This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hYgVT2ioW4g4XqD47cv1OR_pitg.roa File: hYgVT2ioW4g4XqD47cv1OR_pitg.roa (raw, json) Hash identifier: j2IDDFGdZjLmu6uYqc1dm47/59y3uNvXBAT5RMnS6j8= Subject key identifier: 85:88:15:4F:68:A8:5B:88:38:5E:A0:F8:ED:CB:F5:39:1F:E9:8A:D8 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAB014E1067005E7B285BDA97D5AD Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hYgVT2ioW4g4XqD47cv1OR_pitg.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 2a0e:aa01::/32 maxlen: 32 2a0e:aa01:bad0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ab:01:4e:10:67:00:5e:7b:28:5b:da:97:d5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8588154f68a85b88385ea0f8edcbf5391fe98ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:90:b0:68:ee:21:22:3f:33:64:8c:d8:cc: 8f:86:3d:24:7e:fa:36:3f:32:7e:76:6f:48:c1:62: ba:b8:b8:50:40:60:ca:c7:f4:a1:0b:e4:81:d4:20: 66:50:70:69:d5:7d:64:69:47:87:51:74:f4:52:5c: a5:b1:e0:14:12:48:a7:14:b8:cc:b8:74:7e:d0:0f: 5d:d3:82:37:76:37:ca:8a:99:26:7c:d5:dd:8e:79: ee:9a:d5:9a:59:9c:d9:86:0a:33:13:12:d6:bb:46: 4a:a0:df:d0:d5:a7:96:bc:de:7b:82:98:ce:51:59: 28:cc:42:c8:c9:dc:87:68:f8:54:9f:00:4d:cd:ee: 0b:5d:5c:e7:06:ec:f9:d1:bd:4c:5c:ff:d4:7a:15: 1e:e0:6a:4a:a2:27:69:5c:9f:d7:09:70:6b:2c:7d: 6d:df:62:04:82:13:55:c5:4e:79:89:76:f4:11:3c: 1d:ab:72:d4:83:91:0f:ac:db:fc:ad:a4:53:e4:c6: 73:af:da:95:9d:32:40:3a:bb:85:45:32:a2:d0:2f: f8:52:e4:5b:8e:67:ca:7c:23:d0:bf:2b:7e:6a:61: 83:b1:e1:9f:48:83:6b:83:70:bd:3b:f0:09:ba:e6: 09:75:c9:17:8d:e2:0c:df:78:d4:cd:08:77:5d:8f: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:88:15:4F:68:A8:5B:88:38:5E:A0:F8:ED:CB:F5:39:1F:E9:8A:D8 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hYgVT2ioW4g4XqD47cv1OR_pitg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01::/32 Signature Algorithm: sha256WithRSAEncryption 37:fc:d7:4f:a9:74:26:51:95:ec:4a:0c:2c:94:55:dd:df:c2: 6b:d7:b7:38:cb:e3:7c:c2:dd:01:83:93:60:9a:f3:da:7f:c7: 1c:c1:67:74:0d:53:54:19:3a:97:d0:8d:a3:94:4c:b6:16:7d: e6:d3:48:ef:f9:99:f4:5b:1c:09:88:25:af:48:08:9c:6a:89: dd:e5:6d:97:f8:87:27:b3:76:9e:30:a8:8e:f7:56:b5:8e:9e: 7d:f4:de:51:69:a8:97:d0:e8:b4:70:ec:71:1b:80:da:38:ee: 48:9f:36:76:1d:5e:c0:cb:6a:85:fb:be:4c:bb:c6:27:3d:f6: 1a:e1:b1:c6:46:9b:b0:4f:1c:a0:be:c7:08:c5:b6:54:13:ac: 09:d1:73:6b:fe:e0:7a:66:d2:05:cc:6b:71:4f:06:84:b5:cc: f1:43:2b:fb:51:d3:08:f3:13:d4:2a:0b:e0:c1:f1:cb:44:81: 48:44:0c:97:3f:11:8e:40:af:93:61:91:39:69:72:91:ec:8f: 5d:9d:50:35:6b:9d:ec:fe:e0:f8:67:06:98:5c:37:f8:18:34: eb:60:fe:9d:65:07:02:33:a7:e3:25:26:51:7f:30:84:17:41: 84:c6:30:70:61:4d:b0:46:65:4e:3a:7f:89:a2:fc:6e:ca:96: 1b:38:1b:70 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fqsBThBnAF57KFval9WtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTg4MTU0ZjY4YTg1Yjg4Mzg1ZWEwZjhlZGNiZjUzOTFmZTk4YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2OQsGjuISI/M2SM2MyPhj0kfvo2 PzJ+dm9IwWK6uLhQQGDKx/ShC+SB1CBmUHBp1X1kaUeHUXT0UlylseAUEkinFLjM uHR+0A9d04I3djfKipkmfNXdjnnumtWaWZzZhgozExLWu0ZKoN/Q1aeWvN57gpjO UVkozELIydyHaPhUnwBNze4LXVznBuz50b1MXP/UehUe4GpKoidpXJ/XCXBrLH1t 32IEghNVxU55iXb0ETwdq3LUg5EPrNv8raRT5MZzr9qVnTJAOruFRTKi0C/4UuRb jmfKfCPQvyt+amGDseGfSINrg3C9O/AJuuYJdckXjeIM33jUzQh3XY9VrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIWIFU9oqFuIOF6g+O3L9Tkf6YrYMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvaFlnVlQyaW9XNGc0WHFENDdjdjFPUl9waXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg6qATAN BgkqhkiG9w0BAQsFAAOCAQEAN/zXT6l0JlGV7EoMLJRV3d/Ca9e3OMvjfMLdAYOT YJrz2n/HHMFndA1TVBk6l9CNo5RMthZ95tNI7/mZ9FscCYglr0gInGqJ3eVtl/iH J7N2njCojvdWtY6effTeUWmol9DotHDscRuA2jjuSJ82dh1ewMtqhfu+TLvGJz32 GuGxxkabsE8coL7HCMW2VBOsCdFza/7gembSBcxrcU8GhLXM8UMr+1HTCPMT1CoL 4MHxy0SBSEQMlz8RjkCvk2GROWlykeyPXZ1QNWud7P7g+GcGmFw3+Bg062D+nWUH AjOn4yUmUX8whBdBhMYwcGFNsEZlTjp/iaL8bsqWGzgbcA== -----END CERTIFICATE-----Generated at Fri Jan 2 21:07:29 2026 by rpki-client