This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Hbu9fxxEPSWzqJya-uU4l-JvFAQ.roa File: Hbu9fxxEPSWzqJya-uU4l-JvFAQ.roa (raw, json) Hash identifier: aBA8t2BXrr9W9H805RwmnCHEqrANYLka09NkZmjmvSY= Subject key identifier: 1D:BB:BD:7F:1C:44:3D:25:B3:A8:9C:9A:FA:E5:38:97:E2:6F:14:04 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E8C3E6672872491E5502A154586F Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Hbu9fxxEPSWzqJya-uU4l-JvFAQ.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207963 IP address blocks: 2a0f:5707:ad01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e8:c3:e6:67:28:72:49:1e:55:02:a1:54:58:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dbbbd7f1c443d25b3a89c9afae53897e26f1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:f9:ec:c6:78:af:43:a5:d3:37:43:ea:6b: 6f:56:04:58:8f:c7:63:db:61:51:b4:f9:65:8a:55: 6e:10:4a:56:c6:2c:45:36:be:a3:75:87:6d:29:c4: d3:e4:ba:a0:96:a6:fd:32:0b:4f:0f:64:7f:c7:d5: 3d:14:b2:e1:81:02:fe:65:23:26:c6:7f:2d:70:20: 7a:77:69:57:68:e7:b2:70:60:f8:17:5b:e7:25:76: 16:9f:54:6b:72:66:f5:0e:c3:5b:a0:26:20:24:5d: 1e:c1:9d:96:64:7d:51:96:a2:b3:dc:1b:14:f9:e1: 08:73:fd:50:fd:0b:29:7a:21:92:b8:78:6c:e3:89: 53:7f:43:ec:8d:a7:36:13:9d:86:db:c3:b7:d2:fd: 0b:d8:70:2c:14:38:56:a9:c9:1a:ee:c2:42:b3:cd: a7:63:99:b9:6a:ca:2c:f7:08:98:f9:31:05:5d:4e: a5:2a:77:dc:10:9d:87:3f:95:29:91:e5:9d:57:08: 4b:07:68:93:99:a4:85:a9:0f:1f:f6:37:da:7f:ad: d2:0c:55:28:38:cb:2a:ab:b3:0f:00:f5:f9:77:c8: 7f:2d:e7:97:bc:77:bf:37:76:15:b4:8c:d9:36:9b: 4e:ff:ce:65:ff:91:95:93:63:44:4f:db:46:21:0c: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BB:BD:7F:1C:44:3D:25:B3:A8:9C:9A:FA:E5:38:97:E2:6F:14:04 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Hbu9fxxEPSWzqJya-uU4l-JvFAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ad01::/48 Signature Algorithm: sha256WithRSAEncryption af:98:a7:cc:5b:4a:af:2d:aa:cf:da:bd:25:89:4f:1b:42:e0: e4:cd:12:19:3f:23:bd:b0:1f:0e:ff:dd:ee:c6:f7:d3:34:ed: 45:d3:80:2e:d6:0c:b9:00:9f:91:7b:ac:bb:3a:7f:00:34:15: 57:70:1e:23:95:31:01:9a:5f:78:e1:70:31:c8:1b:ff:89:fd: 7d:7c:7b:02:e8:2e:27:0b:0d:9a:90:1d:78:f8:1f:10:26:02: 50:10:48:a3:26:54:9c:23:8b:74:93:e7:c1:4b:f1:89:0c:d7: 3c:02:bb:5c:d0:7b:f6:28:8a:55:21:58:3e:5c:e1:ca:f5:98: 0d:f0:fa:06:e4:b4:01:a3:c8:b9:ee:3c:2a:bd:7c:44:af:9c: 3d:cd:85:76:14:f0:0c:da:28:47:83:f6:96:41:cd:51:d7:56: 57:27:f9:7b:1f:35:d8:18:dc:31:d0:e8:65:e8:0f:e0:e5:13: 66:bd:49:eb:75:42:ec:b0:60:5e:07:87:a9:d8:d0:29:18:65: 3a:f9:0c:9b:aa:d5:ca:83:28:5b:4d:30:75:cf:90:ff:d9:ad: 99:53:d4:d8:6b:54:20:87:6d:7a:4b:db:d0:75:c3:1a:21:86: a4:4f:37:ec:cf:c4:82:6b:6d:4b:35:8d:a1:42:6f:be:8a:45: 38:0f:c7:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOjD5mcockkeVQKhVFhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGJiYmQ3ZjFjNDQzZDI1YjNhODljOWFmYWU1Mzg5N2UyNmYxNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8L57MZ4r0Ol0zdD6mtvVgRYj8dj 22FRtPllilVuEEpWxixFNr6jdYdtKcTT5Lqglqb9MgtPD2R/x9U9FLLhgQL+ZSMm xn8tcCB6d2lXaOeycGD4F1vnJXYWn1Rrcmb1DsNboCYgJF0ewZ2WZH1RlqKz3BsU +eEIc/1Q/QspeiGSuHhs44lTf0Psjac2E52G28O30v0L2HAsFDhWqcka7sJCs82n Y5m5asos9wiY+TEFXU6lKnfcEJ2HP5UpkeWdVwhLB2iTmaSFqQ8f9jfaf63SDFUo OMsqq7MPAPX5d8h/LeeXvHe/N3YVtIzZNptO/85l/5GVk2NET9tGIQzxCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB27vX8cRD0ls6icmvrlOJfibxQEMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvSGJ1OWZ4eEVQU1d6cUp5YS11VTRsLUp2RkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XB60B MA0GCSqGSIb3DQEBCwUAA4IBAQCvmKfMW0qvLarP2r0liU8bQuDkzRIZPyO9sB8O /93uxvfTNO1F04Au1gy5AJ+Re6y7On8ANBVXcB4jlTEBml944XAxyBv/if19fHsC 6C4nCw2akB14+B8QJgJQEEijJlScI4t0k+fBS/GJDNc8Artc0Hv2KIpVIVg+XOHK 9ZgN8PoG5LQBo8i57jwqvXxEr5w9zYV2FPAM2ihHg/aWQc1R11ZXJ/l7HzXYGNwx 0Ohl6A/g5RNmvUnrdULssGBeB4ep2NApGGU6+QybqtXKgyhbTTB1z5D/2a2ZU9TY a1Qgh216S9vQdcMaIYakTzfsz8SCa21LNY2hQm++ikU4D8dd -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:42 2026 by rpki-client