This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa File: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (raw, json) Hash identifier: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y= Subject key identifier: 44:7D:03:C4:97:72:F6:C8:24:48:56:01:EA:4D:0B:13:B9:D6:0E:17 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019C3D33D621619BEE33BC106B92888667AF Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa Signing time: Sun 08 Feb 2026 12:22:13 +0000 ROA not before: Sun 08 Feb 2026 12:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201616 IP address blocks: 2a0e:f43:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3d:33:d6:21:61:9b:ee:33:bc:10:6b:92:88:86:67:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Feb 8 12:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=447d03c49772f6c824485601ea4d0b13b9d60e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:a3:b0:a4:82:f3:7c:ab:71:cc:f4:3f:23: 66:5a:b7:93:d1:b2:bf:af:83:c2:47:c0:da:5c:78: 28:57:89:90:79:aa:1c:88:0d:1f:2c:80:e9:f7:fd: c7:9e:b4:65:96:6a:af:d8:04:c5:05:87:9e:e7:8f: dc:fd:b8:c3:4e:ca:78:65:b7:0b:32:a9:49:42:f2: ee:4a:bb:3c:8d:b8:8c:3f:37:8f:d5:29:d3:7c:85: d4:7c:9a:34:66:e4:8c:08:4e:0e:01:bb:dd:9f:40: 23:30:80:a3:6b:b4:3e:ec:98:54:62:22:45:2e:bc: 69:a4:c2:29:e5:85:ff:3c:22:4b:81:df:61:7d:4c: e2:fa:cb:ce:2a:1e:9d:5d:23:8f:8a:a4:b1:6e:bd: d3:b0:f6:ad:e4:8d:b9:61:1c:40:e1:45:0f:15:5d: d8:82:b0:bf:9c:10:4e:8a:34:bf:77:a1:27:35:24: 48:85:09:3c:9f:d4:9a:3f:b3:36:a7:e5:42:ee:01: 60:5d:f8:c6:de:08:85:9d:84:10:55:95:b2:98:a8: 18:b9:89:89:c8:f2:4e:90:bb:63:ad:ae:01:2f:a9: 9a:6a:a4:19:0b:93:e1:40:e7:48:56:37:fa:69:df: 4c:1a:aa:79:dd:ff:11:0b:cb:30:92:ef:cc:a3:ec: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:03:C4:97:72:F6:C8:24:48:56:01:EA:4D:0B:13:B9:D6:0E:17 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f43:3::/48 Signature Algorithm: sha256WithRSAEncryption a8:66:a3:06:b6:59:b1:cf:a1:94:71:32:fa:a8:15:15:ec:5a: 4c:fb:26:7f:ac:ef:73:34:bf:58:08:96:c2:2b:d7:4b:56:16: 8e:c0:4d:e2:60:85:0a:74:85:b2:2b:87:39:9e:c0:a8:4b:18: 22:22:29:45:23:6e:31:71:8a:82:f7:4d:40:b0:1a:2f:2f:cd: 22:ef:cc:84:24:4c:1b:c4:75:54:fc:a7:b6:3d:7e:47:15:85: 84:45:fc:0e:ab:12:e3:99:62:ee:15:1c:b1:cd:bf:9c:10:43: fc:56:5b:5d:e4:73:98:38:fd:f6:1e:cb:d8:62:aa:21:6d:81: 52:e9:2b:08:b9:73:6f:08:ae:46:e5:d5:d5:fd:bb:59:1b:49: 2a:3c:67:02:72:bc:c6:61:7a:5b:e6:dd:8f:39:f2:9b:64:fa: e3:a3:48:24:75:4b:66:b1:d9:b6:c6:51:74:86:c0:a2:6d:d2: 7b:e4:cc:25:f7:9f:af:11:4d:fa:7f:f3:22:80:99:c8:d9:36: 22:c6:93:ff:16:39:97:16:01:1d:77:20:65:86:1c:6a:0b:ca: 21:5c:74:88:ce:2d:e0:06:16:ff:52:2e:cb:39:29:67:58:96: 2d:0f:ba:74:55:99:54:17:27:00:b4:8d:fc:7d:e1:d0:b2:ae: 22:f3:58:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZw9M9YhYZvuM7wQa5KIhmevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjYwMjA4MTIyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDdkMDNjNDk3NzJmNmM4MjQ0ODU2MDFlYTRkMGIxM2I5ZDYwZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloKjsKSC83yrccz0PyNmWreT0bK/ r4PCR8DaXHgoV4mQeaociA0fLIDp9/3HnrRllmqv2ATFBYee54/c/bjDTsp4ZbcL MqlJQvLuSrs8jbiMPzeP1SnTfIXUfJo0ZuSMCE4OAbvdn0AjMICja7Q+7JhUYiJF LrxppMIp5YX/PCJLgd9hfUzi+svOKh6dXSOPiqSxbr3TsPat5I25YRxA4UUPFV3Y grC/nBBOijS/d6EnNSRIhQk8n9SaP7M2p+VC7gFgXfjG3giFnYQQVZWymKgYuYmJ yPJOkLtjra4BL6maaqQZC5PhQOdIVjf6ad9MGqp53f8RC8swku/Mo+w/twIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFER9A8SXcvbIJEhWAepNCxO51g4XMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEvUkgwRHhKZHk5c2drU0ZZQjZrMExFN25XRGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4PQwAD MA0GCSqGSIb3DQEBCwUAA4IBAQCoZqMGtlmxz6GUcTL6qBUV7FpM+yZ/rO9zNL9Y CJbCK9dLVhaOwE3iYIUKdIWyK4c5nsCoSxgiIilFI24xcYqC901AsBovL80i78yE JEwbxHVU/Ke2PX5HFYWERfwOqxLjmWLuFRyxzb+cEEP8Vltd5HOYOP32HsvYYqoh bYFS6SsIuXNvCK5G5dXV/btZG0kqPGcCcrzGYXpb5t2POfKbZPrjo0gkdUtmsdm2 xlF0hsCibdJ75Mwl95+vEU36f/MigJnI2TYixpP/FjmXFgEddyBlhhxqC8ohXHSI zi3gBhb/Ui7LOSlnWJYtD7p0VZlUFycAtI38feHQsq4i81gQ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:57 2026 by rpki-client