This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/H60TaHzgzIDq5bEuHBb2yyowYNw.roa File: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (raw, json) Hash identifier: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ= Subject key identifier: 1F:AD:13:68:7C:E0:CC:80:EA:E5:B1:2E:1C:16:F6:CB:2A:30:60:DC Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999 Certificate serial: 019B76EB164229CF513DDB548004EEE8F4CF Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/H60TaHzgzIDq5bEuHBb2yyowYNw.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8473 IP address blocks: 2001:678:1140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:16:42:29:cf:51:3d:db:54:80:04:ee:e8:f4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fad13687ce0cc80eae5b12e1c16f6cb2a3060dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:dc:39:b3:01:02:7b:8e:2f:cd:e2:24:83: 6d:84:db:0d:4e:85:a6:b3:19:d7:af:68:65:48:40: f6:fa:38:b5:83:eb:1b:0c:ca:6c:59:b3:2b:0b:f0: ab:2b:59:1b:64:88:d4:7a:c5:d4:6d:6b:46:4a:0b: bf:47:4b:3e:06:e7:5c:d0:80:44:52:73:91:fe:7e: ca:61:9f:90:38:36:ea:b0:ea:f0:bb:c4:e0:4a:9e: f4:38:a3:08:a2:6f:b5:47:23:87:c6:b2:77:ba:c7: ca:99:0e:7c:d4:5c:2f:a3:45:89:65:7f:0b:94:8b: 73:1a:5a:6c:e5:00:14:45:5d:5d:fd:b5:1c:9c:7c: f1:91:3e:0c:ae:11:b8:69:ad:99:0c:20:8f:64:f4: 20:91:fb:d9:ea:4d:0f:03:58:5b:33:a2:ff:fe:60: e5:d5:a6:e2:76:06:34:60:66:e3:e4:a3:3e:25:5c: ab:c4:e0:89:e5:18:02:fb:71:dd:58:e5:a0:21:4b: a4:2a:0c:df:e0:e0:07:d1:8a:b3:58:54:c1:66:58: e2:37:27:d6:6a:26:04:ee:d8:8d:9c:33:76:5b:e6: dd:54:52:ad:a1:6a:64:62:93:62:2e:c4:41:6b:1f: 53:ad:14:77:df:ab:74:c0:0c:59:82:56:b1:91:59: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AD:13:68:7C:E0:CC:80:EA:E5:B1:2E:1C:16:F6:CB:2A:30:60:DC X509v3 Authority Key Identifier: keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/H60TaHzgzIDq5bEuHBb2yyowYNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1140::/48 Signature Algorithm: sha256WithRSAEncryption 30:fe:b1:ff:09:08:a4:ae:05:de:8e:60:6a:49:90:ef:1d:5d: 45:bd:15:80:c3:a5:95:fd:c1:02:0c:e5:50:93:31:e6:53:a3: c3:36:e6:04:99:37:36:fa:fb:96:0f:7c:dc:bb:8d:b6:c5:6a: 9c:14:48:a3:a8:42:0d:95:cb:1d:cb:45:13:98:d7:7c:27:44: 54:2a:77:a1:a1:db:10:f3:48:2d:0c:f7:2f:94:b1:ff:35:93: bc:e6:a8:73:d4:48:f5:7a:3f:32:ce:a6:47:c0:4d:97:e1:fc: 6d:4e:18:0d:5b:0f:c1:a0:b4:d5:ae:c4:45:fa:97:85:1b:b5: 05:a8:ae:95:49:58:e5:2f:4c:fa:fd:d9:34:a0:40:1b:45:fc: 91:e7:81:a7:e8:ff:1b:b2:04:11:56:2f:01:de:9f:a5:ac:15: 22:e3:6b:8f:6b:2b:0e:72:47:25:32:36:7e:6c:38:df:d9:ac: 81:65:34:7d:be:cb:1d:41:ed:22:ef:04:39:e7:45:9b:c2:0f: 94:0e:df:3e:43:99:4e:cf:72:37:08:b9:99:e9:96:1a:f9:2e: ae:60:32:6c:96:80:df:bf:91:d5:29:c8:4e:01:37:0c:d2:8d: 18:9f:ce:c2:d9:d1:ed:7b:96:21:3a:8f:a4:c6:f3:47:5d:e9: 47:99:0a:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26xZCKc9RPdtUgATu6PTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjJiNDRmMjNkY2NhOWMwNjA0YmVkNjkwZjI4YTZhZDkw MTc5OTkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmFkMTM2ODdjZTBjYzgwZWFlNWIxMmUxYzE2ZjZjYjJhMzA2MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1bcObMBAnuOL83iJINthNsNToWm sxnXr2hlSED2+ji1g+sbDMpsWbMrC/CrK1kbZIjUesXUbWtGSgu/R0s+Budc0IBE UnOR/n7KYZ+QODbqsOrwu8TgSp70OKMIom+1RyOHxrJ3usfKmQ581Fwvo0WJZX8L lItzGlps5QAURV1d/bUcnHzxkT4MrhG4aa2ZDCCPZPQgkfvZ6k0PA1hbM6L//mDl 1abidgY0YGbj5KM+JVyrxOCJ5RgC+3HdWOWgIUukKgzf4OAH0YqzWFTBZljiNyfW aiYE7tiNnDN2W+bdVFKtoWpkYpNiLsRBax9TrRR336t0wAxZglaxkVmKxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB+tE2h84MyA6uWxLhwW9ssqMGDcMB8GA1UdIwQY MBaAFI2ytE8j3MqcBgS+1pDyimrZAXmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJLMFR5UGN5cHdHQkw3V2tQS0thdGtCZVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMjdiNTMtNDczZC00NmFmLTgyMDEt OThlODc5ZWEzNzI2LzEvSDYwVGFIemd6SURxNWJFdUhCYjJ5eW93WU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMjdiNTMtNDczZC00NmFmLTgyMDEtOThlODc5ZWEzNzI2 LzEvamJLMFR5UGN5cHdHQkw3V2tQS0thdGtCZVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBFA MA0GCSqGSIb3DQEBCwUAA4IBAQAw/rH/CQikrgXejmBqSZDvHV1FvRWAw6WV/cEC DOVQkzHmU6PDNuYEmTc2+vuWD3zcu422xWqcFEijqEINlcsdy0UTmNd8J0RUKneh odsQ80gtDPcvlLH/NZO85qhz1Ej1ej8yzqZHwE2X4fxtThgNWw/BoLTVrsRF+peF G7UFqK6VSVjlL0z6/dk0oEAbRfyR54Gn6P8bsgQRVi8B3p+lrBUi42uPaysOckcl MjZ+bDjf2ayBZTR9vssdQe0i7wQ550Wbwg+UDt8+Q5lOz3I3CLmZ6ZYa+S6uYDJs loDfv5HVKchOATcM0o0Yn87C2dHte5YhOo+kxvNHXelHmQrc -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:44 2026 by rpki-client