M+thjxZ2JPMS6h3LhJ7FIrAZxpp7QXS1FKwOEpt2UNNikhErcsCEvpCRzfj hwu39UTyiZyh28qxFeNvbcfM5VCG2QcS1xw4iU9Xnk4yl5tFt03QJjFJmxMkqaCw 4UvzzysR6oa0A1SE+YPiOLeeSAlkuqhFV53uR8ElkAWgMazx561XitEynoMKzunJ ozeQeI5s9OFVf/jHdg8xNMPI4tpjPYNsIqMnsrrZNb6Us++xXttI2wySBmBE688O PJhkh44wVYnbD7p+VDIWC4TjjMeu17l1RXgkSGjqqE3JguYpKp6mvaB8JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP3SO3wGDWL5c0dv009+Xt6h50xIMB8GA1UdIwQY MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt MjIwMGIzY2M1N2U2LzEvX2RJN2ZBWU5Zdmx6UjJfVFQzNWUzcUhuVEVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2 LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhQABgAS MA0GCSqGSIb3DQEBCwUAA4IBAQDKmDyGyjWeCAvSEUiFFPp7iShJiXWAK8tGNE+Q nQAdsSE/e09cZ/wAKnnIlZ3Zu6wz+FXf1LABDgxHt9lSb+PQ8QrFKviQArxHvPQF fzU0efMSn9INWYBQGRotaR9ENN6AYKy7D0MuIZic+rbyz+f4F6rBO2r0+3H5eNJu c9ZxM6eyCvsJHuuycAsFCOLolCvh5Wu+o14uE+djrvbUiSXmCuUvjjqeVsIXgtfz o9nEOFyQ1zizjDfFTqG+1qTK6UXet3QlsudjJTMEcmbsKwH3tki80LJiOS5vuG+S nbQXbZcvVKRu2GoWrQIV1u+oLdswNBZV0z3xe6Q8sP/LfB/g -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:00 2026 by rpki-client