This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jhlWMlPTV6zyq3fHD7hDrl9I7hc.roa File: jhlWMlPTV6zyq3fHD7hDrl9I7hc.roa (raw, json) Hash identifier: Gz4snWx/GP9MT6pZac5Amb8p42wGjbnhpfPJeibbdV0= Subject key identifier: 8E:19:56:32:53:D3:57:AC:F2:AB:77:C7:0F:B8:43:AE:5F:48:EE:17 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD5E94EB35F54C1753D023D506AE8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jhlWMlPTV6zyq3fHD7hDrl9I7hc.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197634 IP address blocks: 2a0e:97c0:ce0::/44 maxlen: 48 2a0e:97c0:ce0::/48 maxlen: 48 2a0e:97c0:ce1::/48 maxlen: 48 2a0e:97c0:ce2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d5:e9:4e:b3:5f:54:c1:75:3d:02:3d:50:6a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e19563253d357acf2ab77c70fb843ae5f48ee17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:4e:7f:a4:c1:e0:b0:82:fa:29:57:00:4d: c9:03:38:af:ca:cb:c7:f6:88:65:38:25:b4:b7:a0: ef:2e:48:65:b3:7a:ab:8a:27:71:3a:c2:f0:d5:46: 56:15:79:5b:21:a8:45:7f:d7:52:29:b6:57:8e:4e: be:4e:75:1b:c3:57:ce:1c:1e:62:53:d7:50:18:be: 65:be:38:71:5f:f5:4a:8e:1c:74:5c:ea:48:82:ac: 57:b3:b2:8a:cd:11:76:9f:ac:56:15:24:67:1f:0f: ab:b7:81:ef:df:59:e6:e4:7f:19:c1:a6:c2:4e:d2: 16:b4:5a:c7:7f:8d:21:79:3c:b3:31:2f:c7:22:6b: 8d:a0:66:90:26:f0:c5:1e:31:77:43:e8:86:94:63: 2d:67:c6:6a:51:90:fe:78:64:b1:67:7c:4c:23:8c: e1:10:44:ec:42:7c:84:99:12:17:84:3a:3b:ef:9a: af:01:bf:b7:6f:5c:9f:88:14:77:8a:b3:30:67:bc: 4c:b3:a1:83:5d:e2:5e:e0:24:58:f2:be:9b:d3:ab: 54:14:33:2d:05:01:8c:23:03:08:1b:1b:e2:4f:83: 59:c3:3f:fe:fa:d2:65:33:93:9b:fb:12:da:41:0c: b5:03:2d:b9:91:37:84:2f:4a:45:ae:4e:17:79:dd: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:19:56:32:53:D3:57:AC:F2:AB:77:C7:0F:B8:43:AE:5F:48:EE:17 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jhlWMlPTV6zyq3fHD7hDrl9I7hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:ce0::/44 Signature Algorithm: sha256WithRSAEncryption 7f:ff:91:41:db:96:fb:87:b8:da:26:fa:49:78:0f:23:13:d6: 5d:f6:fa:83:3d:82:dd:7c:86:bd:3e:08:6c:b4:f7:c2:1b:7d: 6b:6b:f9:c7:af:fd:c9:c2:ee:3d:44:35:93:c3:02:71:5f:e8: f1:da:3d:6f:03:09:32:cc:dd:d3:75:34:eb:0e:d2:65:77:12: b1:7d:ef:ac:49:4d:d8:47:17:24:8e:15:b0:82:b9:36:8e:ab: cc:57:68:2e:18:e8:40:bc:d9:9d:75:77:9f:8a:4c:11:f9:64: 04:b4:67:5d:03:b1:c0:6d:b0:ee:53:3f:a0:f7:8b:cd:f1:3a: 8d:0c:f4:05:63:32:72:c8:56:ea:d7:60:e4:48:f5:3f:95:e7: df:5b:a5:3a:3e:95:14:ee:63:b8:d6:3f:b1:9b:57:5c:05:b1: ba:2e:aa:e5:e0:69:c5:29:bf:55:c4:18:da:1d:98:65:1d:5d: a1:f8:73:e0:46:12:75:7d:fa:98:46:1a:ab:fd:84:b3:6a:34: a7:ae:67:ec:b3:7d:42:9e:00:c2:1d:ef:fa:4a:70:19:95:c8: 9a:88:3a:f0:1f:12:69:2c:b1:ff:68:b8:43:98:57:98:7a:e0: 69:05:75:46:ca:28:7b:ff:c6:d4:0f:57:d0:b6:74:15:f0:1a: 3f:8d:e5:b2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNXpTrNfVMF1PQI9UGroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTE5NTYzMjUzZDM1N2FjZjJhYjc3YzcwZmI4NDNhZTVmNDhlZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMlOf6TB4LCC+ilXAE3JAzivysvH 9ohlOCW0t6DvLkhls3qriidxOsLw1UZWFXlbIahFf9dSKbZXjk6+TnUbw1fOHB5i U9dQGL5lvjhxX/VKjhx0XOpIgqxXs7KKzRF2n6xWFSRnHw+rt4Hv31nm5H8ZwabC TtIWtFrHf40heTyzMS/HImuNoGaQJvDFHjF3Q+iGlGMtZ8ZqUZD+eGSxZ3xMI4zh EETsQnyEmRIXhDo775qvAb+3b1yfiBR3irMwZ7xMs6GDXeJe4CRY8r6b06tUFDMt BQGMIwMIGxviT4NZwz/++tJlM5Ob+xLaQQy1Ay25kTeEL0pFrk4Xed3vFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI4ZVjJT01es8qt3xw+4Q65fSO4XMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvamhsV01sUFRWNnp5cTNmSEQ3aERybDlJN2hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAzg MA0GCSqGSIb3DQEBCwUAA4IBAQB//5FB25b7h7jaJvpJeA8jE9Zd9vqDPYLdfIa9 PghstPfCG31ra/nHr/3Jwu49RDWTwwJxX+jx2j1vAwkyzN3TdTTrDtJldxKxfe+s SU3YRxckjhWwgrk2jqvMV2guGOhAvNmddXefikwR+WQEtGddA7HAbbDuUz+g94vN 8TqNDPQFYzJyyFbq12DkSPU/leffW6U6PpUU7mO41j+xm1dcBbG6Lqrl4GnFKb9V xBjaHZhlHV2h+HPgRhJ1ffqYRhqr/YSzajSnrmfss31CngDCHe/6SnAZlciaiDrw HxJpLLH/aLhDmFeYeuBpBXVGyih7/8bUD1fQtnQV8Bo/jeWy -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client