This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/hTDr1ZrFtma_8PT0j_czy4cp_gk.roa File: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (raw, json) Hash identifier: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI= Subject key identifier: 85:30:EB:D5:9A:C5:B6:66:BF:F0:F4:F4:8F:F7:33:CB:87:29:FE:09 Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470 Certificate serial: 019B77588424B43290DF06F8610FBBDB8F83 Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/hTDr1ZrFtma_8PT0j_czy4cp_gk.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31743 IP address blocks: 2a10:8800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:24:b4:32:90:df:06:f8:61:0f:bb:db:8f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8530ebd59ac5b666bff0f4f48ff733cb8729fe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:61:4a:11:44:c1:22:69:d7:a7:8d:88:ff: d0:2b:45:02:21:b0:f0:59:0c:2e:b6:70:c1:bc:af: 90:2e:9c:e6:9b:ca:b2:22:88:19:d0:5e:ad:34:f8: b6:76:34:28:8a:42:2c:3d:c0:52:f6:45:57:c6:fd: 09:75:9e:43:71:6e:2b:09:f7:64:e9:86:15:41:da: b6:76:58:58:4c:7d:ec:c1:1f:0c:3c:c4:bb:e0:19: 8a:e2:4d:6e:16:bb:31:a5:d5:4e:92:93:5b:c8:18: ba:bd:0f:7c:b7:78:37:34:45:02:e8:54:e4:0f:2d: 33:fa:09:fd:d6:77:17:61:3e:64:ac:d1:2c:fb:8b: 49:33:05:62:c5:ac:30:68:d1:1d:ec:29:c6:30:d4: 21:61:73:e4:0d:5e:ef:f0:00:f4:db:e6:00:e3:14: ba:2b:f0:b7:c9:5c:34:6a:4a:f3:62:14:38:22:54: 6c:0b:f5:86:86:df:4e:ff:86:f1:f6:1c:ca:d1:db: e1:97:2a:44:fa:1a:ae:93:2a:1b:b6:2b:cb:52:01: 7c:58:a7:1e:b1:dd:fd:96:34:eb:2b:52:69:7d:bd: 91:54:48:53:95:68:e7:b8:32:3a:f8:f5:5b:f3:22: 4a:45:38:e9:6f:43:39:36:04:29:c3:4d:5f:23:72: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:30:EB:D5:9A:C5:B6:66:BF:F0:F4:F4:8F:F7:33:CB:87:29:FE:09 X509v3 Authority Key Identifier: keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/hTDr1ZrFtma_8PT0j_czy4cp_gk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:8800::/29 Signature Algorithm: sha256WithRSAEncryption 09:52:75:70:f2:f4:8c:86:1c:47:52:50:02:43:c0:ba:b7:19: 8c:51:cb:fe:1b:33:e7:6d:cb:b1:4a:f5:4c:d1:d6:43:40:95: ad:fa:f5:27:9a:c2:bd:15:21:1b:05:8e:8e:6e:c7:a0:9f:14: 94:a6:23:72:b8:95:ef:03:c8:29:90:32:40:73:49:d6:cc:26: 80:26:6b:08:74:6f:c0:1f:32:76:20:0b:12:c5:95:bb:e5:62: b2:f3:c0:a5:4c:51:8a:d3:c1:22:6c:3c:d9:51:af:ff:bd:38: d3:98:74:3c:62:00:b2:60:71:6f:aa:a0:ef:ee:60:39:09:33: b3:38:c8:bb:e8:82:a2:04:06:4f:1f:01:f4:74:06:b8:6b:7d: 75:63:c9:2b:bc:61:bc:41:41:11:4e:c7:be:53:12:62:03:3c: 88:c8:15:aa:ae:25:f7:1e:a1:51:7e:2d:a1:d6:8f:2f:6f:84: b8:5f:c6:91:3f:df:62:51:d8:da:42:26:e7:56:41:37:25:2f: 65:d9:09:eb:dc:56:7f:2d:f5:4f:97:8d:25:8f:87:36:39:d6: d0:fe:09:f7:55:9c:f2:73:0d:0e:db:4d:1e:e2:ab:3f:ba:5c: cf:68:bd:5b:ca:19:1d:02:0e:40:3f:4a:73:32:e6:c7:36:bc: 1b:a5:69:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WIQktDKQ3wb4YQ+724+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj MDM0NzAwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTMwZWJkNTlhYzViNjY2YmZmMGY0ZjQ4ZmY3MzNjYjg3MjlmZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDVhShFEwSJp16eNiP/QK0UCIbDw WQwutnDBvK+QLpzmm8qyIogZ0F6tNPi2djQoikIsPcBS9kVXxv0JdZ5DcW4rCfdk 6YYVQdq2dlhYTH3swR8MPMS74BmK4k1uFrsxpdVOkpNbyBi6vQ98t3g3NEUC6FTk Dy0z+gn91ncXYT5krNEs+4tJMwVixawwaNEd7CnGMNQhYXPkDV7v8AD02+YA4xS6 K/C3yVw0akrzYhQ4IlRsC/WGht9O/4bx9hzK0dvhlypE+hqukyobtivLUgF8WKce sd39ljTrK1Jpfb2RVEhTlWjnuDI6+PVb8yJKRTjpb0M5NgQpw01fI3KshQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIUw69WaxbZmv/D09I/3M8uHKf4JMB8GA1UdIwQY MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0 LWI4MThmYWVjYjcxNy8xL2hURHIxWnJGdG1hXzhQVDBqX2N6eTRjcF9nay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0LWI4MThmYWVjYjcx Ny8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqEIgA MA0GCSqGSIb3DQEBCwUAA4IBAQAJUnVw8vSMhhxHUlACQ8C6txmMUcv+GzPnbcux SvVM0dZDQJWt+vUnmsK9FSEbBY6ObsegnxSUpiNyuJXvA8gpkDJAc0nWzCaAJmsI dG/AHzJ2IAsSxZW75WKy88ClTFGK08EibDzZUa//vTjTmHQ8YgCyYHFvqqDv7mA5 CTOzOMi76IKiBAZPHwH0dAa4a311Y8krvGG8QUERTse+UxJiAzyIyBWqriX3HqFR fi2h1o8vb4S4X8aRP99iUdjaQibnVkE3JS9l2Qnr3FZ/LfVPl40lj4c2OdbQ/gn3 VZzycw0O200e4qs/ulzPaL1byhkdAg5AP0pzMubHNrwbpWmG -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:04 2026 by rpki-client