This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/0hpieyXYpLMjxyT6mWgC5hB6md0.roa File: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (raw, json) Hash identifier: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY= Subject key identifier: D2:1A:62:7B:25:D8:A4:B3:23:C7:24:FA:99:68:02:E6:10:7A:99:DD Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36713D12F9E873CB67D1B0680E26E Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/0hpieyXYpLMjxyT6mWgC5hB6md0.roa Signing time: Thu 01 Jan 2026 22:17:44 +0000 ROA not before: Thu 01 Jan 2026 22:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 2a01:e900:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:67:13:d1:2f:9e:87:3c:b6:7d:1b:06:80:e2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d21a627b25d8a4b323c724fa996802e6107a99dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:09:c5:6f:19:e3:35:f6:36:f1:a8:d3:e6:77: e5:98:4b:1d:cc:91:c8:05:4d:a3:51:c3:7a:b9:df: 85:fa:44:1a:21:7c:ca:2e:31:2a:73:b5:3c:86:97: 31:16:1c:8a:69:04:fc:54:e0:08:c0:c6:c6:29:2e: fa:01:d4:90:f3:45:30:47:56:d7:d4:b0:6e:b9:b8: 83:f9:4d:26:5b:87:bd:82:3a:94:2d:45:da:0e:53: f3:b8:a7:61:a9:dc:85:8f:51:cb:df:96:6b:47:7a: 90:f7:c7:fc:4a:7c:22:15:d7:89:49:77:55:8e:fc: c3:ae:6f:91:ed:b6:bf:ed:2e:4e:dc:73:d0:a7:02: 15:4c:a8:74:d8:67:2a:11:65:37:83:44:50:9a:10: b5:c3:db:73:f0:1d:40:9f:50:e2:0b:30:f9:4e:17: 87:5a:9d:7b:76:6a:42:b2:b6:1c:3c:3f:37:56:37: 3c:92:52:f2:c9:34:a3:c0:c2:c5:d5:72:55:09:9e: f7:25:e2:65:f3:1e:d2:d1:f5:4e:99:1a:c7:5c:4d: 5f:ff:8d:9a:4d:4b:7d:5d:91:b9:34:5e:8d:ba:39: 87:55:30:83:69:a7:22:a8:4a:ed:28:4f:92:bb:e0: 14:87:16:7b:95:a5:89:ab:f0:98:8f:23:5e:5b:84: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1A:62:7B:25:D8:A4:B3:23:C7:24:FA:99:68:02:E6:10:7A:99:DD X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/0hpieyXYpLMjxyT6mWgC5hB6md0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e900:f0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:50:4a:5a:2b:28:46:79:2f:74:f7:18:8b:de:12:98:2f:bc: 6b:67:63:b5:4b:69:0a:4c:e9:10:2b:3f:0b:35:13:25:7e:2c: 74:37:f7:c2:31:79:84:9d:1c:9e:37:1f:72:97:ac:fc:ff:81: 83:25:ab:61:28:50:cb:e1:1f:50:2c:06:3e:66:8d:9c:70:95: 78:ed:b8:4e:97:6b:c5:b5:ed:ea:02:2a:2e:b0:bf:e5:e2:1b: cc:ea:37:ab:92:90:fb:fe:49:ae:b5:cd:6b:ee:25:c0:5f:82: e9:e1:ec:2a:38:c1:06:75:fa:3c:42:4e:fd:de:a4:d4:b9:fb: 29:f6:10:26:53:09:99:67:5c:43:79:55:bb:8f:fd:31:89:e2: b6:40:04:8e:73:be:89:10:b5:6c:d1:20:85:20:96:ee:af:62: 75:7b:cb:45:c2:e5:31:f8:27:37:fe:af:29:73:2e:7e:e4:b4: 86:12:e3:55:84:dd:a3:f0:10:94:3c:ad:bf:bd:c4:82:a4:28: f4:9f:88:24:4e:e5:38:1c:1f:6e:d3:ac:d9:79:f5:bc:d4:ca: 58:12:63:bc:2f:eb:2b:c4:20:b2:64:a7:e4:3d:99:84:e7:de: ed:03:f9:ba:44:dc:1f:e1:de:e4:4c:77:ee:e1:3e:ba:ba:03: 35:c9:50:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o2cT0S+ehzy2fRsGgOJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjFhNjI3YjI1ZDhhNGIzMjNjNzI0ZmE5OTY4MDJlNjEwN2E5OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgnFbxnjNfY28ajT5nflmEsdzJHI BU2jUcN6ud+F+kQaIXzKLjEqc7U8hpcxFhyKaQT8VOAIwMbGKS76AdSQ80UwR1bX 1LBuubiD+U0mW4e9gjqULUXaDlPzuKdhqdyFj1HL35ZrR3qQ98f8SnwiFdeJSXdV jvzDrm+R7ba/7S5O3HPQpwIVTKh02GcqEWU3g0RQmhC1w9tz8B1An1DiCzD5TheH Wp17dmpCsrYcPD83Vjc8klLyyTSjwMLF1XJVCZ73JeJl8x7S0fVOmRrHXE1f/42a TUt9XZG5NF6NujmHVTCDaaciqErtKE+Su+AUhxZ7laWJq/CYjyNeW4RGjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNIaYnsl2KSzI8ck+ploAuYQepndMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvMGhwaWV5WFlwTE1qeHlUNm1XZ0M1aEI2bWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHpAADw MA0GCSqGSIb3DQEBCwUAA4IBAQCLUEpaKyhGeS909xiL3hKYL7xrZ2O1S2kKTOkQ Kz8LNRMlfix0N/fCMXmEnRyeNx9yl6z8/4GDJathKFDL4R9QLAY+Zo2ccJV47bhO l2vFte3qAiousL/l4hvM6jerkpD7/kmutc1r7iXAX4Lp4ewqOMEGdfo8Qk793qTU ufsp9hAmUwmZZ1xDeVW7j/0xieK2QASOc76JELVs0SCFIJbur2J1e8tFwuUx+Cc3 /q8pcy5+5LSGEuNVhN2j8BCUPK2/vcSCpCj0n4gkTuU4HB9u06zZefW81MpYEmO8 L+srxCCyZKfkPZmE597tA/m6RNwf4d7kTHfu4T66ugM1yVCc -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:27 2026 by rpki-client