This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hH3wou1Auoy9TZjgJcFCYRmzlYY.roa File: hH3wou1Auoy9TZjgJcFCYRmzlYY.roa (raw, json) Hash identifier: naNc6rXVCrhJZeOoetYtLMVzz2KA8ok6nGNKg01Tz4E= Subject key identifier: 84:7D:F0:A2:ED:40:BA:8C:BD:4D:98:E0:25:C1:42:61:19:B3:95:86 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B9E22BB82F78929C365A65C55940A3A80 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hH3wou1Auoy9TZjgJcFCYRmzlYY.roa Signing time: Thu 08 Jan 2026 15:03:54 +0000 ROA not before: Thu 08 Jan 2026 15:03:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203374 IP address blocks: 2a0c:b641:8e0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:22:bb:82:f7:89:29:c3:65:a6:5c:55:94:0a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 8 15:03:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=847df0a2ed40ba8cbd4d98e025c1426119b39586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:cd:36:72:43:f0:be:51:b8:2e:2e:0b:4a: 61:13:4c:4f:f1:49:28:04:57:1d:ea:fd:d5:f8:9a: 02:af:03:dd:39:63:f8:1b:fb:b5:47:09:f3:1a:ca: 8a:84:f1:ae:7a:92:27:6d:78:41:27:4a:a5:f0:d0: c0:96:33:16:96:8d:07:27:05:ce:4d:39:93:50:61: 56:5d:c2:03:fd:c1:1a:db:6a:c1:f0:6b:3d:da:e3: fe:b6:1a:06:9b:d7:57:a6:18:3c:03:97:ea:71:83: 95:03:0c:2e:1d:2b:7c:58:cd:2f:a5:f7:ad:b7:b0: f1:60:3e:44:7b:72:b8:a6:c5:a8:75:94:f5:21:65: d7:9c:f8:ae:bd:4a:9d:70:cd:b9:4d:33:b4:8c:a9: 5d:69:46:d8:49:39:87:7e:00:79:6b:36:a4:b0:2e: 2a:cf:9c:19:db:74:2b:8e:8c:44:41:17:6d:2a:7c: 39:79:4f:9f:7a:92:b8:9b:4d:0d:60:92:54:58:56: 5a:5c:60:4e:02:de:74:1d:6b:b7:ac:78:bb:f2:9c: 7d:10:1c:f3:15:82:93:4c:37:f6:e6:4d:1c:40:53: b2:cd:0e:4a:70:3e:45:28:57:cb:35:10:4d:57:52: 8c:eb:7a:6a:e8:d6:02:36:77:2d:55:35:de:af:2f: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7D:F0:A2:ED:40:BA:8C:BD:4D:98:E0:25:C1:42:61:19:B3:95:86 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hH3wou1Auoy9TZjgJcFCYRmzlYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:8e0::/44 Signature Algorithm: sha256WithRSAEncryption 81:40:50:ba:d2:60:ee:ee:db:db:55:b9:95:b4:cc:f9:86:ce: 3d:00:52:66:40:17:81:d0:37:3a:9c:74:7e:bc:8d:44:d2:56: a4:46:a2:8d:26:08:8d:2c:bc:8c:88:51:46:26:45:fa:a8:fe: b2:a6:d6:aa:10:21:8f:60:90:ce:9e:b8:47:09:32:c9:9b:1e: 8d:21:57:c0:83:f6:da:b1:5e:8e:34:88:5b:e9:8b:40:45:87: 4a:2a:00:d3:64:ba:bd:f4:bc:99:cf:ad:9d:9e:15:fe:01:73: 0e:43:51:3a:9b:bf:57:64:30:40:c3:29:d8:2e:65:2f:b5:66: eb:33:76:e9:66:61:59:28:46:30:09:c9:99:34:a3:1a:e5:05: ff:60:e4:73:3f:4c:d2:fb:0b:64:30:ba:20:a2:dc:02:71:e0: 99:6f:a9:5c:4d:a7:be:b3:42:46:5c:ff:41:7d:46:6f:53:0e: dc:c4:99:3d:12:c5:33:42:cd:4a:28:af:30:48:c7:0d:e5:28: c0:d2:70:4e:94:ca:35:33:d1:b2:e5:8f:32:0c:1f:a9:98:08: 6b:b1:e1:10:89:31:ce:3f:0d:55:f6:9a:0e:b5:58:0e:d2:9f: 80:a8:82:7d:99:c5:b5:c7:f6:ce:e6:32:73:76:be:66:fb:cc: c1:e7:c7:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZueIruC94kpw2WmXFWUCjqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTA4MTUwMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDdkZjBhMmVkNDBiYThjYmQ0ZDk4ZTAyNWMxNDI2MTE5YjM5NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtjNNnJD8L5RuC4uC0phE0xP8Uko BFcd6v3V+JoCrwPdOWP4G/u1RwnzGsqKhPGuepInbXhBJ0ql8NDAljMWlo0HJwXO TTmTUGFWXcID/cEa22rB8Gs92uP+thoGm9dXphg8A5fqcYOVAwwuHSt8WM0vpfet t7DxYD5Ee3K4psWodZT1IWXXnPiuvUqdcM25TTO0jKldaUbYSTmHfgB5azaksC4q z5wZ23QrjoxEQRdtKnw5eU+fepK4m00NYJJUWFZaXGBOAt50HWu3rHi78px9EBzz FYKTTDf25k0cQFOyzQ5KcD5FKFfLNRBNV1KM63pq6NYCNnctVTXery+zSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIR98KLtQLqMvU2Y4CXBQmEZs5WGMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvaEgzd291MUF1b3k5VFpqZ0pjRkNZUm16bFlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQjg MA0GCSqGSIb3DQEBCwUAA4IBAQCBQFC60mDu7tvbVbmVtMz5hs49AFJmQBeB0Dc6 nHR+vI1E0lakRqKNJgiNLLyMiFFGJkX6qP6yptaqECGPYJDOnrhHCTLJmx6NIVfA g/basV6ONIhb6YtARYdKKgDTZLq99LyZz62dnhX+AXMOQ1E6m79XZDBAwynYLmUv tWbrM3bpZmFZKEYwCcmZNKMa5QX/YORzP0zS+wtkMLogotwCceCZb6lcTae+s0JG XP9BfUZvUw7cxJk9EsUzQs1KKK8wSMcN5SjA0nBOlMo1M9Gy5Y8yDB+pmAhrseEQ iTHOPw1V9poOtVgO0p+AqIJ9mcW1x/bO5jJzdr5m+8zB58d3 -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:20 2026 by rpki-client