This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7YSwmmnczm-7IoOuL55xSYq-HHI.roa File: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (raw, json) Hash identifier: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0= Subject key identifier: ED:84:B0:9A:69:DC:CE:6F:BB:22:83:AE:2F:9E:71:49:8A:BE:1C:72 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6DB911DD2D6D7AC7E3DF3E0E930EC Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7YSwmmnczm-7IoOuL55xSYq-HHI.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213395 IP address blocks: 2a10:2e41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 02:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:db:91:1d:d2:d6:d7:ac:7e:3d:f3:e0:e9:30:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed84b09a69dcce6fbb2283ae2f9e71498abe1c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:9c:51:e7:20:7e:c9:6a:d8:ec:94:72:d2: d4:f3:81:79:3e:4e:0c:a0:8c:f3:c1:86:71:1b:77: 72:7a:c3:eb:48:d8:8e:5b:00:e4:1e:40:f6:aa:58: 69:99:c4:3d:96:6d:db:0d:24:46:01:a4:d8:37:24: ee:c5:6d:3c:a3:59:47:33:e8:e4:a4:53:9e:4b:98: 4a:cf:cc:1b:32:c1:36:a3:72:4b:8a:3a:4a:2d:bd: 5e:be:2c:b1:2e:d2:47:e6:5f:6c:6f:9f:53:ae:26: 15:f3:37:f8:5f:20:bd:a0:08:8e:3f:6e:f4:4e:d9: 03:43:70:48:eb:f6:f6:c3:68:47:dd:9b:88:db:b8: f0:51:01:36:a9:e3:ff:0f:32:82:c4:86:06:f5:ab: ed:82:10:be:b6:48:46:80:b7:83:53:0b:72:0f:88: da:a6:74:fb:82:44:34:64:1d:91:80:db:02:a6:4a: 18:9d:3b:0d:b3:1e:94:5b:17:a5:a9:3d:25:9f:25: 34:49:19:39:3f:24:cf:73:47:c9:eb:b8:97:8e:6c: 61:96:7c:ee:88:7d:b4:8a:a0:a3:dd:64:69:11:45: 8c:ac:62:43:72:57:d7:df:80:60:ce:72:01:5f:e1: e8:2f:67:9a:ca:d6:fa:86:41:13:2e:cb:1f:40:fd: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:84:B0:9A:69:DC:CE:6F:BB:22:83:AE:2F:9E:71:49:8A:BE:1C:72 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7YSwmmnczm-7IoOuL55xSYq-HHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2e41::/32 Signature Algorithm: sha256WithRSAEncryption a9:ac:05:91:5b:f9:4c:cf:5e:6c:ea:8c:06:0d:6c:b5:9f:37: 7a:c8:b7:6d:03:5b:82:d9:2a:59:5a:7e:5c:37:c3:c3:1e:7a: cc:33:ab:e5:12:95:de:58:42:13:98:e2:d6:f7:ce:0a:78:39: ee:8f:97:17:5b:eb:28:42:cd:1f:d3:69:ad:ed:15:d6:60:33: 14:c1:de:dc:6e:20:7a:86:c9:d4:27:1c:6a:1a:3d:cd:66:63: be:a6:4e:43:f1:2d:20:15:7b:6c:63:90:9f:c7:0c:5d:5b:08: 68:3b:ed:55:88:e2:fc:23:cf:05:c1:a7:da:31:44:52:15:d2: 41:6b:ec:3d:ed:9f:1f:d2:fe:ca:09:5f:55:e2:36:78:29:f7: c6:04:26:2e:ea:d1:3f:b6:85:74:7d:3f:09:07:81:4b:88:5f: e1:9a:0f:c3:5a:e9:06:1f:c5:2d:5d:32:c9:f2:8e:2d:5a:6b: df:6a:7f:50:30:ea:30:d5:75:d3:f6:03:db:7c:a1:65:7d:be: 7e:da:db:b0:39:a8:a5:2c:5c:98:2a:43:71:09:af:9b:3a:c4: c2:9b:be:bb:c0:10:06:e9:01:3b:df:15:47:de:0e:ac:85:cf: 01:e8:13:ed:b4:70:36:a9:28:29:65:12:b1:cd:3c:6d:9c:dc: c4:60:f9:64 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xtuRHdLW16x+PfPg6TDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDg0YjA5YTY5ZGNjZTZmYmIyMjgzYWUyZjllNzE0OThhYmUxYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi2cUecgfslq2OyUctLU84F5Pk4M oIzzwYZxG3dyesPrSNiOWwDkHkD2qlhpmcQ9lm3bDSRGAaTYNyTuxW08o1lHM+jk pFOeS5hKz8wbMsE2o3JLijpKLb1eviyxLtJH5l9sb59TriYV8zf4XyC9oAiOP270 TtkDQ3BI6/b2w2hH3ZuI27jwUQE2qeP/DzKCxIYG9avtghC+tkhGgLeDUwtyD4ja pnT7gkQ0ZB2RgNsCpkoYnTsNsx6UWxelqT0lnyU0SRk5PyTPc0fJ67iXjmxhlnzu iH20iqCj3WRpEUWMrGJDclfX34BgznIBX+HoL2eaytb6hkETLssfQP1cUQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFO2EsJpp3M5vuyKDri+ecUmKvhxyMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvN1lTd21tbmN6bS03SW9PdUw1NXhTWXEtSEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhAuQTAN BgkqhkiG9w0BAQsFAAOCAQEAqawFkVv5TM9ebOqMBg1stZ83esi3bQNbgtkqWVp+ XDfDwx56zDOr5RKV3lhCE5ji1vfOCng57o+XF1vrKELNH9Npre0V1mAzFMHe3G4g eobJ1Cccaho9zWZjvqZOQ/EtIBV7bGOQn8cMXVsIaDvtVYji/CPPBcGn2jFEUhXS QWvsPe2fH9L+yglfVeI2eCn3xgQmLurRP7aFdH0/CQeBS4hf4ZoPw1rpBh/FLV0y yfKOLVpr32p/UDDqMNV10/YD23yhZX2+ftrbsDmopSxcmCpDcQmvmzrEwpu+u8AQ BukBO98VR94OrIXPAegT7bRwNqkoKWUSsc08bZzcxGD5ZA== -----END CERTIFICATE-----Generated at Sat Feb 7 12:15:01 2026 by rpki-client