This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/u7HurLe1N6a5tmgpeAM_l46SL2A.roa File: u7HurLe1N6a5tmgpeAM_l46SL2A.roa (raw, json) Hash identifier: FNqj3YMXJAvL9/wTL5cuE2GwV4N05I6EVIR6yQYxrQ4= Subject key identifier: BB:B1:EE:AC:B7:B5:37:A6:B9:B6:68:29:78:03:3F:97:8E:92:2F:60 Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612 Certificate serial: 019B797EAF4C50C9A1DA324678FA2EC27EA3 Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/u7HurLe1N6a5tmgpeAM_l46SL2A.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39420 IP address blocks: 2001:678:898::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:af:4c:50:c9:a1:da:32:46:78:fa:2e:c2:7e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612 Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb1eeacb7b537a6b9b6682978033f978e922f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:8c:8c:56:ba:60:ae:6e:3a:9e:f3:ab:9f: 5b:64:ec:d2:3f:f8:aa:73:fc:e4:11:bf:85:94:aa: 62:cd:01:31:84:0f:7a:af:da:dd:b4:9b:29:43:37: 09:50:2f:e4:29:d1:c8:c9:64:85:f9:4d:71:a6:28: 23:ee:58:f8:d6:b0:ec:37:27:36:75:99:ad:13:26: db:7b:ee:c7:93:6a:a6:c1:c3:ba:94:0f:36:97:69: ee:b6:30:fc:7a:97:66:35:db:f7:fd:33:59:ec:1c: 5e:e4:4e:14:b1:64:94:5a:4d:f8:ef:80:c6:68:e4: 25:f7:8a:98:e9:f4:75:8c:af:dd:83:e1:a7:39:74: 81:b4:22:32:9f:ef:40:45:58:2f:86:9d:1e:da:fb: 45:c2:67:c2:11:48:f3:9e:4e:c8:9d:a3:02:2b:d7: 53:f8:fc:ff:0e:27:01:c0:20:43:b0:a3:11:c7:4d: 1a:df:4b:82:1c:a2:9d:4e:5f:d4:b5:31:55:34:0f: b7:24:62:d3:f0:56:8e:c8:76:44:df:27:37:f8:20: 1c:eb:50:71:60:62:44:a6:9f:3d:cc:a1:c4:b9:85: 85:43:30:0c:aa:4c:80:cb:52:0d:91:fd:bc:95:5c: fc:9f:bf:59:02:4e:76:2c:13:33:e0:39:52:86:c0: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:EE:AC:B7:B5:37:A6:B9:B6:68:29:78:03:3F:97:8E:92:2F:60 X509v3 Authority Key Identifier: keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/u7HurLe1N6a5tmgpeAM_l46SL2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:898::/48 Signature Algorithm: sha256WithRSAEncryption 11:e1:5e:32:ac:0c:51:e4:1d:ce:82:fc:95:58:f6:21:ff:84: ef:75:e5:de:98:73:11:2a:9b:06:a0:58:75:d1:e9:87:74:5a: 76:d3:ed:1d:27:60:f6:e6:f8:6c:ed:a4:ef:d8:7d:84:0a:63: a8:bc:48:2d:29:d9:bd:dc:56:2a:1d:84:22:6b:35:be:6d:63: 72:56:3f:cd:c0:7e:39:c9:65:9a:37:04:67:81:37:2e:c8:40: cf:3b:f4:01:31:ae:cb:d4:be:5f:3c:ca:39:a8:f6:23:16:92: 89:8d:60:c6:c0:33:15:a0:9c:ab:34:cd:32:8b:c9:1d:a7:72: d0:03:fe:26:0f:a1:75:1c:6b:4d:0c:76:e6:7d:eb:ed:17:0d: ab:8a:51:2f:06:41:82:e9:39:23:e8:18:eb:f2:f0:8b:79:8c: ff:a5:31:44:14:25:5e:94:5f:54:ba:09:a1:68:57:79:65:d9: 2f:e3:b9:4d:70:49:86:c0:76:5a:41:36:41:8c:d3:2b:22:f1: d0:ff:9a:ee:43:bf:57:b4:d2:45:4b:f5:44:10:a5:65:3c:e1: bb:85:01:f6:82:64:00:ce:67:a9:63:fc:14:ea:cb:eb:75:be: 89:17:27:b5:15:73:53:d6:8e:0d:a9:e2:b0:8f:6d:f2:10:3f: 2c:00:cd:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fq9MUMmh2jJGePouwn6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0 YmU2MTIwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmIxZWVhY2I3YjUzN2E2YjliNjY4Mjk3ODAzM2Y5NzhlOTIyZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX2MjFa6YK5uOp7zq59bZOzSP/iq c/zkEb+FlKpizQExhA96r9rdtJspQzcJUC/kKdHIyWSF+U1xpigj7lj41rDsNyc2 dZmtEybbe+7Hk2qmwcO6lA82l2nutjD8epdmNdv3/TNZ7Bxe5E4UsWSUWk3474DG aOQl94qY6fR1jK/dg+GnOXSBtCIyn+9ARVgvhp0e2vtFwmfCEUjznk7InaMCK9dT +Pz/DicBwCBDsKMRx00a30uCHKKdTl/UtTFVNA+3JGLT8FaOyHZE3yc3+CAc61Bx YGJEpp89zKHEuYWFQzAMqkyAy1INkf28lVz8n79ZAk52LBMz4DlShsApJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLux7qy3tTemubZoKXgDP5eOki9gMB8GA1UdIwQY MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt ZTkwOWU0MWEwN2U1LzEvdTdIdXJMZTFONmE1dG1ncGVBTV9sNDZTTDJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1 LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAiY MA0GCSqGSIb3DQEBCwUAA4IBAQAR4V4yrAxR5B3OgvyVWPYh/4TvdeXemHMRKpsG oFh10emHdFp20+0dJ2D25vhs7aTv2H2ECmOovEgtKdm93FYqHYQiazW+bWNyVj/N wH45yWWaNwRngTcuyEDPO/QBMa7L1L5fPMo5qPYjFpKJjWDGwDMVoJyrNM0yi8kd p3LQA/4mD6F1HGtNDHbmfevtFw2rilEvBkGC6Tkj6Bjr8vCLeYz/pTFEFCVelF9U ugmhaFd5Zdkv47lNcEmGwHZaQTZBjNMrIvHQ/5ruQ79XtNJFS/VEEKVlPOG7hQH2 gmQAzmepY/wU6svrdb6JFye1FXNT1o4NqeKwj23yED8sAM2V -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:46 2026 by rpki-client