This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa File: RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa (raw, json) Hash identifier: YHl21kGfBScrHLWB8nH7LfwSKrFDkFd1MvbGkxb2nBQ= Subject key identifier: 44:11:34:98:0E:07:49:C1:3E:94:F2:4C:A9:34:E6:61:CB:03:D8:7C Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b Certificate serial: 019B7AC8D9D6C703C0C252837F225F0A5CF9 Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216271 IP address blocks: 2a14:7480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d9:d6:c7:03:c0:c2:52:83:7f:22:5f:0a:5c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=441134980e0749c13e94f24ca934e661cb03d87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:3d:d9:41:2f:5d:6c:9f:eb:35:2c:51:01: 43:07:33:0c:3e:54:8f:0d:ff:7a:21:30:a5:2e:00: 3b:45:2e:94:70:26:87:05:48:e5:bb:cb:22:37:9e: a6:3c:d2:ab:3e:bc:da:5c:a7:78:40:97:a6:9c:34: 1b:3d:7a:53:9b:98:ee:65:c5:b4:a2:2d:cc:6f:98: fe:9a:db:78:3e:bb:81:e6:30:f6:aa:f9:0b:1f:70: 89:f4:7d:ff:52:41:db:2e:88:19:4e:3d:49:30:1e: 05:34:ec:ad:d2:2c:18:ef:40:56:ca:53:69:35:be: fe:3d:cb:b1:d7:cb:11:e9:1d:ea:bb:a7:5c:b0:e9: df:a9:ab:eb:f8:ec:5b:4c:c6:a1:c4:e9:dc:4f:44: 74:57:07:1f:4f:aa:7e:92:76:53:9a:7e:03:e2:43: 97:fc:7a:77:68:00:6a:03:33:01:4b:6f:04:cc:05: 87:f9:28:68:70:d6:1e:6e:27:a4:25:01:ad:c5:3b: ee:16:35:f2:8b:d7:cd:34:35:30:69:85:df:be:9d: 34:0b:e8:57:ec:58:54:06:26:34:4f:6f:cb:70:a1: f3:d5:a7:63:d4:87:c6:63:16:43:39:b4:b8:1b:d0: 48:92:e4:13:71:9f:b4:21:04:d8:0a:57:bc:6e:40: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:11:34:98:0E:07:49:C1:3E:94:F2:4C:A9:34:E6:61:CB:03:D8:7C X509v3 Authority Key Identifier: keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7480::/29 Signature Algorithm: sha256WithRSAEncryption 17:7a:7f:c7:ec:41:09:c6:1a:df:cb:d5:9c:f4:bb:34:65:f4: ce:6f:32:3f:e7:47:b3:4e:ef:73:92:21:69:85:00:34:58:6f: 16:88:0c:f1:1e:5c:aa:44:b9:ae:fe:f7:d8:6d:04:57:27:e6: cf:d3:7c:63:ab:c6:ce:e9:f0:78:21:11:f3:0d:7c:1b:ec:f6: 75:8c:c7:30:98:ac:70:d2:ed:8a:dc:5c:3d:0d:66:e9:4e:f0: 51:76:c6:9c:3e:52:54:63:4c:ef:4a:0e:55:09:6d:07:8b:85: ad:49:06:ca:78:88:7b:a6:81:b4:fa:61:53:64:44:3f:ca:30: 0d:7d:04:80:29:ae:fe:27:a2:18:c4:85:38:27:58:9d:5b:10: d0:57:3a:b5:9b:2f:a0:7a:d0:d2:74:04:66:6f:a1:c8:3f:02: f0:62:8a:2b:1a:8e:f7:73:ea:18:4f:f8:e0:0d:2b:73:a4:d1: 2e:f4:c8:82:9a:74:f5:33:42:17:db:0d:0e:56:c2:8d:7e:ac: 80:fa:74:43:9b:fe:8c:d9:61:9f:27:0c:99:3e:31:d9:e6:ed: 78:49:19:83:b9:6e:b5:e9:42:b4:17:f7:80:7a:a7:45:8b:50: 80:b7:6e:8a:65:59:a8:f9:b2:e5:90:c9:f7:94:96:cb:79:5d: c8:d2:c7:ff -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yNnWxwPAwlKDfyJfClz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTQzOTVhYzgyMmRmZTAxMTY1MjE2Yzc3ODFmZmQ2MWRi MjhkNWIwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDExMzQ5ODBlMDc0OWMxM2U5NGYyNGNhOTM0ZTY2MWNiMDNkODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoes92UEvXWyf6zUsUQFDBzMMPlSP Df96ITClLgA7RS6UcCaHBUjlu8siN56mPNKrPrzaXKd4QJemnDQbPXpTm5juZcW0 oi3Mb5j+mtt4PruB5jD2qvkLH3CJ9H3/UkHbLogZTj1JMB4FNOyt0iwY70BWylNp Nb7+Pcux18sR6R3qu6dcsOnfqavr+OxbTMahxOncT0R0VwcfT6p+knZTmn4D4kOX /Hp3aABqAzMBS28EzAWH+ShocNYebiekJQGtxTvuFjXyi9fNNDUwaYXfvp00C+hX 7FhUBiY0T2/LcKHz1adj1IfGYxZDObS4G9BIkuQTcZ+0IQTYCle8bkBrCwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEQRNJgOB0nBPpTyTKk05mHLA9h8MB8GA1UdIwQY MBaAFIeUOVrIIt/gEWUhbHeB/9Ydso1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEt MzUzZjk4MTJiMWRiLzEvUkJFMG1BNEhTY0UtbFBKTXFUVG1ZY3NEMkh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEtMzUzZjk4MTJiMWRi LzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhR0gDAN BgkqhkiG9w0BAQsFAAOCAQEAF3p/x+xBCcYa38vVnPS7NGX0zm8yP+dHs07vc5Ih aYUANFhvFogM8R5cqkS5rv732G0EVyfmz9N8Y6vGzunweCER8w18G+z2dYzHMJis cNLtitxcPQ1m6U7wUXbGnD5SVGNM70oOVQltB4uFrUkGyniIe6aBtPphU2REP8ow DX0EgCmu/ieiGMSFOCdYnVsQ0Fc6tZsvoHrQ0nQEZm+hyD8C8GKKKxqO93PqGE/4 4A0rc6TRLvTIgpp09TNCF9sNDlbCjX6sgPp0Q5v+jNlhnycMmT4x2ebteEkZg7lu telCtBf3gHqnRYtQgLduimVZqPmy5ZDJ95SWy3ldyNLH/w== -----END CERTIFICATE-----Generated at Mon Jan 26 14:43:35 2026 by rpki-client