This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/dHa0JrYSoLWVLHiDkFczCtN9X3M.roa File: dHa0JrYSoLWVLHiDkFczCtN9X3M.roa (raw, json) Hash identifier: IiD/mNzA5IAw5VjcqYaUltDqp934As1/ZLC9HalIujA= Subject key identifier: 74:76:B4:26:B6:12:A0:B5:95:2C:78:83:90:57:33:0A:D3:7D:5F:73 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40518ED3F33513C3C9B43F7BA7786 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/dHa0JrYSoLWVLHiDkFczCtN9X3M.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62251 IP address blocks: 2a0d:8341::/32 maxlen: 32 2a0d:8342::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:05:18:ed:3f:33:51:3c:3c:9b:43:f7:ba:77:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7476b426b612a0b5952c78839057330ad37d5f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:6d:33:c4:bb:52:66:5e:d3:9c:a3:49:f5: f9:a5:e9:b1:53:77:e7:b6:15:7f:87:15:e8:03:f3: dc:8f:ab:df:38:2e:86:a5:ac:8f:84:ce:17:90:bd: ae:11:53:dc:3b:a9:b5:6b:79:96:4b:dd:b9:8a:9e: 66:df:d2:d4:90:8a:c0:8b:0e:4e:c3:64:33:a6:c7: 4f:cf:fd:e3:50:a3:da:b0:20:2f:ae:74:ea:9c:f6: 07:f4:4c:c0:27:d0:84:c9:54:38:5d:a0:d0:58:c6: e4:f9:db:26:ea:8c:3c:46:81:3b:0b:50:ba:a9:2a: 11:6d:4c:7d:3b:6c:a8:62:42:a0:6b:1f:3f:b1:32: 49:c0:d7:33:68:ad:ad:96:25:3d:eb:01:e9:c4:73: 18:62:6c:5e:2d:d0:c2:e6:0e:0d:9a:e1:83:ad:f0: 9a:fe:bc:29:a6:94:02:2e:6b:a1:2d:a2:99:86:6c: 25:d3:89:a9:f6:b2:b0:b9:48:56:39:46:2b:0d:1d: d7:8f:ae:c2:29:55:46:28:53:d0:19:fb:11:a3:54: ea:f6:28:29:a5:a0:8d:ef:ea:7a:e2:0c:2e:bd:5c: 9f:98:33:50:e0:49:a1:53:b9:6b:03:ba:25:7d:77: 18:f0:bd:de:d2:ad:4b:e2:db:4a:6a:31:4b:05:4f: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:76:B4:26:B6:12:A0:B5:95:2C:78:83:90:57:33:0A:D3:7D:5F:73 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/dHa0JrYSoLWVLHiDkFczCtN9X3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8341::-2a0d:8342:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 47:bc:fc:ce:e6:fc:ea:21:17:ef:98:fd:75:34:a5:9c:d8:81: 6b:5c:b0:cc:36:63:c7:21:69:6e:cd:11:03:24:d7:58:fd:d3: 27:34:7a:32:34:ee:af:37:0e:8d:71:d0:90:ee:37:df:32:77: 8f:8d:ae:59:75:79:73:c9:1d:6d:e7:56:a8:a1:ff:13:fd:dc: de:0e:68:2f:a2:14:4d:2b:db:c5:b2:0a:ad:5b:16:a1:cc:26: f7:f1:25:aa:d5:45:8f:dd:e8:c8:ed:5d:a9:a7:3c:2c:96:2d: 2d:ea:f9:de:97:37:be:64:0f:22:78:90:58:2d:f1:f8:38:97: ef:fd:84:68:0a:cf:73:44:98:06:d7:61:48:30:3d:03:6a:32: 22:4e:63:f9:1a:5c:ff:2f:60:bc:4a:77:9d:03:be:15:a7:38: 53:ff:fd:ff:7b:bd:c4:b9:82:8a:b5:95:b0:ef:53:37:5e:d4: 63:77:5a:56:96:21:b1:bd:4a:67:c3:ea:76:90:35:6e:1c:95: 91:78:27:b2:cb:9d:a8:97:8b:d3:5d:03:f3:68:7d:8c:4c:0d: 16:26:b2:16:76:ff:71:a1:b1:86:4a:bb:14:4d:a3:17:df:2e: 60:6e:8f:34:dd:08:01:78:44:e4:22:0a:41:22:69:e4:99:35: 6e:f0:d9:43 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7pAUY7T8zUTw8m0P3uneGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDc2YjQyNmI2MTJhMGI1OTUyYzc4ODM5MDU3MzMwYWQzN2Q1ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmhtM8S7UmZe05yjSfX5pemxU3fn thV/hxXoA/Pcj6vfOC6GpayPhM4XkL2uEVPcO6m1a3mWS925ip5m39LUkIrAiw5O w2QzpsdPz/3jUKPasCAvrnTqnPYH9EzAJ9CEyVQ4XaDQWMbk+dsm6ow8RoE7C1C6 qSoRbUx9O2yoYkKgax8/sTJJwNczaK2tliU96wHpxHMYYmxeLdDC5g4NmuGDrfCa /rwpppQCLmuhLaKZhmwl04mp9rKwuUhWOUYrDR3Xj67CKVVGKFPQGfsRo1Tq9igp paCN7+p64gwuvVyfmDNQ4EmhU7lrA7olfXcY8L3e0q1L4ttKajFLBU/muwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFHR2tCa2EqC1lSx4g5BXMwrTfV9zMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvZEhhMEpyWVNvTFdWTEhpRGtGY3pDdE45WDNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqDYNB AwUAKg2DQjANBgkqhkiG9w0BAQsFAAOCAQEAR7z8zub86iEX75j9dTSlnNiBa1yw zDZjxyFpbs0RAyTXWP3TJzR6MjTurzcOjXHQkO433zJ3j42uWXV5c8kdbedWqKH/ E/3c3g5oL6IUTSvbxbIKrVsWocwm9/ElqtVFj93oyO1dqac8LJYtLer53pc3vmQP IniQWC3x+DiX7/2EaArPc0SYBtdhSDA9A2oyIk5j+Rpc/y9gvEp3nQO+Fac4U//9 /3u9xLmCirWVsO9TN17UY3daVpYhsb1KZ8PqdpA1bhyVkXgnssudqJeL010D82h9 jEwNFiayFnb/caGxhkq7FE2jF98uYG6PNN0IAXhE5CIKQSJp5Jk1bvDZQw== -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:23 2026 by rpki-client