This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ho3VmZb6fPoDD5TEg6c4Z2B-qwo.roa File: ho3VmZb6fPoDD5TEg6c4Z2B-qwo.roa (raw, json) Hash identifier: OuuhOk2XBgJ4GEza2PohNr1gY4DbTBmVLKjIkjtotpo= Subject key identifier: 86:8D:D5:99:96:FA:7C:FA:03:0F:94:C4:83:A7:38:67:60:7E:AB:0A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108BD27590F66A22F961B004EB1641 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ho3VmZb6fPoDD5TEg6c4Z2B-qwo.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197963 IP address blocks: 2a12:bec0:380::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8b:d2:75:90:f6:6a:22:f9:61:b0:04:eb:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=868dd59996fa7cfa030f94c483a73867607eab0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:68:89:7e:18:80:47:06:ff:01:83:88:a4: 7f:b7:b1:20:c7:fd:8c:ad:8e:9a:d5:cd:23:ed:02: f3:ac:90:48:bf:9b:b3:80:16:89:2c:e2:58:f1:e1: b1:15:46:ac:b4:c5:58:d7:14:bb:d9:e1:d0:92:ee: 33:ae:96:fa:c4:38:1d:3f:58:63:94:1e:18:de:ca: e1:0f:67:01:e7:26:44:1e:5d:57:54:12:b7:9d:ea: 93:fe:d4:d3:8d:85:db:95:ca:4d:4b:a4:a5:f8:5d: 25:bf:e6:ea:a7:f6:40:e6:dd:b0:54:4a:43:a0:4d: 2a:1d:f6:b3:89:1c:42:4b:fa:45:22:7f:9b:55:d6: 86:b5:d8:a6:a0:d7:30:4e:97:95:c0:5a:63:64:c4: 2a:c3:e6:c8:ab:7b:02:1f:f8:01:06:58:ed:f0:a7: 78:90:cb:99:37:f8:c0:39:c6:74:39:41:e2:10:02: f8:85:e7:25:19:27:e5:64:27:d3:7d:d5:0a:20:84: e8:26:2e:eb:fe:64:c2:a6:43:d0:8f:58:b1:22:e0: 23:0c:1f:85:ab:6c:af:c6:5b:b1:02:9b:c9:bd:0a: 48:30:5b:7c:12:67:49:35:10:0f:6e:c1:84:b4:c3: 53:71:98:80:66:59:e0:d2:a0:1d:5c:d1:80:f2:c4: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:D5:99:96:FA:7C:FA:03:0F:94:C4:83:A7:38:67:60:7E:AB:0A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ho3VmZb6fPoDD5TEg6c4Z2B-qwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:380::/44 Signature Algorithm: sha256WithRSAEncryption 65:f2:66:a9:7b:da:a3:7f:e3:71:4f:79:3a:27:44:a9:89:04: 75:0c:2e:c9:dc:57:7c:f7:45:fe:68:15:d4:02:9c:d5:3a:b3: 48:8c:4f:bf:ca:7f:64:e9:d6:b6:e5:3b:0f:93:87:6e:dc:04: e4:31:b8:8a:34:39:d3:f6:cb:9c:1b:e3:a9:2a:e6:1e:d6:ce: 01:92:dc:83:97:ea:e5:ce:e7:e8:b0:e3:84:6f:8b:eb:6a:b8: fb:ab:64:0b:24:8c:ee:48:62:0a:5a:f9:de:50:dd:f0:fe:5f: 3e:b9:ec:ac:dc:ce:b7:25:46:20:f5:3f:bf:fb:da:97:d8:db: 41:2d:1b:c6:d9:fa:c4:e9:83:2f:dd:87:73:ee:aa:2f:01:06: e1:be:70:aa:8b:ac:1f:ba:03:25:59:a9:84:bc:e4:9f:88:61: ee:f6:d6:f6:29:35:f8:4c:a0:ec:74:87:95:e0:58:19:26:e9: ac:90:21:3c:f9:d8:d1:79:cd:b3:84:66:76:a5:9c:88:f2:76: f9:1b:79:66:83:05:31:01:33:41:b2:3d:9a:60:01:81:57:81: 5e:d9:f7:dd:7f:cd:bc:f3:aa:d5:7c:cc:2a:2e:77:51:72:6c: 6a:52:3f:27:ef:0d:8d:d9:21:01:02:57:2c:d0:42:49:75:e2: 5a:a1:b0:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EIvSdZD2aiL5YbAE6xZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjhkZDU5OTk2ZmE3Y2ZhMDMwZjk0YzQ4M2E3Mzg2NzYwN2VhYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3NoiX4YgEcG/wGDiKR/t7Egx/2M rY6a1c0j7QLzrJBIv5uzgBaJLOJY8eGxFUastMVY1xS72eHQku4zrpb6xDgdP1hj lB4Y3srhD2cB5yZEHl1XVBK3neqT/tTTjYXblcpNS6Sl+F0lv+bqp/ZA5t2wVEpD oE0qHfaziRxCS/pFIn+bVdaGtdimoNcwTpeVwFpjZMQqw+bIq3sCH/gBBljt8Kd4 kMuZN/jAOcZ0OUHiEAL4heclGSflZCfTfdUKIIToJi7r/mTCpkPQj1ixIuAjDB+F q2yvxluxApvJvQpIMFt8EmdJNRAPbsGEtMNTcZiAZlng0qAdXNGA8sT6dwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIaN1ZmW+nz6Aw+UxIOnOGdgfqsKMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvaG8zVm1aYjZmUG9ERDVURWc2YzRaMkItcXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAOA MA0GCSqGSIb3DQEBCwUAA4IBAQBl8mape9qjf+NxT3k6J0SpiQR1DC7J3Fd890X+ aBXUApzVOrNIjE+/yn9k6da25TsPk4du3ATkMbiKNDnT9sucG+OpKuYe1s4BktyD l+rlzufosOOEb4vrarj7q2QLJIzuSGIKWvneUN3w/l8+ueys3M63JUYg9T+/+9qX 2NtBLRvG2frE6YMv3Ydz7qovAQbhvnCqi6wfugMlWamEvOSfiGHu9tb2KTX4TKDs dIeV4FgZJumskCE8+djRec2zhGZ2pZyI8nb5G3lmgwUxATNBsj2aYAGBV4Fe2ffd f82886rVfMwqLndRcmxqUj8n7w2N2SEBAlcs0EJJdeJaobDJ -----END CERTIFICATE-----Generated at Sun Jan 11 12:51:10 2026 by rpki-client