This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/hHyrrGpim5kmp-rDBaJEUdz4XqI.roa File: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (raw, json) Hash identifier: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU= Subject key identifier: 84:7C:AB:AC:6A:62:9B:99:26:A7:EA:C3:05:A2:44:51:DC:F8:5E:A2 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA717CC481D7B5C35C126D18090201C Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/hHyrrGpim5kmp-rDBaJEUdz4XqI.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204443 IP address blocks: 2a0d:2146:8440::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:cc:48:1d:7b:5c:35:c1:26:d1:80:90:20:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=847cabac6a629b9926a7eac305a24451dcf85ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:6c:c9:98:65:dc:29:39:49:cb:6c:e1:1a: 30:f0:8e:01:ba:64:f2:bd:89:be:f1:3c:1b:be:af: 36:54:e3:01:b2:e7:0c:e5:ca:6f:26:53:e0:7f:69: 5c:34:1a:05:53:e1:83:a5:eb:de:83:08:1c:a9:4e: 3f:0e:f2:af:fc:5b:2d:0e:26:95:76:5e:78:ab:94: e3:13:44:68:45:ca:13:6d:d7:99:22:e1:ad:8f:85: 76:3a:77:54:01:fb:3a:be:cd:42:94:0b:48:d8:9d: 3b:fb:f9:98:5a:ab:2a:03:de:38:8c:1d:ac:c0:6f: 69:ed:5e:ff:af:91:30:24:c1:4b:61:bd:2d:c9:46: a2:25:d3:a2:fc:98:cc:93:15:79:8a:84:2f:5b:22: 4e:31:43:51:9a:e5:e4:77:9f:a2:73:54:91:61:24: 7f:b3:84:50:18:68:ed:71:be:13:64:d3:5e:07:a4: 1d:44:66:c2:b8:eb:95:77:fc:3b:f3:95:41:e4:6c: bb:a8:5d:1e:71:16:4c:ed:e6:35:56:4b:12:0e:ba: b8:78:73:58:a1:16:f6:14:94:85:bd:63:b1:5e:54: c0:27:82:95:34:d5:9b:06:e3:49:88:60:7a:a9:e6: 35:be:27:0e:3e:d0:d4:44:35:ff:51:c1:3d:11:1b: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7C:AB:AC:6A:62:9B:99:26:A7:EA:C3:05:A2:44:51:DC:F8:5E:A2 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/hHyrrGpim5kmp-rDBaJEUdz4XqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:8440::/44 Signature Algorithm: sha256WithRSAEncryption 14:89:fd:1e:e4:10:cf:06:52:d4:43:c9:31:29:39:17:ed:8d: b5:aa:42:ef:35:9a:b6:7d:f4:e2:0a:e4:ed:b6:ef:9f:a6:15: d8:17:1a:fb:ca:c5:7d:1d:c0:9e:9a:3a:73:15:96:d6:dc:01: 57:c3:de:56:db:7b:6b:56:d6:dc:01:7b:69:4e:93:f4:d4:f6: f1:4a:af:78:1c:1b:e9:89:6b:bb:88:5a:72:34:12:cb:d9:a7: 30:07:af:6a:b8:8c:e8:a6:49:9a:12:c2:8f:72:10:7a:1e:fc: a5:bd:2b:cd:42:8a:0f:df:6e:d4:68:ae:e0:14:10:63:da:e0: 91:68:db:e5:06:95:4c:90:10:4d:e0:ea:55:0c:5f:b9:85:3d: cd:4d:26:ee:d8:ba:19:38:30:95:10:bf:7c:14:77:59:ae:48: ea:55:bb:bb:8a:97:0c:49:ec:11:22:66:0a:64:13:04:39:e3: 39:f5:1d:3d:b9:2d:fd:74:dd:13:42:f1:f2:0f:35:8e:af:bd: 12:cd:b2:8a:d8:ef:56:f9:1d:8d:d4:4a:5d:30:3f:5d:f1:2a: 0a:e7:d0:4a:69:ed:a4:d1:11:65:47:02:b0:21:d1:a8:dc:56: a8:60:41:3f:4e:5f:9a:b3:23:21:ff:73:78:b1:47:32:cd:ac: 3d:9b:d4:45 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxfMSB17XDXBJtGAkCAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDdjYWJhYzZhNjI5Yjk5MjZhN2VhYzMwNWEyNDQ1MWRjZjg1ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMRsyZhl3Ck5Scts4Row8I4BumTy vYm+8Twbvq82VOMBsucM5cpvJlPgf2lcNBoFU+GDpevegwgcqU4/DvKv/FstDiaV dl54q5TjE0RoRcoTbdeZIuGtj4V2OndUAfs6vs1ClAtI2J07+/mYWqsqA944jB2s wG9p7V7/r5EwJMFLYb0tyUaiJdOi/JjMkxV5ioQvWyJOMUNRmuXkd5+ic1SRYSR/ s4RQGGjtcb4TZNNeB6QdRGbCuOuVd/w785VB5Gy7qF0ecRZM7eY1VksSDrq4eHNY oRb2FJSFvWOxXlTAJ4KVNNWbBuNJiGB6qeY1vicOPtDURDX/UcE9ERuG3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIR8q6xqYpuZJqfqwwWiRFHc+F6iMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvaEh5cnJHcGltNWttcC1yREJhSkVVZHo0WHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoRA MA0GCSqGSIb3DQEBCwUAA4IBAQAUif0e5BDPBlLUQ8kxKTkX7Y21qkLvNZq2ffTi CuTttu+fphXYFxr7ysV9HcCemjpzFZbW3AFXw95W23trVtbcAXtpTpP01PbxSq94 HBvpiWu7iFpyNBLL2acwB69quIzopkmaEsKPchB6HvylvSvNQooP327UaK7gFBBj 2uCRaNvlBpVMkBBN4OpVDF+5hT3NTSbu2LoZODCVEL98FHdZrkjqVbu7ipcMSewR ImYKZBMEOeM59R09uS39dN0TQvHyDzWOr70SzbKK2O9W+R2N1EpdMD9d8SoK59BK ae2k0RFlRwKwIdGo3FaoYEE/Tl+asyMh/3N4sUcyzaw9m9RF -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:02 2026 by rpki-client