This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa File: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (raw, json) Hash identifier: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M= Subject key identifier: 1D:1D:82:0A:64:51:93:0F:A1:97:A3:55:90:8B:F2:35:1E:46:ED:A6 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27CE0083D5716DBAFD51E369CD93C Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132335 IP address blocks: 2a0a:8f40:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7c:e0:08:3d:57:16:db:af:d5:1e:36:9c:d9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1d820a6451930fa197a355908bf2351e46eda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:9d:75:48:c9:16:45:c5:ac:18:f9:eb:71: 57:2d:f7:a2:97:20:cb:06:2c:b8:2e:37:f2:cb:ef: b3:f6:d9:3a:0f:36:5f:c6:6f:6a:a7:7e:43:d0:6c: 90:d1:7f:df:e8:ee:76:6f:40:bd:23:e1:ae:7c:aa: 53:40:8a:f3:6a:00:41:0d:4c:bc:df:7b:1f:c1:cd: 1f:6b:71:33:b7:8d:44:ad:80:07:e9:6d:cc:c1:b3: 13:65:d2:8c:27:97:fe:3e:b9:8c:0c:7c:f5:e5:97: 60:e3:da:e3:78:cd:41:02:ef:18:fc:e0:2d:21:2e: 9e:56:a7:26:c4:e8:4e:c1:4b:4a:32:3c:0f:6c:eb: 68:b3:db:c2:4e:3c:e4:ee:fb:be:90:1f:d7:a8:ef: f2:ee:e2:cf:1b:10:a7:02:ed:5f:2f:43:20:2f:71: c6:b1:30:65:bc:05:80:29:21:35:da:41:fd:1a:e5: cc:60:04:f8:58:ed:d4:29:8c:3a:10:61:87:af:13: c3:a1:8b:99:df:e5:e7:56:b1:8c:69:b1:e6:b7:fe: dd:e1:1b:a1:fe:b6:6f:8f:60:40:db:be:0e:96:d1: 1f:52:db:d1:3b:c0:39:fe:1a:df:96:64:f4:70:ff: 99:61:44:c0:be:6a:58:aa:b0:29:f6:ba:0a:94:fd: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1D:82:0A:64:51:93:0F:A1:97:A3:55:90:8B:F2:35:1E:46:ED:A6 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:8f40:56::/48 Signature Algorithm: sha256WithRSAEncryption 4b:39:22:b1:04:c9:b9:07:26:f4:6c:fc:ea:0c:cc:ca:58:8d: 64:95:cb:f4:4f:98:a6:df:37:2e:0f:45:9c:77:6c:db:80:59: 11:47:82:6e:4d:d7:5f:2d:6a:b1:bd:9d:3c:dd:44:29:62:7d: b9:7a:dc:9c:c7:5d:82:1f:a9:d9:a5:f7:cf:f3:19:41:d5:e1: d8:2a:d5:e0:5e:2c:f9:81:ac:6b:be:0d:fc:01:03:86:af:c6: 54:05:8c:c1:5c:78:5c:a7:a5:36:16:4a:8b:73:a3:40:ba:36: f7:ea:dc:22:0d:5f:70:8d:cb:a5:f7:76:1a:d6:99:29:26:05: 3c:ac:a2:4e:1d:7f:d6:3f:b4:2d:43:8e:f2:72:d2:26:8f:9b: 65:46:9c:5b:fd:d8:b6:ee:15:15:fb:5b:07:e2:66:9d:55:83: 97:7b:d3:a9:9f:6a:9d:32:3f:9c:c3:8c:cc:0d:f9:e2:8a:cd: e0:bd:f3:a0:a1:36:49:f4:dc:98:6f:ea:48:dd:2f:e7:e5:99: 91:8b:a8:20:db:cb:7b:d7:ac:c6:d5:a5:0b:eb:4b:4a:85:80: 19:f4:d0:05:aa:59:cd:3f:17:b2:1a:ae:68:e5:d3:bf:d4:b8: a4:34:0f:0b:78:82:0c:1d:be:7f:92:b0:41:70:3b:e7:6d:ac: c7:7c:67:7a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4onzgCD1XFtuv1R42nNk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFkODIwYTY0NTE5MzBmYTE5N2EzNTU5MDhiZjIzNTFlNDZlZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiCddUjJFkXFrBj563FXLfeilyDL Biy4Ljfyy++z9tk6DzZfxm9qp35D0GyQ0X/f6O52b0C9I+GufKpTQIrzagBBDUy8 33sfwc0fa3Ezt41ErYAH6W3MwbMTZdKMJ5f+PrmMDHz15Zdg49rjeM1BAu8Y/OAt IS6eVqcmxOhOwUtKMjwPbOtos9vCTjzk7vu+kB/XqO/y7uLPGxCnAu1fL0MgL3HG sTBlvAWAKSE12kH9GuXMYAT4WO3UKYw6EGGHrxPDoYuZ3+XnVrGMabHmt/7d4Ruh /rZvj2BA274OltEfUtvRO8A5/hrflmT0cP+ZYUTAvmpYqrAp9roKlP0BFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB0dggpkUZMPoZejVZCL8jUeRu2mMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvSFIyQ0NtUlJrdy1obDZOVmtJdnlOUjVHN2FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqPQABW MA0GCSqGSIb3DQEBCwUAA4IBAQBLOSKxBMm5Byb0bPzqDMzKWI1klcv0T5im3zcu D0Wcd2zbgFkRR4JuTddfLWqxvZ083UQpYn25etycx12CH6nZpffP8xlB1eHYKtXg Xiz5gaxrvg38AQOGr8ZUBYzBXHhcp6U2FkqLc6NAujb36twiDV9wjcul93Ya1pkp JgU8rKJOHX/WP7QtQ47yctImj5tlRpxb/di27hUV+1sH4madVYOXe9Opn2qdMj+c w4zMDfniis3gvfOgoTZJ9NyYb+pI3S/n5ZmRi6gg28t716zG1aUL60tKhYAZ9NAF qlnNPxeyGq5o5dO/1LikNA8LeIIMHb5/krBBcDvnbazHfGd6 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client