This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/ds0HwgnE1wK4tusqij2iDAo4C4w.roa File: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (raw, json) Hash identifier: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8= Subject key identifier: 76:CD:07:C2:09:C4:D7:02:B8:B6:EB:2A:8A:3D:A2:0C:0A:38:0B:8C Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523 Certificate serial: 019B7A59FD04E184CB9FC531040C005F8571 Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/ds0HwgnE1wK4tusqij2iDAo4C4w.roa Signing time: Thu 01 Jan 2026 16:17:56 +0000 ROA not before: Thu 01 Jan 2026 16:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1836 IP address blocks: 2001:67c:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:fd:04:e1:84:cb:9f:c5:31:04:0c:00:5f:85:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523 Validity Not Before: Jan 1 16:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76cd07c209c4d702b8b6eb2a8a3da20c0a380b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:4a:06:78:95:55:44:e0:93:84:27:3c:fc: fd:00:b8:e6:da:c8:a9:bd:d1:d7:bf:e1:19:81:a0: 09:81:1c:1e:4a:f7:83:8a:ac:86:32:96:cd:d7:1e: b9:62:b4:33:5a:79:04:15:3b:15:5f:2c:6d:f6:be: 88:c7:f8:56:b2:c8:4b:67:b5:8e:d8:24:89:92:5d: 48:35:30:b6:f5:1b:67:15:2a:d4:1f:72:d9:67:72: 6d:9c:ac:e4:d6:35:5f:93:04:32:7c:c7:30:d1:d0: 6d:51:3d:71:c8:33:a7:e3:65:4e:f4:d6:20:44:5a: 35:d8:4e:af:d0:71:4f:67:2f:b2:5e:18:68:54:b5: 3d:d6:27:f6:44:fe:38:50:c3:51:ca:f0:a0:92:f6: da:7e:3b:20:3a:36:3d:3c:5b:f2:d7:ff:b9:74:58: 74:7a:82:4b:79:dd:1c:04:cc:92:c2:23:ad:3c:95: 29:55:9b:35:8d:7c:cb:4b:36:f7:cc:88:3a:3c:96: f6:31:c1:8a:8e:8e:5b:f9:b2:81:5d:8b:7a:6c:9b: 7b:a3:bb:be:c8:22:8f:f8:aa:43:86:31:aa:f3:49: 0f:29:32:ca:ee:52:71:34:3e:ab:3f:53:13:2a:5f: 30:93:e1:8d:77:fe:40:f5:73:38:61:e0:65:65:51: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:07:C2:09:C4:D7:02:B8:B6:EB:2A:8A:3D:A2:0C:0A:38:0B:8C X509v3 Authority Key Identifier: keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/ds0HwgnE1wK4tusqij2iDAo4C4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1300::/48 Signature Algorithm: sha256WithRSAEncryption 0a:84:39:96:65:64:95:32:7f:6b:fd:c5:52:b5:16:3a:9a:c6: 79:bd:89:b8:03:e9:00:9f:7d:f6:80:45:63:e6:2e:a8:5e:4c: cb:d9:9d:5d:c5:10:94:a8:43:db:be:e5:5b:3d:a0:67:f1:ee: 0b:d4:c4:af:c1:9f:13:10:1e:65:af:e1:e0:97:3b:eb:73:c1: 64:b5:fb:66:f3:a6:e5:7b:f8:5b:30:85:1d:5e:33:58:b9:7a: 74:55:c0:04:62:7c:fc:fe:c0:65:09:b1:26:41:a9:3a:1c:fe: 4c:cd:44:34:42:14:58:3f:15:21:ba:37:25:78:f7:6d:40:62: 5d:bd:98:c1:67:78:85:ba:b5:1b:d9:be:2d:42:b0:45:7f:dd: 61:03:1f:7a:7e:4c:cb:45:e9:69:b5:e6:07:60:8e:97:62:4b: 39:09:00:d7:10:ff:6c:42:e0:96:25:ef:d1:51:bb:cf:98:23: 7f:0e:cb:20:2a:c1:32:06:d3:8b:59:80:3c:fb:32:7a:50:9a: b0:5d:4b:bc:06:97:68:d8:7d:b6:35:3a:5a:04:fe:49:06:cd: 4f:b2:67:8d:ba:f4:ed:2d:4a:84:3f:15:14:b7:1e:c1:4d:9b: c4:d7:e3:15:bf:76:f3:06:9a:60:93:60:ad:81:25:a4:7c:94: f0:c0:47:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6Wf0E4YTLn8UxBAwAX4VxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTA2ZDJkZmY3MTE2ZjM1YWI3ZmExMDI3NWE0NWUzODNi Y2U1MjMwHhcNMjYwMTAxMTYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmNkMDdjMjA5YzRkNzAyYjhiNmViMmE4YTNkYTIwYzBhMzgwYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUtKBniVVUTgk4QnPPz9ALjm2sip vdHXv+EZgaAJgRweSveDiqyGMpbN1x65YrQzWnkEFTsVXyxt9r6Ix/hWsshLZ7WO 2CSJkl1INTC29RtnFSrUH3LZZ3JtnKzk1jVfkwQyfMcw0dBtUT1xyDOn42VO9NYg RFo12E6v0HFPZy+yXhhoVLU91if2RP44UMNRyvCgkvbafjsgOjY9PFvy1/+5dFh0 eoJLed0cBMySwiOtPJUpVZs1jXzLSzb3zIg6PJb2McGKjo5b+bKBXYt6bJt7o7u+ yCKP+KpDhjGq80kPKTLK7lJxND6rP1MTKl8wk+GNd/5A9XM4YeBlZVFIHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHbNB8IJxNcCuLbrKoo9ogwKOAuMMB8GA1UdIwQY MBaAFGEQbS3/cRbzWrf6ECdaReODvOUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEt YTQ5NDRlOTYyNWMwLzEvZHMwSHdnbkUxd0s0dHVzcWlqMmlEQW80QzR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEtYTQ5NDRlOTYyNWMw LzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBMA MA0GCSqGSIb3DQEBCwUAA4IBAQAKhDmWZWSVMn9r/cVStRY6msZ5vYm4A+kAn332 gEVj5i6oXkzL2Z1dxRCUqEPbvuVbPaBn8e4L1MSvwZ8TEB5lr+Hglzvrc8Fktftm 86ble/hbMIUdXjNYuXp0VcAEYnz8/sBlCbEmQak6HP5MzUQ0QhRYPxUhujclePdt QGJdvZjBZ3iFurUb2b4tQrBFf91hAx96fkzLRelpteYHYI6XYks5CQDXEP9sQuCW Je/RUbvPmCN/DssgKsEyBtOLWYA8+zJ6UJqwXUu8Bpdo2H22NTpaBP5JBs1PsmeN uvTtLUqEPxUUtx7BTZvE1+MVv3bzBppgk2CtgSWkfJTwwEcw -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:38 2026 by rpki-client