This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/JHxvjWc19A1tU7KyYGlgqUyLkL8.roa File: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (raw, json) Hash identifier: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY= Subject key identifier: 24:7C:6F:8D:67:35:F4:0D:6D:53:B2:B2:60:69:60:A9:4C:8B:90:BF Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc Certificate serial: 019B7D5D14FEA6A9908E0205652E9D9EB9DF Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/JHxvjWc19A1tU7KyYGlgqUyLkL8.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 2001:67c:1770::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:fe:a6:a9:90:8e:02:05:65:2e:9d:9e:b9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=247c6f8d6735f40d6d53b2b2606960a94c8b90bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:62:d2:38:e6:58:b9:82:99:d0:07:ed:aa: 6e:8b:a6:f4:da:28:05:58:b1:5f:9e:65:82:a3:bc: c4:8e:08:f4:12:b2:2f:87:72:db:69:f4:d8:c3:22: 3d:04:24:f2:89:07:81:21:93:0b:33:23:17:c5:66: 3c:30:7f:10:4a:c3:c3:b3:81:8c:e6:2d:f7:73:75: 46:60:62:9c:7b:70:1e:4a:48:d9:21:4c:76:c6:e1: da:41:8d:6a:a0:b9:a1:aa:a6:eb:2e:b0:12:63:9f: ba:81:f9:77:76:6c:71:e6:bb:1d:f2:2d:f8:de:c1: 9e:a0:0a:00:f7:ff:8a:8a:75:8f:b7:35:46:93:5e: b5:41:63:a9:ef:1f:e3:6d:e1:3f:12:43:78:f9:e7: 04:58:64:6e:14:d1:81:8e:7e:5a:2c:61:e9:27:f8: ae:fe:38:67:b9:c7:83:da:b4:6f:76:49:7d:eb:7d: fa:30:cc:25:4a:35:d9:10:60:04:fc:99:00:28:39: 3c:ef:e8:c6:2f:5a:98:ab:b3:5c:73:0a:11:fa:2b: a0:08:8e:ca:14:21:6b:b7:77:1f:c0:27:53:67:51: 30:e9:ce:74:cf:f0:c0:6a:9e:06:12:bf:6e:45:cf: f2:f8:b0:f7:6b:15:02:79:50:f0:5e:4a:4f:04:c0: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:6F:8D:67:35:F4:0D:6D:53:B2:B2:60:69:60:A9:4C:8B:90:BF X509v3 Authority Key Identifier: keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/JHxvjWc19A1tU7KyYGlgqUyLkL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1770::/48 Signature Algorithm: sha256WithRSAEncryption 57:5d:c3:12:f9:43:b8:fe:48:97:04:b8:c7:f7:6e:91:7e:7d: bc:47:7c:f8:70:40:2d:1d:e8:86:80:6b:fb:7e:91:23:68:b8: 66:65:52:71:31:7e:5d:8c:34:c2:4e:cf:fd:26:52:fe:a2:f4: 8a:e5:9f:10:b4:d3:ca:26:c4:79:56:92:54:36:f7:fa:94:9f: 84:63:a2:e6:d1:3a:7d:9e:bb:e1:db:74:c9:94:8d:19:be:11: 2d:8f:03:ae:39:fc:b7:8d:f0:ce:ad:0e:74:7a:ec:49:86:9f: 47:54:06:ff:cf:26:04:16:77:47:97:d5:ec:0c:77:ba:e1:6e: cd:27:55:4b:9f:86:f6:37:b0:70:1f:05:ba:46:3e:4f:e9:4f: 94:9f:56:c8:59:c3:1c:b2:5d:ac:eb:62:c4:37:d3:17:ea:12: b7:78:3d:05:cb:38:59:d5:60:8a:37:dd:54:10:e6:4c:d2:fd: 51:e3:ab:6c:10:22:45:bb:2b:a9:e8:64:c0:2a:51:a5:ce:30: 5a:72:49:97:19:90:54:62:2a:5d:11:61:7b:04:94:cf:a5:5e: 8f:70:f0:61:ad:58:f7:b6:68:fa:55:dc:d8:b9:bf:c7:62:cc: 01:cb:5d:44:22:3e:b0:b6:58:15:a5:c1:03:09:78:49:c3:e6: e0:14:a8:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRT+pqmQjgIFZS6dnrnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxN2ExYTYyMjQ4ZGY4NzkxMzNjMDczYWQ1NjJhZDAzYTJi OTJmZGMwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDdjNmY4ZDY3MzVmNDBkNmQ1M2IyYjI2MDY5NjBhOTRjOGI5MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TBi0jjmWLmCmdAH7apui6b02igF WLFfnmWCo7zEjgj0ErIvh3LbafTYwyI9BCTyiQeBIZMLMyMXxWY8MH8QSsPDs4GM 5i33c3VGYGKce3AeSkjZIUx2xuHaQY1qoLmhqqbrLrASY5+6gfl3dmxx5rsd8i34 3sGeoAoA9/+KinWPtzVGk161QWOp7x/jbeE/EkN4+ecEWGRuFNGBjn5aLGHpJ/iu /jhnuceD2rRvdkl96336MMwlSjXZEGAE/JkAKDk87+jGL1qYq7NccwoR+iugCI7K FCFrt3cfwCdTZ1Ew6c50z/DAap4GEr9uRc/y+LD3axUCeVDwXkpPBMBwYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCR8b41nNfQNbVOysmBpYKlMi5C/MB8GA1UdIwQY MBaAFOF6GmIkjfh5EzwHOtVirQOiuS/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2Qt NWZkYzg3ZTZkMmEwLzEvSkh4dmpXYzE5QTF0VTdLeVlHbGdxVXlMa0w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2QtNWZkYzg3ZTZkMmEw LzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBdw MA0GCSqGSIb3DQEBCwUAA4IBAQBXXcMS+UO4/kiXBLjH926Rfn28R3z4cEAtHeiG gGv7fpEjaLhmZVJxMX5djDTCTs/9JlL+ovSK5Z8QtNPKJsR5VpJUNvf6lJ+EY6Lm 0Tp9nrvh23TJlI0ZvhEtjwOuOfy3jfDOrQ50euxJhp9HVAb/zyYEFndHl9XsDHe6 4W7NJ1VLn4b2N7BwHwW6Rj5P6U+Un1bIWcMcsl2s62LEN9MX6hK3eD0FyzhZ1WCK N91UEOZM0v1R46tsECJFuyup6GTAKlGlzjBackmXGZBUYipdEWF7BJTPpV6PcPBh rVj3tmj6VdzYub/HYswBy11EIj6wtlgVpcEDCXhJw+bgFKg1 -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:44 2026 by rpki-client