This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa File: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (raw, json) Hash identifier: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI= Subject key identifier: 7F:B0:A9:C8:DE:AC:5B:46:5C:82:F0:AE:2D:47:4D:60:95:5F:9A:2E Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50 Certificate serial: 019B79109CAFE56A5A457B4E4AF7F5A044BD Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203680 IP address blocks: 130.0.12.0/24 maxlen: 24 130.0.13.0/24 maxlen: 24 130.0.14.0/24 maxlen: 24 130.0.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9c:af:e5:6a:5a:45:7b:4e:4a:f7:f5:a0:44:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fb0a9c8deac5b465c82f0ae2d474d60955f9a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:6d:9c:01:9d:83:b2:0c:bf:21:78:16:9d: 3e:d9:3d:0e:da:76:42:9e:f8:a6:92:f6:4c:23:a8: d1:9f:18:2f:7d:d5:74:e4:ea:1c:36:00:97:45:27: 14:c4:c2:98:ff:e3:b7:cf:66:07:19:08:de:f1:7d: 0f:0a:83:23:21:58:8a:a6:f6:df:3e:ee:89:68:10: 7d:85:a2:00:e2:a7:ad:4d:ef:da:a8:ff:e1:a9:b3: e0:81:0a:3e:08:17:f0:bc:15:aa:9c:1a:c8:91:c7: c9:7d:85:2a:ad:cd:2a:d7:c2:a2:ee:0e:17:17:23: 6a:68:06:90:e3:35:96:60:65:65:72:41:17:fd:57: a2:07:ee:54:3b:42:36:6a:5d:a9:f0:78:db:ee:3a: c1:0e:16:22:6a:ca:56:e3:5f:38:82:9c:8e:88:13: 49:9b:cf:f5:53:17:63:0f:33:35:d8:2e:65:ef:50: 7f:7e:35:7c:6b:72:17:63:07:fe:4a:28:fd:ae:fd: fb:5d:79:f3:86:cb:3f:c5:0a:cd:bd:cc:3a:6e:78: a6:4c:dd:49:50:62:f5:c0:20:c4:c5:f6:df:80:db: 40:5a:9e:84:38:66:7e:85:5e:be:87:a0:38:37:c2: 55:59:d6:62:f7:7d:b3:0d:e1:d5:8c:97:b8:1c:04: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B0:A9:C8:DE:AC:5B:46:5C:82:F0:AE:2D:47:4D:60:95:5F:9A:2E X509v3 Authority Key Identifier: keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.0.12.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:4f:54:4b:b5:5a:37:f6:c5:9c:3e:84:17:41:d1:97:61:9f: ff:c5:7c:56:0e:ae:f6:dc:e1:8e:b7:27:ca:af:0e:f9:f9:6f: df:97:c9:56:56:b0:96:20:ed:3d:97:93:f5:2b:5c:f8:80:9f: cf:59:fa:20:b3:f9:6e:6d:2c:0b:2d:fd:21:26:20:b2:bf:d1: 10:1f:b0:7b:b1:ac:97:c2:e4:14:a6:d1:a0:19:a6:9c:3e:41: 76:d1:36:08:5e:a3:da:ca:c6:fc:65:f3:87:f6:db:5b:7e:62: 85:58:c3:83:f8:fd:79:2b:57:56:de:99:6f:33:14:c3:6d:2b: d1:77:47:d7:8a:c7:33:e7:cf:7c:b6:66:de:ee:78:ae:d1:ec: ff:e4:e3:15:1d:03:f1:3c:41:19:28:8f:07:a6:7c:0b:45:47: 5f:e3:8d:4a:6f:87:96:1d:b3:d6:05:30:12:58:1b:9c:78:e7: 0b:85:1d:ae:4d:36:a3:04:04:0f:e5:fe:f2:be:f3:ec:f7:b2: 91:b4:ac:69:b8:b2:ea:78:2f:82:41:42:5f:19:e7:37:16:54: 87:15:b2:2e:c5:c0:a9:3b:0e:e5:d4:87:10:d4:45:08:ea:09: 3a:f0:fc:08:b5:09:ea:dd:a7:72:3e:5b:c7:9e:fe:8d:02:13: 20:3f:82:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJyv5WpaRXtOSvf1oES9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl NmNiNTAwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmIwYTljOGRlYWM1YjQ2NWM4MmYwYWUyZDQ3NGQ2MDk1NWY5YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfJtnAGdg7IMvyF4Fp0+2T0O2nZC nvimkvZMI6jRnxgvfdV05OocNgCXRScUxMKY/+O3z2YHGQje8X0PCoMjIViKpvbf Pu6JaBB9haIA4qetTe/aqP/hqbPggQo+CBfwvBWqnBrIkcfJfYUqrc0q18Ki7g4X FyNqaAaQ4zWWYGVlckEX/VeiB+5UO0I2al2p8Hjb7jrBDhYiaspW4184gpyOiBNJ m8/1UxdjDzM12C5l71B/fjV8a3IXYwf+Sij9rv37XXnzhss/xQrNvcw6bnimTN1J UGL1wCDExfbfgNtAWp6EOGZ+hV6+h6A4N8JVWdZi932zDeHVjJe4HASz2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+wqcjerFtGXILwri1HTWCVX5ouMB8GA1UdIwQY MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt OWRkZGQ2ODAyMDg4LzEvZjdDcHlONnNXMFpjZ3ZDdUxVZE5ZSlZmbWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4 LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggAMMA0G CSqGSIb3DQEBCwUAA4IBAQA/T1RLtVo39sWcPoQXQdGXYZ//xXxWDq723OGOtyfK rw75+W/fl8lWVrCWIO09l5P1K1z4gJ/PWfogs/lubSwLLf0hJiCyv9EQH7B7sayX wuQUptGgGaacPkF20TYIXqPaysb8ZfOH9ttbfmKFWMOD+P15K1dW3plvMxTDbSvR d0fXiscz5898tmbe7niu0ez/5OMVHQPxPEEZKI8HpnwLRUdf441Kb4eWHbPWBTAS WBuceOcLhR2uTTajBAQP5f7yvvPs97KRtKxpuLLqeC+CQUJfGec3FlSHFbIuxcCp Ow7l1IcQ1EUI6gk68PwItQnq3adyPlvHnv6NAhMgP4KJ -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:51 2026 by rpki-client