This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7-kZwIf-1CZXDB44xUuaCP_Yybc.roa File: 7-kZwIf-1CZXDB44xUuaCP_Yybc.roa (raw, json) Hash identifier: lHpoHnKawYdj1fXu/RtDDjT+nd/iV6bmYgCdfSCr1vU= Subject key identifier: EF:E9:19:C0:87:FE:D4:26:57:0C:1E:38:C5:4B:9A:08:FF:D8:C9:B7 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCB97B780D93A81738ED648EEC447 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7-kZwIf-1CZXDB44xUuaCP_Yybc.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 2a0e:c380::/30 maxlen: 30 2a0e:c384::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cb:97:b7:80:d9:3a:81:73:8e:d6:48:ee:c4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efe919c087fed426570c1e38c54b9a08ffd8c9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:8f:5d:80:a0:38:48:dc:b4:f9:a5:a9:d4: 01:fa:79:17:70:41:7b:b0:06:27:cc:e5:11:ac:d5: 0d:2a:04:ac:1d:30:d5:a8:e7:f6:82:6f:78:39:5d: 8b:bf:e5:82:e5:d8:8a:09:14:ae:95:4b:26:4c:af: df:7f:95:7c:58:ee:1a:f8:9c:80:72:f3:41:a2:d3: 8c:f9:ab:ea:f1:37:50:13:0e:c8:0a:eb:66:fe:60: 62:9d:41:96:92:3e:45:c8:32:59:9c:60:b9:7f:96: 8d:75:fb:3d:ef:1e:17:96:8f:b9:fe:c4:60:84:98: cf:49:f8:45:0e:fa:fe:92:ca:4f:98:54:5b:fe:13: ab:4e:13:df:3a:b8:88:19:e9:7e:fc:db:14:b1:b3: 97:f4:9d:24:91:45:94:ea:a7:fc:48:d4:e6:f4:cb: 1c:c8:30:73:e4:02:26:cd:48:b9:ed:55:94:e7:dd: cb:d8:44:1c:2d:ae:24:fb:56:d3:6e:f5:b9:da:27: 24:6a:78:9f:05:96:02:d5:ba:92:d7:73:86:60:00: ac:ac:4b:4a:15:ad:7d:16:a3:3e:f3:1c:c5:95:67: 9d:df:31:2d:1a:10:30:e2:c3:db:72:87:87:06:68: 11:b0:f0:d1:14:24:4e:d2:62:6d:96:a0:76:31:02: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E9:19:C0:87:FE:D4:26:57:0C:1E:38:C5:4B:9A:08:FF:D8:C9:B7 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7-kZwIf-1CZXDB44xUuaCP_Yybc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:c380::/29 Signature Algorithm: sha256WithRSAEncryption 6f:56:b7:73:56:bb:49:af:06:5b:fb:37:ef:2b:64:1a:b0:0d: ea:dd:a6:8d:d2:31:f7:73:07:59:bd:9e:6c:9c:19:b1:be:e9: 7b:b9:9e:76:04:36:9e:db:c3:4c:e8:9b:f8:9a:7a:0f:26:ff: c7:d1:bb:00:44:4b:df:a0:95:af:ce:4e:e6:ca:55:11:24:98: a9:a9:8b:98:fb:c1:d5:c5:a8:36:d1:5b:f7:5d:f0:47:45:e0: 63:01:31:42:7e:cd:31:c5:b2:f1:f8:07:8f:37:9a:b3:7a:28: f1:2f:05:ff:8c:9d:07:6b:50:73:6f:fc:74:59:51:7d:3c:8b: 7c:f1:5b:9e:62:f8:bd:8b:16:ef:67:d9:12:4b:c2:94:ca:2e: b8:a5:02:82:63:5a:ca:1f:7e:3f:b0:73:51:0f:e9:cd:bc:ac: 92:ac:59:69:46:00:8f:76:db:2b:bc:60:31:3f:c4:7f:32:65: e7:4d:6c:bf:55:88:46:57:91:be:c6:a9:0e:c2:a6:d9:80:42: 32:72:70:ac:8b:ba:7e:63:64:8a:6d:52:bf:ec:29:a3:4e:db: 26:90:7e:c5:7a:21:bc:77:63:39:7b:79:68:37:a2:b5:89:05: e0:5a:b8:13:1a:c6:d4:45:9f:28:60:6d:63:87:06:2c:8f:a2: 0c:d5:0d:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XMuXt4DZOoFzjtZI7sRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmU5MTljMDg3ZmVkNDI2NTcwYzFlMzhjNTRiOWEwOGZmZDhjOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXOPXYCgOEjctPmlqdQB+nkXcEF7 sAYnzOURrNUNKgSsHTDVqOf2gm94OV2Lv+WC5diKCRSulUsmTK/ff5V8WO4a+JyA cvNBotOM+avq8TdQEw7ICutm/mBinUGWkj5FyDJZnGC5f5aNdfs97x4Xlo+5/sRg hJjPSfhFDvr+kspPmFRb/hOrThPfOriIGel+/NsUsbOX9J0kkUWU6qf8SNTm9Msc yDBz5AImzUi57VWU593L2EQcLa4k+1bTbvW52ickanifBZYC1bqS13OGYACsrEtK Fa19FqM+8xzFlWed3zEtGhAw4sPbcoeHBmgRsPDRFCRO0mJtlqB2MQJd4QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFO/pGcCH/tQmVwweOMVLmgj/2Mm3MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvNy1rWndJZi0xQ1pYREI0NHhVdWFDUF9ZeWJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7DgDAN BgkqhkiG9w0BAQsFAAOCAQEAb1a3c1a7Sa8GW/s37ytkGrAN6t2mjdIx93MHWb2e bJwZsb7pe7medgQ2ntvDTOib+Jp6Dyb/x9G7AERL36CVr85O5spVESSYqamLmPvB 1cWoNtFb913wR0XgYwExQn7NMcWy8fgHjzeas3oo8S8F/4ydB2tQc2/8dFlRfTyL fPFbnmL4vYsW72fZEkvClMouuKUCgmNayh9+P7BzUQ/pzbyskqxZaUYAj3bbK7xg MT/EfzJl501sv1WIRleRvsapDsKm2YBCMnJwrIu6fmNkim1Sv+wpo07bJpB+xXoh vHdjOXt5aDeitYkF4Fq4ExrG1EWfKGBtY4cGLI+iDNUN4g== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:26 2026 by rpki-client