This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/JhmZ_DzVJE8577BFE3vDvK9OMd0.roa File: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (raw, json) Hash identifier: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE= Subject key identifier: 26:19:99:FC:3C:D5:24:4F:39:EF:B0:45:13:7B:C3:BC:AF:4E:31:DD Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502 Certificate serial: 019B7A5A963AD4C33B4D45A9FBBF56B15088 Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/JhmZ_DzVJE8577BFE3vDvK9OMd0.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38945 IP address blocks: 2a03:8600:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:96:3a:d4:c3:3b:4d:45:a9:fb:bf:56:b1:50:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=261999fc3cd5244f39efb045137bc3bcaf4e31dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:44:de:e6:08:6a:ca:8a:70:12:d4:df:b8: d0:48:c0:d9:b2:d5:54:b2:7c:00:5d:3d:35:e8:e0: 4d:6d:18:ed:85:94:25:b1:65:3a:fa:b9:f7:10:7e: 49:9e:22:b9:15:1f:9d:3d:ba:95:b1:4c:8a:33:d1: 44:fb:54:11:84:ac:1d:cb:17:ce:6f:93:63:28:d3: 37:27:88:9b:b2:fe:e9:57:a0:e9:c8:ee:ea:5f:b8: 08:fe:0c:ff:3f:9b:e5:0e:41:c2:45:71:bd:65:60: 52:a3:4b:eb:48:2f:eb:41:af:4f:62:61:ab:2c:13: ca:90:dc:a7:77:69:26:45:c7:28:8a:d2:aa:bc:0f: 13:f3:94:8d:44:f2:9b:b8:00:f7:de:98:24:32:3e: f9:fc:b1:a6:40:fb:e9:9d:57:f6:92:ec:94:56:7e: c1:12:5d:44:a2:b4:cf:1b:0f:c8:9a:de:0e:5d:64: ba:4c:39:47:c6:74:98:a6:2d:1b:06:74:ce:97:e9: 6f:62:ad:a8:aa:e7:4c:5a:40:af:d3:a0:94:a8:43: b6:31:4e:df:d9:7f:65:aa:9e:fe:86:e6:e4:a5:ad: 5b:1b:b6:0f:0d:5b:cb:e2:38:6d:f6:df:96:f7:e8: c9:c6:42:55:72:79:c8:61:4b:ed:9b:d9:55:8f:f1: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:19:99:FC:3C:D5:24:4F:39:EF:B0:45:13:7B:C3:BC:AF:4E:31:DD X509v3 Authority Key Identifier: keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/JhmZ_DzVJE8577BFE3vDvK9OMd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:8600:1::/48 Signature Algorithm: sha256WithRSAEncryption 5f:ac:84:be:16:cc:0d:ae:af:af:54:eb:c4:f8:fd:25:45:4a: f5:ae:75:fe:ea:b7:15:bb:f4:20:88:43:6f:fa:ee:40:b7:45: 63:de:46:cc:47:c2:7d:41:d3:0e:9a:5f:49:47:31:a3:08:c9: 58:fc:0e:e3:b0:f1:d9:40:bb:df:92:ac:e9:94:5f:30:a5:23: 51:ea:80:3c:40:79:b3:3c:e8:63:49:4a:ba:61:8a:50:ce:af: 75:d2:ed:97:83:57:97:1b:01:f1:b2:88:05:92:ea:cd:0f:73: 4b:81:79:8e:a1:ca:92:1d:7b:f5:da:a4:fb:f3:24:ef:98:ce: 87:7c:7e:a1:b2:1d:62:e5:4c:79:08:b8:4c:8e:8a:4b:4f:7a: 81:46:b2:89:31:96:0d:f2:7d:93:8d:b5:f4:90:db:20:28:0f: d9:a9:a4:90:21:ac:08:0e:b0:be:20:01:12:48:47:7b:7a:fa: 63:4f:89:7f:62:fa:5e:af:04:d7:fe:73:34:26:0b:32:83:7e: a1:54:6e:ac:ed:34:53:e7:6e:58:09:e4:11:ff:fd:26:02:a7: c3:ea:9f:1e:7f:e1:e4:60:80:da:45:90:16:4b:a6:10:04:12: 38:e5:bf:c1:3c:b6:b2:75:c7:fa:7a:36:33:ba:3e:02:05:25: 8e:6d:53:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WpY61MM7TUWp+79WsVCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz NGE1MDIwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjE5OTlmYzNjZDUyNDRmMzllZmIwNDUxMzdiYzNiY2FmNGUzMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz1E3uYIasqKcBLU37jQSMDZstVU snwAXT016OBNbRjthZQlsWU6+rn3EH5JniK5FR+dPbqVsUyKM9FE+1QRhKwdyxfO b5NjKNM3J4ibsv7pV6DpyO7qX7gI/gz/P5vlDkHCRXG9ZWBSo0vrSC/rQa9PYmGr LBPKkNynd2kmRccoitKqvA8T85SNRPKbuAD33pgkMj75/LGmQPvpnVf2kuyUVn7B El1EorTPGw/Imt4OXWS6TDlHxnSYpi0bBnTOl+lvYq2oqudMWkCv06CUqEO2MU7f 2X9lqp7+hubkpa1bG7YPDVvL4jht9t+W9+jJxkJVcnnIYUvtm9lVj/EuCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCYZmfw81SRPOe+wRRN7w7yvTjHdMB8GA1UdIwQY MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct MGNkNzIzNmIyOWI2LzEvSmhtWl9EelZKRTg1NzdCRkUzdkR2SzlPTWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2 LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOGAAAB MA0GCSqGSIb3DQEBCwUAA4IBAQBfrIS+FswNrq+vVOvE+P0lRUr1rnX+6rcVu/Qg iENv+u5At0Vj3kbMR8J9QdMOml9JRzGjCMlY/A7jsPHZQLvfkqzplF8wpSNR6oA8 QHmzPOhjSUq6YYpQzq910u2Xg1eXGwHxsogFkurND3NLgXmOocqSHXv12qT78yTv mM6HfH6hsh1i5Ux5CLhMjopLT3qBRrKJMZYN8n2TjbX0kNsgKA/ZqaSQIawIDrC+ IAESSEd7evpjT4l/YvperwTX/nM0Jgsyg36hVG6s7TRT525YCeQR//0mAqfD6p8e f+HkYIDaRZAWS6YQBBI45b/BPLaydcf6ejYzuj4CBSWObVPi -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:11 2026 by rpki-client