This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/PkHhyk16iXPkVs8JIxspom8O8uI.roa File: PkHhyk16iXPkVs8JIxspom8O8uI.roa (raw, json) Hash identifier: nOzNMNHq9+YfHt2144BtLwNcyjKCG7zDH+CDk93kqV8= Subject key identifier: 3E:41:E1:CA:4D:7A:89:73:E4:56:CF:09:23:1B:29:A2:6F:0E:F2:E2 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CB0F4090EBCC349187B4E2189589 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/PkHhyk16iXPkVs8JIxspom8O8uI.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 2a0f:f400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cb:0f:40:90:eb:cc:34:91:87:b4:e2:18:95:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e41e1ca4d7a8973e456cf09231b29a26f0ef2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:a9:c0:ad:09:83:27:20:e0:f0:4e:92:f6: 7b:cc:a3:44:a8:af:84:30:7f:0f:fc:e8:6a:82:57: e9:96:91:21:ab:64:b1:66:a6:1a:89:2f:eb:40:7b: fc:ca:de:15:39:60:01:ae:80:5a:c2:09:0c:63:99: 0e:16:67:c5:a5:99:eb:32:8c:6d:b9:cc:70:82:2a: d9:b7:3d:ba:46:5b:8f:c9:f8:34:33:40:51:49:e6: 18:63:40:42:14:c9:39:95:03:ed:15:b2:5f:28:60: 9b:1a:08:93:19:79:fd:ab:0a:97:a5:8d:c7:61:8c: 02:22:77:79:d5:78:c3:9e:04:b8:24:35:19:ed:e2: 0d:b0:cd:04:2d:04:91:bc:f8:89:6f:8d:91:f0:8e: 27:86:81:b6:e4:57:fb:b4:15:16:bd:7e:99:af:69: 21:b6:5b:77:45:00:84:53:39:e6:3b:4a:22:d1:e7: f2:cc:32:d4:6d:59:35:52:d1:7b:30:2e:b0:e8:51: fa:e8:be:27:48:cb:3f:aa:66:e5:0b:6d:68:64:39: 10:f2:d3:24:93:1e:62:9d:a7:b8:55:6b:03:a3:37: e8:fe:71:f4:41:f9:bd:04:5e:d1:6f:06:b0:09:52: 9b:ed:d3:ba:cb:62:e6:38:ff:9c:b4:57:c9:e4:09: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:41:E1:CA:4D:7A:89:73:E4:56:CF:09:23:1B:29:A2:6F:0E:F2:E2 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/PkHhyk16iXPkVs8JIxspom8O8uI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:f400::/29 Signature Algorithm: sha256WithRSAEncryption 63:f1:d2:22:79:ef:d7:b9:65:0e:d4:4d:91:ba:20:9a:ba:da: 37:51:99:09:91:a9:cb:e8:d0:74:ed:cf:70:e5:a4:17:96:b5: 92:da:95:3a:7e:e8:84:08:e0:7e:b5:e2:e7:0e:40:d1:6e:33: a0:0a:1d:24:d9:03:20:cc:8f:f8:7b:09:32:ad:fd:c6:d5:c6: 8a:9a:c7:04:9c:46:de:4f:75:cd:73:2d:f6:7b:e2:af:87:82: d0:2e:74:11:79:2a:9c:16:92:7e:7f:7c:e2:57:ef:07:6d:d1: 4f:e8:03:9f:60:5a:4b:b9:bc:d4:bd:d5:14:dd:d0:64:4c:94: 9b:25:95:fc:38:b2:aa:af:eb:60:fb:71:63:f9:99:75:8f:26: eb:ca:e2:df:df:cd:29:5b:02:1c:6b:12:c6:8c:ea:8b:ef:0a: e1:74:5a:46:ed:a5:0b:45:b9:f4:49:1e:28:2e:1f:37:a9:db: ce:29:57:bc:54:bb:3b:25:7d:9d:7c:b7:ac:f5:fe:86:7a:6e: b5:1c:8b:f8:fe:5e:bf:c0:6c:1b:a9:53:28:d3:a0:82:6f:88: 5d:90:11:29:2b:13:a1:0e:05:0b:ec:83:d8:c7:4d:19:06:a5: 2c:8c:ae:3a:0d:99:10:ac:7e:34:5e:08:9d:bf:41:0d:f3:8f: d8:e1:2a:00 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hMsPQJDrzDSRh7TiGJWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTQxZTFjYTRkN2E4OTczZTQ1NmNmMDkyMzFiMjlhMjZmMGVmMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V6pwK0Jgycg4PBOkvZ7zKNEqK+E MH8P/OhqglfplpEhq2SxZqYaiS/rQHv8yt4VOWABroBawgkMY5kOFmfFpZnrMoxt ucxwgirZtz26RluPyfg0M0BRSeYYY0BCFMk5lQPtFbJfKGCbGgiTGXn9qwqXpY3H YYwCInd51XjDngS4JDUZ7eINsM0ELQSRvPiJb42R8I4nhoG25Ff7tBUWvX6Zr2kh tlt3RQCEUznmO0oi0efyzDLUbVk1UtF7MC6w6FH66L4nSMs/qmblC21oZDkQ8tMk kx5inae4VWsDozfo/nH0Qfm9BF7RbwawCVKb7dO6y2LmOP+ctFfJ5AnJjQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD5B4cpNeolz5FbPCSMbKaJvDvLiMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvUGtIaHlrMTZpWFBrVnM4Skl4c3BvbThPOHVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/0ADAN BgkqhkiG9w0BAQsFAAOCAQEAY/HSInnv17llDtRNkbogmrraN1GZCZGpy+jQdO3P cOWkF5a1ktqVOn7ohAjgfrXi5w5A0W4zoAodJNkDIMyP+HsJMq39xtXGiprHBJxG 3k91zXMt9nvir4eC0C50EXkqnBaSfn984lfvB23RT+gDn2BaS7m81L3VFN3QZEyU myWV/Diyqq/rYPtxY/mZdY8m68ri39/NKVsCHGsSxozqi+8K4XRaRu2lC0W59Eke KC4fN6nbzilXvFS7OyV9nXy3rPX+hnputRyL+P5ev8BsG6lTKNOggm+IXZARKSsT oQ4FC+yD2MdNGQalLIyuOg2ZEKx+NF4Inb9BDfOP2OEqAA== -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:51 2026 by rpki-client