This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa File: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (raw, json) Hash identifier: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek= Subject key identifier: 84:B6:D2:D5:86:08:2D:0F:6C:43:10:DE:1A:43:4E:03:53:29:48:9B Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Certificate serial: 019C0942FA710589A978B43A02DDFAEB048D Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa Signing time: Thu 29 Jan 2026 10:18:30 +0000 ROA not before: Thu 29 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a07:8241:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:42:fa:71:05:89:a9:78:b4:3a:02:dd:fa:eb:04:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Validity Not Before: Jan 29 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84b6d2d586082d0f6c4310de1a434e035329489b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:8c:1b:8e:f7:40:00:7c:79:24:8e:90:d1: 65:94:88:15:a0:05:74:70:3e:0f:f9:01:bf:ec:22: 7f:78:d7:5f:28:60:61:5f:ed:1f:50:df:b2:78:b7: b9:64:5e:43:2c:32:7c:2b:55:e6:9f:8e:c8:c6:d6: d5:95:b6:57:90:6a:6a:2a:09:08:62:8c:63:a4:58: 5c:27:3d:38:67:9a:8e:63:8f:1c:16:db:8e:c6:28: bb:d7:2f:c1:c1:99:49:a7:3e:63:75:cd:7a:88:8e: 2c:de:d3:07:60:8d:ff:a0:77:7c:de:4f:6c:ff:6f: 01:ad:74:30:4c:82:a8:4f:33:90:2d:52:e3:e2:62: 9d:23:fb:4b:06:8d:4c:9b:c7:ff:a9:7b:38:a3:50: e5:83:ef:f0:9c:7d:e1:e1:d8:45:b7:ae:1c:92:7d: 35:e2:f3:9c:3b:ae:8b:38:67:e9:08:02:4b:ee:30: 2b:b9:03:b7:d5:29:35:a5:d6:6a:0e:c9:da:26:ef: 89:59:05:d6:9c:d8:af:ad:e4:2f:59:c9:aa:bc:93: d2:bf:ce:13:c4:9e:04:f5:0c:f0:af:06:e3:1c:cd: 2e:e6:3a:68:70:7c:a7:2e:a8:9c:25:44:d0:a1:94: 0d:18:13:c3:7a:78:e3:95:99:69:29:9f:45:e5:b4: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B6:D2:D5:86:08:2D:0F:6C:43:10:DE:1A:43:4E:03:53:29:48:9B X509v3 Authority Key Identifier: keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:8241:2000::/40 Signature Algorithm: sha256WithRSAEncryption 77:6f:d3:e4:9d:9a:49:65:e9:38:cc:41:ea:a5:fb:83:55:1d: 56:4d:17:d6:67:d7:bb:2c:12:d9:17:cb:e5:c4:e2:b7:e7:b9: 49:c8:22:2f:6f:48:a5:b3:c2:d3:f1:5c:3f:1b:0d:c5:2a:b2: de:32:dc:a8:0d:3b:f1:7d:51:97:87:da:d0:38:96:37:b1:78: c9:42:83:d4:be:c7:fb:6f:ff:5f:d1:36:34:79:96:65:25:64: 57:49:e9:18:bc:ef:12:28:a6:c7:78:b3:2a:76:33:88:ed:36: 81:f8:ac:cf:94:b5:1c:0b:e1:44:15:10:cb:40:3b:c4:49:47: dc:16:f6:6c:81:57:f2:a2:95:ab:8d:bb:ae:bb:b2:86:36:52: e0:fb:2d:4e:87:d6:8a:bb:76:27:2e:3e:a8:72:dc:9e:d3:9c: c2:e7:ea:14:af:37:80:97:70:39:cb:90:1f:bd:d0:b2:f9:2e: ed:c7:87:e6:ba:77:b3:2a:df:1a:b7:8b:d6:fb:80:25:62:e1: 21:ff:2e:e2:18:e4:e8:e5:d8:14:c9:1d:c1:bb:02:bc:46:b0: 6d:6e:4e:13:67:43:93:35:b4:49:1f:47:c0:5f:5f:81:f8:06: 5b:f9:24:1a:45:b6:29:d9:4b:07:6d:7a:19:14:88:df:16:78: ce:da:59:3e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZwJQvpxBYmpeLQ6At366wSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy M2IyZTcwHhcNMjYwMTI5MTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGI2ZDJkNTg2MDgyZDBmNmM0MzEwZGUxYTQzNGUwMzUzMjk0ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhKMG473QAB8eSSOkNFllIgVoAV0 cD4P+QG/7CJ/eNdfKGBhX+0fUN+yeLe5ZF5DLDJ8K1Xmn47IxtbVlbZXkGpqKgkI YoxjpFhcJz04Z5qOY48cFtuOxii71y/BwZlJpz5jdc16iI4s3tMHYI3/oHd83k9s /28BrXQwTIKoTzOQLVLj4mKdI/tLBo1Mm8f/qXs4o1Dlg+/wnH3h4dhFt64ckn01 4vOcO66LOGfpCAJL7jAruQO31Sk1pdZqDsnaJu+JWQXWnNivreQvWcmqvJPSv84T xJ4E9QzwrwbjHM0u5jpocHynLqicJUTQoZQNGBPDenjjlZlpKZ9F5bSSYwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIS20tWGCC0PbEMQ3hpDTgNTKUibMB8GA1UdIwQY MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt ZTkwZDk4MzBlOGM1LzEvaExiUzFZWUlMUTlzUXhEZUdrTk9BMU1wU0pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1 LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgeCQSAw DQYJKoZIhvcNAQELBQADggEBAHdv0+Sdmkll6TjMQeql+4NVHVZNF9Zn17ssEtkX y+XE4rfnuUnIIi9vSKWzwtPxXD8bDcUqst4y3KgNO/F9UZeH2tA4ljexeMlCg9S+ x/tv/1/RNjR5lmUlZFdJ6Ri87xIopsd4syp2M4jtNoH4rM+UtRwL4UQVEMtAO8RJ R9wW9myBV/KilauNu667soY2UuD7LU6H1oq7dicuPqhy3J7TnMLn6hSvN4CXcDnL kB+90LL5Lu3Hh+a6d7Mq3xq3i9b7gCVi4SH/LuIY5Ojl2BTJHcG7ArxGsG1uThNn Q5M1tEkfR8BfX4H4Blv5JBpFtinZSwdtehkUiN8WeM7aWT4= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:58 2026 by rpki-client