This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/IuHRS-lBd_Cfdef-d8xI5lrAWgE.roa File: IuHRS-lBd_Cfdef-d8xI5lrAWgE.roa (raw, json) Hash identifier: sPvYwBM1GXpOKAqaT4Pf1zse9CyIwkrb9aMQGJa8ysg= Subject key identifier: 22:E1:D1:4B:E9:41:77:F0:9F:75:E7:FE:77:CC:48:E6:5A:C0:5A:01 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019C137C7915CE33865AA456CE034D86776B Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/IuHRS-lBd_Cfdef-d8xI5lrAWgE.roa Signing time: Sat 31 Jan 2026 09:57:30 +0000 ROA not before: Sat 31 Jan 2026 09:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214422 IP address blocks: 2a0d:d940:10b::/48 maxlen: 48 2a0d:d940:200a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:13:7c:79:15:ce:33:86:5a:a4:56:ce:03:4d:86:77:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 31 09:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22e1d14be94177f09f75e7fe77cc48e65ac05a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:a5:05:c3:82:e9:a8:ea:e3:1b:2e:a7:27: c3:93:a4:1d:63:04:ba:b1:4d:24:74:7f:9f:dd:2e: 6a:c2:ba:6c:b4:40:cb:79:8f:21:df:fc:09:5b:01: 22:12:8d:7a:54:08:af:47:10:d2:60:f7:87:20:c0: ed:3c:35:e2:63:4b:cb:5e:9d:24:e9:63:c0:99:46: e4:9e:6f:27:04:fc:87:5c:32:48:45:ea:b0:c5:15: a1:b5:e2:34:95:c2:c4:85:92:13:aa:80:9e:de:eb: f4:b5:aa:d6:98:ac:c8:b1:ea:e8:80:c1:53:ca:8c: 75:17:95:5c:f3:08:81:90:45:c7:73:94:21:80:2f: 9f:6f:80:be:cd:88:0f:f0:bb:92:30:d3:b3:43:b0: 42:cc:75:c4:d8:6d:ad:cd:49:c0:7d:40:5a:d3:60: e5:5a:f0:4d:ea:b7:91:17:c3:1e:8c:ef:39:c0:f6: 77:25:5a:27:00:6a:52:10:87:cd:d9:08:9c:07:5a: 43:1d:99:3d:59:6f:46:51:27:59:a7:35:51:2b:db: 3a:74:39:0f:10:c4:0d:98:9d:ae:74:2b:f3:57:8e: 40:b7:fe:e9:f0:96:82:1d:f0:a9:b9:77:76:e9:09: 07:80:0a:d2:6c:39:6b:43:2c:08:d2:71:d0:35:79: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:D1:4B:E9:41:77:F0:9F:75:E7:FE:77:CC:48:E6:5A:C0:5A:01 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/IuHRS-lBd_Cfdef-d8xI5lrAWgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:10b::/48 2a0d:d940:200a::/48 Signature Algorithm: sha256WithRSAEncryption ac:6b:2b:0f:ca:49:92:04:11:23:0b:f5:25:1f:29:f6:5c:08: 30:81:cf:73:3b:b2:12:6e:54:00:9c:d4:b5:01:86:6d:bf:a2: b9:71:19:fc:51:8c:7d:9d:31:e1:71:99:86:35:70:50:5d:72: 94:fa:be:d7:bf:54:fa:b7:4a:b8:27:70:c0:79:66:10:ad:e6: a2:1e:1a:43:6a:1f:3f:19:53:36:5e:26:cc:21:a0:fb:09:c8: af:66:d8:4f:b7:93:3f:05:44:7e:d5:a7:f8:b3:08:72:8f:fb: cc:f3:d3:63:2b:5b:93:51:fe:11:7d:a0:76:1e:c0:3c:79:0d: b5:58:ac:76:61:55:ec:bb:e9:fd:06:76:65:36:66:e1:7b:c3: 16:d4:6e:6f:f7:78:7b:72:ad:e6:9d:34:66:2e:10:c8:7d:63: bb:fd:c5:ef:19:bc:ab:8e:8f:0c:81:df:67:36:2f:79:49:cd: 23:00:0f:26:d7:4a:b5:c6:40:98:74:8f:15:dc:5b:d6:95:6e: b7:16:18:a9:03:b0:df:25:c2:43:11:96:ee:aa:0b:ba:7e:5b: 7f:12:6f:03:a7:20:37:79:69:78:03:9e:51:f8:ce:b2:63:80: cc:fa:7e:3c:36:2f:2b:84:45:d0:98:87:76:a0:b7:cb:40:1a: b5:4a:a8:24 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwTfHkVzjOGWqRWzgNNhndrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTMxMDk1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmUxZDE0YmU5NDE3N2YwOWY3NWU3ZmU3N2NjNDhlNjVhYzA1YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BWlBcOC6ajq4xsupyfDk6QdYwS6 sU0kdH+f3S5qwrpstEDLeY8h3/wJWwEiEo16VAivRxDSYPeHIMDtPDXiY0vLXp0k 6WPAmUbknm8nBPyHXDJIReqwxRWhteI0lcLEhZITqoCe3uv0tarWmKzIserogMFT yox1F5Vc8wiBkEXHc5QhgC+fb4C+zYgP8LuSMNOzQ7BCzHXE2G2tzUnAfUBa02Dl WvBN6reRF8MejO85wPZ3JVonAGpSEIfN2QicB1pDHZk9WW9GUSdZpzVRK9s6dDkP EMQNmJ2udCvzV45At/7p8JaCHfCpuXd26QkHgArSbDlrQywI0nHQNXn0EwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCLh0UvpQXfwn3Xn/nfMSOZawFoBMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvSXVIUlMtbEJkX0NmZGVmLWQ4eEk1bHJBV2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQAEL AwcAKg3ZQCAKMA0GCSqGSIb3DQEBCwUAA4IBAQCsaysPykmSBBEjC/UlHyn2XAgw gc9zO7ISblQAnNS1AYZtv6K5cRn8UYx9nTHhcZmGNXBQXXKU+r7Xv1T6t0q4J3DA eWYQreaiHhpDah8/GVM2XibMIaD7CcivZthPt5M/BUR+1af4swhyj/vM89NjK1uT Uf4RfaB2HsA8eQ21WKx2YVXsu+n9BnZlNmbhe8MW1G5v93h7cq3mnTRmLhDIfWO7 /cXvGbyrjo8Mgd9nNi95Sc0jAA8m10q1xkCYdI8V3FvWlW63FhipA7DfJcJDEZbu qgu6flt/Em8DpyA3eWl4A55R+M6yY4DM+n48Ni8rhEXQmId2oLfLQBq1Sqgk -----END CERTIFICATE-----Generated at Mon Feb 2 15:42:02 2026 by rpki-client