This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa File: rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa (raw, json) Hash identifier: DObC6epbAV4/cO0FstWBi+3TiGPf6vSxTLwzr5V99So= Subject key identifier: AE:13:8B:23:41:9C:9A:21:FE:B7:B5:47:72:CF:47:50:D3:88:66:EF Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71 Certificate serial: 019B7EA726EE8E2489E5815005AAEAFC74C5 Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199392 IP address blocks: 2001:67c:c28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:26:ee:8e:24:89:e5:81:50:05:aa:ea:fc:74:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae138b23419c9a21feb7b54772cf4750d38866ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:22:b8:43:00:60:46:a7:a0:eb:bd:61:2e: 81:16:f0:47:ba:27:0b:a9:12:e2:2d:db:40:13:6a: 8f:9a:70:57:2c:55:68:4a:c8:c6:22:4b:f9:f1:16: e6:a5:40:52:d9:e8:ec:09:7a:2c:d1:06:78:89:5c: 66:a5:ed:ee:f4:55:2e:d0:1c:31:ef:b6:84:54:bb: aa:81:3c:8f:4b:d2:b0:99:91:6d:b3:65:23:a7:b9: b9:fe:04:ab:6f:f2:f7:84:de:8a:c4:ec:a6:27:9f: 73:d3:6d:44:50:64:49:68:63:bb:71:b3:16:11:af: c5:dc:e9:2c:32:c7:03:af:85:9b:fa:8a:b0:93:9b: 2d:d1:1f:6a:be:94:d9:11:f3:79:af:58:7a:5b:67: b0:de:87:f1:09:72:f9:53:5f:87:24:38:00:fe:c3: b9:10:5b:5e:df:12:01:b2:0b:72:b2:20:10:f1:4f: 70:a3:dc:8c:b0:d4:20:de:02:99:56:a4:60:59:17: 67:4e:ff:4f:5e:43:2e:2b:d9:32:6f:4d:0c:db:7e: 36:6e:75:06:16:95:f6:af:14:1e:fc:06:8f:12:a9: 2d:50:6a:a9:00:b0:bf:a6:c3:e2:d4:28:34:27:cc: c2:7e:ef:94:63:7b:22:86:34:ec:78:4e:3b:4c:98: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:8B:23:41:9C:9A:21:FE:B7:B5:47:72:CF:47:50:D3:88:66:EF X509v3 Authority Key Identifier: keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c28::/48 Signature Algorithm: sha256WithRSAEncryption 13:7d:e9:af:4b:25:7b:aa:9f:6c:79:e4:d4:2b:38:39:c2:44: 41:b7:10:07:9b:5b:c7:ee:56:63:3c:6b:c2:3c:2c:9b:10:e4: 1f:f1:ba:94:8b:9e:bd:d2:e9:3c:ed:fc:f9:1e:65:3f:9c:c9: a7:47:e4:98:17:49:48:b1:17:70:90:5e:84:4a:a9:12:82:22: 40:50:e1:86:c0:e0:3d:45:91:be:54:06:d7:c9:6b:d6:e7:74: 7d:1f:d1:54:7a:70:1a:ae:e0:22:4f:04:1a:9d:2b:43:26:90: 02:7c:e8:25:03:5c:08:3d:09:48:8b:a9:e8:a2:f5:34:a1:65: c0:6d:93:f8:98:20:2d:b1:8a:ca:7f:b6:51:07:01:91:53:04: db:84:b5:46:32:66:37:b8:16:3e:b0:5d:d5:37:79:97:c2:ef: 90:ed:92:2d:8e:9c:8a:9d:75:c8:ce:eb:97:74:ce:43:dc:0d: 17:28:db:9b:d0:ba:97:7f:a1:8c:81:d6:df:1a:da:99:05:11: f6:bb:ee:ec:ab:5c:ee:23:34:54:3a:e5:6a:22:34:02:33:8e: 7f:a1:5b:d4:f4:d1:19:57:ad:81:9a:34:cf:f1:2b:07:14:f9: 25:e2:a9:2c:77:d1:84:2c:96:52:fa:cb:5c:2d:88:e8:bb:a3: e1:3c:71:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pybujiSJ5YFQBarq/HTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzQwMTg3YzBmY2U1ZmZmMDM3Y2VkOWE2NTA4MjQzZTQw NGRhNzEwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTEzOGIyMzQxOWM5YTIxZmViN2I1NDc3MmNmNDc1MGQzODg2NmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu8iuEMAYEanoOu9YS6BFvBHuicL qRLiLdtAE2qPmnBXLFVoSsjGIkv58RbmpUBS2ejsCXos0QZ4iVxmpe3u9FUu0Bwx 77aEVLuqgTyPS9KwmZFts2Ujp7m5/gSrb/L3hN6KxOymJ59z021EUGRJaGO7cbMW Ea/F3OksMscDr4Wb+oqwk5st0R9qvpTZEfN5r1h6W2ew3ofxCXL5U1+HJDgA/sO5 EFte3xIBsgtysiAQ8U9wo9yMsNQg3gKZVqRgWRdnTv9PXkMuK9kyb00M2342bnUG FpX2rxQe/AaPEqktUGqpALC/psPi1Cg0J8zCfu+UY3sihjTseE47TJgcwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK4TiyNBnJoh/re1R3LPR1DTiGbvMB8GA1UdIwQY MBaAFE40AYfA/OX/8DfO2aZQgkPkBNpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85NjFmNjQtODM3Yy00ODExLWFhNDIt NThmMjE1YmNhNTNhLzEvcmhPTEkwR2NtaUgtdDdWSGNzOUhVTk9JWnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85NjFmNjQtODM3Yy00ODExLWFhNDItNThmMjE1YmNhNTNh LzEvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAwo MA0GCSqGSIb3DQEBCwUAA4IBAQATfemvSyV7qp9seeTUKzg5wkRBtxAHm1vH7lZj PGvCPCybEOQf8bqUi5690uk87fz5HmU/nMmnR+SYF0lIsRdwkF6ESqkSgiJAUOGG wOA9RZG+VAbXyWvW53R9H9FUenAaruAiTwQanStDJpACfOglA1wIPQlIi6noovU0 oWXAbZP4mCAtsYrKf7ZRBwGRUwTbhLVGMmY3uBY+sF3VN3mXwu+Q7ZItjpyKnXXI zuuXdM5D3A0XKNub0LqXf6GMgdbfGtqZBRH2u+7sq1zuIzRUOuVqIjQCM45/oVvU 9NEZV62BmjTP8SsHFPkl4qksd9GELJZS+stcLYjou6PhPHF9 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:34 2026 by rpki-client