This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa File: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (raw, json) Hash identifier: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg= Subject key identifier: 86:B7:D5:BE:D9:CA:DB:25:03:F2:AF:24:AA:18:30:83:10:6B:21:60 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019B7B35C1FE08BA9CACE63412792E6CABA9 Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 2001:678:274::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:fe:08:ba:9c:ac:e6:34:12:79:2e:6c:ab:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86b7d5bed9cadb2503f2af24aa183083106b2160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:e5:48:55:5b:6c:7a:68:7f:3e:4d:f2:c0: 44:20:72:27:c6:cc:2f:69:ff:e8:37:97:8a:25:b0: 05:9b:b7:31:83:9d:68:d5:64:80:f4:41:cc:52:53: 62:40:ea:f2:32:6a:e7:81:d8:38:6c:9b:ae:e1:db: 21:ab:fd:3b:9e:00:44:03:5c:76:d6:77:a8:e9:5a: 8a:4c:1e:47:2b:d0:57:69:f1:09:0d:4a:df:9d:59: ce:3b:d0:cd:3c:d7:27:a0:77:88:43:1b:44:ce:24: 32:47:51:10:97:bd:ca:4a:04:42:cb:18:39:e3:77: 91:f7:c0:86:00:02:01:9c:8a:6e:aa:e4:ca:20:86: 3a:09:cd:96:7e:0e:9a:aa:b6:d9:cf:19:a0:de:cf: 85:f1:ed:d2:b5:8d:f3:0d:0f:69:9c:9a:a7:bc:05: 50:70:fb:13:47:36:a4:fd:8e:01:65:2c:bf:76:6a: 8b:cf:17:77:19:43:64:3e:6f:05:69:c1:38:57:f6: 17:b4:f7:35:72:a8:ed:77:50:73:1b:6f:59:63:9d: ff:4f:63:af:6a:b5:b0:40:a4:80:7b:0d:5c:43:98: d1:ed:91:70:af:01:60:c9:f1:65:b8:e8:8b:68:04: 22:a1:12:f1:20:72:61:3c:77:67:2e:10:fb:fa:9a: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B7:D5:BE:D9:CA:DB:25:03:F2:AF:24:AA:18:30:83:10:6B:21:60 X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:274::/48 Signature Algorithm: sha256WithRSAEncryption a0:af:e2:68:e7:f2:23:e8:89:35:96:00:ec:79:25:07:e6:33: 8c:bf:93:48:b4:c7:28:4f:2d:ce:d0:e1:6f:3a:91:75:7d:ef: 44:50:f6:b8:a7:a1:6e:50:e8:77:fa:99:2c:09:34:c3:12:89: 08:27:c6:f9:2d:93:7e:8b:8c:2a:4f:9d:3f:20:d5:65:ad:4b: 43:b3:27:55:94:51:9c:3f:13:af:dc:32:f2:88:ef:d0:d5:a7: ec:0c:0a:7a:bd:30:92:0f:42:eb:ce:6b:3e:f7:1c:4e:7e:bc: b3:77:cc:a7:ce:bb:1f:65:31:eb:ae:96:6f:d2:5e:42:f8:85: 48:ca:85:9b:7e:e6:19:4f:8d:a7:14:8d:ab:50:be:a2:c7:00: 9a:07:6c:cf:f0:0a:ad:eb:21:87:05:a4:40:9b:27:d4:7b:7f: 40:42:f2:d7:09:99:8d:2d:b3:ed:9d:30:24:2d:4c:ad:eb:93: e8:5b:36:7e:48:2a:5f:db:75:55:d8:ac:fa:dd:15:f1:a2:ad: ba:60:d9:a5:ba:ab:7b:39:0a:0e:27:f2:65:a5:4a:8c:42:a4: d7:51:c0:60:c1:c0:50:22:5c:e1:c7:0e:08:21:e8:79:89:13: 42:ce:54:96:8b:67:33:45:e4:86:f3:42:7f:dc:bb:e4:eb:ca: b0:fd:40:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NcH+CLqcrOY0EnkubKupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmI3ZDViZWQ5Y2FkYjI1MDNmMmFmMjRhYTE4MzA4MzEwNmIyMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvzlSFVbbHpofz5N8sBEIHInxswv af/oN5eKJbAFm7cxg51o1WSA9EHMUlNiQOryMmrngdg4bJuu4dshq/07ngBEA1x2 1neo6VqKTB5HK9BXafEJDUrfnVnOO9DNPNcnoHeIQxtEziQyR1EQl73KSgRCyxg5 43eR98CGAAIBnIpuquTKIIY6Cc2Wfg6aqrbZzxmg3s+F8e3StY3zDQ9pnJqnvAVQ cPsTRzak/Y4BZSy/dmqLzxd3GUNkPm8FacE4V/YXtPc1cqjtd1BzG29ZY53/T2Ov arWwQKSAew1cQ5jR7ZFwrwFgyfFluOiLaAQioRLxIHJhPHdnLhD7+pphPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIa31b7ZytslA/KvJKoYMIMQayFgMB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvaHJmVnZ0bksyeVVEOHE4a3FoZ3dneEJySVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAJ0 MA0GCSqGSIb3DQEBCwUAA4IBAQCgr+Jo5/Ij6Ik1lgDseSUH5jOMv5NItMcoTy3O 0OFvOpF1fe9EUPa4p6FuUOh3+pksCTTDEokIJ8b5LZN+i4wqT50/INVlrUtDsydV lFGcPxOv3DLyiO/Q1afsDAp6vTCSD0Lrzms+9xxOfryzd8ynzrsfZTHrrpZv0l5C +IVIyoWbfuYZT42nFI2rUL6ixwCaB2zP8Aqt6yGHBaRAmyfUe39AQvLXCZmNLbPt nTAkLUyt65PoWzZ+SCpf23VV2Kz63RXxoq26YNmluqt7OQoOJ/JlpUqMQqTXUcBg wcBQIlzhxw4IIeh5iRNCzlSWi2czReSG80J/3Lvk68qw/UCg -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:28 2026 by rpki-client