This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/hvVtewn6w22bnIW8yznhNvKtiF4.roa File: hvVtewn6w22bnIW8yznhNvKtiF4.roa (raw, json) Hash identifier: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8= Subject key identifier: 86:F5:6D:7B:09:FA:C3:6D:9B:9C:85:BC:CB:39:E1:36:F2:AD:88:5E Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136 Certificate serial: 019B783476AC8A01C76EFB963CAC469AF148 Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/hvVtewn6w22bnIW8yznhNvKtiF4.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214915 IP address blocks: 2a06:8ac0:200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:76:ac:8a:01:c7:6e:fb:96:3c:ac:46:9a:f1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f56d7b09fac36d9b9c85bccb39e136f2ad885e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:5e:d2:19:02:86:fd:01:f8:c7:03:44:73: 0a:89:e4:cb:af:ad:6d:5f:93:55:eb:b2:29:8c:96: 35:f1:b2:0d:20:00:db:02:88:0b:d7:e1:9e:02:92: bd:2d:23:ae:21:ff:b3:5b:c8:a5:8c:81:b0:c1:3c: d7:f4:ef:67:82:9e:13:c5:09:c5:43:4f:1e:f4:e0: 3e:27:d1:d5:03:f3:27:d9:71:60:75:5c:43:4d:49: 8a:20:e7:3e:1e:1b:86:b1:30:de:f9:af:ab:aa:cd: 65:44:af:d8:59:82:60:8a:cb:64:6b:ef:d7:5b:9f: 32:7b:d6:17:45:c4:7d:c4:f8:37:7c:9b:aa:bc:e5: 94:6f:7a:71:a6:46:c6:52:9e:50:c9:96:f8:25:8c: 00:2d:dd:53:05:45:e3:e2:db:1b:f6:67:7c:8a:d7: 53:7b:b1:4d:c1:56:4c:90:bd:2e:b4:1a:fa:5a:e1: e2:d1:3d:34:a5:4f:79:e3:a2:5a:f7:98:77:52:e9: 67:8a:20:5b:a5:f7:c0:e5:47:30:f2:d3:4a:92:46: 25:f2:00:1d:64:b8:a1:09:61:d0:fb:01:f3:91:e1: ca:b3:9c:12:c5:68:33:5e:21:2a:fa:50:e6:8a:70: 25:00:bc:2f:b0:7f:81:9f:b7:c0:8c:2e:bc:4f:a9: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:6D:7B:09:FA:C3:6D:9B:9C:85:BC:CB:39:E1:36:F2:AD:88:5E X509v3 Authority Key Identifier: keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/hvVtewn6w22bnIW8yznhNvKtiF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:8ac0:200::/44 Signature Algorithm: sha256WithRSAEncryption 73:8b:54:2c:b5:1e:25:8c:bc:9c:01:17:70:f3:33:b3:42:eb: 69:23:29:75:f4:77:37:53:b5:cd:c3:6b:bb:ac:2e:3c:03:a7: 9b:69:78:27:fe:5d:68:c6:05:46:b4:eb:d2:f7:2a:c9:a0:1f: b5:a9:fc:35:5b:94:3e:5f:eb:55:62:43:b4:75:47:7d:3c:a9: 6e:73:c4:6d:85:4d:58:69:c9:6d:d0:d2:d7:7b:2f:c0:93:2f: e2:c6:86:04:a8:be:34:6e:b6:12:05:58:cf:bb:37:62:fb:ff: 69:40:ef:ca:50:ea:71:33:17:38:b5:11:82:a5:dc:f4:ff:7e: c3:cd:80:b9:a5:fd:e6:63:f4:c5:34:5a:5c:02:1c:6d:e5:1f: 98:b5:e1:38:ae:70:a7:3b:aa:72:a1:c0:77:02:98:cc:38:6a: d4:02:7f:d3:01:5d:d7:5d:0d:ef:97:19:11:96:77:70:5b:91: 0d:e3:25:bd:c9:bb:5f:85:fa:fb:ad:78:e9:6e:ea:a2:93:a6: 63:2d:80:9e:56:a3:03:65:50:57:a4:d3:bf:85:58:6d:74:0f: 09:a5:5e:8f:04:29:9f:0e:e0:fc:40:3f:53:f4:25:e6:58:b6: 31:4b:cb:85:6d:85:07:c3:eb:27:0b:9d:7d:ca:f7:c9:2b:1c: 11:4d:43:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NHasigHHbvuWPKxGmvFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj YzExMzYwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmY1NmQ3YjA5ZmFjMzZkOWI5Yzg1YmNjYjM5ZTEzNmYyYWQ4ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDle0hkChv0B+McDRHMKieTLr61t X5NV67IpjJY18bINIADbAogL1+GeApK9LSOuIf+zW8iljIGwwTzX9O9ngp4TxQnF Q08e9OA+J9HVA/Mn2XFgdVxDTUmKIOc+HhuGsTDe+a+rqs1lRK/YWYJgistka+/X W58ye9YXRcR9xPg3fJuqvOWUb3pxpkbGUp5QyZb4JYwALd1TBUXj4tsb9md8itdT e7FNwVZMkL0utBr6WuHi0T00pU9546Ja95h3UulniiBbpffA5Ucw8tNKkkYl8gAd ZLihCWHQ+wHzkeHKs5wSxWgzXiEq+lDminAlALwvsH+Bn7fAjC68T6nuTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIb1bXsJ+sNtm5yFvMs54TbyrYheMB8GA1UdIwQY MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt Zjc0Y2NjYzRlMGExLzEvaHZWdGV3bjZ3MjJibklXOHl6bmhOdkt0aUY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaKwAIA MA0GCSqGSIb3DQEBCwUAA4IBAQBzi1QstR4ljLycARdw8zOzQutpIyl19Hc3U7XN w2u7rC48A6ebaXgn/l1oxgVGtOvS9yrJoB+1qfw1W5Q+X+tVYkO0dUd9PKluc8Rt hU1Yaclt0NLXey/Aky/ixoYEqL40brYSBVjPuzdi+/9pQO/KUOpxMxc4tRGCpdz0 /37DzYC5pf3mY/TFNFpcAhxt5R+YteE4rnCnO6pyocB3ApjMOGrUAn/TAV3XXQ3v lxkRlndwW5EN4yW9ybtfhfr7rXjpbuqik6ZjLYCeVqMDZVBXpNO/hVhtdA8JpV6P BCmfDuD8QD9T9CXmWLYxS8uFbYUHw+snC519yvfJKxwRTUOS -----END CERTIFICATE-----Generated at Tue Jan 20 04:32:11 2026 by rpki-client