This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/p_71hNByXrDuNYKSNzWqmsK9r-A.roa File: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (raw, json) Hash identifier: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ= Subject key identifier: A7:FE:F5:84:D0:72:5E:B0:EE:35:82:92:37:35:AA:9A:C2:BD:AF:E0 Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019B78345751E504E684E29BC2A16C9360DD Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/p_71hNByXrDuNYKSNzWqmsK9r-A.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34658 IP address blocks: 2a0f:45c7::/32 maxlen: 32 2a13:fd80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:57:51:e5:04:e6:84:e2:9b:c2:a1:6c:93:60:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fef584d0725eb0ee3582923735aa9ac2bdafe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:8e:06:3b:18:79:cb:a5:ef:07:84:dc:71: e1:e9:59:d9:49:42:70:09:2e:7c:3f:8e:24:76:2d: 15:ce:30:0e:a9:6b:6c:4c:d3:7a:30:a2:9d:a1:eb: fc:ea:06:55:9e:26:04:07:91:96:e1:35:66:d6:82: 39:1f:01:dd:26:9b:c5:85:0c:9c:b3:f3:17:c7:0d: 5b:e7:06:47:09:71:96:bb:ea:89:94:fb:1a:23:ae: 10:dc:f0:18:8e:7a:ca:9b:8a:f1:5e:e2:d3:90:06: 98:6f:d1:9d:ff:88:cd:67:a0:59:c6:07:73:72:48: 5e:ca:aa:66:af:78:0d:29:91:d3:8c:8b:f8:c0:23: c0:ac:b7:6e:d8:9e:e2:65:21:83:6a:3d:02:f2:72: bc:6a:22:12:e8:1d:e7:08:77:89:d7:40:56:cc:fa: 39:0e:86:c9:2c:18:d6:1d:9d:15:3b:44:f1:36:59: e5:d0:e2:c7:57:fc:76:c8:06:e8:bd:ae:22:57:66: a7:49:23:7d:b5:4f:cd:99:81:59:90:8b:40:40:56: ae:b1:67:72:cf:03:60:48:35:8d:9e:47:17:27:bb: c1:7f:86:9c:09:71:39:d8:e9:1f:39:bb:9b:e3:fa: 1c:c1:9f:86:4b:45:16:e8:c4:66:78:e8:50:67:a2: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:F5:84:D0:72:5E:B0:EE:35:82:92:37:35:AA:9A:C2:BD:AF:E0 X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/p_71hNByXrDuNYKSNzWqmsK9r-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:45c7::/32 2a13:fd80::/32 Signature Algorithm: sha256WithRSAEncryption b7:17:ab:09:19:9b:11:7d:44:9d:22:6d:ee:08:6a:25:7d:2f: 3f:3c:95:d1:29:b6:3b:28:1b:10:28:f7:4d:df:c4:2a:72:0c: 26:29:80:1e:22:16:1c:c1:34:aa:b5:e8:ee:e2:94:dd:c0:e3: bb:43:82:2f:cf:2f:3a:94:e6:2a:f3:d6:2b:b2:09:54:c6:40: dc:e3:d4:52:ee:8c:71:8e:3c:a1:3b:cc:88:3e:24:45:3d:cf: fc:c9:1e:2f:a2:3d:26:96:0a:dd:5e:eb:c5:50:9f:63:97:3a: 66:a8:3a:e9:83:4e:8a:9b:0f:8b:cc:f9:da:57:ab:17:83:f8: 79:aa:40:f5:d5:cc:91:5d:1b:65:d5:6b:cf:f9:8d:15:1e:e8: 5a:99:d1:95:18:bb:02:09:8c:88:f9:71:bd:e6:37:46:06:c1: a2:8e:51:0a:82:60:f2:c4:b6:49:22:c9:53:dc:5d:da:04:32: 90:3c:c9:52:91:59:2f:53:f5:50:c5:a0:d9:85:e5:49:bc:a6: 6b:d1:90:76:6f:ed:cf:15:9b:5c:3a:56:a5:cf:31:33:fd:0d: d3:85:92:9b:54:b5:dc:58:5c:e3:36:98:84:a8:3f:cf:a8:05: 0c:ce:27:12:cd:50:8b:9a:09:d4:2c:cc:05:64:46:88:82:01: 8f:46:a8:28 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NFdR5QTmhOKbwqFsk2DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZlZjU4NGQwNzI1ZWIwZWUzNTgyOTIzNzM1YWE5YWMyYmRhZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl6OBjsYecul7weE3HHh6VnZSUJw CS58P44kdi0VzjAOqWtsTNN6MKKdoev86gZVniYEB5GW4TVm1oI5HwHdJpvFhQyc s/MXxw1b5wZHCXGWu+qJlPsaI64Q3PAYjnrKm4rxXuLTkAaYb9Gd/4jNZ6BZxgdz ckheyqpmr3gNKZHTjIv4wCPArLdu2J7iZSGDaj0C8nK8aiIS6B3nCHeJ10BWzPo5 DobJLBjWHZ0VO0TxNlnl0OLHV/x2yAbova4iV2anSSN9tU/NmYFZkItAQFausWdy zwNgSDWNnkcXJ7vBf4acCXE52OkfObub4/ocwZ+GS0UW6MRmeOhQZ6LQMQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKf+9YTQcl6w7jWCkjc1qprCva/gMB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvcF83MWhOQnlYckR1TllLU056V3Ftc0s5ci1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg9FxwMF ACoT/YAwDQYJKoZIhvcNAQELBQADggEBALcXqwkZmxF9RJ0ibe4IaiV9Lz88ldEp tjsoGxAo903fxCpyDCYpgB4iFhzBNKq16O7ilN3A47tDgi/PLzqU5irz1iuyCVTG QNzj1FLujHGOPKE7zIg+JEU9z/zJHi+iPSaWCt1e68VQn2OXOmaoOumDToqbD4vM +dpXqxeD+HmqQPXVzJFdG2XVa8/5jRUe6FqZ0ZUYuwIJjIj5cb3mN0YGwaKOUQqC YPLEtkkiyVPcXdoEMpA8yVKRWS9T9VDFoNmF5Um8pmvRkHZv7c8Vm1w6VqXPMTP9 DdOFkptUtdxYXOM2mISoP8+oBQzOJxLNUIuaCdQszAVkRoiCAY9GqCg= -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:01 2026 by rpki-client