This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/H4P9wQK8k20fMVIn7-7ywemUMs0.roa File: H4P9wQK8k20fMVIn7-7ywemUMs0.roa (raw, json) Hash identifier: CTz6TfIyzjRKrcKFhJCPOIOL7tCavuK1OmlVwFA+EyI= Subject key identifier: 1F:83:FD:C1:02:BC:93:6D:1F:31:52:27:EF:EE:F2:C1:E9:94:32:CD Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA732BE76F91B3439C9745467A202 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/H4P9wQK8k20fMVIn7-7ywemUMs0.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198768 IP address blocks: 2a0e:aa07:e080::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a7:32:be:76:f9:1b:34:39:c9:74:54:67:a2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f83fdc102bc936d1f315227efeef2c1e99432cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:17:a6:64:b6:5e:6a:8c:49:22:85:28:20: 0b:82:87:ef:61:80:b8:50:16:96:b8:6a:a4:da:0d: 6f:9a:13:d6:a9:88:01:8d:b5:9b:1b:0e:be:aa:86: d4:c5:b9:87:a1:9b:91:d4:e5:40:d8:00:77:7d:21: a3:59:69:11:16:88:38:30:b5:6c:a4:e3:54:7d:b6: 8f:4b:2f:f4:44:80:cc:cb:c3:3a:07:34:e4:90:e0: db:fe:2e:81:fa:54:5f:cd:eb:64:50:f6:76:39:a5: 75:c1:41:73:69:ed:06:5f:56:cd:58:98:25:45:f5: 9b:e9:40:69:8e:fa:11:44:b2:9e:ab:25:e0:e3:a9: 85:f5:d4:f1:44:cd:64:ad:de:01:df:5e:d5:87:74: 2c:d0:0f:8d:94:e8:c8:fb:66:63:28:bc:c7:61:f4: a0:c2:f6:22:cf:5c:e9:4e:27:f5:a0:e9:a7:da:1d: 55:77:56:31:65:b1:fe:c1:aa:9e:2d:32:42:ec:e4: 2d:b5:e9:12:32:a2:11:94:a8:7c:61:8a:47:1f:55: 45:4c:5a:b1:78:a7:a8:bf:b7:8d:63:34:e6:c0:3e: 78:ec:5e:d5:6e:50:19:5d:ef:f7:a6:3b:eb:e5:e0: 75:68:00:2c:0b:49:e4:94:7b:ac:2d:8b:66:a9:1b: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:83:FD:C1:02:BC:93:6D:1F:31:52:27:EF:EE:F2:C1:E9:94:32:CD X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/H4P9wQK8k20fMVIn7-7ywemUMs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e080::/44 Signature Algorithm: sha256WithRSAEncryption 7b:15:da:c5:45:7b:0a:a8:d4:d7:32:50:d4:fe:aa:19:22:b7: 7e:59:a9:6b:24:1f:44:da:dd:8f:7d:bb:8e:ae:3b:03:e4:1e: 1b:63:2d:61:f9:c3:58:f3:6e:b7:25:97:94:9c:c5:32:24:51: 10:63:37:95:bf:59:8b:a9:ed:9d:5f:55:fe:fe:02:02:df:8b: 6d:3b:17:d1:8a:0f:4b:2a:24:ad:f2:eb:b3:bb:7f:93:12:aa: dc:98:02:66:eb:6f:50:90:8f:3c:68:ac:f5:7e:52:27:26:0c: 76:86:8c:4e:fb:9c:58:70:51:ef:39:ac:7a:b7:ec:42:44:5a: 65:72:82:7a:29:51:72:c7:8c:ac:bc:31:98:22:e8:2c:a6:56: f4:0f:73:d5:1f:d6:97:92:04:3c:38:9b:87:fc:ce:f7:59:52: 01:1d:35:71:00:8c:91:78:c9:41:f2:e3:b7:f4:d4:1b:cf:53: 32:5b:9f:a6:9a:b0:1e:e1:73:46:e8:00:1b:44:e7:1c:f7:84: a0:cc:51:c6:61:d2:87:cc:1e:d6:68:e1:26:69:d3:fe:fd:b1: e6:a9:96:cd:9c:44:2d:38:9c:6b:40:2c:1d:88:62:ac:58:f4: b8:6d:bf:f7:e6:0b:76:6f:77:68:fb:e2:07:b7:83:6a:ec:63: 05:04:47:90 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqcyvnb5GzQ5yXRUZ6ICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjgzZmRjMTAyYmM5MzZkMWYzMTUyMjdlZmVlZjJjMWU5OTQzMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P8XpmS2XmqMSSKFKCALgofvYYC4 UBaWuGqk2g1vmhPWqYgBjbWbGw6+qobUxbmHoZuR1OVA2AB3fSGjWWkRFog4MLVs pONUfbaPSy/0RIDMy8M6BzTkkODb/i6B+lRfzetkUPZ2OaV1wUFzae0GX1bNWJgl RfWb6UBpjvoRRLKeqyXg46mF9dTxRM1krd4B317Vh3Qs0A+NlOjI+2ZjKLzHYfSg wvYiz1zpTif1oOmn2h1Vd1YxZbH+waqeLTJC7OQttekSMqIRlKh8YYpHH1VFTFqx eKeov7eNYzTmwD547F7VblAZXe/3pjvr5eB1aAAsC0nklHusLYtmqRsbqwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB+D/cECvJNtHzFSJ+/u8sHplDLNMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSDRQOXdRSzhrMjBmTVZJbjctN3l3ZW1VTXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+CA MA0GCSqGSIb3DQEBCwUAA4IBAQB7FdrFRXsKqNTXMlDU/qoZIrd+WalrJB9E2t2P fbuOrjsD5B4bYy1h+cNY8263JZeUnMUyJFEQYzeVv1mLqe2dX1X+/gIC34ttOxfR ig9LKiSt8uuzu3+TEqrcmAJm629QkI88aKz1flInJgx2hoxO+5xYcFHvOax6t+xC RFplcoJ6KVFyx4ysvDGYIugsplb0D3PVH9aXkgQ8OJuH/M73WVIBHTVxAIyReMlB 8uO39NQbz1MyW5+mmrAe4XNG6AAbROcc94SgzFHGYdKHzB7WaOEmadP+/bHmqZbN nEQtOJxrQCwdiGKsWPS4bb/35gt2b3do++IHt4Nq7GMFBEeQ -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client