This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/Hj-7tqLsSWaA1UtQr2xMzNqAnyw.roa File: Hj-7tqLsSWaA1UtQr2xMzNqAnyw.roa (raw, json) Hash identifier: 9Qv3oDioBW3X+4WvVAkRPhv8k9qZnHux4lp0b9HREa0= Subject key identifier: 1E:3F:BB:B6:A2:EC:49:66:80:D5:4B:50:AF:6C:4C:CC:DA:80:9F:2C Certificate issuer: /CN=907e009bf10a0296a5b55c7d2b16234abd8ff5ff Certificate serial: 019BAC0B7A50DBA4A4A841F6963FC5ED0D50 Authority key identifier: 90:7E:00:9B:F1:0A:02:96:A5:B5:5C:7D:2B:16:23:4A:BD:8F:F5:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/Hj-7tqLsSWaA1UtQr2xMzNqAnyw.roa Signing time: Sun 11 Jan 2026 07:53:11 +0000 ROA not before: Sun 11 Jan 2026 07:53:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203766 IP address blocks: 2001:67c:a44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:0b:7a:50:db:a4:a4:a8:41:f6:96:3f:c5:ed:0d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=907e009bf10a0296a5b55c7d2b16234abd8ff5ff Validity Not Before: Jan 11 07:53:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e3fbbb6a2ec496680d54b50af6c4cccda809f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:70:8f:dc:e2:de:ef:a0:ad:4c:c5:3e:75: ce:af:15:1a:9d:ea:0d:9e:e2:24:21:de:17:18:85: bb:63:7e:ca:83:fa:3d:48:3e:a0:49:c6:42:c4:23: e5:ec:70:68:b0:bc:aa:1e:20:a6:e7:34:93:ea:fe: 2a:8e:61:56:2d:00:5f:88:de:73:7e:f4:89:6f:33: e3:3b:44:3e:4a:85:60:ca:8f:ef:f3:13:41:e6:4d: f9:02:39:03:51:cf:87:f7:a3:20:6c:07:ce:54:39: 25:f4:d0:07:86:92:74:69:90:8e:5e:1c:9d:22:13: 82:21:70:b8:bf:2f:fa:24:19:ad:93:bd:b1:ab:7e: 74:45:2b:fc:b5:41:89:44:a2:e1:61:a1:eb:4f:ef: bc:a9:28:e4:c4:1d:01:8f:8d:28:7f:dc:b0:78:d9: 99:a1:36:14:d3:ab:87:85:89:40:47:00:7b:ce:6d: 87:11:55:cb:7d:e2:75:94:dc:5d:c9:53:59:11:e8: f0:dc:07:7c:b5:eb:a0:80:45:6f:d4:2b:e8:c8:59: cc:0b:bd:5c:8e:0c:8e:42:7c:b3:23:56:eb:61:00: a8:58:90:ab:1e:43:90:2b:bf:64:bc:cc:36:b7:7b: 93:64:ec:7a:db:5a:52:05:0e:d4:a9:4b:29:6c:0a: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3F:BB:B6:A2:EC:49:66:80:D5:4B:50:AF:6C:4C:CC:DA:80:9F:2C X509v3 Authority Key Identifier: keyid:90:7E:00:9B:F1:0A:02:96:A5:B5:5C:7D:2B:16:23:4A:BD:8F:F5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/Hj-7tqLsSWaA1UtQr2xMzNqAnyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a44::/48 Signature Algorithm: sha256WithRSAEncryption 59:28:f8:df:7c:b9:f8:6c:8d:b6:bf:64:7c:f0:76:d8:0d:9c: 79:50:cf:eb:ba:43:df:ea:d1:6c:5e:b9:9d:f8:55:de:b8:75: 4d:4f:4f:33:45:0d:1b:a9:92:1c:bb:2e:4f:16:ea:c7:4d:53: 44:41:c3:a0:53:bc:da:aa:f5:31:a6:27:c3:66:ef:f2:92:de: 25:b2:fe:f6:11:1b:54:2b:fc:2e:8d:86:04:34:5d:2a:e9:e0: 8b:99:b7:78:71:28:2f:9d:78:f8:91:1d:27:e5:ba:57:f3:a9: 26:de:25:3d:40:75:fa:fe:e6:64:b6:fb:53:70:d8:7f:a4:a4: b3:3b:58:61:b7:3d:9f:9b:8c:b1:98:86:51:86:ac:5b:57:9a: 16:53:ac:89:5f:fe:dd:4c:57:65:6d:6d:63:88:ab:ab:9f:c3: 1e:32:84:d4:e1:d1:fe:26:05:0c:17:e1:2d:95:7e:8e:ef:05: c8:b2:e4:ad:bf:a8:75:40:b8:20:22:5e:24:c4:d5:67:13:6f: 15:b3:22:6a:d6:2f:51:d1:ce:41:b1:e6:5d:22:79:6a:03:09: 80:1b:33:49:2e:7c:30:c0:8e:e3:32:ce:c8:b4:45:49:e5:1b: 63:63:9a:62:35:c7:ff:6f:a8:41:7e:da:b4:30:25:19:39:6f: e8:77:49:3f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZusC3pQ26SkqEH2lj/F7Q1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwN2UwMDliZjEwYTAyOTZhNWI1NWM3ZDJiMTYyMzRhYmQ4 ZmY1ZmYwHhcNMjYwMTExMDc1MzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTNmYmJiNmEyZWM0OTY2ODBkNTRiNTBhZjZjNGNjY2RhODA5ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWVwj9zi3u+grUzFPnXOrxUaneoN nuIkId4XGIW7Y37Kg/o9SD6gScZCxCPl7HBosLyqHiCm5zST6v4qjmFWLQBfiN5z fvSJbzPjO0Q+SoVgyo/v8xNB5k35AjkDUc+H96MgbAfOVDkl9NAHhpJ0aZCOXhyd IhOCIXC4vy/6JBmtk72xq350RSv8tUGJRKLhYaHrT++8qSjkxB0Bj40of9yweNmZ oTYU06uHhYlARwB7zm2HEVXLfeJ1lNxdyVNZEejw3Ad8teuggEVv1CvoyFnMC71c jgyOQnyzI1brYQCoWJCrHkOQK79kvMw2t3uTZOx621pSBQ7UqUspbAojVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB4/u7ai7ElmgNVLUK9sTMzagJ8sMB8GA1UdIwQY MBaAFJB+AJvxCgKWpbVcfSsWI0q9j/X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0g0QW1fRUtBcGFsdFZ4OUt4WWpTcjJQOWY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82Yzk2MTQtNTYyZC00MmRiLTg2MDkt NDUyZWVhOGI1ZWFjLzEvSGotN3RxTHNTV2FBMVV0UXIyeE16TnFBbnl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82Yzk2MTQtNTYyZC00MmRiLTg2MDktNDUyZWVhOGI1ZWFj LzEva0g0QW1fRUtBcGFsdFZ4OUt4WWpTcjJQOWY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfApE MA0GCSqGSIb3DQEBCwUAA4IBAQBZKPjffLn4bI22v2R88HbYDZx5UM/rukPf6tFs Xrmd+FXeuHVNT08zRQ0bqZIcuy5PFurHTVNEQcOgU7zaqvUxpifDZu/ykt4lsv72 ERtUK/wujYYENF0q6eCLmbd4cSgvnXj4kR0n5bpX86km3iU9QHX6/uZktvtTcNh/ pKSzO1hhtz2fm4yxmIZRhqxbV5oWU6yJX/7dTFdlbW1jiKurn8MeMoTU4dH+JgUM F+EtlX6O7wXIsuStv6h1QLggIl4kxNVnE28VsyJq1i9R0c5BseZdInlqAwmAGzNJ LnwwwI7jMs7ItEVJ5RtjY5piNcf/b6hBftq0MCUZOW/od0k/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:35 2026 by rpki-client