This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/RHIORzEGmvkGv_V_nfxYvvbNF5I.roa File: RHIORzEGmvkGv_V_nfxYvvbNF5I.roa (raw, json) Hash identifier: Rnnbwjkk5rtBVZCk37qZ58f1PQpgFaNfvisMuMuvgdY= Subject key identifier: 44:72:0E:47:31:06:9A:F9:06:BF:F5:7F:9D:FC:58:BE:F6:CD:17:92 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA91F9C6A832C7842A00677D72B83 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/RHIORzEGmvkGv_V_nfxYvvbNF5I.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202662 IP address blocks: 2a0e:aa07:e04d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:1f:9c:6a:83:2c:78:42:a0:06:77:d7:2b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44720e4731069af906bff57f9dfc58bef6cd1792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:f4:c0:eb:29:1b:5c:00:85:0f:26:65:18: bb:23:96:c7:9f:39:c0:a3:e1:27:a5:d8:82:23:b0: b3:52:b2:f8:fe:7d:68:ad:01:95:fb:98:fc:a4:01: 8c:56:8f:20:30:5c:84:d5:4c:1d:14:cb:8d:b7:3d: 44:26:c8:44:6b:39:55:fc:e6:a0:41:b4:ce:98:88: 10:f7:c0:e5:81:e6:67:84:49:c8:31:e0:ed:96:32: db:f1:f7:85:7e:ed:20:37:c5:77:fe:da:d5:5b:47: 3f:aa:6a:59:f5:2d:3e:e3:b0:e8:e9:36:38:4b:fa: 41:be:41:df:8a:cd:ba:39:b5:b4:85:a8:5d:b6:0c: dc:b2:94:92:9b:4b:98:ed:68:7a:fe:85:d4:0f:0a: ca:bf:ca:74:2d:fd:60:18:5a:3b:7d:af:40:26:12: 84:72:f9:a4:46:a9:52:5d:d4:9f:81:66:00:6c:34: 78:ac:49:6d:49:0e:f3:93:ed:70:13:54:c2:79:1d: af:3b:42:e8:bb:b9:56:ee:2d:d8:63:7b:62:2e:f2: 60:d6:f5:ae:ff:4f:5d:6f:7a:fc:b2:a7:75:ca:3f: 03:74:5d:15:cb:49:db:5f:0f:0b:a4:c5:82:18:68: 83:89:d4:fa:f1:02:d7:62:be:81:24:a5:22:f3:c2: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:72:0E:47:31:06:9A:F9:06:BF:F5:7F:9D:FC:58:BE:F6:CD:17:92 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/RHIORzEGmvkGv_V_nfxYvvbNF5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e04d::/48 Signature Algorithm: sha256WithRSAEncryption 32:9c:4d:c9:c0:43:8b:71:0e:50:c4:0b:cf:75:f5:fb:01:b6: e2:94:d6:b4:08:af:d4:5d:8a:80:b2:2f:3f:52:ca:59:b1:f4: 6c:f1:1c:b1:7d:a9:9e:9e:0e:5e:ec:74:7c:d8:3a:7e:b7:60: 70:ff:37:4a:0f:e0:1e:dc:9d:4c:e2:ef:f5:86:bd:77:83:df: f9:d3:8e:e5:e3:3f:43:cc:05:74:3a:7f:f8:7b:a6:0c:52:e5: f3:bb:78:23:20:a4:46:5c:47:3c:9d:f8:24:5e:da:46:60:f6: 45:71:23:81:ce:5c:f9:f8:90:34:db:6e:61:df:3c:14:21:c2: 6a:b8:04:d3:2f:85:80:f5:25:21:86:db:a2:a0:53:30:ed:e6: 31:33:c9:d5:19:76:9c:c2:85:58:ed:3e:ce:a5:1f:48:bf:d5: 4e:5e:78:1e:3a:70:34:45:40:e9:ab:2e:fb:b7:ab:22:97:8c: f3:79:a0:ae:8e:82:87:00:87:82:e0:a5:5a:2d:35:09:99:c8: 34:81:bc:49:40:6c:56:bf:2c:d8:4a:8a:55:dd:64:8c:91:74: 55:1f:3f:ac:ee:4c:b5:92:77:ca:3f:86:98:d1:fb:05:ba:42: a9:be:fb:55:1d:42:c0:74:d0:aa:b4:e4:41:8f:7a:1c:28:dd: cc:96:d0:0a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqkfnGqDLHhCoAZ31yuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDcyMGU0NzMxMDY5YWY5MDZiZmY1N2Y5ZGZjNThiZWY2Y2QxNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod70wOspG1wAhQ8mZRi7I5bHnznA o+EnpdiCI7CzUrL4/n1orQGV+5j8pAGMVo8gMFyE1UwdFMuNtz1EJshEazlV/Oag QbTOmIgQ98DlgeZnhEnIMeDtljLb8feFfu0gN8V3/trVW0c/qmpZ9S0+47Do6TY4 S/pBvkHfis26ObW0hahdtgzcspSSm0uY7Wh6/oXUDwrKv8p0Lf1gGFo7fa9AJhKE cvmkRqlSXdSfgWYAbDR4rEltSQ7zk+1wE1TCeR2vO0Lou7lW7i3YY3tiLvJg1vWu /09db3r8sqd1yj8DdF0Vy0nbXw8LpMWCGGiDidT68QLXYr6BJKUi88LUbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFERyDkcxBpr5Br/1f538WL72zReSMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvUkhJT1J6RUdtdmtHdl9WX25meFl2dmJORjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+BN MA0GCSqGSIb3DQEBCwUAA4IBAQAynE3JwEOLcQ5QxAvPdfX7AbbilNa0CK/UXYqA si8/UspZsfRs8Ryxfameng5e7HR82Dp+t2Bw/zdKD+Ae3J1M4u/1hr13g9/5047l 4z9DzAV0On/4e6YMUuXzu3gjIKRGXEc8nfgkXtpGYPZFcSOBzlz5+JA0225h3zwU IcJquATTL4WA9SUhhtuioFMw7eYxM8nVGXacwoVY7T7OpR9Iv9VOXngeOnA0RUDp qy77t6sil4zzeaCujoKHAIeC4KVaLTUJmcg0gbxJQGxWvyzYSopV3WSMkXRVHz+s 7ky1knfKP4aY0fsFukKpvvtVHULAdNCqtORBj3ocKN3MltAK -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client