This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/BER7jGO8I5iYjkTrcND0slZ5a14.roa File: BER7jGO8I5iYjkTrcND0slZ5a14.roa (raw, json) Hash identifier: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs= Subject key identifier: 04:44:7B:8C:63:BC:23:98:98:8E:44:EB:70:D0:F4:B2:56:79:6B:5E Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Certificate serial: 019B7C8055FF58BDCAA71CB9A0C75B43C306 Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/BER7jGO8I5iYjkTrcND0slZ5a14.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a0b:bc40::/29 maxlen: 29 2a10:4bc0::/32 maxlen: 32 2a10:4bc1::/32 maxlen: 32 2a10:4bc2::/32 maxlen: 32 2a10:4bc3::/32 maxlen: 32 2a10:4bc4::/32 maxlen: 32 2a10:4bc5::/32 maxlen: 32 2a10:4bc6::/32 maxlen: 32 2a10:4bc7::/32 maxlen: 32 2a10:8840::/29 maxlen: 29 2a10:bdc0::/29 maxlen: 29 2a12:6a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:ff:58:bd:ca:a7:1c:b9:a0:c7:5b:43:c3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04447b8c63bc2398988e44eb70d0f4b256796b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1f:33:96:58:8a:b9:5b:e6:68:d3:f9:37:f4: 71:c4:60:53:6c:26:4b:93:8f:1a:f9:85:cc:fb:c0: 2c:33:5b:53:0c:29:56:57:eb:b7:b4:78:ab:25:8b: 27:9f:9a:28:94:6e:d7:fa:5b:24:8c:54:89:94:41: 73:9d:96:21:b8:dc:fd:e5:f2:5f:99:be:ae:13:59: ec:61:f9:68:93:57:8f:41:c1:d7:3c:7d:5e:52:c1: 57:22:b1:d2:8e:92:38:64:3b:d1:d8:fc:cc:2d:83: a7:b8:60:ea:c1:e4:05:a4:0f:86:06:3a:ee:08:07: 15:98:bd:2f:95:74:b7:d0:f5:1a:f2:1e:61:a7:76: 17:8c:97:3d:59:23:75:d3:da:45:93:db:5c:c3:13: d3:37:b1:ff:d1:8c:6f:8f:d7:37:e5:c5:4b:7f:fb: 8a:15:b0:07:f3:2f:0a:fd:21:29:5a:98:91:4f:9a: 19:47:d4:a8:a1:3f:16:95:c5:e8:9a:34:5d:cc:d4: eb:f8:98:1b:20:01:d7:f5:66:16:d6:b1:59:a3:05: 3a:49:bd:f4:81:79:49:c2:2c:12:7c:33:c4:77:a7: c0:7a:f9:f9:64:52:09:e5:76:96:68:5c:ef:05:45: 0b:53:b1:cf:64:08:a5:38:a9:be:64:c1:23:d0:5c: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:44:7B:8C:63:BC:23:98:98:8E:44:EB:70:D0:F4:B2:56:79:6B:5E X509v3 Authority Key Identifier: keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/BER7jGO8I5iYjkTrcND0slZ5a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:bc40::/29 2a10:4bc0::/29 2a10:8840::/29 2a10:bdc0::/29 2a12:6a40::/29 Signature Algorithm: sha256WithRSAEncryption 72:a5:ce:c5:f6:b7:8d:d5:eb:59:86:f0:51:4f:7c:1b:53:ee: e4:fd:2e:0c:2e:66:25:f4:f7:b0:5d:75:46:5f:f5:41:50:26: e6:d8:3d:59:d3:9a:91:ae:9a:ad:38:34:12:9c:9a:b0:a1:53: df:b2:b5:d7:fe:94:32:5b:5b:dd:23:0f:0f:44:58:4d:f4:69: ee:72:43:de:67:d9:ed:c0:92:09:61:f3:ef:7e:ae:90:00:df: a2:01:88:19:d5:bb:c5:e2:0f:c5:d6:3b:de:4c:18:6f:e1:f3: bc:b8:98:9e:10:ff:df:da:e2:17:c8:a5:44:0e:32:99:74:f2: b6:40:b9:02:a4:1c:9f:06:1f:10:54:7e:d3:b1:d9:15:9f:36: e7:10:71:86:fa:6d:18:f7:28:c5:39:83:4a:54:64:9c:ac:7e: e7:d3:e5:05:cb:77:16:1a:45:a4:d7:6d:a8:8b:6d:36:cb:d5: b1:50:e7:f0:c4:a1:c1:3e:2a:28:1e:7e:12:67:d0:3e:f6:2e: ee:03:11:2b:05:01:e8:8c:5c:c5:b3:de:8e:84:53:3b:79:b0: 32:52:66:98:71:79:8b:24:54:4a:7c:c3:48:28:f0:a6:ab:e6: bb:d9:cf:8d:e1:f0:1d:3e:76:94:95:68:34:fc:f8:c8:35:0a: ce:75:01:46 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8gFX/WL3Kpxy5oMdbQ8MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk OGYxNWQwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDQ0N2I4YzYzYmMyMzk4OTg4ZTQ0ZWI3MGQwZjRiMjU2Nzk2YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R8zlliKuVvmaNP5N/RxxGBTbCZL k48a+YXM+8AsM1tTDClWV+u3tHirJYsnn5oolG7X+lskjFSJlEFznZYhuNz95fJf mb6uE1nsYflok1ePQcHXPH1eUsFXIrHSjpI4ZDvR2PzMLYOnuGDqweQFpA+GBjru CAcVmL0vlXS30PUa8h5hp3YXjJc9WSN109pFk9tcwxPTN7H/0Yxvj9c35cVLf/uK FbAH8y8K/SEpWpiRT5oZR9SooT8WlcXomjRdzNTr+JgbIAHX9WYW1rFZowU6Sb30 gXlJwiwSfDPEd6fAevn5ZFIJ5XaWaFzvBUULU7HPZAilOKm+ZMEj0FyLTQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFAREe4xjvCOYmI5E63DQ9LJWeWteMB8GA1UdIwQY MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt YjRkZDIyNzU4OTUxLzEvQkVSN2pHTzhJNWlZamtUcmNORDBzbFo1YTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgu8QAMF AyoQS8ADBQMqEIhAAwUDKhC9wAMFAyoSakAwDQYJKoZIhvcNAQELBQADggEBAHKl zsX2t43V61mG8FFPfBtT7uT9LgwuZiX097BddUZf9UFQJubYPVnTmpGumq04NBKc mrChU9+ytdf+lDJbW90jDw9EWE30ae5yQ95n2e3Akglh8+9+rpAA36IBiBnVu8Xi D8XWO95MGG/h87y4mJ4Q/9/a4hfIpUQOMpl08rZAuQKkHJ8GHxBUftOx2RWfNucQ cYb6bRj3KMU5g0pUZJysfufT5QXLdxYaRaTXbaiLbTbL1bFQ5/DEocE+KigefhJn 0D72Lu4DESsFAeiMXMWz3o6EUzt5sDJSZphxeYskVEp8w0go8Kar5rvZz43h8B0+ dpSVaDT8+Mg1Cs51AUY= -----END CERTIFICATE-----Generated at Fri Jan 9 04:25:57 2026 by rpki-client