This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h0gMmb4xh5J46Cvol-0kdZjkpsQ.roa File: h0gMmb4xh5J46Cvol-0kdZjkpsQ.roa (raw, json) Hash identifier: l6OUz6NZRDhxI43NZ7xOTyvLhmPdRzxbrG177n4dzVA= Subject key identifier: 87:48:0C:99:BE:31:87:92:78:E8:2B:E8:97:ED:24:75:98:E4:A6:C4 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FF5BE77EBB227FF0B2E71D69BC22 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h0gMmb4xh5J46Cvol-0kdZjkpsQ.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212983 IP address blocks: 2a0c:9a40:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ff:5b:e7:7e:bb:22:7f:f0:b2:e7:1d:69:bc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87480c99be31879278e82be897ed247598e4a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:f9:4f:91:aa:3a:3d:e0:bd:2b:12:e4:6e: e7:4b:0f:02:02:bf:5c:3f:af:5c:9d:c7:96:2e:bc: 2a:f5:cc:76:55:36:d0:ba:04:93:46:cc:3a:d8:0e: 28:ea:9f:6e:c9:b8:dc:1e:72:35:43:b9:57:1e:24: 89:81:ae:bc:3a:7a:25:3e:9c:1b:87:75:c3:c0:88: 43:08:b0:f9:a8:38:d2:c0:6f:f3:02:cb:4e:f2:bd: 3d:4c:c1:43:ea:85:e7:08:e5:6b:4b:99:39:3a:5c: db:62:23:2f:e5:0d:f7:57:46:b9:82:67:ee:47:b3: 38:6b:93:44:e3:9b:de:10:7a:d4:7f:fc:cd:e7:f2: 86:f0:73:7a:f3:ba:dc:f2:fc:c3:70:2d:de:93:07: d0:63:4e:6f:34:2c:12:3d:19:6d:8b:9f:e5:11:5b: 46:4b:0e:4c:2e:5e:2c:ea:ee:74:87:a2:dd:e0:ab: 15:d0:05:54:10:70:4d:34:f1:6b:b4:84:28:8b:59: 72:9e:a1:02:3d:b6:7c:1e:2f:ef:ce:41:a8:83:e6: 3c:61:5e:86:1d:17:a5:eb:6c:f6:55:2c:37:4b:ef: 47:dd:11:5f:7d:75:6c:a8:0b:b3:38:45:b9:9b:f3: 85:94:de:40:44:ad:23:90:98:7c:02:c9:b9:7e:5e: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:0C:99:BE:31:87:92:78:E8:2B:E8:97:ED:24:75:98:E4:A6:C4 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h0gMmb4xh5J46Cvol-0kdZjkpsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8180::/48 Signature Algorithm: sha256WithRSAEncryption 2e:32:0d:c8:e2:a1:3c:11:99:60:c5:09:3b:cb:48:1c:5b:62: 4b:05:d4:b0:93:c4:9c:96:6b:07:2a:11:3a:28:34:67:73:4a: 7c:aa:92:cb:8b:4a:a8:c1:98:dc:40:8f:58:90:cb:77:00:5b: 29:94:79:f2:8c:b6:3a:97:46:73:3f:f2:7b:f1:ea:99:75:a6: 88:2d:22:e4:bc:bd:53:60:3e:95:0e:c7:88:4d:37:18:35:45: 00:05:c2:b1:18:3c:60:88:25:09:6c:00:0b:18:0a:ef:34:0a: a4:f7:b9:76:d8:18:f7:0f:60:4d:07:49:43:3a:40:aa:a1:2a: 27:0a:50:c6:2a:fa:02:52:8f:d2:8d:75:22:d9:11:1b:50:b5: fd:02:61:55:ec:e1:b0:7d:0e:dd:c8:dd:c5:93:6e:b3:88:a5: ac:76:14:93:59:12:0c:dc:15:04:66:f9:45:92:1e:62:41:74: 98:9c:72:ad:e4:9d:c1:d5:a6:1f:56:9b:29:cc:21:a8:d9:44: 45:1a:e6:ae:8a:53:00:8c:84:be:6e:6a:19:0c:5e:e1:fa:4c: 36:4b:cc:fe:fe:23:24:a2:aa:d1:c8:a8:64:39:96:3f:e4:b4: 4a:80:4f:a8:9c:5b:2d:5a:de:8f:5b:08:ff:93:87:7c:93:3f: 3a:6c:44:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pv9b5367In/wsucdabwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzQ4MGM5OWJlMzE4NzkyNzhlODJiZTg5N2VkMjQ3NTk4ZTRhNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03D5T5GqOj3gvSsS5G7nSw8CAr9c P69cnceWLrwq9cx2VTbQugSTRsw62A4o6p9uybjcHnI1Q7lXHiSJga68OnolPpwb h3XDwIhDCLD5qDjSwG/zAstO8r09TMFD6oXnCOVrS5k5OlzbYiMv5Q33V0a5gmfu R7M4a5NE45veEHrUf/zN5/KG8HN687rc8vzDcC3ekwfQY05vNCwSPRlti5/lEVtG Sw5MLl4s6u50h6Ld4KsV0AVUEHBNNPFrtIQoi1lynqECPbZ8Hi/vzkGog+Y8YV6G HRel62z2VSw3S+9H3RFffXVsqAuzOEW5m/OFlN5ARK0jkJh8Asm5fl59QQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIdIDJm+MYeSeOgr6JftJHWY5KbEMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvaDBnTW1iNHhoNUo0NkN2b2wtMGtkWmprcHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIGA MA0GCSqGSIb3DQEBCwUAA4IBAQAuMg3I4qE8EZlgxQk7y0gcW2JLBdSwk8SclmsH KhE6KDRnc0p8qpLLi0qowZjcQI9YkMt3AFsplHnyjLY6l0ZzP/J78eqZdaaILSLk vL1TYD6VDseITTcYNUUABcKxGDxgiCUJbAALGArvNAqk97l22Bj3D2BNB0lDOkCq oSonClDGKvoCUo/SjXUi2REbULX9AmFV7OGwfQ7dyN3Fk26ziKWsdhSTWRIM3BUE ZvlFkh5iQXSYnHKt5J3B1aYfVpspzCGo2URFGuauilMAjIS+bmoZDF7h+kw2S8z+ /iMkoqrRyKhkOZY/5LRKgE+onFstWt6PWwj/k4d8kz86bERR -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:15 2026 by rpki-client