This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/Hb9UlX9KVGZxmR6w1wa7X6280Hg.roa File: Hb9UlX9KVGZxmR6w1wa7X6280Hg.roa (raw, json) Hash identifier: eJngs+eYBiM+ACw2FG9Cl8st7kkCMoDNBZElgF4gJ2s= Subject key identifier: 1D:BF:54:95:7F:4A:54:66:71:99:1E:B0:D7:06:BB:5F:AD:BC:D0:78 Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B7E384C8D665FEF82C4A93756CF061A1B Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/Hb9UlX9KVGZxmR6w1wa7X6280Hg.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210595 IP address blocks: 2a01:e08::/32 maxlen: 32 2a01:e08:100::/44 maxlen: 44 2a01:e08:500::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4c:8d:66:5f:ef:82:c4:a9:37:56:cf:06:1a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dbf54957f4a546671991eb0d706bb5fadbcd078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:95:62:5f:75:bd:25:e5:d8:bf:0b:10:90: af:b3:b4:2f:2d:da:b6:4f:9d:a5:b8:e1:55:b1:14: 16:8f:8d:f2:ee:30:a7:96:e0:a2:f6:d8:21:c0:71: 8c:34:0c:76:81:d2:09:9f:c4:31:82:77:3c:7f:88: 98:07:e3:03:00:65:01:80:55:46:5c:dc:4a:0b:d4: 2f:f8:00:c9:fd:3a:5c:88:eb:68:b9:9d:5f:e8:ad: 72:dc:bf:4d:2b:93:75:61:30:48:5c:72:0c:63:2b: 6c:5a:8d:f0:57:11:e2:5d:1f:16:00:ca:be:43:d0: d3:b4:1b:a5:07:21:0a:6e:4a:c4:6a:cd:bd:21:73: 9a:8a:d7:1b:40:7c:1f:fa:ec:33:21:14:26:06:71: bb:84:9b:09:20:9a:ce:97:7a:36:f7:0e:5a:6f:f9: 4a:68:45:ab:99:ec:f7:9f:e9:13:52:13:df:28:e1: f8:be:3e:09:4d:bb:9e:b0:6a:4e:94:da:07:c0:81: 52:69:88:31:2b:d4:73:d5:08:1e:8b:95:c2:89:0e: ab:dd:23:4f:15:3c:04:d4:61:4b:a5:ae:35:fd:72: a2:d6:c1:75:01:c2:c6:10:63:d7:48:22:f1:de:96: d4:0c:5a:d9:d1:85:f7:6b:69:ab:a7:86:4e:fc:2e: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BF:54:95:7F:4A:54:66:71:99:1E:B0:D7:06:BB:5F:AD:BC:D0:78 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/Hb9UlX9KVGZxmR6w1wa7X6280Hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e08::/32 Signature Algorithm: sha256WithRSAEncryption 6e:fe:0b:d5:8e:59:3f:16:fb:54:ee:74:a9:22:45:48:8b:ae: 03:fa:b5:0e:ad:28:3e:f6:72:28:b8:03:f2:0e:ff:79:63:1b: d8:60:c7:f8:3d:4c:14:51:58:ac:1c:cb:04:e2:4b:8a:a8:1d: 3f:d1:9c:5a:16:ba:5e:7e:0d:1d:6f:9d:85:c2:7f:ae:4b:42: 83:c6:09:84:e6:96:fb:ec:7a:81:25:63:05:7d:d0:26:e6:4a: e8:07:c5:43:fe:01:bb:00:26:9f:9f:f7:3f:ca:52:af:ea:89: b7:67:22:ce:42:a3:21:e4:40:c0:ae:c4:74:92:1e:7d:d2:cc: 40:92:d1:9c:26:53:e5:f8:7c:6e:6b:e7:73:a4:63:dd:ec:0e: 93:70:a1:bb:f5:e7:d5:30:11:5b:ab:e3:9f:22:82:a6:2e:c4: 9a:fd:e6:b7:51:f2:be:01:e8:51:a6:14:62:14:5c:6f:bb:dc: a2:8b:77:e4:ab:2b:54:4f:0c:c8:e6:cd:a7:73:47:b5:41:85: ad:cf:07:02:44:3d:be:73:d6:35:ff:17:c4:4e:0a:00:85:da: af:fa:b2:9d:62:4e:60:30:da:5b:51:09:96:3a:ed:d5:88:14: 1b:60:0c:60:47:6d:9a:c5:e0:46:da:b4:4f:73:3a:08:43:fb: 05:85:47:ed -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OEyNZl/vgsSpN1bPBhobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGJmNTQ5NTdmNGE1NDY2NzE5OTFlYjBkNzA2YmI1ZmFkYmNkMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLWVYl91vSXl2L8LEJCvs7QvLdq2 T52luOFVsRQWj43y7jCnluCi9tghwHGMNAx2gdIJn8Qxgnc8f4iYB+MDAGUBgFVG XNxKC9Qv+ADJ/TpciOtouZ1f6K1y3L9NK5N1YTBIXHIMYytsWo3wVxHiXR8WAMq+ Q9DTtBulByEKbkrEas29IXOaitcbQHwf+uwzIRQmBnG7hJsJIJrOl3o29w5ab/lK aEWrmez3n+kTUhPfKOH4vj4JTbuesGpOlNoHwIFSaYgxK9Rz1Qgei5XCiQ6r3SNP FTwE1GFLpa41/XKi1sF1AcLGEGPXSCLx3pbUDFrZ0YX3a2mrp4ZO/C7wKwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFB2/VJV/SlRmcZkesNcGu1+tvNB4MB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvSGI5VWxYOUtWR1p4bVI2dzF3YTdYNjI4MEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgEOCDAN BgkqhkiG9w0BAQsFAAOCAQEAbv4L1Y5ZPxb7VO50qSJFSIuuA/q1Dq0oPvZyKLgD 8g7/eWMb2GDH+D1MFFFYrBzLBOJLiqgdP9GcWha6Xn4NHW+dhcJ/rktCg8YJhOaW ++x6gSVjBX3QJuZK6AfFQ/4BuwAmn5/3P8pSr+qJt2cizkKjIeRAwK7EdJIefdLM QJLRnCZT5fh8bmvnc6Rj3ewOk3Chu/Xn1TARW6vjnyKCpi7Emv3mt1HyvgHoUaYU YhRcb7vcoot35KsrVE8MyObNp3NHtUGFrc8HAkQ9vnPWNf8XxE4KAIXar/qynWJO YDDaW1EJljrt1YgUG2AMYEdtmsXgRtq0T3M6CEP7BYVH7Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:46 2026 by rpki-client