This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa File: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (raw, json) Hash identifier: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA= Subject key identifier: 85:87:E6:38:90:00:8B:A5:A4:E7:C3:F4:04:C4:1D:83:4F:84:4C:81 Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Certificate serial: 019B7B3685A59678FC89FCF1C869A7A7A09C Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 2a00:d220::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:85:a5:96:78:fc:89:fc:f1:c8:69:a7:a7:a0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8587e63890008ba5a4e7c3f404c41d834f844c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:f2:8d:b3:7a:de:34:88:dc:d9:5e:07:a1: 82:df:b3:6a:30:9e:a9:17:4f:7b:e9:04:de:b6:91: 3f:dd:d6:85:d5:75:ff:a2:f9:3a:90:6d:31:b5:d2: 26:75:98:25:aa:ad:1a:cf:2c:46:23:85:1d:51:19: 07:cc:d9:88:94:f5:10:6f:32:1c:ef:f3:f6:c5:e7: a1:f3:2f:e1:83:90:17:cc:6b:d6:dd:58:9d:4f:c1: 5d:81:03:2d:6b:e3:b9:be:3d:39:48:00:63:4b:99: 1f:79:9b:a1:fd:54:35:92:b4:0c:f1:27:83:2b:eb: dd:34:cc:36:ae:a4:5e:ba:43:1b:05:bc:05:b3:41: 7d:ea:a4:c5:c7:73:47:5f:26:88:cd:62:93:bb:12: cd:51:92:b3:c4:3f:67:75:a9:20:50:0a:82:bb:72: 06:9a:54:a8:56:3e:be:4f:38:f7:da:e0:ae:6c:ca: 41:d2:c4:a0:a9:7e:51:66:62:b6:f0:c4:b2:23:67: 2c:81:da:9b:bc:bb:41:8b:32:d3:96:04:ba:93:bd: c1:28:f1:d1:c0:9b:02:98:13:df:54:26:d7:39:e9: 4d:59:bc:6e:b7:79:50:28:2a:03:c3:19:53:24:58: b0:de:16:17:f5:c9:31:73:59:1e:b2:5a:09:f9:4e: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:E6:38:90:00:8B:A5:A4:E7:C3:F4:04:C4:1D:83:4F:84:4C:81 X509v3 Authority Key Identifier: keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:d220::/36 Signature Algorithm: sha256WithRSAEncryption 4c:08:cf:9c:0d:e9:e7:9b:c5:7b:2d:db:f5:42:f3:24:f8:73: 5b:e0:a9:73:4c:12:9d:fa:79:e0:9f:7e:b5:54:f8:dc:90:98: e4:9c:62:03:e0:b8:c6:8d:2c:63:a4:5f:1e:da:d8:61:2b:ac: 1e:de:e5:15:75:bb:f6:59:54:08:13:1c:fa:99:b2:4c:db:ae: 44:f3:e2:ed:7b:3a:96:17:55:95:63:f3:73:f0:ae:07:11:bd: ec:bd:a3:af:38:09:4e:f3:3f:2c:17:76:d7:6b:30:fc:c1:87: 48:24:74:04:09:42:e9:94:c3:cc:2f:50:59:86:ef:90:a9:8d: 44:e6:f9:51:37:1a:32:e2:fa:09:f8:6e:c2:42:84:96:7a:16: 2c:f1:0b:ba:75:8d:bb:bd:68:64:02:a5:19:bc:99:85:cb:9b: 1d:84:72:cf:20:9c:71:4f:7c:f1:fb:c4:cf:18:23:ae:75:0d: b2:35:ee:11:99:2d:ee:e3:cb:b9:6a:57:01:8e:69:43:d3:03: 64:1a:44:bd:4a:94:37:d2:59:0a:5e:b9:fe:95:dd:9d:8e:05: fd:c6:ee:dd:7f:20:f1:44:98:e4:e8:27:cc:ad:e7:4a:ae:23: 33:87:89:66:9b:70:1a:e2:f1:55:b6:c4:37:2b:c1:27:be:88: e7:82:29:08 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NoWllnj8ifzxyGmnp6CcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz YjA0OGQwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTg3ZTYzODkwMDA4YmE1YTRlN2MzZjQwNGM0MWQ4MzRmODQ0YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLHyjbN63jSI3NleB6GC37NqMJ6p F0976QTetpE/3daF1XX/ovk6kG0xtdImdZglqq0azyxGI4UdURkHzNmIlPUQbzIc 7/P2xeeh8y/hg5AXzGvW3VidT8FdgQMta+O5vj05SABjS5kfeZuh/VQ1krQM8SeD K+vdNMw2rqReukMbBbwFs0F96qTFx3NHXyaIzWKTuxLNUZKzxD9ndakgUAqCu3IG mlSoVj6+Tzj32uCubMpB0sSgqX5RZmK28MSyI2csgdqbvLtBizLTlgS6k73BKPHR wJsCmBPfVCbXOelNWbxut3lQKCoDwxlTJFiw3hYX9ckxc1kesloJ+U4SOQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIWH5jiQAIulpOfD9ATEHYNPhEyBMB8GA1UdIwQY MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt MmYzMDI1MmViNDQyLzEvaFlmbU9KQUFpNldrNThQMEJNUWRnMC1FVElFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgDSIAAw DQYJKoZIhvcNAQELBQADggEBAEwIz5wN6eebxXst2/VC8yT4c1vgqXNMEp36eeCf frVU+NyQmOScYgPguMaNLGOkXx7a2GErrB7e5RV1u/ZZVAgTHPqZskzbrkTz4u17 OpYXVZVj83PwrgcRvey9o684CU7zPywXdtdrMPzBh0gkdAQJQumUw8wvUFmG75Cp jUTm+VE3GjLi+gn4bsJChJZ6FizxC7p1jbu9aGQCpRm8mYXLmx2Ecs8gnHFPfPH7 xM8YI651DbI17hGZLe7jy7lqVwGOaUPTA2QaRL1KlDfSWQpeuf6V3Z2OBf3G7t1/ IPFEmOToJ8yt50quIzOHiWabcBri8VW2xDcrwSe+iOeCKQg= -----END CERTIFICATE-----Generated at Mon Jan 26 23:45:00 2026 by rpki-client