This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RrsHZfqRYGAF2ibfHOStTFvCxDo.roa File: RrsHZfqRYGAF2ibfHOStTFvCxDo.roa (raw, json) Hash identifier: 2SobHC0uxkfhAEhYj1TBo0apJKO7J5RlYWLMV7Gr3dM= Subject key identifier: 46:BB:07:65:FA:91:60:60:05:DA:26:DF:1C:E4:AD:4C:5B:C2:C4:3A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DA9BED84C11BE8FF47F3A726A87C Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RrsHZfqRYGAF2ibfHOStTFvCxDo.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199762 IP address blocks: 2a0c:9a40:9a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:da:9b:ed:84:c1:1b:e8:ff:47:f3:a7:26:a8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46bb0765fa91606005da26df1ce4ad4c5bc2c43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:6d:a8:13:69:ca:57:ee:b3:50:71:55:ab: 8a:41:be:4f:66:02:ea:c0:51:69:c0:f9:25:64:67: 54:c1:70:ef:41:78:f2:5d:de:3c:55:c7:6f:f0:b0: 8b:0e:54:01:a3:d6:ac:63:cb:09:4e:ab:66:f1:26: e5:0c:81:f3:05:e0:84:cd:fc:2a:93:c0:a5:0b:d0: f0:44:43:32:cf:0b:17:a4:85:5f:22:d4:5f:ed:db: 7f:af:de:d0:43:6d:5b:e0:fa:c7:08:b8:04:0d:a2: 39:a0:fe:8c:d3:0b:5d:ad:b7:1e:aa:31:6b:3a:9c: fb:ea:7c:b1:50:71:53:1f:2a:50:34:fb:aa:0c:f1: 44:fc:22:26:d0:27:5b:ab:f1:4a:d5:e7:09:21:fa: a6:5e:bf:c1:91:7f:1f:58:cc:25:92:f6:ad:28:61: b4:1e:3b:ec:b3:79:81:2f:b2:b3:9c:a6:49:a8:a2: e6:7d:70:3d:fd:88:f3:93:fd:8a:36:ba:97:49:bd: 41:e4:06:be:ce:d1:1b:e6:3b:13:14:2e:22:40:b5: 74:1f:16:3a:5b:fd:10:0d:34:68:6d:ae:c6:3d:08: 4f:2d:6a:96:51:a8:a7:08:4e:c7:ab:b5:77:13:c5: 4d:b6:40:a7:1b:aa:f6:a4:80:a5:ec:17:71:3f:83: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BB:07:65:FA:91:60:60:05:DA:26:DF:1C:E4:AD:4C:5B:C2:C4:3A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RrsHZfqRYGAF2ibfHOStTFvCxDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:9a00::/40 Signature Algorithm: sha256WithRSAEncryption 5a:c1:ec:cd:4f:64:ed:4b:5c:f8:57:95:db:4c:b2:1b:8c:4b: 2b:f2:57:22:b1:7c:0f:49:76:98:a0:70:1a:c4:08:bf:9a:83: 1f:b4:07:e8:e9:88:33:f7:4a:ae:cd:61:64:a3:8f:c2:56:c7: 13:18:20:0b:ba:bb:bd:02:44:c8:d0:f1:2e:b8:a0:01:0f:e7: 63:1c:b4:32:2b:cb:9f:ee:7b:bd:86:4f:26:20:ef:8a:c3:c8: 3a:93:aa:3c:89:89:0a:24:b1:76:6f:ff:f0:1c:79:41:55:f1: 7b:22:e5:26:35:ee:ab:05:9b:c1:34:9c:c0:d9:80:00:e1:6e: 3f:e5:d5:aa:13:68:5b:be:0f:9f:0e:98:32:3c:84:77:48:27: 34:4b:bb:14:12:a3:02:30:c6:71:8e:18:c4:ae:27:05:16:80: 25:75:27:a4:7e:eb:19:fb:89:46:35:e1:bd:d6:5b:ac:0d:9e: a4:cd:2b:b2:d4:b2:fc:2a:a4:9f:f6:01:87:b3:58:d0:bc:04: 73:be:37:c7:31:06:94:ae:8c:f6:39:f2:b8:95:50:76:1e:a0: 43:89:93:87:fc:33:1f:8e:9e:cd:7d:6a:28:09:5f:e1:5b:ca: 18:91:12:de:7e:0c:70:82:07:ea:20:bc:59:d6:85:3b:1a:59: a6:c0:c8:d4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ptqb7YTBG+j/R/OnJqh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmJiMDc2NWZhOTE2MDYwMDVkYTI2ZGYxY2U0YWQ0YzViYzJjNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTdtqBNpylfus1BxVauKQb5PZgLq wFFpwPklZGdUwXDvQXjyXd48Vcdv8LCLDlQBo9asY8sJTqtm8SblDIHzBeCEzfwq k8ClC9DwREMyzwsXpIVfItRf7dt/r97QQ21b4PrHCLgEDaI5oP6M0wtdrbceqjFr Opz76nyxUHFTHypQNPuqDPFE/CIm0Cdbq/FK1ecJIfqmXr/BkX8fWMwlkvatKGG0 Hjvss3mBL7KznKZJqKLmfXA9/Yjzk/2KNrqXSb1B5Aa+ztEb5jsTFC4iQLV0HxY6 W/0QDTRoba7GPQhPLWqWUainCE7Hq7V3E8VNtkCnG6r2pICl7BdxP4PPJwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEa7B2X6kWBgBdom3xzkrUxbwsQ6MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvUnJzSFpmcVJZR0FGMmliZkhPU3RURnZDeERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQJow DQYJKoZIhvcNAQELBQADggEBAFrB7M1PZO1LXPhXldtMshuMSyvyVyKxfA9Jdpig cBrECL+agx+0B+jpiDP3Sq7NYWSjj8JWxxMYIAu6u70CRMjQ8S64oAEP52MctDIr y5/ue72GTyYg74rDyDqTqjyJiQoksXZv//AceUFV8Xsi5SY17qsFm8E0nMDZgADh bj/l1aoTaFu+D58OmDI8hHdIJzRLuxQSowIwxnGOGMSuJwUWgCV1J6R+6xn7iUY1 4b3WW6wNnqTNK7LUsvwqpJ/2AYezWNC8BHO+N8cxBpSujPY58riVUHYeoEOJk4f8 Mx+Ons19aigJX+FbyhiREt5+DHCCB+ogvFnWhTsaWabAyNQ= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:21 2026 by rpki-client