This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hs7UjWv_36Zyjiol2fhZVpdxnrw.roa File: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (raw, json) Hash identifier: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc= Subject key identifier: 86:CE:D4:8D:6B:FF:DF:A6:72:8E:2A:25:D9:F8:59:56:97:71:9E:BC Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCF67CA33EE69371A2564C6413DD1 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hs7UjWv_36Zyjiol2fhZVpdxnrw.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 2a11:5780::/30 maxlen: 30 2a11:5784::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:67:ca:33:ee:69:37:1a:25:64:c6:41:3d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86ced48d6bffdfa6728e2a25d9f8595697719ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:38:9a:db:d4:59:17:f0:2d:be:22:8c:69: 28:59:48:e5:16:d1:95:23:00:ee:d9:62:93:d2:64: 07:74:23:fc:a7:8a:25:c3:c5:56:39:ec:be:d8:1b: 52:ef:7b:b1:64:84:07:a1:04:13:75:18:7f:17:0e: 0e:6b:0b:c7:d1:71:86:91:61:af:e0:cb:8c:14:90: ab:f4:df:28:03:fd:5b:65:db:f4:e3:f3:2d:12:93: 91:11:59:09:b3:72:a6:25:85:a0:c1:17:70:9f:81: 40:bc:f6:a8:a2:f5:35:b5:9e:24:9d:46:9b:2e:c1: dd:e3:7f:e1:a6:2e:c0:18:f0:19:31:5a:bf:cf:d3: d8:55:4c:cb:7e:97:e3:1f:5e:55:eb:40:85:69:3c: de:ce:0b:40:44:8c:d6:94:a8:c9:dc:74:58:95:ba: 0c:70:93:5c:69:e7:8c:0a:9f:e2:3a:53:32:93:00: 68:a7:cd:fd:36:e7:98:1b:a6:74:73:31:8d:b8:60: 71:0a:ef:3c:37:97:44:7c:33:fa:a8:6c:e5:b3:08: 11:67:3c:93:3f:b0:70:0b:2c:be:4c:e3:dd:10:70: ad:1a:2d:3f:ec:c3:30:79:f1:2e:34:c0:33:f8:dd: c3:a6:fb:35:b8:11:8c:92:76:c0:ab:de:00:65:42: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:D4:8D:6B:FF:DF:A6:72:8E:2A:25:D9:F8:59:56:97:71:9E:BC X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hs7UjWv_36Zyjiol2fhZVpdxnrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:5780::/29 Signature Algorithm: sha256WithRSAEncryption 23:e7:a0:e3:94:1c:bd:56:e3:59:af:f3:47:cd:fb:70:55:33: d7:43:f0:1a:f3:2a:f8:05:23:2d:39:90:cf:d0:d0:e6:84:db: 9f:97:97:5b:a9:53:77:7e:b9:12:12:c9:34:27:2b:4f:08:a0: 2f:86:9f:31:16:65:68:71:3a:32:ba:17:83:ee:70:55:9b:32: 48:02:e9:f9:b7:73:76:9a:f9:f2:94:59:b9:2b:66:95:f2:44: 40:bf:da:60:13:23:cf:21:5e:69:b1:fe:34:dc:26:45:0d:22: 8a:a5:48:0f:70:3d:69:b2:ba:bb:86:9e:2a:be:1b:cc:2b:a0: 29:6e:af:f4:51:44:c5:c3:b3:c9:42:e9:12:40:fe:05:5d:24: 35:d1:a9:d5:d8:2e:82:46:3a:e1:eb:6b:e3:81:e8:c3:cb:e2: 3a:d0:03:25:20:da:38:ef:ba:ca:ef:9a:2e:53:27:b8:03:b0: 63:3a:7d:35:b5:47:cc:13:e0:e7:83:ba:b2:10:7a:f6:e5:a5: 6d:25:54:1d:fc:12:03:49:10:31:cc:ac:35:5a:70:b7:f7:dd: a7:0d:fe:80:24:66:1a:aa:f7:ca:78:4d:09:3b:06:af:bd:a5: 9e:94:d5:0c:19:09:86:c4:a6:e4:f1:37:e2:55:f5:52:66:51: 25:ac:dc:38 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XM9nyjPuaTcaJWTGQT3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmNlZDQ4ZDZiZmZkZmE2NzI4ZTJhMjVkOWY4NTk1Njk3NzE5ZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1g4mtvUWRfwLb4ijGkoWUjlFtGV IwDu2WKT0mQHdCP8p4olw8VWOey+2BtS73uxZIQHoQQTdRh/Fw4OawvH0XGGkWGv 4MuMFJCr9N8oA/1bZdv04/MtEpOREVkJs3KmJYWgwRdwn4FAvPaoovU1tZ4knUab LsHd43/hpi7AGPAZMVq/z9PYVUzLfpfjH15V60CFaTzezgtARIzWlKjJ3HRYlboM cJNcaeeMCp/iOlMykwBop839NueYG6Z0czGNuGBxCu88N5dEfDP6qGzlswgRZzyT P7BwCyy+TOPdEHCtGi0/7MMwefEuNMAz+N3Dpvs1uBGMknbAq94AZUJHkQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIbO1I1r/9+mco4qJdn4WVaXcZ68MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvaHM3VWpXdl8zNlp5amlvbDJmaFpWcGR4bnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFXgDAN BgkqhkiG9w0BAQsFAAOCAQEAI+eg45QcvVbjWa/zR837cFUz10PwGvMq+AUjLTmQ z9DQ5oTbn5eXW6lTd365EhLJNCcrTwigL4afMRZlaHE6MroXg+5wVZsySALp+bdz dpr58pRZuStmlfJEQL/aYBMjzyFeabH+NNwmRQ0iiqVID3A9abK6u4aeKr4bzCug KW6v9FFExcOzyULpEkD+BV0kNdGp1dgugkY64etr44How8viOtADJSDaOO+6yu+a LlMnuAOwYzp9NbVHzBPg54O6shB69uWlbSVUHfwSA0kQMcysNVpwt/fdpw3+gCRm Gqr3ynhNCTsGr72lnpTVDBkJhsSm5PE34lX1UmZRJazcOA== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:05 2026 by rpki-client