This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/hTPkcwELxJZyDnpp_4uPjK6uTWk.roa File: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (raw, json) Hash identifier: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ= Subject key identifier: 85:33:E4:73:01:0B:C4:96:72:0E:7A:69:FF:8B:8F:8C:AE:AE:4D:69 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389D6D24F20419067A555DFB660A36 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/hTPkcwELxJZyDnpp_4uPjK6uTWk.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38915 IP address blocks: 2a07:3500:1200::/48 maxlen: 48 2a07:3500:1201::/48 maxlen: 48 2a07:3500:1998::/48 maxlen: 48 2a07:3500:1999::/48 maxlen: 48 2a07:3500:19a0::/48 maxlen: 48 2a07:3500:19a8::/48 maxlen: 48 2a07:3500:19b0::/48 maxlen: 48 2a07:3500:19b1::/48 maxlen: 48 2a07:3500:19b8::/48 maxlen: 48 2a07:3500:19b9::/48 maxlen: 48 2a07:3500:19d8::/48 maxlen: 48 2a07:3500:19d9::/48 maxlen: 48 2a07:3500:19e0::/48 maxlen: 48 2a07:3500:19e1::/48 maxlen: 48 2a07:3500:19e8::/48 maxlen: 48 2a07:3500:19e9::/48 maxlen: 48 2a07:3500:19f0::/48 maxlen: 48 2a07:3500:19f1::/48 maxlen: 48 2a07:3500:19f8::/48 maxlen: 48 2a07:3500:19f9::/48 maxlen: 48 2a07:3500:1a00::/48 maxlen: 48 2a07:3500:1a01::/48 maxlen: 48 2a07:3502:1040::/48 maxlen: 48 2a07:3502:1041::/48 maxlen: 48 2a07:3502:1070::/48 maxlen: 48 2a07:3502:1071::/48 maxlen: 48 2a07:3502:1090::/48 maxlen: 48 2a07:3502:1091::/48 maxlen: 48 2a07:3502:11d0::/48 maxlen: 48 2a07:3502:11e0::/48 maxlen: 48 2a07:3502:11e1::/48 maxlen: 48 2a07:3502:11f0::/48 maxlen: 48 2a07:3502:11f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9d:6d:24:f2:04:19:06:7a:55:5d:fb:66:0a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8533e473010bc496720e7a69ff8b8f8caeae4d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:9b:62:21:cb:8b:a8:94:bd:14:33:ef:20: a6:e4:a7:41:f8:b7:d9:f2:43:12:b7:ba:8b:3d:05: e4:a4:7c:b5:71:f2:8b:b1:99:00:59:25:cd:ff:79: 7c:d9:15:9a:48:e4:e1:e2:90:6e:0d:66:0d:f4:72: d0:9a:ad:2d:c7:17:55:75:5b:c2:3a:49:56:76:c6: c1:99:bd:0e:1c:b6:53:bc:9a:83:4e:d6:0e:7b:f0: 13:85:5f:23:0a:3d:4a:3e:46:c5:cf:4e:ec:78:0f: d3:0f:48:81:07:2c:4a:9c:e2:e6:9f:18:3b:4f:e8: 7d:de:e7:5c:91:6a:0e:fa:70:f4:13:c7:71:a7:be: 3b:42:48:3c:d2:5c:e3:7d:4d:3a:cb:49:6c:b4:fc: fa:4b:fb:05:00:0b:b2:24:e4:39:80:63:0c:9b:46: 33:56:47:13:2e:9c:a0:c2:fa:81:8d:56:cc:ce:64: 70:c7:19:be:d0:02:ec:f0:21:22:ca:e4:33:97:81: f5:66:bf:01:16:58:27:a9:44:09:c8:0c:71:03:e7: 6e:38:12:3a:b9:4a:2e:90:85:94:c4:49:c2:54:ee: 5f:40:df:96:4f:45:1a:48:1b:6d:94:aa:f4:76:89: 54:83:dd:a4:49:0b:18:d8:04:1a:fd:d4:16:f1:c2: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:33:E4:73:01:0B:C4:96:72:0E:7A:69:FF:8B:8F:8C:AE:AE:4D:69 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/hTPkcwELxJZyDnpp_4uPjK6uTWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1200::/47 2a07:3500:1998::/47 2a07:3500:19a0::/48 2a07:3500:19a8::/48 2a07:3500:19b0::/47 2a07:3500:19b8::/47 2a07:3500:19d8::/47 2a07:3500:19e0::/47 2a07:3500:19e8::/47 2a07:3500:19f0::/47 2a07:3500:19f8::/47 2a07:3500:1a00::/47 2a07:3502:1040::/47 2a07:3502:1070::/47 2a07:3502:1090::/47 2a07:3502:11d0::/48 2a07:3502:11e0::/47 2a07:3502:11f0::/47 Signature Algorithm: sha256WithRSAEncryption 9a:3a:6b:3d:d9:f2:1e:c7:4d:db:c7:41:45:b2:92:ba:39:7f: d8:d0:32:cb:5d:90:86:8f:ef:b8:b7:35:51:56:fd:06:b6:c2: b7:98:ec:de:12:2b:af:ed:c9:60:10:37:88:c0:d1:fa:37:9f: 51:94:99:3e:4d:39:38:a2:5c:5a:6b:32:e7:a1:6e:b9:4c:a5: 13:5f:c2:33:f3:c8:2f:59:a6:ab:48:eb:a9:8e:35:2a:2a:04: 5a:32:47:10:29:fe:00:45:fb:28:2b:af:d8:0f:e6:49:b5:44: e5:60:d6:81:bc:80:52:16:d5:76:87:0c:1b:c8:86:e0:18:94: 34:4b:5b:75:f2:3b:7c:16:61:f8:54:cc:10:e5:2e:ce:9d:18: 26:b8:84:1a:a9:49:f9:e3:77:ce:a7:c2:06:6b:fc:87:4d:ac: d8:0c:28:32:52:9e:34:33:e8:22:51:90:32:8a:df:7c:79:79: 3d:1c:1c:6f:35:e7:3e:91:cf:9a:4f:dd:1f:fb:12:15:51:8c: 80:cd:bd:7a:52:25:af:1d:0f:f9:c6:2d:7d:03:97:4b:c0:40: ed:5e:01:e0:b7:d7:22:1f:a1:a4:2c:6d:f9:ba:ef:97:66:4f: a4:08:0c:b9:da:a3:c0:62:b9:81:3b:6f:02:1a:87:b2:85:8a: c9:ae:f1:7e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt+OJ1tJPIEGQZ6VV37Zgo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTMzZTQ3MzAxMGJjNDk2NzIwZTdhNjlmZjhiOGY4Y2FlYWU0ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEubYiHLi6iUvRQz7yCm5KdB+LfZ 8kMSt7qLPQXkpHy1cfKLsZkAWSXN/3l82RWaSOTh4pBuDWYN9HLQmq0txxdVdVvC OklWdsbBmb0OHLZTvJqDTtYOe/AThV8jCj1KPkbFz07seA/TD0iBByxKnOLmnxg7 T+h93udckWoO+nD0E8dxp747Qkg80lzjfU06y0lstPz6S/sFAAuyJOQ5gGMMm0Yz VkcTLpygwvqBjVbMzmRwxxm+0ALs8CEiyuQzl4H1Zr8BFlgnqUQJyAxxA+duOBI6 uUoukIWUxEnCVO5fQN+WT0UaSBttlKr0dolUg92kSQsY2AQa/dQW8cI/swIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFIUz5HMBC8SWcg56af+Lj4yurk1pMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvaFRQa2N3RUx4Slp5RG5wcF80dVBqSzZ1VFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAIwgaIDBwEq BzUAEgADBwEqBzUAGZgDBwAqBzUAGaADBwAqBzUAGagDBwEqBzUAGbADBwEqBzUA GbgDBwEqBzUAGdgDBwEqBzUAGeADBwEqBzUAGegDBwEqBzUAGfADBwEqBzUAGfgD BwEqBzUAGgADBwEqBzUCEEADBwEqBzUCEHADBwEqBzUCEJADBwAqBzUCEdADBwEq BzUCEeADBwEqBzUCEfAwDQYJKoZIhvcNAQELBQADggEBAJo6az3Z8h7HTdvHQUWy kro5f9jQMstdkIaP77i3NVFW/Qa2wreY7N4SK6/tyWAQN4jA0fo3n1GUmT5NOTii XFprMuehbrlMpRNfwjPzyC9ZpqtI66mONSoqBFoyRxAp/gBF+ygrr9gP5km1ROVg 1oG8gFIW1XaHDBvIhuAYlDRLW3XyO3wWYfhUzBDlLs6dGCa4hBqpSfnjd86nwgZr /IdNrNgMKDJSnjQz6CJRkDKK33x5eT0cHG815z6Rz5pP3R/7EhVRjIDNvXpSJa8d D/nGLX0Dl0vAQO1eAeC31yIfoaQsbfm675dmT6QIDLnao8BiuYE7bwIah7KFismu 8X4= -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:57 2026 by rpki-client