This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/HgO7iiSevZLjc3fgPuTvR5BXwEc.roa File: HgO7iiSevZLjc3fgPuTvR5BXwEc.roa (raw, json) Hash identifier: 7zzLiJzbT7+Dz/ANivSICg7a4YlPIB5ewT9G1HC2BdA= Subject key identifier: 1E:03:BB:8A:24:9E:BD:92:E3:73:77:E0:3E:E4:EF:47:90:57:C0:47 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DC34EDC1C1877585B9A86E03103B Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/HgO7iiSevZLjc3fgPuTvR5BXwEc.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48126 IP address blocks: 2a0f:5707:aa40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:34:ed:c1:c1:87:75:85:b9:a8:6e:03:10:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e03bb8a249ebd92e37377e03ee4ef479057c047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:16:04:98:df:49:9d:6f:78:96:6f:83:fc: 89:06:8f:0a:a1:b1:65:7d:6d:30:e4:22:84:8d:fa: 71:56:d6:6a:55:be:88:b1:d4:9d:a9:5a:6c:7f:89: 7f:98:05:82:40:a9:6f:f1:7e:6e:a8:dc:69:2a:78: 9c:04:75:1d:33:bd:4b:86:7c:48:6a:58:34:b6:8a: 18:f9:c4:1e:29:58:cf:45:0e:7d:35:4a:f9:7b:0f: a9:c8:79:3a:1d:00:00:37:b6:bf:66:7a:57:a4:ed: 5e:7f:d5:1d:6e:4a:31:5d:89:aa:ee:d9:8c:1a:9a: 44:01:55:11:a2:d2:35:30:c3:1f:4c:3c:7e:fa:4d: e5:4e:65:b3:14:0e:4e:a9:27:1f:29:68:da:04:8b: d4:e4:7d:e9:d8:b5:aa:3f:ea:d0:f3:dc:f2:7c:67: a8:9e:e9:65:7a:75:00:fd:e2:3a:94:43:78:6e:ad: 02:5f:76:7d:46:f4:0f:cd:86:db:08:76:6b:4b:ef: 5a:af:d6:82:0a:30:1c:c6:da:1b:12:19:76:2b:bb: bc:c7:a4:b8:68:a0:67:6b:3b:7d:96:3a:19:9d:b7: c1:25:61:5d:a7:1e:0e:b6:4f:5a:aa:d0:06:34:43: 90:92:9a:99:4d:76:34:d5:88:02:06:af:b0:4d:79: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:03:BB:8A:24:9E:BD:92:E3:73:77:E0:3E:E4:EF:47:90:57:C0:47 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/HgO7iiSevZLjc3fgPuTvR5BXwEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aa40::/44 Signature Algorithm: sha256WithRSAEncryption 7d:4e:fb:90:7d:99:a9:a9:8f:3e:39:17:cf:ab:c7:b0:da:7d: 76:4f:2e:bf:e0:3b:b6:a1:03:25:81:12:0a:3d:aa:11:38:6f: c5:7f:68:32:27:75:8f:a1:5c:29:66:4b:f7:9c:8f:9f:76:5f: 2f:d9:8d:c1:d8:04:cf:ad:13:a2:70:06:71:f4:b2:ab:48:2b: aa:cb:c2:b2:ea:3c:dc:88:a3:4d:f7:b5:11:b3:d5:a8:88:90: fa:45:48:79:3a:aa:28:fb:33:30:07:c3:fa:12:68:18:69:64: 31:0e:ad:eb:e8:e5:21:95:22:89:fd:c2:39:63:82:25:86:76: 13:9c:f8:07:d0:46:2e:00:e3:91:83:35:18:6c:5a:1d:92:9e: c3:0c:0d:c3:e8:4c:25:98:c0:eb:fd:77:45:d5:8e:22:43:f8: ae:9b:99:b2:05:d3:d8:d0:dc:97:cf:9b:99:b3:50:02:7a:41: 0d:f9:2f:e3:f4:47:b1:aa:63:63:51:57:ab:a9:19:c3:ea:9b: 40:53:ad:78:71:58:8a:7f:ba:49:1b:3d:9c:c6:ee:70:1e:90: b0:ee:fb:a9:e6:3a:f0:25:86:65:0d:70:90:7a:92:45:f7:f4: 16:ac:15:78:1f:82:69:5b:86:fa:e1:30:e0:cf:23:7b:50:06: c0:aa:82:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNw07cHBh3WFuahuAxA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTAzYmI4YTI0OWViZDkyZTM3Mzc3ZTAzZWU0ZWY0NzkwNTdjMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZkWBJjfSZ1veJZvg/yJBo8KobFl fW0w5CKEjfpxVtZqVb6IsdSdqVpsf4l/mAWCQKlv8X5uqNxpKnicBHUdM71LhnxI alg0tooY+cQeKVjPRQ59NUr5ew+pyHk6HQAAN7a/ZnpXpO1ef9UdbkoxXYmq7tmM GppEAVURotI1MMMfTDx++k3lTmWzFA5OqScfKWjaBIvU5H3p2LWqP+rQ89zyfGeo nullenUA/eI6lEN4bq0CX3Z9RvQPzYbbCHZrS+9ar9aCCjAcxtobEhl2K7u8x6S4 aKBnazt9ljoZnbfBJWFdpx4Otk9aqtAGNEOQkpqZTXY01YgCBq+wTXn2iwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB4Du4oknr2S43N34D7k70eQV8BHMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvSGdPN2lpU2V2WkxqYzNmZ1B1VHZSNUJYd0VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6pA MA0GCSqGSIb3DQEBCwUAA4IBAQB9TvuQfZmpqY8+ORfPq8ew2n12Ty6/4Du2oQMl gRIKPaoROG/Ff2gyJ3WPoVwpZkv3nI+fdl8v2Y3B2ATPrROicAZx9LKrSCuqy8Ky 6jzciKNN97URs9WoiJD6RUh5Oqoo+zMwB8P6EmgYaWQxDq3r6OUhlSKJ/cI5Y4Il hnYTnPgH0EYuAOORgzUYbFodkp7DDA3D6EwlmMDr/XdF1Y4iQ/ium5myBdPY0NyX z5uZs1ACekEN+S/j9EexqmNjUVerqRnD6ptAU614cViKf7pJGz2cxu5wHpCw7vup 5jrwJYZlDXCQepJF9/QWrBV4H4JpW4b64TDgzyN7UAbAqoJ3 -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:45 2026 by rpki-client