This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/H2q-8lUD1NsqJj9_3xLgmoGT5ys.roa File: H2q-8lUD1NsqJj9_3xLgmoGT5ys.roa (raw, json) Hash identifier: FMHG+UBbgC5KGEZErFIsnRHD/lxQmbwdajPgnbv5jM4= Subject key identifier: 1F:6A:BE:F2:55:03:D4:DB:2A:26:3F:7F:DF:12:E0:9A:81:93:E7:2B Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A66FE061FF017E9A3F9C40B3F382 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/H2q-8lUD1NsqJj9_3xLgmoGT5ys.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209874 IP address blocks: 2a12:bec4:1520::/48 maxlen: 48 2a12:bec4:1521::/48 maxlen: 48 2a12:bec4:1522::/48 maxlen: 48 2a12:bec4:152f::/48 maxlen: 48 2a12:bec4:1651::/48 maxlen: 48 2a12:bec4:1652::/48 maxlen: 48 2a12:bec4:1653::/48 maxlen: 48 2a12:bec4:1654::/48 maxlen: 48 2a12:bec4:1655::/48 maxlen: 48 2a12:bec4:1656::/48 maxlen: 48 2a12:bec4:1657::/48 maxlen: 48 2a12:bec4:1658::/48 maxlen: 48 2a12:bec4:1659::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a6:6f:e0:61:ff:01:7e:9a:3f:9c:40:b3:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f6abef25503d4db2a263f7fdf12e09a8193e72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:16:f6:08:56:65:cc:e4:d8:b5:c4:93:42: 5f:26:9f:a7:f3:42:ce:a1:8b:93:15:f3:83:3d:5b: 83:af:88:09:19:f3:9a:4b:70:90:c8:be:50:31:16: 5c:f0:72:8a:2c:54:d5:c7:1b:c1:a4:7d:c4:d0:c0: 8c:79:7f:51:c9:1e:9a:f5:cc:7b:14:e4:b4:89:aa: c3:bb:78:7a:25:d6:64:39:9c:4f:a0:b2:50:8f:79: 99:a8:19:30:92:90:c2:12:29:a6:d9:22:50:45:76: 63:53:ca:e3:c1:76:37:ad:d6:3d:63:90:65:08:2f: 3f:f6:1c:0c:38:44:0d:bf:70:e5:a8:42:3f:ce:0f: 81:b3:8a:4b:61:d5:ba:db:40:31:c0:15:15:19:2c: 1c:76:d7:6c:67:c9:6b:2b:b6:56:25:56:44:ee:de: 4d:7b:27:19:25:a9:a4:33:3a:6a:0d:6c:0f:60:ac: 72:ed:11:70:18:ff:5e:fa:a6:94:ed:35:44:0e:7f: 4d:11:78:37:a6:1a:4a:af:b0:bd:4d:28:3f:10:53: 31:a7:a0:44:9c:24:73:c8:d9:db:b7:5e:68:e4:fa: 54:46:9e:12:59:91:95:be:3c:8d:29:e3:3f:f8:f7: 33:01:1b:52:b5:71:07:90:ce:a4:e3:bc:1f:cb:e1: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6A:BE:F2:55:03:D4:DB:2A:26:3F:7F:DF:12:E0:9A:81:93:E7:2B X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/H2q-8lUD1NsqJj9_3xLgmoGT5ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1520::-2a12:bec4:1522:ffff:ffff:ffff:ffff:ffff 2a12:bec4:152f::/48 2a12:bec4:1651::-2a12:bec4:1659:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 23:e4:72:3d:27:3f:30:4b:3a:d8:d0:88:b5:8a:b9:f3:8d:4b: 1d:05:48:1b:2c:25:76:9c:2d:fb:cf:45:4d:a8:d9:48:2b:12: 48:9c:f5:0b:4e:cf:8a:c1:f4:5e:8c:2e:8f:7b:02:79:be:e2: de:b0:ad:d9:d8:a9:4a:5e:a5:af:22:16:a6:41:57:e9:9b:0a: 85:f0:53:3d:e6:78:c1:33:32:d1:2d:88:87:b8:34:14:76:43: 68:a5:24:a9:c2:7b:73:78:94:8b:37:1b:ea:1f:0d:72:6a:bc: 39:4f:1b:9c:96:06:54:a8:0c:7e:7a:39:74:a1:c5:57:8d:90: a0:8e:4a:49:52:4f:91:4f:0c:f5:87:11:42:9d:5a:be:dd:73: 8e:d3:39:02:62:0e:d3:10:6d:60:cf:37:bb:53:6d:a4:a4:f4: 34:ab:5c:f3:b5:fb:3d:47:f7:d6:6a:e1:ca:d4:12:ff:cc:81: 79:b0:e5:7c:7b:87:29:3d:64:9c:32:c4:02:0e:ce:af:bb:eb: 4c:0e:00:6a:6b:1c:6c:f3:37:be:97:bb:51:cc:e5:2e:2f:3c: eb:30:23:88:61:dc:fe:73:e1:4d:98:74:1c:8c:a3:93:65:25: 82:fd:2e:98:9d:d4:6a:4c:8c:a7:e0:db:76:84:6d:9d:f8:44: 5f:6b:29:9e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt5EKZv4GH/AX6aP5xAs/OCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjZhYmVmMjU1MDNkNGRiMmEyNjNmN2ZkZjEyZTA5YTgxOTNlNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vAW9ghWZczk2LXEk0JfJp+n80LO oYuTFfODPVuDr4gJGfOaS3CQyL5QMRZc8HKKLFTVxxvBpH3E0MCMeX9RyR6a9cx7 FOS0iarDu3h6JdZkOZxPoLJQj3mZqBkwkpDCEimm2SJQRXZjU8rjwXY3rdY9Y5Bl CC8/9hwMOEQNv3DlqEI/zg+Bs4pLYdW620AxwBUVGSwcdtdsZ8lrK7ZWJVZE7t5N eycZJamkMzpqDWwPYKxy7RFwGP9e+qaU7TVEDn9NEXg3phpKr7C9TSg/EFMxp6BE nCRzyNnbt15o5PpURp4SWZGVvjyNKeM/+PczARtStXEHkM6k47wfy+HPbwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFB9qvvJVA9TbKiY/f98S4JqBk+crMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvSDJxLThsVUQxTnNxSmo5XzN4TGdtb0dUNXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwUqEr7E FSADBwAqEr7EFSIDBwAqEr7EFS8wEgMHACoSvsQWUQMHASoSvsQWWDANBgkqhkiG 9w0BAQsFAAOCAQEAI+RyPSc/MEs62NCItYq5841LHQVIGywldpwt+89FTajZSCsS SJz1C07PisH0Xowuj3sCeb7i3rCt2dipSl6lryIWpkFX6ZsKhfBTPeZ4wTMy0S2I h7g0FHZDaKUkqcJ7c3iUizcb6h8Ncmq8OU8bnJYGVKgMfno5dKHFV42QoI5KSVJP kU8M9YcRQp1avt1zjtM5AmIO0xBtYM83u1NtpKT0NKtc87X7PUf31mrhytQS/8yB ebDlfHuHKT1knDLEAg7Or7vrTA4AamscbPM3vpe7UczlLi886zAjiGHc/nPhTZh0 HIyjk2Ulgv0umJ3UakyMp+DbdoRtnfhEX2spng== -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:05 2026 by rpki-client