This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/vUFwfEY11W7JpynTF9BbfUWs9-w.roa File: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (raw, json) Hash identifier: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs= Subject key identifier: BD:41:70:7C:46:35:D5:6E:C9:A7:29:D3:17:D0:5B:7D:45:AC:F7:EC Certificate issuer: /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Certificate serial: 019B79ED4F70F9C8F30D2E1101482438285E Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/vUFwfEY11W7JpynTF9BbfUWs9-w.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211383 IP address blocks: 2a10:7640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:70:f9:c8:f3:0d:2e:11:01:48:24:38:28:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd41707c4635d56ec9a729d317d05b7d45acf7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:96:06:9e:1d:29:23:59:97:66:36:75:ec: 87:74:06:22:8a:5e:c6:36:b4:cf:79:16:ed:39:51: be:6c:35:94:6d:2d:44:2c:3e:74:36:73:91:93:25: 69:17:0c:18:e9:03:85:ec:d7:0f:93:ab:5d:3e:c7: 8e:27:c5:1a:92:62:ec:c3:a7:ca:34:58:6f:10:49: 0b:44:e2:41:23:1e:47:ff:c2:28:e5:fa:f9:22:1b: ab:3d:38:b8:6d:d8:6b:b5:c7:5b:24:e1:08:6a:e4: 74:4e:a4:44:62:f9:1c:65:e4:7d:2d:7c:e4:74:93: 51:6e:f0:a1:7c:d1:dd:56:19:11:2a:93:e8:6f:d5: 59:22:21:99:d2:ad:71:ac:20:c3:1f:51:ca:46:9f: f9:17:fe:41:a5:56:2f:47:5a:3b:0a:7f:9b:5d:7f: 59:9f:c5:b0:1a:bb:d4:1b:b2:65:a5:d8:2d:34:a6: 44:79:fe:32:04:31:97:cb:03:00:ae:98:9d:35:5d: e7:e9:81:35:c4:7c:06:96:57:90:ec:87:75:35:2e: 28:79:fb:ae:70:50:17:d7:db:b6:ec:6a:3b:88:58: ef:6c:14:9c:bd:a7:3a:63:93:68:55:26:61:f0:94: 9b:00:99:17:71:3b:f9:4c:f3:c8:5e:ea:52:63:11: d7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:41:70:7C:46:35:D5:6E:C9:A7:29:D3:17:D0:5B:7D:45:AC:F7:EC X509v3 Authority Key Identifier: keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/vUFwfEY11W7JpynTF9BbfUWs9-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:7640::/29 Signature Algorithm: sha256WithRSAEncryption 18:75:e6:71:af:fe:22:aa:85:b3:f6:a3:ae:e1:13:13:98:9d: 8f:fa:28:4e:d6:6c:5b:23:89:05:63:9d:4f:70:70:2c:7c:1d: 1d:74:5d:7e:30:10:67:5d:b4:50:03:d6:e9:c1:26:b0:64:b1: 04:6e:8a:44:8f:2d:e5:aa:b6:97:06:0e:9f:67:f0:e7:cf:82: fa:5d:47:26:5c:59:7d:d2:9a:3a:b1:07:5c:6d:70:88:a4:9c: 2d:15:19:ae:41:ea:1b:b2:57:61:4a:37:a2:40:26:87:e2:bd: 0c:01:e0:b6:51:46:c7:ef:31:84:a3:77:ba:b9:d7:e2:ad:c0: c2:85:60:b2:5f:fb:63:f2:c1:9e:89:5e:3e:a1:f2:e7:ff:9f: 12:80:8c:bf:fa:86:a1:03:3b:5e:64:8e:5c:e2:e6:79:51:21: d1:b5:d8:1c:22:6e:9e:01:f2:69:67:27:14:18:98:9a:36:be: 72:74:bf:4e:1e:6a:a8:93:6a:a3:9b:cd:da:2b:be:cb:1a:90: b0:8c:46:da:ad:ff:c9:ab:45:43:33:8c:56:8e:e9:f8:ba:11: 4d:7b:e5:95:d2:a7:b8:b3:79:4d:21:56:8c:73:a1:6f:1c:ae: 9b:43:84:d0:13:64:ef:54:8c:84:5e:05:a1:01:e5:62:ef:74: 2e:b1:2b:45 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57U9w+cjzDS4RAUgkOCheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2M4NWM0NDJjY2FiNzVlMmNlNmRlMjlkYjVmZDAwZjMy Njc0OWQwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQxNzA3YzQ2MzVkNTZlYzlhNzI5ZDMxN2QwNWI3ZDQ1YWNmN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u+WBp4dKSNZl2Y2deyHdAYiil7G NrTPeRbtOVG+bDWUbS1ELD50NnORkyVpFwwY6QOF7NcPk6tdPseOJ8UakmLsw6fK NFhvEEkLROJBIx5H/8Io5fr5IhurPTi4bdhrtcdbJOEIauR0TqREYvkcZeR9LXzk dJNRbvChfNHdVhkRKpPob9VZIiGZ0q1xrCDDH1HKRp/5F/5BpVYvR1o7Cn+bXX9Z n8WwGrvUG7JlpdgtNKZEef4yBDGXywMArpidNV3n6YE1xHwGlleQ7Id1NS4oefuu cFAX19u27Go7iFjvbBScvac6Y5NoVSZh8JSbAJkXcTv5TPPIXupSYxHX0QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFL1BcHxGNdVuyacp0xfQW31FrPfsMB8GA1UdIwQY MBaAFOt8hcRCzKt14s5t4p21/QDzJnSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMt NGU2NTlkMmJlNjU0LzEvdlVGd2ZFWTExVzdKcHluVEY5QmJmVVdzOS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMtNGU2NTlkMmJlNjU0 LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhB2QDAN BgkqhkiG9w0BAQsFAAOCAQEAGHXmca/+IqqFs/ajruETE5idj/ooTtZsWyOJBWOd T3BwLHwdHXRdfjAQZ120UAPW6cEmsGSxBG6KRI8t5aq2lwYOn2fw58+C+l1HJlxZ fdKaOrEHXG1wiKScLRUZrkHqG7JXYUo3okAmh+K9DAHgtlFGx+8xhKN3urnX4q3A woVgsl/7Y/LBnolePqHy5/+fEoCMv/qGoQM7XmSOXOLmeVEh0bXYHCJungHyaWcn FBiYmja+cnS/Th5qqJNqo5vN2iu+yxqQsIxG2q3/yatFQzOMVo7p+LoRTXvlldKn uLN5TSFWjHOhbxyum0OE0BNk71SMhF4FoQHlYu90LrErRQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:59 2026 by rpki-client