This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa File: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (raw, json) Hash identifier: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs= Subject key identifier: 93:B1:2F:6B:70:6C:61:32:9A:26:08:98:68:BB:57:B8:F7:C6:09:7B Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019C0664BA78BDBA2DC8608D867CC3850A89 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa Signing time: Wed 28 Jan 2026 20:56:30 +0000 ROA not before: Wed 28 Jan 2026 20:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203704 IP address blocks: 2a0d:3dc2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:64:ba:78:bd:ba:2d:c8:60:8d:86:7c:c3:85:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jan 28 20:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b12f6b706c61329a26089868bb57b8f7c6097b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:30:89:a9:13:54:3a:b4:71:43:c0:aa:6e: 90:ce:3a:14:ff:47:62:38:fc:11:e4:9d:27:ca:9b: fa:34:26:23:ac:37:c2:ac:e4:f5:d1:09:df:4a:71: e5:ea:48:2b:32:54:ea:9e:35:0a:c0:c3:3d:2d:5f: 08:82:43:3a:55:4a:db:e3:b2:31:ba:42:75:e5:c6: 73:6d:b1:29:94:b7:ab:68:f6:3f:aa:8c:3d:83:2b: 5d:a9:83:b6:0c:79:66:f5:cf:54:65:46:d2:df:12: 41:fc:84:71:1c:2a:19:b4:9e:d0:4a:b6:82:11:e7: 98:a3:d7:52:14:59:0e:53:87:59:c2:e9:eb:b1:d3: 46:27:04:71:ee:87:3d:36:5f:7a:4c:4f:13:71:06: 3d:aa:32:0c:57:ee:4a:e1:07:59:46:ea:c5:06:23: 95:b2:82:f0:c9:a4:3c:6b:a0:2e:c3:77:3c:68:05: 83:8c:19:0b:c5:83:9b:89:08:9e:58:d6:ef:19:2d: 66:72:f1:62:2a:ae:da:45:e5:a5:54:a0:33:8a:76: c8:61:81:af:43:81:5f:5d:f2:d7:41:ef:33:8d:a1: 96:42:34:b8:ef:3f:f8:f1:6b:a3:9c:9e:27:57:b7: 3a:5c:2c:f9:d3:32:f4:63:03:87:06:3f:08:31:9d: 4f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B1:2F:6B:70:6C:61:32:9A:26:08:98:68:BB:57:B8:F7:C6:09:7B X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:3dc2::/48 Signature Algorithm: sha256WithRSAEncryption 69:c5:5f:df:6b:11:45:bd:5b:78:4a:f7:4f:65:3c:42:23:80: 4a:87:da:5f:78:0d:07:c7:bc:07:aa:de:b9:c5:dc:05:95:84: e9:17:1e:e3:be:64:db:a2:fb:ec:8e:4f:cf:c1:81:6b:b9:ee: 91:49:73:a6:cf:2a:fe:b3:52:46:f4:0e:3f:49:d3:3f:da:e3: bb:c8:e2:e5:90:4f:a8:7f:16:fe:e6:5c:94:c8:3f:17:84:0c: 9f:1a:c6:19:bc:81:fe:b7:e1:53:b1:7e:70:0b:15:f1:c2:3a: 33:5f:ca:04:e5:e8:fd:2d:49:1f:ce:85:60:79:4f:32:96:15: 23:68:2a:9f:05:61:57:3a:aa:d2:ad:2b:fe:82:95:69:0f:54: 5c:b4:53:a3:e2:36:3f:85:03:0e:18:e1:10:0d:17:e4:e4:f2: 60:a5:e9:4c:e7:f6:2a:0b:03:06:ea:3d:a9:81:71:c5:ea:e4: ea:d2:a5:16:da:49:2e:b9:3b:b3:b9:07:bb:25:4b:de:52:df: 19:4a:37:b1:6c:e4:c6:51:8e:87:1f:9d:f7:cc:8e:96:5d:54: 1a:84:94:63:b8:93:ad:35:e2:a0:6c:d0:c4:56:6a:b7:1f:d6: d5:62:aa:d9:77:6f:1f:0a:23:88:23:4b:a4:b6:9a:99:b9:ba: 3a:4f:f4:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwGZLp4vbotyGCNhnzDhQqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMTI4MjA1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2IxMmY2YjcwNmM2MTMyOWEyNjA4OTg2OGJiNTdiOGY3YzYwOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtcwiakTVDq0cUPAqm6QzjoU/0di OPwR5J0nypv6NCYjrDfCrOT10QnfSnHl6kgrMlTqnjUKwMM9LV8IgkM6VUrb47Ix ukJ15cZzbbEplLeraPY/qow9gytdqYO2DHlm9c9UZUbS3xJB/IRxHCoZtJ7QSraC EeeYo9dSFFkOU4dZwunrsdNGJwRx7oc9Nl96TE8TcQY9qjIMV+5K4QdZRurFBiOV soLwyaQ8a6Auw3c8aAWDjBkLxYObiQieWNbvGS1mcvFiKq7aReWlVKAzinbIYYGv Q4FfXfLXQe8zjaGWQjS47z/48WujnJ4nV7c6XCz50zL0YwOHBj8IMZ1P1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJOxL2twbGEymiYImGi7V7j3xgl7MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvazdFdmEzQnNZVEthSmdpWWFMdFh1UGZHQ1hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg09wgAA MA0GCSqGSIb3DQEBCwUAA4IBAQBpxV/faxFFvVt4SvdPZTxCI4BKh9pfeA0Hx7wH qt65xdwFlYTpFx7jvmTbovvsjk/PwYFrue6RSXOmzyr+s1JG9A4/SdM/2uO7yOLl kE+ofxb+5lyUyD8XhAyfGsYZvIH+t+FTsX5wCxXxwjozX8oE5ej9LUkfzoVgeU8y lhUjaCqfBWFXOqrSrSv+gpVpD1RctFOj4jY/hQMOGOEQDRfk5PJgpelM5/YqCwMG 6j2pgXHF6uTq0qUW2kkuuTuzuQe7JUveUt8ZSjexbOTGUY6HH533zI6WXVQahJRj uJOtNeKgbNDEVmq3H9bVYqrZd28fCiOII0uktpqZubo6T/TQ -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:41 2026 by rpki-client