This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hVQdn9NAV17s-viOkGUy9xWMk6Y.roa File: hVQdn9NAV17s-viOkGUy9xWMk6Y.roa (raw, json) Hash identifier: LbY19KowjkEZwXdi4u++6WatOPdPHwPm5x0xQ5wdGRI= Subject key identifier: 85:54:1D:9F:D3:40:57:5E:EC:FA:F8:8E:90:65:32:F7:15:8C:93:A6 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB785E522E05EAC8FCB5CB2847A89 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hVQdn9NAV17s-viOkGUy9xWMk6Y.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211843 IP address blocks: 2a0e:aa07:e01b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b7:85:e5:22:e0:5e:ac:8f:cb:5c:b2:84:7a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85541d9fd340575eecfaf88e906532f7158c93a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:40:8d:ec:7d:80:3c:be:f6:cc:bc:81:45: ec:5c:00:68:44:b0:f0:3c:e0:1b:29:de:ac:c7:14: bc:f5:a3:19:a4:dc:62:84:f5:da:67:8f:c7:ba:88: ec:d3:06:4c:5c:c4:52:e3:76:16:b6:8a:52:b2:15: ba:c0:2e:77:2e:c9:b6:ee:e9:85:bc:c9:5a:61:55: 67:c1:36:80:64:54:a0:5c:62:78:24:79:43:a0:98: 3f:9c:88:04:5a:90:b5:16:d0:3b:19:10:32:f4:a6: 50:52:12:0b:0d:bd:0a:50:9c:9c:92:7c:68:f7:35: f4:10:43:03:43:88:8f:00:fe:fb:60:4d:76:f7:d2: b1:5e:d7:93:27:33:03:f8:5c:4a:54:f8:ee:a7:91: 54:b9:6b:e1:7c:b0:6d:63:64:3a:64:a8:d4:e6:e0: 0d:96:28:65:cf:91:0c:68:4a:fa:22:08:a4:27:9f: 9f:06:ac:fd:ac:41:4f:82:c2:5d:e6:bd:ea:c5:a4: 9e:d1:de:a9:1b:32:84:f0:b3:12:8a:9e:17:4e:0a: 57:13:83:b9:c7:6c:46:da:95:bc:c3:5a:12:cc:c5: fe:10:e2:c6:fc:9e:20:7d:06:83:bc:fe:a8:ce:0d: 1e:ec:75:d1:7b:e0:48:61:16:16:1d:f0:24:7b:bb: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:1D:9F:D3:40:57:5E:EC:FA:F8:8E:90:65:32:F7:15:8C:93:A6 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hVQdn9NAV17s-viOkGUy9xWMk6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e01b::/48 Signature Algorithm: sha256WithRSAEncryption be:d7:d7:0a:f4:eb:ac:8d:df:8e:d6:c1:9c:f5:2f:0e:e4:f2: b2:9f:44:68:7f:e9:5b:78:d8:c8:cd:4e:75:d9:69:0a:5c:d4: 65:18:e9:af:48:72:72:28:a4:ee:d4:45:75:ca:24:54:72:24: 1f:c3:e8:c5:ce:7d:3b:96:cf:34:20:02:6b:4f:78:a9:68:73: 21:34:8a:44:9a:a4:7d:f7:c1:af:5e:5d:97:d0:75:80:09:5e: c4:6b:1b:6b:a2:f9:4e:04:94:39:1b:1b:87:4a:5a:84:02:bc: 76:aa:f1:8d:89:00:08:ce:15:e2:0b:62:ca:74:b4:5b:1a:0d: b8:41:86:0c:ca:a2:74:3b:53:06:62:9a:77:ab:8c:51:bd:09: 5f:95:05:bb:dc:0d:51:5c:6f:a2:f0:0f:55:7f:7c:72:c2:4a: 5b:36:65:6e:a1:44:8a:ca:59:62:65:bc:21:80:24:46:f9:c5: 29:2a:11:a5:ae:ce:7c:60:c3:e6:46:fd:ab:cc:54:61:8f:4a: 26:37:00:92:f7:11:ce:31:39:24:41:19:ab:46:f6:22:61:93: d7:65:30:b7:a7:9d:b7:86:43:25:c8:08:cf:db:91:6b:a8:2a: 72:d8:be:d3:60:c8:56:e2:9c:8b:f8:e0:15:01:d7:c6:20:52: c3:e4:60:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5freF5SLgXqyPy1yyhHqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTU0MWQ5ZmQzNDA1NzVlZWNmYWY4OGU5MDY1MzJmNzE1OGM5M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hlAjex9gDy+9sy8gUXsXABoRLDw POAbKd6sxxS89aMZpNxihPXaZ4/Huojs0wZMXMRS43YWtopSshW6wC53Lsm27umF vMlaYVVnwTaAZFSgXGJ4JHlDoJg/nIgEWpC1FtA7GRAy9KZQUhILDb0KUJycknxo 9zX0EEMDQ4iPAP77YE1299KxXteTJzMD+FxKVPjup5FUuWvhfLBtY2Q6ZKjU5uAN lihlz5EMaEr6IgikJ5+fBqz9rEFPgsJd5r3qxaSe0d6pGzKE8LMSip4XTgpXE4O5 x2xG2pW8w1oSzMX+EOLG/J4gfQaDvP6ozg0e7HXRe+BIYRYWHfAke7uLDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIVUHZ/TQFde7Pr4jpBlMvcVjJOmMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvaFZRZG45TkFWMTdzLXZpT2tHVXk5eFdNazZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ab MA0GCSqGSIb3DQEBCwUAA4IBAQC+19cK9Ousjd+O1sGc9S8O5PKyn0Rof+lbeNjI zU512WkKXNRlGOmvSHJyKKTu1EV1yiRUciQfw+jFzn07ls80IAJrT3ipaHMhNIpE mqR998GvXl2X0HWACV7EaxtrovlOBJQ5GxuHSlqEArx2qvGNiQAIzhXiC2LKdLRb Gg24QYYMyqJ0O1MGYpp3q4xRvQlflQW73A1RXG+i8A9Vf3xywkpbNmVuoUSKylli ZbwhgCRG+cUpKhGlrs58YMPmRv2rzFRhj0omNwCS9xHOMTkkQRmrRvYiYZPXZTC3 p523hkMlyAjP25FrqCpy2L7TYMhW4pyL+OAVAdfGIFLD5GB2 -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:11 2026 by rpki-client