This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa File: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (raw, json) Hash identifier: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs= Subject key identifier: 84:2C:64:2B:7B:47:BA:A5:2B:63:47:39:D7:F3:EE:D5:7F:A5:0F:51 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B7F12F7BFD9744C7ADCA3FC88A0C8C120 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa Signing time: Fri 02 Jan 2026 14:18:28 +0000 ROA not before: Fri 02 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200280 IP address blocks: 2a0a:4a40:2270::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:f7:bf:d9:74:4c:7a:dc:a3:fc:88:a0:c8:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Jan 2 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=842c642b7b47baa52b634739d7f3eed57fa50f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:3a:30:2a:cb:16:6f:a5:a5:8e:8c:a1:b4: 8a:91:0c:b7:0c:fc:9c:08:32:a8:73:12:d6:51:95: c8:8b:bc:cd:40:ff:ad:af:c6:c0:96:5e:84:3e:19: 5b:9c:68:8f:0f:21:b2:1e:2f:0a:8d:16:0f:fb:33: 56:25:30:b6:c8:ec:2f:6c:06:d8:4e:40:df:44:45: d6:ec:bf:26:a2:46:c9:04:3b:4c:a2:69:e8:a3:ae: e1:31:fe:90:85:5a:d2:bb:97:8a:4f:3b:74:2c:ee: fa:3b:f2:96:9e:cb:b2:84:6e:86:ce:4d:31:ea:da: 01:23:ee:30:f4:7b:dd:d1:30:58:ec:cf:b1:a9:e3: 73:aa:48:e9:0e:34:75:45:2d:05:5f:d3:68:a6:15: 2e:67:3d:7c:05:05:91:19:da:a4:7d:d8:7b:0f:34: 99:8c:0a:95:e1:3d:a6:28:46:17:1f:a0:2f:99:30: 95:8f:7a:27:c3:5d:ab:a4:c5:77:ce:9c:e2:c5:ca: ce:e0:ca:69:1d:6f:78:a4:78:0b:3b:b3:d4:c6:72: 7d:3b:1d:dd:8f:5a:dc:ae:9a:6e:01:90:1a:63:a8: b5:e4:15:21:4e:41:b9:7f:7f:fb:3e:d0:56:f3:3f: b9:4c:e2:ac:a6:6d:ce:7c:7e:b8:37:35:ec:12:e1: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2C:64:2B:7B:47:BA:A5:2B:63:47:39:D7:F3:EE:D5:7F:A5:0F:51 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4a40:2270::/44 Signature Algorithm: sha256WithRSAEncryption 42:82:f6:23:72:4e:a1:b5:8e:02:63:34:b4:ea:b5:32:1e:f6: 24:f9:17:5b:44:1c:52:4c:db:76:c9:31:29:87:9c:89:4e:01: ff:52:22:0e:72:9b:8b:26:01:36:7e:51:6e:85:ec:7d:81:cb: bc:47:e1:a3:6d:8e:38:1f:7c:b2:cd:f8:76:2b:9b:40:ad:6e: 05:cb:bd:18:80:dd:ea:d0:81:45:8c:83:10:7a:37:e5:ec:9d: ae:97:0c:4a:05:bb:7e:65:40:5f:20:4c:f0:41:6c:8b:9f:7a: 50:b7:6d:31:4d:7d:02:e0:46:e4:17:b0:36:d4:9f:8c:69:81: 94:34:2e:5d:64:d8:41:fb:89:06:bb:53:4e:36:16:1d:1d:fa: 77:96:0b:b4:98:d9:d8:1a:e4:5b:e3:4e:73:a5:38:e0:6e:54: 38:1c:a6:3f:b6:df:42:f1:0d:01:89:19:3c:fa:96:67:6f:16: 2f:3d:cc:ce:af:97:18:08:83:74:20:d0:72:2f:8d:65:15:fa: f9:b8:96:55:42:29:fd:24:e3:f9:31:ca:31:45:8f:1b:1f:43: 67:16:87:7b:fc:22:e7:b7:e0:38:51:b0:05:dc:b8:34:68:fc: 3f:57:b3:e0:fb:43:96:54:1c:52:13:a7:70:99:9c:4e:f5:18: b8:82:b4:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/Eve/2XRMetyj/IigyMEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjYwMTAyMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDJjNjQyYjdiNDdiYWE1MmI2MzQ3MzlkN2YzZWVkNTdmYTUwZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBk6MCrLFm+lpY6MobSKkQy3DPyc CDKocxLWUZXIi7zNQP+tr8bAll6EPhlbnGiPDyGyHi8KjRYP+zNWJTC2yOwvbAbY TkDfREXW7L8mokbJBDtMomnoo67hMf6QhVrSu5eKTzt0LO76O/KWnsuyhG6Gzk0x 6toBI+4w9Hvd0TBY7M+xqeNzqkjpDjR1RS0FX9NophUuZz18BQWRGdqkfdh7DzSZ jAqV4T2mKEYXH6AvmTCVj3onw12rpMV3zpzixcrO4MppHW94pHgLO7PUxnJ9Ox3d j1rcrppuAZAaY6i15BUhTkG5f3/7PtBW8z+5TOKspm3OfH64NzXsEuEWPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIQsZCt7R7qlK2NHOdfz7tV/pQ9RMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvaEN4a0szdEh1cVVyWTBjNTFfUHUxWC1sRDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgpKQCJw MA0GCSqGSIb3DQEBCwUAA4IBAQBCgvYjck6htY4CYzS06rUyHvYk+RdbRBxSTNt2 yTEph5yJTgH/UiIOcpuLJgE2flFuhex9gcu8R+GjbY44H3yyzfh2K5tArW4Fy70Y gN3q0IFFjIMQejfl7J2ulwxKBbt+ZUBfIEzwQWyLn3pQt20xTX0C4EbkF7A21J+M aYGUNC5dZNhB+4kGu1NONhYdHfp3lgu0mNnYGuRb405zpTjgblQ4HKY/tt9C8Q0B iRk8+pZnbxYvPczOr5cYCIN0INByL41lFfr5uJZVQin9JOP5McoxRY8bH0NnFod7 /CLnt+A4UbAF3Lg0aPw/V7Pg+0OWVBxSE6dwmZxO9Ri4grSu -----END CERTIFICATE-----Generated at Tue Feb 10 10:32:43 2026 by rpki-client