This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HRrJRyMUMhD6uqnFYrHSgzXXb7U.roa File: HRrJRyMUMhD6uqnFYrHSgzXXb7U.roa (raw, json) Hash identifier: TOMvtiPTGZmte2yNngXo2vSQ9MRx27hSDN8vue1ZDak= Subject key identifier: 1D:1A:C9:47:23:14:32:10:FA:BA:A9:C5:62:B1:D2:83:35:D7:6F:B5 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA755610EAA754FC37D8BE458576668 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HRrJRyMUMhD6uqnFYrHSgzXXb7U.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205816 IP address blocks: 2a06:e881:113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:61:0e:aa:75:4f:c3:7d:8b:e4:58:57:66:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1ac94723143210fabaa9c562b1d28335d76fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:2f:a7:5d:98:c6:28:ae:de:86:c6:4c:a4: 4e:4a:b5:16:6f:cb:08:f7:c5:ac:87:fe:38:66:13: d5:55:cf:ac:53:6c:15:cd:e4:47:70:72:4f:49:16: 08:3d:78:8d:4b:57:8e:ed:53:ce:56:7f:2e:95:0b: 08:61:81:a9:7a:dd:16:b2:49:2f:32:99:f6:a1:3b: d2:41:d9:01:08:a5:74:77:42:0a:5d:b5:29:19:95: e9:0f:0b:62:45:b6:b2:d7:bd:31:94:8e:36:c2:69: 2f:3e:83:bc:db:b4:5d:e9:62:89:8c:55:be:9a:d2: c0:fc:30:46:1a:0d:80:66:e8:31:2f:36:5b:71:8f: 69:2a:f5:a5:e5:57:4f:23:20:07:cb:12:ea:f2:1f: bb:88:d4:a1:ab:dc:e9:a1:e6:33:99:e6:4c:c0:55: 76:8c:e5:cf:1e:20:fe:6a:11:b3:b7:9e:24:c9:34: 7e:66:73:2d:71:1d:dc:c5:ff:9e:6e:1e:30:20:30: 14:99:6c:a1:d6:eb:4b:b5:bf:7e:03:2a:d5:d2:41: c2:c0:27:f9:fc:fb:15:df:e9:85:52:48:fb:f3:f1: 94:e1:06:c3:ba:ba:5e:96:af:67:1d:99:44:db:fa: db:9c:40:ef:cc:57:36:fa:a7:3d:5c:4e:d3:4b:3b: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:C9:47:23:14:32:10:FA:BA:A9:C5:62:B1:D2:83:35:D7:6F:B5 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HRrJRyMUMhD6uqnFYrHSgzXXb7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:113::/48 Signature Algorithm: sha256WithRSAEncryption 99:68:29:e7:c7:22:50:80:1e:c2:97:18:49:b3:a1:e4:74:6a: 90:1e:07:52:de:3e:66:1c:2c:bf:e7:f8:8b:53:06:c1:27:d3: 37:a6:e4:ff:e6:05:ac:f9:d0:a9:58:94:92:58:d9:a1:2f:9c: 1f:1f:6b:6e:e3:82:aa:07:26:62:b6:b8:f6:59:5d:e7:2d:30: 98:f7:37:26:86:90:32:b2:39:9d:0f:93:50:23:a4:be:c3:4b: 5c:bd:73:3c:88:fe:e3:87:7d:b5:39:6f:9e:38:33:08:49:5d: b9:76:6d:1b:9f:79:dd:e7:4c:4c:dc:56:68:35:af:00:82:c2: 8c:cd:35:52:d5:a2:87:07:a6:45:1b:55:95:ff:55:b2:71:31: 00:3e:a0:45:d4:83:2c:db:f2:e2:45:7d:25:49:94:4a:35:a7: 92:e6:0e:78:97:a1:b7:42:f9:ec:29:87:ab:49:5c:bb:20:69: a2:25:7e:3a:5b:a1:41:e6:9b:34:1a:ab:59:1a:26:f9:9f:db: de:1d:58:7f:c3:ca:5e:15:f5:ed:37:8c:88:d6:bf:29:64:ff: d0:cd:71:0a:35:b9:ee:93:13:a9:88:e2:d3:a0:2d:40:cd:97: 8a:a6:1b:ef:9f:e5:a8:71:bd:df:7b:a5:93:ef:6f:8c:09:77: 53:4b:9d:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1VhDqp1T8N9i+RYV2ZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFhYzk0NzIzMTQzMjEwZmFiYWE5YzU2MmIxZDI4MzM1ZDc2ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo8vp12Yxiiu3obGTKROSrUWb8sI 98Wsh/44ZhPVVc+sU2wVzeRHcHJPSRYIPXiNS1eO7VPOVn8ulQsIYYGpet0Wskkv Mpn2oTvSQdkBCKV0d0IKXbUpGZXpDwtiRbay170xlI42wmkvPoO827Rd6WKJjFW+ mtLA/DBGGg2AZugxLzZbcY9pKvWl5VdPIyAHyxLq8h+7iNShq9zpoeYzmeZMwFV2 jOXPHiD+ahGzt54kyTR+ZnMtcR3cxf+ebh4wIDAUmWyh1utLtb9+AyrV0kHCwCf5 /PsV3+mFUkj78/GU4QbDurpelq9nHZlE2/rbnEDvzFc2+qc9XE7TSzsK0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB0ayUcjFDIQ+rqpxWKx0oM112+1MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvSFJySlJ5TVVNaEQ2dXFuRllySFNnelhYYjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbogQET MA0GCSqGSIb3DQEBCwUAA4IBAQCZaCnnxyJQgB7ClxhJs6HkdGqQHgdS3j5mHCy/ 5/iLUwbBJ9M3puT/5gWs+dCpWJSSWNmhL5wfH2tu44KqByZitrj2WV3nLTCY9zcm hpAysjmdD5NQI6S+w0tcvXM8iP7jh321OW+eODMISV25dm0bn3nd50xM3FZoNa8A gsKMzTVS1aKHB6ZFG1WV/1WycTEAPqBF1IMs2/LiRX0lSZRKNaeS5g54l6G3Qvns KYerSVy7IGmiJX46W6FB5ps0GqtZGib5n9veHVh/w8peFfXtN4yI1r8pZP/QzXEK NbnukxOpiOLToC1AzZeKphvvn+Wocb3fe6WT72+MCXdTS50f -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:53 2026 by rpki-client