This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/7GkLDdomT5eL60D6-khNrUAPRs8.roa File: 7GkLDdomT5eL60D6-khNrUAPRs8.roa (raw, json) Hash identifier: shWGexTkkzOs8oRP4d8FwNhRI05jCv9BHag7xNm2iyw= Subject key identifier: EC:69:0B:0D:DA:26:4F:97:8B:EB:40:FA:FA:48:4D:AD:40:0F:46:CF Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918 Certificate serial: 019B77596E7D65ACF518BF3108ADBF016BFF Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/7GkLDdomT5eL60D6-khNrUAPRs8.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210961 IP address blocks: 2001:67c:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6e:7d:65:ac:f5:18:bf:31:08:ad:bf:01:6b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec690b0dda264f978beb40fafa484dad400f46cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:a4:8f:f8:69:f5:de:eb:66:d7:bb:dc:ad: 7c:8d:b9:aa:a6:a3:57:73:da:76:11:2f:39:42:9e: 28:5d:63:3a:74:93:55:ef:82:2d:8c:ec:b8:2c:5b: 59:f0:b7:73:cb:b9:78:c2:df:40:8a:5e:1e:ef:83: 8b:2a:68:79:da:a5:7c:bf:01:9e:87:02:bd:8e:84: 59:26:69:1d:0d:19:a8:ef:39:87:8e:e0:48:43:a2: 72:4f:a6:14:55:b6:ee:6f:a6:b0:44:ac:91:a1:0e: ca:70:09:92:4b:97:aa:2c:0a:49:c1:94:aa:8a:26: 9f:7a:e5:ca:27:b3:91:9f:73:d0:30:b0:7e:85:b3: 58:11:ee:57:90:51:b9:0e:10:bf:d2:54:4b:7e:d5: ae:90:10:f3:35:43:ab:61:96:de:ff:94:c3:d0:a6: 89:45:3a:06:5f:fc:95:18:1f:37:03:0a:0c:fd:db: 97:39:c4:ce:df:f3:b4:e5:ed:a9:8c:71:6a:d0:d2: c9:32:0c:a9:25:94:4a:5e:15:71:da:f9:c0:16:26: 09:38:07:ea:68:64:40:59:64:93:a2:4d:f6:88:3c: 2b:4d:9f:b1:c9:4f:88:ca:70:c4:c3:d3:52:bf:9c: 69:0c:80:77:be:2c:ad:b9:81:da:74:3f:a7:f5:42: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:69:0B:0D:DA:26:4F:97:8B:EB:40:FA:FA:48:4D:AD:40:0F:46:CF X509v3 Authority Key Identifier: keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/7GkLDdomT5eL60D6-khNrUAPRs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:30::/48 Signature Algorithm: sha256WithRSAEncryption 3b:19:a8:a3:4d:ce:92:d0:54:8e:c5:61:c6:0c:cd:dc:79:79: 2d:4e:7a:24:17:b3:f9:d9:23:99:07:96:ca:9b:e9:17:22:c0: 91:ef:ae:3f:b7:53:91:df:e8:c5:df:e2:8b:e2:9c:5b:cf:de: 64:89:85:fb:dc:38:26:2e:59:df:0a:6c:59:2e:1c:e0:78:1e: a9:67:0a:12:2e:7b:6e:f2:ea:48:78:f4:12:56:cc:91:f4:cf: 35:7c:87:5b:b0:79:25:e0:4f:3c:eb:f4:88:af:b1:05:13:e2: 31:dc:63:d3:e1:7b:55:7d:27:d4:4a:0c:c1:dc:55:ee:a0:ff: 8e:02:a6:cd:0c:de:52:09:bd:8e:3e:96:8e:9f:e7:23:fe:da: e1:ef:ce:14:9f:25:d5:fb:c7:67:13:e5:1d:44:bd:5f:2e:ad: 5d:c2:44:dd:1d:ee:b0:af:1c:52:cc:53:16:26:55:ea:a3:df: 53:6b:57:b4:69:cb:de:83:38:cd:d4:9d:9c:ab:aa:fe:86:2f: 23:2d:f0:41:f1:c4:51:19:85:09:cb:dc:a9:f5:b2:52:af:f6: 4c:c6:b3:0a:64:e9:bb:22:0d:59:48:d7:7a:ec:24:9b:bf:a6: d8:91:08:67:8f:3e:00:4f:f7:0e:45:7f:f0:c6:c8:4c:14:5d: 5f:60:83:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WW59Zaz1GL8xCK2/AWv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWJkMWE3NjVhZTVjYmUxZGM5M2RhZjAyNGQzYTQ3ZTcy YWM5MTgwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY5MGIwZGRhMjY0Zjk3OGJlYjQwZmFmYTQ4NGRhZDQwMGY0NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcakj/hp9d7rZte73K18jbmqpqNX c9p2ES85Qp4oXWM6dJNV74ItjOy4LFtZ8Ldzy7l4wt9Ail4e74OLKmh52qV8vwGe hwK9joRZJmkdDRmo7zmHjuBIQ6JyT6YUVbbub6awRKyRoQ7KcAmSS5eqLApJwZSq iiafeuXKJ7ORn3PQMLB+hbNYEe5XkFG5DhC/0lRLftWukBDzNUOrYZbe/5TD0KaJ RToGX/yVGB83AwoM/duXOcTO3/O05e2pjHFq0NLJMgypJZRKXhVx2vnAFiYJOAfq aGRAWWSTok32iDwrTZ+xyU+IynDEw9NSv5xpDIB3viytuYHadD+n9UKJzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOxpCw3aJk+Xi+tA+vpITa1AD0bPMB8GA1UdIwQY MBaAFEqr0adlrly+Hck9rwJNOkfnKskYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mYmYyMzktNWY4YS00ZDZhLWEwY2It NDRhYzZhZGIzYTQ5LzEvN0drTERkb21UNWVMNjBENi1raE5yVUFQUnM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mYmYyMzktNWY4YS00ZDZhLWEwY2ItNDRhYzZhZGIzYTQ5 LzEvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAAw MA0GCSqGSIb3DQEBCwUAA4IBAQA7GaijTc6S0FSOxWHGDM3ceXktTnokF7P52SOZ B5bKm+kXIsCR764/t1OR3+jF3+KL4pxbz95kiYX73DgmLlnfCmxZLhzgeB6pZwoS Lntu8upIePQSVsyR9M81fIdbsHkl4E886/SIr7EFE+Ix3GPT4XtVfSfUSgzB3FXu oP+OAqbNDN5SCb2OPpaOn+cj/trh784UnyXV+8dnE+UdRL1fLq1dwkTdHe6wrxxS zFMWJlXqo99Ta1e0acvegzjN1J2cq6r+hi8jLfBB8cRRGYUJy9yp9bJSr/ZMxrMK ZOm7Ig1ZSNd67CSbv6bYkQhnjz4AT/cORX/wxshMFF1fYIOq -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:32 2026 by rpki-client