This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa File: hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa (raw, json) Hash identifier: uMFCDSPSzYAtqFKyN2Vv8Q5iqVvmZBowV1Ty5ZpBTEM= Subject key identifier: 85:18:54:71:BB:BB:29:94:52:BE:79:33:E0:23:BC:04:92:D6:B8:7E Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019B7FF259FAB210E302A6FF8D34F98E891F Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa Signing time: Fri 02 Jan 2026 18:22:27 +0000 ROA not before: Fri 02 Jan 2026 18:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a02:11c0::/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:59:fa:b2:10:e3:02:a6:ff:8d:34:f9:8e:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Jan 2 18:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85185471bbbb299452be7933e023bc0492d6b87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:68:1f:26:21:72:30:bd:10:92:53:b9:59: db:3c:a0:8c:4f:58:88:3a:c1:62:a6:93:5e:e6:04: cd:c3:f2:30:25:f6:29:2c:5b:30:04:38:f1:11:ee: 94:07:55:a4:6e:ad:cb:54:17:5b:10:f5:f0:6a:e1: 66:8c:66:09:0f:8a:68:f4:1b:94:3c:e9:85:e7:1d: 35:4b:ac:de:6f:11:72:71:48:7e:3d:ac:03:a2:91: b5:e7:83:8d:5f:97:c5:82:70:6f:b8:2e:ee:ac:06: 40:c1:bd:5d:3a:3d:11:96:c5:85:c2:97:cc:0c:9d: 61:38:7f:54:33:f9:ed:6e:39:11:9c:2b:ed:58:d8: b8:a6:f9:ef:26:5e:12:18:8a:5a:4b:60:37:a2:23: 2c:9e:c1:22:2e:2f:62:3f:35:7d:61:e4:b8:e1:c2: 12:7f:bb:99:bf:0d:02:f4:62:fd:9b:d6:8c:58:6e: 5c:45:10:95:2b:e6:8f:82:b9:23:53:bf:85:a2:86: a0:4b:83:7f:46:2a:5c:2b:a9:aa:43:4a:2f:6b:67: 5b:47:7e:53:72:d1:4f:00:e9:f8:d5:a2:f1:77:f4: c3:ca:6e:52:23:52:cf:a9:7a:8c:d3:13:97:c7:3a: 7c:f6:81:95:6e:6c:64:3f:15:cf:d8:20:07:08:17: 46:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:54:71:BB:BB:29:94:52:BE:79:33:E0:23:BC:04:92:D6:B8:7E X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:11c0::/27 Signature Algorithm: sha256WithRSAEncryption d5:34:56:9d:f6:d9:03:26:e8:1f:cb:53:bd:27:af:8b:98:11: 53:20:f1:f1:4d:d8:88:1b:ac:d8:7e:ab:d0:40:ad:dd:d9:c2: ae:32:e2:97:cc:9d:dc:72:cb:5b:72:12:19:6a:02:6b:c0:39: 2c:3e:43:f0:dd:51:4e:da:52:bd:99:3c:a9:b0:1b:ae:a3:9a: 9a:25:f5:06:55:f5:58:1c:63:08:c9:08:b7:b1:ea:c6:74:e5: c6:cc:3d:50:c8:c4:01:09:ab:f4:05:63:c7:cc:5e:be:8e:70: 92:11:c8:99:29:34:45:0b:4c:d1:ff:b6:5b:b5:ee:f1:d2:07: 3a:e4:e8:1c:58:55:a1:39:91:a1:5e:a4:72:53:22:ef:07:e3: 32:f0:1f:f5:07:15:21:85:4b:92:62:e0:ce:f1:1c:9e:0a:bd: f4:b3:df:6c:7d:6c:96:3b:55:df:17:65:85:d1:d8:7d:52:2e: 6d:aa:ac:1d:da:6e:9e:1d:66:d6:10:ea:4c:ec:00:3d:19:e1: 15:fe:2e:89:c3:06:1c:03:15:db:1b:d3:24:b6:fd:52:a7:36: 09:f2:8e:12:af:ba:08:a1:de:13:c2:c5:8b:a7:43:63:f6:fc: b6:f3:71:a9:2b:d6:06:a1:75:e6:a9:b5:c8:f5:96:83:c3:ad: b3:38:a5:fd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8ln6shDjAqb/jTT5jokfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjYwMTAyMTgyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTE4NTQ3MWJiYmIyOTk0NTJiZTc5MzNlMDIzYmMwNDkyZDZiODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldFoHyYhcjC9EJJTuVnbPKCMT1iI OsFippNe5gTNw/IwJfYpLFswBDjxEe6UB1Wkbq3LVBdbEPXwauFmjGYJD4po9BuU POmF5x01S6zebxFycUh+PawDopG154ONX5fFgnBvuC7urAZAwb1dOj0RlsWFwpfM DJ1hOH9UM/ntbjkRnCvtWNi4pvnvJl4SGIpaS2A3oiMsnsEiLi9iPzV9YeS44cIS f7uZvw0C9GL9m9aMWG5cRRCVK+aPgrkjU7+FooagS4N/RipcK6mqQ0ova2dbR35T ctFPAOn41aLxd/TDym5SI1LPqXqM0xOXxzp89oGVbmxkPxXP2CAHCBdGjwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIUYVHG7uymUUr55M+AjvASS1rh+MB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvaFJoVWNidTdLWlJTdm5rejRDTzhCSkxXdUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUFKgIRwDAN BgkqhkiG9w0BAQsFAAOCAQEA1TRWnfbZAyboH8tTvSevi5gRUyDx8U3YiBus2H6r 0ECt3dnCrjLil8yd3HLLW3ISGWoCa8A5LD5D8N1RTtpSvZk8qbAbrqOamiX1BlX1 WBxjCMkIt7HqxnTlxsw9UMjEAQmr9AVjx8xevo5wkhHImSk0RQtM0f+2W7Xu8dIH OuToHFhVoTmRoV6kclMi7wfjMvAf9QcVIYVLkmLgzvEcngq99LPfbH1sljtV3xdl hdHYfVIubaqsHdpunh1m1hDqTOwAPRnhFf4uicMGHAMV2xvTJLb9Uqc2CfKOEq+6 CKHeE8LFi6dDY/b8tvNxqSvWBqF15qm1yPWWg8Otszil/Q== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:01 2026 by rpki-client