This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/hVb7evg2z_uz4tr-f0vF8wyaJ0I.roa File: hVb7evg2z_uz4tr-f0vF8wyaJ0I.roa (raw, json) Hash identifier: qZy8polV2urYl3XbQ7RdweJqVcGirnLtEZ/vKoaMcpk= Subject key identifier: 85:56:FB:7A:F8:36:CF:FB:B3:E2:DA:FE:7F:4B:C5:F3:0C:9A:27:42 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C768C1C0870300C047E5DE257CFEF1 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/hVb7evg2z_uz4tr-f0vF8wyaJ0I.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205828 IP address blocks: 2a11:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:68:c1:c0:87:03:00:c0:47:e5:de:25:7c:fe:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8556fb7af836cffbb3e2dafe7f4bc5f30c9a2742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:85:32:a9:27:44:2b:2a:1b:b9:03:cc:a8: 45:10:32:df:63:39:30:ca:bb:29:f0:14:57:de:44: 84:6d:3d:61:88:61:20:d5:53:af:61:67:5e:ce:2f: ed:f5:21:af:5e:36:4e:67:51:88:6d:9f:37:a4:3f: 6e:f5:d4:72:0f:cb:ce:ee:ab:b5:81:c7:93:f3:50: 7a:0b:c4:25:63:92:61:6f:c8:84:f4:ec:c5:4a:39: 31:18:6f:0e:c0:ac:e9:b3:ef:95:d3:79:ac:87:25: 39:0b:13:c2:0c:ae:7b:fa:06:2e:84:5f:95:3a:0b: 9e:33:15:62:19:54:c8:20:92:70:06:74:56:fc:47: ac:00:ba:51:02:6d:5a:05:35:f2:46:fa:4f:0f:0b: b7:4e:2f:07:47:d6:c0:38:6e:93:f5:de:a2:0e:d7: 39:c1:28:e9:41:56:be:9b:76:72:12:6a:54:3a:57: c7:65:23:40:02:72:5f:f5:cc:3c:f6:b0:3d:43:66: 34:91:83:e5:dd:36:2f:3d:c0:e6:8a:cf:85:d5:3d: bc:be:73:d1:ef:d5:de:66:aa:10:f4:2a:82:0e:60: fa:ff:2c:d1:8e:21:54:13:06:84:be:54:1f:b5:7c: e4:94:0a:a8:34:d7:f2:05:bd:79:44:b7:d4:c6:98: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:FB:7A:F8:36:CF:FB:B3:E2:DA:FE:7F:4B:C5:F3:0C:9A:27:42 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/hVb7evg2z_uz4tr-f0vF8wyaJ0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:1380::/29 Signature Algorithm: sha256WithRSAEncryption 8a:21:f2:5a:eb:32:58:ab:cf:a0:39:91:25:16:6c:c0:85:e3: 50:ff:fd:3f:8f:3d:99:3e:81:31:86:44:b8:2f:1a:a3:78:2f: 01:de:8a:34:c8:da:aa:69:51:15:4c:67:2f:82:09:d0:e0:85: d7:d0:07:b4:71:4e:74:16:73:9e:30:33:23:30:47:a9:24:5e: fb:a7:4d:94:8f:75:87:3c:ca:95:23:dc:db:63:ff:7c:92:e4: e0:47:75:5c:49:09:d6:59:2f:f6:47:85:19:77:91:96:29:9d: 66:fe:d8:07:16:ca:e2:51:69:24:9c:d1:fd:9b:32:f3:1d:1d: 2e:78:dd:1d:8d:9c:b9:85:30:c0:79:29:0e:fc:8d:e3:e2:d5: a2:13:78:83:15:71:45:8d:89:30:97:92:14:12:d6:29:75:43: 00:2e:41:c7:ee:58:c7:82:aa:88:e9:1c:03:1c:ce:ff:61:f7: e2:0f:64:00:14:60:20:62:25:3f:58:52:05:13:7a:8e:63:16: 9f:48:ac:f8:9e:90:aa:1f:bc:5a:90:8d:4a:2b:5b:ff:d2:67: 8d:06:21:e1:cc:08:f0:10:84:05:8e:cf:30:20:5b:a1:22:72: c2:e8:3a:12:92:55:09:47:75:b6:64:40:fe:4d:4a:0d:95:f6: 8f:4f:8e:b5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x2jBwIcDAMBH5d4lfP7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTU2ZmI3YWY4MzZjZmZiYjNlMmRhZmU3ZjRiYzVmMzBjOWEyNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLyFMqknRCsqG7kDzKhFEDLfYzkw yrsp8BRX3kSEbT1hiGEg1VOvYWdezi/t9SGvXjZOZ1GIbZ83pD9u9dRyD8vO7qu1 gceT81B6C8QlY5Jhb8iE9OzFSjkxGG8OwKzps++V03mshyU5CxPCDK57+gYuhF+V OgueMxViGVTIIJJwBnRW/EesALpRAm1aBTXyRvpPDwu3Ti8HR9bAOG6T9d6iDtc5 wSjpQVa+m3ZyEmpUOlfHZSNAAnJf9cw89rA9Q2Y0kYPl3TYvPcDmis+F1T28vnPR 79XeZqoQ9CqCDmD6/yzRjiFUEwaEvlQftXzklAqoNNfyBb15RLfUxphWxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIVW+3r4Ns/7s+La/n9LxfMMmidCMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvaFZiN2V2ZzJ6X3V6NHRyLWYwdkY4d3lhSjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhETgDAN BgkqhkiG9w0BAQsFAAOCAQEAiiHyWusyWKvPoDmRJRZswIXjUP/9P489mT6BMYZE uC8ao3gvAd6KNMjaqmlRFUxnL4IJ0OCF19AHtHFOdBZznjAzIzBHqSRe+6dNlI91 hzzKlSPc22P/fJLk4Ed1XEkJ1lkv9keFGXeRlimdZv7YBxbK4lFpJJzR/Zsy8x0d LnjdHY2cuYUwwHkpDvyN4+LVohN4gxVxRY2JMJeSFBLWKXVDAC5Bx+5Yx4KqiOkc AxzO/2H34g9kABRgIGIlP1hSBRN6jmMWn0is+J6Qqh+8WpCNSitb/9JnjQYh4cwI 8BCEBY7PMCBboSJywug6EpJVCUd1tmRA/k1KDZX2j0+OtQ== -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:51 2026 by rpki-client