This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0RuH6swgr4dgZDeT0ayxkimE9Hw.roa File: 0RuH6swgr4dgZDeT0ayxkimE9Hw.roa (raw, json) Hash identifier: 9eGCuvzxM+dWvGDjmiLybGAbcRq6c51fxEFCE7cSB7o= Subject key identifier: D1:1B:87:EA:CC:20:AF:87:60:64:37:93:D1:AC:B1:92:29:84:F4:7C Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A1FDC69BB81CDA643520A66739CE Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0RuH6swgr4dgZDeT0ayxkimE9Hw.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207530 IP address blocks: 2a12:bec4:1a90::/44 maxlen: 48 2a12:bec4:1b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a1:fd:c6:9b:b8:1c:da:64:35:20:a6:67:39:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d11b87eacc20af8760643793d1acb1922984f47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:62:3f:a7:f0:23:ac:55:2f:b8:14:c7:40: fa:ea:13:46:3c:75:32:8a:57:53:1d:d9:f1:8f:b9: 44:56:33:7d:a1:77:95:4e:9b:83:b4:33:46:b7:fd: 4a:b8:91:f9:a8:4b:49:56:b4:6d:bb:80:76:51:b2: 58:8e:c3:f0:36:1e:00:6f:a0:4a:de:49:f5:2b:ff: 35:0e:0b:38:14:1d:eb:10:3d:c7:4c:4f:e5:14:fd: 93:f7:9a:e2:0a:58:98:94:f1:a8:f9:d0:5c:d0:cb: fe:fe:a8:41:af:1a:2c:85:47:a4:c8:9d:40:1c:57: e8:bd:4f:8e:e1:38:96:23:36:e3:1c:0f:85:ff:5c: e0:c2:ea:93:2b:15:1b:57:85:f7:cf:91:74:e5:f7: a9:3d:ed:e9:ae:62:f7:b8:39:45:67:b7:3c:97:f0: ab:a4:b4:3a:dd:41:05:c4:70:22:7f:de:83:6e:2a: 4f:45:47:88:4a:00:34:0e:10:50:a5:d2:3b:9e:93: 95:00:6e:b2:7f:68:74:31:51:1e:62:35:f7:41:17: 2a:03:b2:9a:49:5c:0e:13:59:08:f6:6d:e7:c1:8f: 66:8f:b9:db:56:c1:13:23:8c:1e:cc:2c:22:75:48: 5e:e7:50:32:61:d5:8f:3d:2c:29:59:76:f8:20:05: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:87:EA:CC:20:AF:87:60:64:37:93:D1:AC:B1:92:29:84:F4:7C X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0RuH6swgr4dgZDeT0ayxkimE9Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1a90::/44 2a12:bec4:1b20::/44 Signature Algorithm: sha256WithRSAEncryption 7b:c9:29:e8:ef:72:12:1c:19:eb:af:3c:c6:b9:b5:68:9f:ea: b9:95:6f:0f:fc:7c:13:bd:23:5a:35:c6:77:5b:68:4c:0e:e9: 59:df:60:f6:1e:b2:a0:dc:3d:52:88:f9:10:e5:0d:05:53:5a: 79:d2:6e:7c:6e:64:c3:b6:cd:e0:6b:0d:6a:f4:e7:e8:f5:e3: a8:f7:13:f9:50:4b:d6:8b:23:0f:fa:9d:40:0a:23:8f:13:f9: d3:f8:41:f0:11:97:0d:07:3c:8f:c1:c1:c3:ce:bf:46:5c:d4: 7b:99:4d:05:73:77:14:11:28:ef:67:0c:af:49:8d:71:79:09: d6:c9:70:e9:4b:a1:28:ff:16:43:69:14:96:6f:50:14:39:ec: cf:89:0e:f9:08:54:75:e7:7c:32:81:97:20:68:e8:11:82:29: 92:75:de:5d:67:4c:7e:ce:38:7b:62:a8:7e:c9:e0:e4:76:fd: ea:ea:af:5a:63:a5:54:99:1c:bc:34:f0:9f:05:0c:b4:92:5b: ec:60:67:36:51:1b:53:1c:78:dc:bf:ef:0c:7a:9f:cc:88:02: f0:1b:87:ce:ab:db:e4:c8:65:b2:91:bd:81:f4:13:ac:1a:b5: 6c:ee:28:ef:f0:45:b9:b7:4e:2d:65:83:3c:5c:c1:4f:e4:9e: 18:b6:ea:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EKH9xpu4HNpkNSCmZznOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTFiODdlYWNjMjBhZjg3NjA2NDM3OTNkMWFjYjE5MjI5ODRmNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0piP6fwI6xVL7gUx0D66hNGPHUy ildTHdnxj7lEVjN9oXeVTpuDtDNGt/1KuJH5qEtJVrRtu4B2UbJYjsPwNh4Ab6BK 3kn1K/81Dgs4FB3rED3HTE/lFP2T95riCliYlPGo+dBc0Mv+/qhBrxoshUekyJ1A HFfovU+O4TiWIzbjHA+F/1zgwuqTKxUbV4X3z5F05fepPe3prmL3uDlFZ7c8l/Cr pLQ63UEFxHAif96DbipPRUeISgA0DhBQpdI7npOVAG6yf2h0MVEeYjX3QRcqA7Ka SVwOE1kI9m3nwY9mj7nbVsETI4wezCwidUhe51AyYdWPPSwpWXb4IAVsbQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNEbh+rMIK+HYGQ3k9GssZIphPR8MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMFJ1SDZzd2dyNGRnWkRlVDBheXhraW1FOUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBqQ AwcEKhK+xBsgMA0GCSqGSIb3DQEBCwUAA4IBAQB7ySno73ISHBnrrzzGubVon+q5 lW8P/HwTvSNaNcZ3W2hMDulZ32D2HrKg3D1SiPkQ5Q0FU1p50m58bmTDts3gaw1q 9Ofo9eOo9xP5UEvWiyMP+p1ACiOPE/nT+EHwEZcNBzyPwcHDzr9GXNR7mU0Fc3cU ESjvZwyvSY1xeQnWyXDpS6Eo/xZDaRSWb1AUOezPiQ75CFR153wygZcgaOgRgimS dd5dZ0x+zjh7Yqh+yeDkdv3q6q9aY6VUmRy8NPCfBQy0klvsYGc2URtTHHjcv+8M ep/MiALwG4fOq9vkyGWykb2B9BOsGrVs7ijv8EW5t04tZYM8XMFP5J4Ytuo2 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:01 2026 by rpki-client