This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7pCMGe3fpw0cPwfOWGhqRjFDmK0.roa File: 7pCMGe3fpw0cPwfOWGhqRjFDmK0.roa (raw, json) Hash identifier: HSNMYl9rEaGR6ZsiVYFRsEfD+XxYRTbHjD/7B4YweGU= Subject key identifier: EE:90:8C:19:ED:DF:A7:0D:1C:3F:07:CE:58:68:6A:46:31:43:98:AD Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CC92792B4CEDDA5B20D6563AB9DB9 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7pCMGe3fpw0cPwfOWGhqRjFDmK0.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44812 IP address blocks: 2a12:a343::/32 maxlen: 32 2a13:93c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c9:27:92:b4:ce:dd:a5:b2:0d:65:63:ab:9d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee908c19eddfa70d1c3f07ce58686a46314398ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:76:0a:f5:6a:76:88:f3:8b:04:3a:e1:6a:cb: 2c:21:a6:78:aa:ad:30:61:a5:dc:9d:b9:97:1f:5f: c2:e3:af:df:ed:a7:98:8a:df:3f:6e:2a:4c:d0:ea: 83:c3:b1:5d:70:95:1f:a0:32:27:66:3d:87:e5:74: a2:51:cf:f6:e8:fa:a1:3e:f8:47:dd:15:e9:c8:5d: 69:42:49:9c:cb:1d:a4:1f:5f:1c:d0:4f:77:02:bb: b5:97:d3:07:02:96:da:a4:80:eb:44:4b:d8:ad:0e: 7e:0e:6f:cf:4c:c3:e4:21:9a:fa:ed:6a:95:9a:a1: e0:f5:89:d4:60:d9:e8:78:74:da:cb:45:4e:e3:06: 38:0f:c2:62:52:ce:91:a9:77:36:12:3d:f7:09:4d: a9:16:2f:5b:09:78:95:7b:4e:dd:ff:b3:72:b4:9a: 75:55:4e:6e:f7:70:f4:33:ec:37:13:f3:79:47:5d: 13:63:ee:6e:e9:3e:46:85:ef:35:79:7b:46:7b:cc: 1b:82:53:68:31:25:71:4c:e7:6a:d6:63:b6:83:bd: 33:d1:91:c4:71:69:7b:fb:4c:65:7c:7a:a2:9c:b1: c0:62:fa:37:0c:39:89:14:ec:10:c0:ab:a1:24:b3: 79:cd:b4:48:e6:8f:9b:b9:9e:3b:ea:4e:0a:19:ba: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:90:8C:19:ED:DF:A7:0D:1C:3F:07:CE:58:68:6A:46:31:43:98:AD X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7pCMGe3fpw0cPwfOWGhqRjFDmK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:a343::/32 2a13:93c3::/32 Signature Algorithm: sha256WithRSAEncryption b6:8d:1c:cc:eb:5e:d6:a7:67:e2:b0:7d:86:22:23:39:6d:98: 4a:22:04:a1:7d:71:1e:69:b0:14:a0:d2:0a:ca:a2:3c:f0:cc: d2:2c:a0:b3:e8:95:fc:b5:22:42:01:39:37:74:5b:c7:65:55: 9b:9a:00:8e:47:c5:54:b9:4c:a9:b9:bb:84:88:2d:df:bc:20: 15:be:cd:c6:ff:65:75:6d:6c:ae:96:f1:8f:1e:95:ca:ad:91: 89:5d:22:50:f3:7b:31:26:f8:5e:47:0e:90:b4:9c:42:eb:b4: 04:20:1b:24:6a:95:1c:1f:77:66:5b:e5:19:e9:67:aa:69:45: 95:c6:13:1b:d6:1a:c5:0b:38:00:17:ec:e0:7f:94:ea:a5:b2: f4:b3:3a:c5:d8:5d:a2:5a:a6:d1:f3:f3:f0:88:9b:bc:65:68: 83:2d:87:1f:25:8a:df:f2:7e:61:34:1d:fd:75:99:42:4d:de: f4:14:95:55:d5:22:d2:8d:4e:08:49:9f:7b:f5:b0:c8:55:ad: e5:f6:21:06:88:13:e9:1f:d2:c6:58:4e:72:80:a6:94:ce:31: 7f:0f:e7:52:76:cd:9d:ae:1b:01:25:a3:5b:7c:e9:c5:cf:ef: 5d:56:0f:38:30:ee:55:2e:bf:9c:09:91:db:41:7b:aa:5f:0b: 5b:16:06:98 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XMknkrTO3aWyDWVjq525MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTkwOGMxOWVkZGZhNzBkMWMzZjA3Y2U1ODY4NmE0NjMxNDM5OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknYK9Wp2iPOLBDrhasssIaZ4qq0w YaXcnbmXH1/C46/f7aeYit8/bipM0OqDw7FdcJUfoDInZj2H5XSiUc/26PqhPvhH 3RXpyF1pQkmcyx2kH18c0E93Aru1l9MHApbapIDrREvYrQ5+Dm/PTMPkIZr67WqV mqHg9YnUYNnoeHTay0VO4wY4D8JiUs6RqXc2Ej33CU2pFi9bCXiVe07d/7NytJp1 VU5u93D0M+w3E/N5R10TY+5u6T5Ghe81eXtGe8wbglNoMSVxTOdq1mO2g70z0ZHE cWl7+0xlfHqinLHAYvo3DDmJFOwQwKuhJLN5zbRI5o+buZ476k4KGbqNcQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO6QjBnt36cNHD8HzlhoakYxQ5itMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvN3BDTUdlM2ZwdzBjUHdmT1dHaHFSakZEbUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhKjQwMF ACoTk8MwDQYJKoZIhvcNAQELBQADggEBALaNHMzrXtanZ+KwfYYiIzltmEoiBKF9 cR5psBSg0grKojzwzNIsoLPolfy1IkIBOTd0W8dlVZuaAI5HxVS5TKm5u4SILd+8 IBW+zcb/ZXVtbK6W8Y8elcqtkYldIlDzezEm+F5HDpC0nELrtAQgGyRqlRwfd2Zb 5RnpZ6ppRZXGExvWGsULOAAX7OB/lOqlsvSzOsXYXaJaptHz8/CIm7xlaIMthx8l it/yfmE0Hf11mUJN3vQUlVXVItKNTghJn3v1sMhVreX2IQaIE+kf0sZYTnKAppTO MX8P51J2zZ2uGwElo1t86cXP711WDzgw7lUuv5wJkdtBe6pfC1sWBpg= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client