This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/HcULhPVBvVigoye4t6FA-KQWO9w.roa File: HcULhPVBvVigoye4t6FA-KQWO9w.roa (raw, json) Hash identifier: hAIwfnXvBlSldAfdYYWFGxIbO3wQO108WhCVpchVN6Y= Subject key identifier: 1D:C5:0B:84:F5:41:BD:58:A0:A3:27:B8:B7:A1:40:F8:A4:16:3B:DC Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5573C1258FF7D9FE2811C0C2BD1FC Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/HcULhPVBvVigoye4t6FA-KQWO9w.roa Signing time: Fri 02 Jan 2026 12:18:43 +0000 ROA not before: Fri 02 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198825 IP address blocks: 2a10:4646:2e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:57:3c:12:58:ff:7d:9f:e2:81:1c:0c:2b:d1:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dc50b84f541bd58a0a327b8b7a140f8a4163bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:ed:c8:00:68:ab:30:f8:4e:f1:bc:43:56: b4:6f:2a:00:c3:88:ba:01:89:54:3e:7a:da:7c:0a: 35:7b:46:6c:df:92:b9:3f:38:f1:ed:a4:37:c9:f1: 5a:ca:fc:2b:90:01:13:f8:44:ed:08:cb:4c:71:ee: 05:df:10:1a:c0:32:72:14:01:ad:81:07:b8:48:b4: 15:da:33:d3:39:35:45:5a:c8:f8:84:f6:b6:04:b6: bb:fa:f1:b6:a8:c9:36:b4:ea:7a:c3:e0:03:42:36: 77:90:92:a5:ed:2c:65:07:d5:51:5a:3e:87:8b:cb: ba:b6:5b:e5:98:ba:66:41:2a:87:da:28:45:17:66: 4f:4b:8c:a9:df:35:ba:71:d3:11:23:e5:3b:46:f8: 11:11:06:17:ce:c9:39:b2:3c:92:f0:10:1c:51:d4: ca:c2:98:31:df:6a:b2:b9:37:21:27:a0:36:26:36: a0:e0:cb:13:27:be:62:63:4d:70:dd:e6:ba:9b:eb: 1c:82:04:cc:75:19:d0:0b:46:0e:12:84:89:2e:bd: 3a:f8:8e:d4:96:3d:86:9b:80:7d:87:c6:bf:52:eb: 20:d8:b9:36:30:93:5f:2f:72:b5:81:5d:46:c5:c6: 65:b6:6b:66:03:3f:f4:82:37:3f:05:69:e1:4d:18: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:0B:84:F5:41:BD:58:A0:A3:27:B8:B7:A1:40:F8:A4:16:3B:DC X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/HcULhPVBvVigoye4t6FA-KQWO9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:2e0::/44 Signature Algorithm: sha256WithRSAEncryption d4:0c:7a:b3:18:c9:fc:d2:46:90:e7:c4:86:10:d7:9a:9d:02: 41:b5:04:6b:72:e2:b2:cf:d7:e8:41:ed:80:7e:0f:83:38:32: f9:db:56:fa:d7:71:54:ca:e2:a3:9b:93:3a:27:2c:1f:3a:52: 7c:40:d1:fc:02:f5:48:b8:6c:28:63:81:13:ea:bd:d7:9a:40: ad:05:dd:c6:4f:7a:c1:75:90:42:61:93:15:e4:5a:2a:87:8c: 9c:c6:8a:c7:05:6f:20:cf:cb:76:14:10:ea:3d:af:17:79:0c: ea:5a:b0:e7:97:54:7e:68:db:98:5a:10:34:e8:c0:31:de:fc: da:32:38:10:b1:3e:3f:90:a3:aa:eb:f0:b4:29:34:52:41:fd: f1:0a:db:3c:ae:01:13:c5:d3:31:3b:6e:5c:fc:c0:ff:d8:ac: 65:ee:61:e8:78:4f:99:8d:ae:a7:94:10:d0:54:62:3b:bb:d3: e5:c8:8e:ac:0e:db:9b:0a:72:89:ef:52:6a:2b:55:f1:5c:44: 7c:23:4a:91:73:7d:74:46:93:e9:77:9c:27:5c:a0:4d:dd:77: 54:cc:f7:85:7c:c9:6b:9c:10:e8:b2:8d:94:c6:eb:f8:c8:6b: 22:47:c1:fe:32:fd:a4:dc:2e:2c:70:e0:07:58:57:34:33:14: cd:a8:99:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVc8Elj/fZ/igRwMK9H8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGM1MGI4NGY1NDFiZDU4YTBhMzI3YjhiN2ExNDBmOGE0MTYzYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvDtyABoqzD4TvG8Q1a0byoAw4i6 AYlUPnrafAo1e0Zs35K5Pzjx7aQ3yfFayvwrkAET+ETtCMtMce4F3xAawDJyFAGt gQe4SLQV2jPTOTVFWsj4hPa2BLa7+vG2qMk2tOp6w+ADQjZ3kJKl7SxlB9VRWj6H i8u6tlvlmLpmQSqH2ihFF2ZPS4yp3zW6cdMRI+U7RvgREQYXzsk5sjyS8BAcUdTK wpgx32qyuTchJ6A2Jjag4MsTJ75iY01w3ea6m+scggTMdRnQC0YOEoSJLr06+I7U lj2Gm4B9h8a/Uusg2Lk2MJNfL3K1gV1GxcZltmtmAz/0gjc/BWnhTRgnvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB3FC4T1Qb1YoKMnuLehQPikFjvcMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvSGNVTGhQVkJ2Vmlnb3llNHQ2RkEtS1FXTzl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgLg MA0GCSqGSIb3DQEBCwUAA4IBAQDUDHqzGMn80kaQ58SGENeanQJBtQRrcuKyz9fo Qe2Afg+DODL521b613FUyuKjm5M6JywfOlJ8QNH8AvVIuGwoY4ET6r3XmkCtBd3G T3rBdZBCYZMV5Foqh4ycxorHBW8gz8t2FBDqPa8XeQzqWrDnl1R+aNuYWhA06MAx 3vzaMjgQsT4/kKOq6/C0KTRSQf3xCts8rgETxdMxO25c/MD/2Kxl7mHoeE+Zja6n lBDQVGI7u9PlyI6sDtubCnKJ71JqK1XxXER8I0qRc310RpPpd5wnXKBN3XdUzPeF fMlrnBDoso2Uxuv4yGsiR8H+Mv2k3C4scOAHWFc0MxTNqJm7 -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:12 2026 by rpki-client