This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hF7P9WH9I0h_bQgPTxC_9TkYHjM.roa File: hF7P9WH9I0h_bQgPTxC_9TkYHjM.roa (raw, json) Hash identifier: unbDAkjfBK7eFSJmds+Ef6x1RUITm9BLnPJJ3WsIWI0= Subject key identifier: 84:5E:CF:F5:61:FD:23:48:7F:6D:08:0F:4F:10:BF:F5:39:18:1E:33 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D620A18F4AE9BD3F1925E0ED3847F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hF7P9WH9I0h_bQgPTxC_9TkYHjM.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213366 IP address blocks: 2a0e:b107:5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:62:0a:18:f4:ae:9b:d3:f1:92:5e:0e:d3:84:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=845ecff561fd23487f6d080f4f10bff539181e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:ef:f5:f9:a9:5d:d8:b8:1b:4a:e3:73:6d: 51:15:5c:3e:d6:8d:0c:7a:df:8d:25:fd:2d:bf:27: c2:e4:5a:1e:4a:92:9a:ae:04:49:ab:c3:92:d9:fe: b1:73:d4:43:40:13:80:37:c2:b2:66:a4:46:52:90: db:9a:66:5b:e1:04:06:d2:2e:bc:c8:03:1c:39:de: e6:44:47:00:2e:84:06:01:e4:81:4f:94:83:30:2f: 12:3c:cd:ef:89:ad:68:8a:93:96:e5:b0:24:fb:7b: 72:dc:e0:2e:48:1b:98:4f:2d:a4:44:82:96:05:42: f9:62:4c:0b:6d:3d:d6:5b:af:84:09:81:fe:66:a9: c0:d8:e9:2c:86:1c:85:43:4d:ff:68:da:2b:9e:0c: 51:06:fb:46:f4:fd:0a:bc:18:2c:88:8c:ee:7e:82: b1:49:c1:90:43:3a:0b:8e:4b:42:46:23:79:1b:0e: 17:22:ce:27:64:91:ba:07:ec:01:ec:c6:6c:d2:d6: b2:c6:11:25:6e:00:3c:1c:b8:e0:00:44:ac:8f:af: a3:b5:93:0d:65:24:82:eb:e7:b3:2b:04:c5:87:49: 61:f4:d0:f5:0a:31:f2:a4:82:82:8e:74:69:9e:54: 76:de:ec:b7:02:4a:50:c6:95:de:d6:d9:9e:7d:ce: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5E:CF:F5:61:FD:23:48:7F:6D:08:0F:4F:10:BF:F5:39:18:1E:33 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hF7P9WH9I0h_bQgPTxC_9TkYHjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:5c0::/48 Signature Algorithm: sha256WithRSAEncryption 55:dc:1f:15:a2:66:97:10:c8:4f:7b:4a:1f:22:62:6c:24:cd: 5b:2f:e2:d5:b1:36:d4:d2:ad:2b:e5:bc:62:2e:bf:ea:53:1b: 52:23:b6:b6:f7:73:63:01:44:ce:b4:e3:49:97:da:e4:87:45: 47:0f:6a:b2:4a:4c:3d:26:6d:27:f9:f3:0f:27:17:0a:6b:c7: 2d:01:a0:a0:93:0d:8a:ff:0c:1b:0c:5c:da:c2:b5:e2:47:77: da:7b:54:c2:1d:75:18:09:44:15:74:70:b3:ed:bb:a0:f1:0f: a4:b3:b4:32:ba:39:aa:ed:71:0b:8c:4d:34:02:2a:ab:a7:40: 55:9d:01:4d:d4:ca:57:3a:38:a3:42:49:05:78:04:86:7c:64: ed:ac:2c:c3:3c:7e:ea:48:c5:a9:61:2e:fb:05:bb:ab:fc:52: e5:b9:c3:13:a8:06:21:b0:6f:0d:67:0c:44:43:18:01:df:59: 8f:b9:3f:92:46:ba:7d:89:eb:db:f5:1b:25:26:89:13:77:ed: 6e:17:21:6a:92:1b:2b:01:fb:9f:17:4b:a1:ce:c8:9b:0d:35: 67:37:53:d7:88:cd:18:6a:f1:d9:9f:49:75:7f:a8:63:f4:20: 33:bb:29:d2:9e:db:f7:44:f2:d7:12:a2:56:0c:2b:50:b7:ba: bf:c0:84:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWIKGPSum9Pxkl4O04R/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDVlY2ZmNTYxZmQyMzQ4N2Y2ZDA4MGY0ZjEwYmZmNTM5MTgxZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Bvv9fmpXdi4G0rjc21RFVw+1o0M et+NJf0tvyfC5FoeSpKargRJq8OS2f6xc9RDQBOAN8KyZqRGUpDbmmZb4QQG0i68 yAMcOd7mREcALoQGAeSBT5SDMC8SPM3via1oipOW5bAk+3ty3OAuSBuYTy2kRIKW BUL5YkwLbT3WW6+ECYH+ZqnA2OkshhyFQ03/aNorngxRBvtG9P0KvBgsiIzufoKx ScGQQzoLjktCRiN5Gw4XIs4nZJG6B+wB7MZs0tayxhElbgA8HLjgAESsj6+jtZMN ZSSC6+ezKwTFh0lh9ND1CjHypIKCjnRpnlR23uy3AkpQxpXe1tmefc7TuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIRez/Vh/SNIf20ID08Qv/U5GB4zMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaEY3UDlXSDlJMGhfYlFnUFR4Q185VGtZSGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwXA MA0GCSqGSIb3DQEBCwUAA4IBAQBV3B8VomaXEMhPe0ofImJsJM1bL+LVsTbU0q0r 5bxiLr/qUxtSI7a293NjAUTOtONJl9rkh0VHD2qySkw9Jm0n+fMPJxcKa8ctAaCg kw2K/wwbDFzawrXiR3fae1TCHXUYCUQVdHCz7bug8Q+ks7Qyujmq7XELjE00Aiqr p0BVnQFN1MpXOjijQkkFeASGfGTtrCzDPH7qSMWpYS77Bbur/FLlucMTqAYhsG8N ZwxEQxgB31mPuT+SRrp9ievb9RslJokTd+1uFyFqkhsrAfufF0uhzsibDTVnN1PX iM0YavHZn0l1f6hj9CAzuynSntv3RPLXEqJWDCtQt7q/wITD -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client