This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ha5JPSf-cfAT_-O9Jwe_vIfVm2Q.roa File: ha5JPSf-cfAT_-O9Jwe_vIfVm2Q.roa (raw, json) Hash identifier: m/EBrk2TmZIjdw5pRgnMvlo0aWKvEJZJ4JpjOb+150k= Subject key identifier: 85:AE:49:3D:27:FE:71:F0:13:FF:E3:BD:27:07:BF:BC:87:D5:9B:64 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CDCE39EF1C465343FE0CA1D744796 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ha5JPSf-cfAT_-O9Jwe_vIfVm2Q.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199052 IP address blocks: 2a0e:b107:2070::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dc:e3:9e:f1:c4:65:34:3f:e0:ca:1d:74:47:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85ae493d27fe71f013ffe3bd2707bfbc87d59b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:a2:7f:60:a2:0e:cd:8b:dd:10:01:72:cc: 73:0c:3d:08:06:f3:93:0d:3e:2a:f8:35:6e:a2:07: 7d:f5:a8:41:ee:cc:27:3f:fa:68:8a:57:e2:14:98: ca:84:6a:cf:c9:cb:3a:b3:1b:5d:c6:eb:f6:e0:35: 15:e5:27:14:6f:e2:37:ec:26:be:72:13:6d:4d:07: c7:ea:b7:0a:57:aa:68:3f:0b:d7:29:c9:8a:cc:4b: 2d:08:39:6f:5b:6b:7b:7a:52:06:7e:4e:46:54:da: 1f:b2:58:3f:8f:1d:92:c8:09:7a:74:db:2d:90:6a: 98:08:73:da:04:69:d7:d3:86:ae:ce:fc:f2:e7:3b: de:5e:93:45:a8:c3:ab:ec:6c:d8:70:b8:2b:f0:1e: ee:3e:ae:a8:85:6a:3a:dc:5b:e2:00:fb:a3:7d:70: 82:ba:32:ca:b3:cd:71:a1:a2:87:74:ca:3e:9d:cd: 70:b2:4c:12:3a:66:f3:7c:9e:5f:0b:74:37:55:61: 8a:28:12:5b:45:f0:55:5b:c7:04:84:4b:cc:5b:a0: 8c:6f:a7:90:32:d3:f7:27:e5:75:5d:35:c0:40:25: 79:e2:c7:09:8c:07:e8:98:1e:1b:2c:d2:ef:16:ef: 45:41:56:06:93:2f:61:26:c1:7b:d8:86:1e:d5:57: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AE:49:3D:27:FE:71:F0:13:FF:E3:BD:27:07:BF:BC:87:D5:9B:64 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ha5JPSf-cfAT_-O9Jwe_vIfVm2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2070::/44 Signature Algorithm: sha256WithRSAEncryption c4:08:b9:34:8d:8c:63:8f:09:02:50:16:fa:2b:4e:14:30:21: 35:87:45:ac:cb:2c:e9:a1:69:91:a7:46:b9:f9:20:c2:1c:a7: 6e:6f:3f:36:10:94:25:4b:93:52:2b:74:ac:1f:10:40:be:2b: 82:cf:e1:e6:8d:6d:12:cc:ff:71:b3:b8:de:ed:55:55:91:97: ba:18:c4:35:f9:6e:86:2d:ae:42:39:fb:e7:4b:c2:3b:36:ff: 36:20:74:92:0a:ba:86:2e:a0:a5:fa:ee:7d:e4:d2:fe:2b:35: 5f:41:a1:37:85:47:d5:9a:61:60:9a:e5:9c:00:93:f7:33:8c: ab:53:b2:16:ac:ef:94:0e:32:94:6e:7c:4c:aa:7c:27:96:61: 55:45:4a:c7:04:00:40:7d:90:2a:89:6d:4f:3b:99:36:8a:b0: bc:51:61:70:31:c1:77:5a:ae:9d:b2:0f:bc:ba:30:22:2f:0d: 24:3a:c0:c0:e5:90:d9:b2:8b:6f:2e:fc:bf:30:c3:af:7f:48: 45:36:58:7b:e3:a7:a0:31:95:55:16:f1:65:f9:47:3c:2f:8a: fd:a5:04:fb:ea:32:2a:bd:22:e2:1f:8a:86:54:95:ce:50:56: 9b:8a:68:f8:05:96:1f:76:ce:3f:9e:d4:47:0e:a3:af:68:5e: b3:77:e2:75 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNzjnvHEZTQ/4ModdEeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWFlNDkzZDI3ZmU3MWYwMTNmZmUzYmQyNzA3YmZiYzg3ZDU5YjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry+if2CiDs2L3RABcsxzDD0IBvOT DT4q+DVuogd99ahB7swnP/poilfiFJjKhGrPycs6sxtdxuv24DUV5ScUb+I37Ca+ chNtTQfH6rcKV6poPwvXKcmKzEstCDlvW2t7elIGfk5GVNofslg/jx2SyAl6dNst kGqYCHPaBGnX04auzvzy5zveXpNFqMOr7GzYcLgr8B7uPq6ohWo63FviAPujfXCC ujLKs81xoaKHdMo+nc1wskwSOmbzfJ5fC3Q3VWGKKBJbRfBVW8cEhEvMW6CMb6eQ MtP3J+V1XTXAQCV54scJjAfomB4bLNLvFu9FQVYGky9hJsF72IYe1VfKoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIWuST0n/nHwE//jvScHv7yH1ZtkMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaGE1SlBTZi1jZkFUXy1POUp3ZV92SWZWbTJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByBw MA0GCSqGSIb3DQEBCwUAA4IBAQDECLk0jYxjjwkCUBb6K04UMCE1h0WsyyzpoWmR p0a5+SDCHKdubz82EJQlS5NSK3SsHxBAviuCz+HmjW0SzP9xs7je7VVVkZe6GMQ1 +W6GLa5COfvnS8I7Nv82IHSSCrqGLqCl+u595NL+KzVfQaE3hUfVmmFgmuWcAJP3 M4yrU7IWrO+UDjKUbnxMqnwnlmFVRUrHBABAfZAqiW1PO5k2irC8UWFwMcF3Wq6d sg+8ujAiLw0kOsDA5ZDZsotvLvy/MMOvf0hFNlh746egMZVVFvFl+Uc8L4r9pQT7 6jIqvSLiH4qGVJXOUFabimj4BZYfds4/ntRHDqOvaF6zd+J1 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client