This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa File: h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa (raw, json) Hash identifier: VkUy1q7rwk/bJY0kmudHR01ERlqKVDpha+69blCqd7w= Subject key identifier: 87:E1:8F:CE:37:A8:DE:9A:88:2A:A5:80:82:B3:5E:D6:45:69:DD:7C Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55E32F34DC5A87AAB75CA90741DD1 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211448 IP address blocks: 2a10:4646:190::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5e:32:f3:4d:c5:a8:7a:ab:75:ca:90:74:1d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e18fce37a8de9a882aa58082b35ed64569dd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:10:88:90:dd:80:10:d9:02:a9:17:cb:33: c3:a9:2a:a9:4e:69:40:db:45:9e:6c:c3:61:21:87: 76:28:f3:d2:09:b0:fc:c1:85:8c:96:c6:64:1c:9b: 2d:d6:fd:5d:32:f2:78:1c:28:bf:d6:d2:6f:74:0c: 5e:71:c9:92:95:fd:e0:61:ed:ef:02:b0:ee:90:53: c9:b4:68:75:65:d5:fb:8b:36:10:24:94:86:3a:ad: 42:c8:e7:3f:38:0a:0d:18:db:ff:af:9e:24:10:dd: ef:05:a5:34:2d:42:e3:44:5b:d2:fc:07:00:7a:58: 4f:8d:68:0d:54:2e:d1:88:51:d9:6a:94:a2:7f:92: 69:bd:b1:52:75:38:50:02:5b:0c:e3:14:c8:e0:da: e7:6e:d7:56:88:e2:3e:7f:52:5e:44:99:bc:63:57: 40:82:19:8c:78:58:b2:57:46:81:a8:27:66:ca:af: 28:50:8a:e1:9d:73:ac:db:52:7c:c3:87:62:17:07: cf:86:be:7c:9d:a9:b9:83:bf:d4:61:7b:70:e4:34: d0:19:60:af:4a:b1:03:89:c8:be:fd:e1:37:ac:52: 34:0d:14:72:ce:48:62:03:ab:61:b7:fa:ec:a2:0f: a0:76:d9:0b:0e:40:f9:e0:68:f3:93:53:8c:f2:88: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E1:8F:CE:37:A8:DE:9A:88:2A:A5:80:82:B3:5E:D6:45:69:DD:7C X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:190::/44 Signature Algorithm: sha256WithRSAEncryption 43:bc:b4:66:6f:84:16:b4:97:0c:e8:1c:2e:ef:9b:b9:33:1c: 6c:b6:a6:c3:9b:3c:18:9f:11:72:dd:e8:c4:fb:f9:2b:37:0c: 4a:ef:f5:66:59:5d:29:9c:3d:65:6b:65:a6:67:70:a2:63:aa: f2:25:a6:2c:fe:1a:4a:db:d6:d6:fc:2d:4d:b4:9c:5f:10:0a: cb:04:24:47:0f:c5:be:81:3d:cc:54:17:bb:0b:11:35:7b:f9: 5f:20:59:8f:9d:2a:cc:6f:1e:2c:0a:3c:37:83:e7:26:a0:91: 75:35:46:26:36:d3:59:d4:6f:35:44:93:f8:11:4a:69:c6:a4: ff:d0:13:27:c9:95:5d:e5:9e:2c:9d:e0:cc:63:63:d1:e0:e6: 5d:60:1c:87:b0:fd:3c:51:aa:6d:12:4b:64:f5:3e:42:1f:d1: 3d:7b:68:05:f7:64:fd:f7:39:b0:02:dc:a9:75:1e:70:1d:a4: 38:9d:c2:24:b0:27:4b:86:a9:f5:d9:98:e8:90:9b:7d:0a:eb: 40:db:75:45:c3:b8:e2:51:57:5d:42:4e:cf:7b:83:50:61:36: 2e:52:8d:af:71:65:3b:64:d8:40:c4:eb:ba:08:d3:3d:02:45: ed:74:38:24:eb:75:f8:0f:4e:0a:6a:b6:11:ba:69:19:fa:bd: fa:7c:ed:4a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pV4y803FqHqrdcqQdB3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2UxOGZjZTM3YThkZTlhODgyYWE1ODA4MmIzNWVkNjQ1NjlkZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJgQiJDdgBDZAqkXyzPDqSqpTmlA 20WebMNhIYd2KPPSCbD8wYWMlsZkHJst1v1dMvJ4HCi/1tJvdAxeccmSlf3gYe3v ArDukFPJtGh1ZdX7izYQJJSGOq1CyOc/OAoNGNv/r54kEN3vBaU0LULjRFvS/AcA elhPjWgNVC7RiFHZapSif5JpvbFSdThQAlsM4xTI4NrnbtdWiOI+f1JeRJm8Y1dA ghmMeFiyV0aBqCdmyq8oUIrhnXOs21J8w4diFwfPhr58nam5g7/UYXtw5DTQGWCv SrEDici+/eE3rFI0DRRyzkhiA6tht/rsog+gdtkLDkD54Gjzk1OM8ogEHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIfhj843qN6aiCqlgIKzXtZFad18MB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvaC1HUHpqZW8zcHFJS3FXQWdyTmUxa1ZwM1h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgGQ MA0GCSqGSIb3DQEBCwUAA4IBAQBDvLRmb4QWtJcM6Bwu75u5MxxstqbDmzwYnxFy 3ejE+/krNwxK7/VmWV0pnD1la2WmZ3CiY6ryJaYs/hpK29bW/C1NtJxfEArLBCRH D8W+gT3MVBe7CxE1e/lfIFmPnSrMbx4sCjw3g+cmoJF1NUYmNtNZ1G81RJP4EUpp xqT/0BMnyZVd5Z4sneDMY2PR4OZdYByHsP08UaptEktk9T5CH9E9e2gF92T99zmw AtypdR5wHaQ4ncIksCdLhqn12ZjokJt9CutA23VFw7jiUVddQk7Pe4NQYTYuUo2v cWU7ZNhAxOu6CNM9AkXtdDgk63X4D04KarYRumkZ+r36fO1K -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:21 2026 by rpki-client