This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/h-DVLaLD3fOk7-r7yygvP-7G82w.roa File: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (raw, json) Hash identifier: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM= Subject key identifier: 87:E0:D5:2D:A2:C3:DD:F3:A4:EF:EA:FB:CB:28:2F:3F:EE:C6:F3:6C Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E3898BC602027FC486CFCA61AF9E872 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/h-DVLaLD3fOk7-r7yygvP-7G82w.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 2a07:3501:1020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:98:bc:60:20:27:fc:48:6c:fc:a6:1a:f9:e8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e0d52da2c3ddf3a4efeafbcb282f3feec6f36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:be:3b:5c:9e:9c:30:1c:1a:92:79:f6:1a: d2:6e:0b:11:9f:d8:83:24:ef:d9:e1:71:21:6a:d5: 68:51:ba:16:c6:7d:6c:d1:f2:6d:dd:ba:64:15:10: bf:1f:fd:cc:ad:c9:45:5a:4c:bb:aa:9f:05:fc:e2: 5a:4d:97:10:44:dc:93:0f:7a:41:68:b2:5f:f5:06: 8d:fa:a3:10:2c:58:b9:98:39:fc:c1:69:71:09:b8: c3:78:c1:f8:33:2d:f7:32:2f:37:9b:84:f4:fa:98: 88:04:21:b7:4c:28:54:98:7a:6f:2e:f2:e7:99:64: 4c:20:4c:16:49:a4:ba:89:d5:44:4f:5b:47:62:3e: 6c:a2:83:46:dc:54:35:c0:6a:14:d1:f8:0c:25:dd: 7a:e3:6b:af:8d:d4:52:b7:ab:cc:25:f2:dc:d5:ea: d1:4b:36:f8:f6:f1:ae:2a:f2:4a:23:e1:90:1c:78: 82:33:e5:49:79:97:14:8d:6a:70:cb:e9:93:4e:36: ec:0d:84:de:06:dc:33:cb:31:5a:3d:d7:24:90:47: cb:98:79:cc:e0:fa:34:40:6e:a7:00:70:1b:55:de: 1f:f7:0d:f8:8f:4d:1e:aa:ea:65:25:15:d7:37:60: c3:ea:30:66:bd:19:52:b6:4a:a6:65:52:fa:90:d2: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E0:D5:2D:A2:C3:DD:F3:A4:EF:EA:FB:CB:28:2F:3F:EE:C6:F3:6C X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/h-DVLaLD3fOk7-r7yygvP-7G82w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3501:1020::/48 Signature Algorithm: sha256WithRSAEncryption 81:8a:88:56:9e:30:72:2f:9a:77:77:0e:3f:44:39:83:8c:07: 6d:4d:ba:f1:96:09:46:4f:4c:d1:50:58:08:3b:0e:88:7c:57: f9:d2:55:91:c3:93:a2:e8:08:81:3e:bb:8c:ba:a6:5c:0b:ef: b1:4d:b6:e6:17:0f:0c:a4:3d:ef:01:1a:0b:4f:a0:d6:98:9f: 2b:59:26:5e:36:87:e5:49:17:52:be:d1:c0:26:ee:ec:70:a6: bb:ab:5a:26:55:6b:9f:47:06:a8:3e:19:4f:f9:f1:ac:84:a1: 81:c7:6e:8e:fb:a5:a0:32:03:6f:7b:f5:cd:54:f5:25:d4:10: f0:3f:16:25:37:cc:a5:f3:c9:96:c2:61:b1:e6:61:4a:15:78: 4e:10:4c:d0:cc:b7:f7:e5:fb:43:59:22:e6:07:06:ce:67:c6: a8:1c:18:44:81:d4:92:1b:0d:37:3c:80:43:ca:c3:c6:af:5e: eb:82:10:2e:58:07:66:68:63:06:a2:ec:e4:a9:cb:00:3e:7f: 98:2d:40:49:2c:ce:c6:9f:62:ad:11:3a:7d:49:db:00:90:3d: 60:9f:f3:5c:ec:e5:09:3e:cf:ef:d3:4b:80:d7:a1:44:6c:f6: 8e:35:2e:eb:be:39:63:d6:cc:3f:9a:d9:2f:21:01:f1:bf:81: 08:9e:b2:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OJi8YCAn/Ehs/KYa+ehyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2UwZDUyZGEyYzNkZGYzYTRlZmVhZmJjYjI4MmYzZmVlYzZmMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEW+O1yenDAcGpJ59hrSbgsRn9iD JO/Z4XEhatVoUboWxn1s0fJt3bpkFRC/H/3MrclFWky7qp8F/OJaTZcQRNyTD3pB aLJf9QaN+qMQLFi5mDn8wWlxCbjDeMH4My33Mi83m4T0+piIBCG3TChUmHpvLvLn mWRMIEwWSaS6idVET1tHYj5sooNG3FQ1wGoU0fgMJd1642uvjdRSt6vMJfLc1erR Szb49vGuKvJKI+GQHHiCM+VJeZcUjWpwy+mTTjbsDYTeBtwzyzFaPdckkEfLmHnM 4Po0QG6nAHAbVd4f9w34j00equplJRXXN2DD6jBmvRlStkqmZVL6kNIdkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIfg1S2iw93zpO/q+8soLz/uxvNsMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvaC1EVkxhTEQzZk9rNy1yN3l5Z3ZQLTdHODJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ARAg MA0GCSqGSIb3DQEBCwUAA4IBAQCBiohWnjByL5p3dw4/RDmDjAdtTbrxlglGT0zR UFgIOw6IfFf50lWRw5Oi6AiBPruMuqZcC++xTbbmFw8MpD3vARoLT6DWmJ8rWSZe NoflSRdSvtHAJu7scKa7q1omVWufRwaoPhlP+fGshKGBx26O+6WgMgNve/XNVPUl 1BDwPxYlN8yl88mWwmGx5mFKFXhOEEzQzLf35ftDWSLmBwbOZ8aoHBhEgdSSGw03 PIBDysPGr17rghAuWAdmaGMGouzkqcsAPn+YLUBJLM7Gn2KtETp9SdsAkD1gn/Nc 7OUJPs/v00uA16FEbPaONS7rvjlj1sw/mtkvIQHxv4EInrK+ -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:54 2026 by rpki-client