This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hdmr7v4R4WrCfOxxd1yn3Oj2s88.roa File: hdmr7v4R4WrCfOxxd1yn3Oj2s88.roa (raw, json) Hash identifier: sh+CwEg9uciPhe3GiUMQz2rFrLo3c6hotCh60PhsAgY= Subject key identifier: 85:D9:AB:EE:FE:11:E1:6A:C2:7C:EC:71:77:5C:A7:DC:E8:F6:B3:CF Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71458F2E8A8D31DDD7E13131C409B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hdmr7v4R4WrCfOxxd1yn3Oj2s88.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215615 IP address blocks: 2a0c:9a40:8000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:14:58:f2:e8:a8:d3:1d:dd:7e:13:13:1c:40:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d9abeefe11e16ac27cec71775ca7dce8f6b3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:e8:2a:c7:24:a9:ae:d4:43:3d:5a:c4:95: 9e:2b:f7:99:13:e0:b9:fa:89:b8:fc:2e:23:b2:ab: 6d:33:0a:f8:83:ba:f0:1b:dd:1c:f3:73:f6:03:23: d3:99:95:e0:f4:81:fe:31:d0:12:8a:bc:3a:dd:80: 46:35:44:42:72:ed:93:ce:bc:7e:ae:ee:e6:0b:da: cc:d3:a3:80:d5:bb:5b:01:eb:94:b6:ee:f7:23:95: cd:77:15:30:6c:a2:5b:da:b6:3f:49:b2:02:2f:2d: aa:a2:69:f1:aa:3c:a2:72:51:11:d6:4e:ae:79:c6: 1b:dc:08:0a:24:90:a0:a9:d3:4e:e2:ce:38:0d:ff: ab:3e:a4:2a:a5:58:dd:ad:84:29:c4:36:a6:42:5d: 62:45:61:a5:8c:12:2b:bc:19:5d:17:9a:da:cb:3b: a3:a1:bb:94:1e:78:46:50:cd:4e:de:67:bd:75:aa: cd:c0:c6:a7:10:a6:98:5a:7d:36:69:ea:aa:f2:04: fd:2f:80:4f:5e:18:60:77:55:2a:42:cf:37:2c:a7: e9:52:33:c7:1c:da:1e:a3:fd:0d:34:16:e3:1b:c9: 78:a9:fd:c0:29:b7:15:9c:29:37:f5:90:fe:f7:9b: a4:76:55:db:2c:a6:b1:9d:df:6f:5f:a3:c8:ed:68: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:AB:EE:FE:11:E1:6A:C2:7C:EC:71:77:5C:A7:DC:E8:F6:B3:CF X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hdmr7v4R4WrCfOxxd1yn3Oj2s88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8000::/44 Signature Algorithm: sha256WithRSAEncryption 53:17:12:21:f4:f9:9e:8c:fb:d2:57:79:01:ee:ce:f7:4c:d5: b8:eb:e2:87:54:e5:9a:a3:bc:57:c3:7b:98:d9:ce:95:15:e0: 6f:c3:dd:a7:59:79:56:23:1a:ef:b4:d5:38:0d:96:88:6f:68: 6d:ed:96:ea:0b:7d:e6:ae:34:28:20:08:1b:0d:10:47:17:96: 3e:29:1d:81:73:51:eb:16:ee:58:85:73:48:46:3e:c6:38:23: 2a:a8:56:ed:7b:5c:f4:80:4c:65:b5:6d:a9:f8:83:33:1c:cd: c3:1e:22:fb:3f:1c:f6:db:1f:c6:d3:5c:d9:99:62:c1:98:5f: c7:bd:7f:9e:a7:f5:a8:51:b3:2f:a7:53:ae:37:19:ed:d4:4d: b5:68:9d:31:8c:0d:0b:42:42:45:2e:0e:98:8a:16:03:37:74: 65:53:5d:d1:09:95:d2:e8:a0:63:35:2e:68:71:42:05:a5:e9: 0a:7f:39:d8:a0:b3:62:bf:70:d4:a0:2f:62:8c:e5:dc:83:3f: e3:e6:0d:b4:17:db:c9:8e:46:e7:42:01:6c:50:eb:8b:3d:c7: 48:7b:39:87:ca:18:db:d3:6f:4e:48:d6:21:68:4a:58:43:55: 04:a8:75:63:7d:c8:0f:66:c5:97:fa:39:f3:60:08:da:53:93: 60:3c:c0:41 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxRY8uio0x3dfhMTHECbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQ5YWJlZWZlMTFlMTZhYzI3Y2VjNzE3NzVjYTdkY2U4ZjZiM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk87oKsckqa7UQz1axJWeK/eZE+C5 +om4/C4jsqttMwr4g7rwG90c83P2AyPTmZXg9IH+MdASirw63YBGNURCcu2Tzrx+ ru7mC9rM06OA1btbAeuUtu73I5XNdxUwbKJb2rY/SbICLy2qomnxqjyiclER1k6u ecYb3AgKJJCgqdNO4s44Df+rPqQqpVjdrYQpxDamQl1iRWGljBIrvBldF5rayzuj obuUHnhGUM1O3me9darNwManEKaYWn02aeqq8gT9L4BPXhhgd1UqQs83LKfpUjPH HNoeo/0NNBbjG8l4qf3AKbcVnCk39ZD+95ukdlXbLKaxnd9vX6PI7WiSvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIXZq+7+EeFqwnzscXdcp9zo9rPPMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvaGRtcjd2NFI0V3JDZk94eGQxeW4zT2oyczg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIAA MA0GCSqGSIb3DQEBCwUAA4IBAQBTFxIh9PmejPvSV3kB7s73TNW46+KHVOWao7xX w3uY2c6VFeBvw92nWXlWIxrvtNU4DZaIb2ht7ZbqC33mrjQoIAgbDRBHF5Y+KR2B c1HrFu5YhXNIRj7GOCMqqFbte1z0gExltW2p+IMzHM3DHiL7Pxz22x/G01zZmWLB mF/HvX+ep/WoUbMvp1OuNxnt1E21aJ0xjA0LQkJFLg6YihYDN3RlU13RCZXS6KBj NS5ocUIFpekKfznYoLNiv3DUoC9ijOXcgz/j5g20F9vJjkbnQgFsUOuLPcdIezmH yhjb029OSNYhaEpYQ1UEqHVjfcgPZsWX+jnzYAjaU5NgPMBB -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client