This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/hZx6c939vE298FUQwwkrOAv6B6Q.roa File: hZx6c939vE298FUQwwkrOAv6B6Q.roa (raw, json) Hash identifier: LSd/7r0KJ4VgUY7Gw3QL0WCTt5PCLASbfDO+3RvzeGc= Subject key identifier: 85:9C:7A:73:DD:FD:BC:4D:BD:F0:55:10:C3:09:2B:38:0B:FA:07:A4 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BB287FA2FA4F94B16535F50449CA3154B Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/hZx6c939vE298FUQwwkrOAv6B6Q.roa Signing time: Mon 12 Jan 2026 14:06:54 +0000 ROA not before: Mon 12 Jan 2026 14:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210457 IP address blocks: 2a0d:d940:400::/40 maxlen: 40 2a0d:d940:90a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:87:fa:2f:a4:f9:4b:16:53:5f:50:44:9c:a3:15:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 12 14:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=859c7a73ddfdbc4dbdf05510c3092b380bfa07a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:ba:e1:f2:a9:12:c3:d8:9f:dc:98:21:39: 83:0b:7f:4f:ea:88:98:5e:e7:1b:29:eb:1b:a3:6a: b3:cb:81:15:99:a2:06:3d:ac:f1:5f:94:52:fb:f7: e8:85:02:6d:77:d5:32:14:d3:34:ce:1a:b2:5b:38: 53:73:a8:bb:fb:ca:23:ca:67:c6:80:4c:64:f4:ec: a2:cd:e0:05:21:df:64:11:4f:0b:59:5d:8f:94:1d: 48:8c:1c:4a:0f:79:f9:9f:f4:c3:bc:9e:97:9c:f8: aa:da:06:56:6c:d0:0f:7f:a7:b4:01:ac:88:c4:48: 52:c5:19:c1:21:23:2a:ba:75:b8:50:5d:d0:a4:30: 47:32:7c:66:71:a6:98:39:13:01:a2:92:06:29:75: 23:07:d9:be:4e:11:bf:77:a0:24:af:06:47:11:03: c2:56:fd:e5:9b:06:28:f0:fb:ab:00:85:bf:7e:d2: 9f:ce:6c:4d:36:14:7c:ff:1c:96:7e:1d:05:6f:7a: 5c:74:b1:8b:b2:56:05:a8:53:a8:39:7d:04:80:5e: e0:ce:38:90:39:d9:7b:b7:c1:c0:ba:53:59:eb:f7: c8:69:29:41:78:46:50:9d:b8:d4:21:db:70:59:ea: d5:02:47:c8:cc:61:3f:9a:ec:a4:aa:aa:46:f4:81: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:7A:73:DD:FD:BC:4D:BD:F0:55:10:C3:09:2B:38:0B:FA:07:A4 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/hZx6c939vE298FUQwwkrOAv6B6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:400::/40 2a0d:d940:90a6::/48 Signature Algorithm: sha256WithRSAEncryption e5:9b:49:a7:e5:c1:f5:66:61:f4:8f:45:4a:ae:dd:66:0c:cf: 39:f1:09:e0:96:43:4b:be:0a:ed:38:8a:44:6d:9c:66:7c:19: ac:99:ec:83:50:e2:cc:3c:6c:39:de:cd:cb:c0:05:66:6e:a8: c5:18:25:50:f9:59:48:a6:21:83:9c:d8:b9:24:41:5f:f0:6e: c3:54:a5:fb:c2:6d:53:fe:f8:48:04:5d:17:b3:3b:79:76:db: ba:58:d7:e4:8a:fc:c0:d5:66:92:dd:86:8b:40:1a:45:fc:95: 9e:03:b9:b2:eb:52:1d:1a:72:e7:8b:bf:71:46:ae:57:bc:7d: e9:04:8a:42:f3:d9:e8:e1:10:20:f6:7f:dd:77:74:27:ac:7d: 82:cd:f2:2c:08:09:8d:4c:29:37:19:d3:51:dc:38:05:df:91: fb:65:b5:66:fa:a8:c9:76:10:ae:53:a1:8d:a9:f2:be:7c:36: 35:1f:c3:07:09:99:21:cc:78:d0:a8:09:05:aa:12:8c:ca:bb: 15:de:9f:a8:ac:2a:4f:a0:39:e9:2d:03:fe:e2:59:b8:32:72: 5e:f7:e1:43:5f:ae:9d:84:88:92:c0:db:27:49:06:80:3e:90: 88:67:a5:9c:10:06:77:b0:a4:3b:48:a9:d0:31:8b:a7:0b:d6: d6:31:cb:bb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZuyh/ovpPlLFlNfUEScoxVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTEyMTQwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTljN2E3M2RkZmRiYzRkYmRmMDU1MTBjMzA5MmIzODBiZmEwN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OG64fKpEsPYn9yYITmDC39P6oiY XucbKesbo2qzy4EVmaIGPazxX5RS+/fohQJtd9UyFNM0zhqyWzhTc6i7+8ojymfG gExk9OyizeAFId9kEU8LWV2PlB1IjBxKD3n5n/TDvJ6XnPiq2gZWbNAPf6e0AayI xEhSxRnBISMqunW4UF3QpDBHMnxmcaaYORMBopIGKXUjB9m+ThG/d6AkrwZHEQPC Vv3lmwYo8PurAIW/ftKfzmxNNhR8/xyWfh0Fb3pcdLGLslYFqFOoOX0EgF7gzjiQ Odl7t8HAulNZ6/fIaSlBeEZQnbjUIdtwWerVAkfIzGE/muykqqpG9IGAtQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFIWcenPd/bxNvfBVEMMJKzgL+gekMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvaFp4NmM5Mzl2RTI5OEZVUXd3a3JPQXY2QjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg3ZQAQD BwAqDdlAkKYwDQYJKoZIhvcNAQELBQADggEBAOWbSaflwfVmYfSPRUqu3WYMzznx CeCWQ0u+Cu04ikRtnGZ8GayZ7INQ4sw8bDnezcvABWZuqMUYJVD5WUimIYOc2Lkk QV/wbsNUpfvCbVP++EgEXRezO3l227pY1+SK/MDVZpLdhotAGkX8lZ4DubLrUh0a cueLv3FGrle8fekEikLz2ejhECD2f913dCesfYLN8iwICY1MKTcZ01HcOAXfkftl tWb6qMl2EK5ToY2p8r58NjUfwwcJmSHMeNCoCQWqEozKuxXen6isKk+gOektA/7i Wbgycl734UNfrp2EiJLA2ydJBoA+kIhnpZwQBnewpDtIqdAxi6cL1tYxy7s= -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:31 2026 by rpki-client