This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa File: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (raw, json) Hash identifier: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU= Subject key identifier: 98:7C:62:3D:0A:98:49:DD:D8:82:D3:22:63:B6:49:9C:56:A9:A3:87 Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2B15D23363BC47C43AB3F23B44C46 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa Signing time: Fri 02 Jan 2026 18:22:50 +0000 ROA not before: Fri 02 Jan 2026 18:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215568 IP address blocks: 2a13:bf40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b1:5d:23:36:3b:c4:7c:43:ab:3f:23:b4:4c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987c623d0a9849ddd882d32263b6499c56a9a387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:5f:4c:6a:30:5d:31:7e:ae:4a:7d:3d:1b: d7:d7:38:97:e3:8c:fb:0d:53:b2:d5:59:d6:90:db: 39:7d:f0:eb:0a:c5:f0:98:1d:6e:f9:0b:b2:b9:f8: 6a:3f:1d:30:0b:b0:44:df:3a:17:30:70:1f:05:de: 42:c7:a1:6c:4c:3f:64:ba:ba:fc:54:1c:74:ba:30: e1:99:05:c8:81:c1:6e:f5:c2:8b:3a:f3:49:7a:3f: f2:b6:55:f3:1a:9f:9f:b3:2c:cb:02:0f:07:42:a6: 2f:01:be:c6:6f:d5:7b:1f:78:99:89:36:e2:8e:62: a2:53:a6:2f:e8:47:54:54:0e:4b:b1:dd:13:86:d9: 1e:fd:7e:3f:e3:79:27:43:10:cc:91:b5:28:ff:46: 1c:84:46:28:5c:63:a6:60:2a:83:a3:14:43:44:78: 51:88:4c:55:54:4b:f8:7a:6d:1f:d4:ef:7f:74:01: 17:c8:bd:57:50:e1:f2:65:fc:5d:82:a6:54:6a:c0: 9a:2e:c2:64:93:73:dc:ce:d2:c5:c7:07:41:f5:40: 8d:78:b9:21:9c:cd:c5:d6:cc:d3:e2:39:99:f5:59: a7:a8:dd:f9:c9:3a:d6:cf:2b:5a:f1:a2:f9:99:96: 77:d7:6f:e4:8b:e6:c7:c1:e9:d5:0c:e3:11:c2:6f: 0b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7C:62:3D:0A:98:49:DD:D8:82:D3:22:63:B6:49:9C:56:A9:A3:87 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:bf40::/29 Signature Algorithm: sha256WithRSAEncryption 42:bd:d1:d0:50:43:b1:57:01:bb:69:11:e3:87:0c:9f:39:14: f4:45:78:41:a3:c6:17:20:2d:fe:cd:5d:13:e9:4f:64:9a:18: 68:89:56:74:37:92:9f:85:79:ca:5a:fe:88:ef:17:8c:f8:4e: d1:24:0e:fc:c8:8a:a7:c4:8c:57:ac:46:01:c1:85:cc:b1:e5: b8:1e:92:b8:0a:b0:fe:08:1d:42:9c:b8:b5:d2:cf:95:c0:73: 08:ae:97:50:f7:0a:46:c6:ea:15:aa:9e:90:9f:cf:65:35:9b: 97:fa:cd:24:c1:e3:13:6e:18:fe:a9:60:36:7d:41:5f:ba:4c: cf:79:40:78:4a:e0:7d:93:3b:e7:15:af:ca:b1:ba:91:ff:30: ef:f4:00:a6:d2:c3:aa:ad:f9:ef:36:0b:c8:c7:92:99:0a:50: 41:21:8e:16:4c:cb:bb:be:62:17:77:c0:13:f3:b0:7a:1f:cb: 7c:80:f0:22:3e:63:77:81:a5:9c:dc:3d:9e:b6:d9:8e:03:db: 0f:40:f8:61:96:ef:03:56:c1:79:16:fb:8d:d7:8c:54:ca:7b: fb:45:47:05:b8:04:cc:d0:59:41:dd:20:c3:9e:d2:f0:a1:43: 9f:9e:4d:93:03:2e:54:8b:2c:7e:08:23:b9:7d:a5:2d:de:b4: 09:12:01:5a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8rFdIzY7xHxDqz8jtExGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODdjNjIzZDBhOTg0OWRkZDg4MmQzMjI2M2I2NDk5YzU2YTlhMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ5fTGowXTF+rkp9PRvX1ziX44z7 DVOy1VnWkNs5ffDrCsXwmB1u+QuyufhqPx0wC7BE3zoXMHAfBd5Cx6FsTD9kurr8 VBx0ujDhmQXIgcFu9cKLOvNJej/ytlXzGp+fsyzLAg8HQqYvAb7Gb9V7H3iZiTbi jmKiU6Yv6EdUVA5Lsd0Thtke/X4/43knQxDMkbUo/0YchEYoXGOmYCqDoxRDRHhR iExVVEv4em0f1O9/dAEXyL1XUOHyZfxdgqZUasCaLsJkk3PcztLFxwdB9UCNeLkh nM3F1szT4jmZ9VmnqN35yTrWzyta8aL5mZZ312/ki+bHwenVDOMRwm8L2QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJh8Yj0KmEnd2ILTImO2SZxWqaOHMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvbUh4aVBRcVlTZDNZZ3RNaVk3WkpuRmFwbzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhO/QDAN BgkqhkiG9w0BAQsFAAOCAQEAQr3R0FBDsVcBu2kR44cMnzkU9EV4QaPGFyAt/s1d E+lPZJoYaIlWdDeSn4V5ylr+iO8XjPhO0SQO/MiKp8SMV6xGAcGFzLHluB6SuAqw /ggdQpy4tdLPlcBzCK6XUPcKRsbqFaqekJ/PZTWbl/rNJMHjE24Y/qlgNn1BX7pM z3lAeErgfZM75xWvyrG6kf8w7/QAptLDqq357zYLyMeSmQpQQSGOFkzLu75iF3fA E/Oweh/LfIDwIj5jd4GlnNw9nrbZjgPbD0D4YZbvA1bBeRb7jdeMVMp7+0VHBbgE zNBZQd0gw57S8KFDn55NkwMuVIssfggjuX2lLd60CRIBWg== -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:11 2026 by rpki-client