This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa File: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (raw, json) Hash identifier: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw= Subject key identifier: E2:1B:26:09:0D:3F:1D:FC:68:A1:EE:A7:96:0E:1D:F6:B8:B2:34:ED Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B7C13198C2890594663F9BEC8CABC3309 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 328543 IP address blocks: 2a0c:640::/29 maxlen: 29 2a0c:9380::/29 maxlen: 29 2a0c:f480::/29 maxlen: 29 2a0d:2480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:19:8c:28:90:59:46:63:f9:be:c8:ca:bc:33:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e21b26090d3f1dfc68a1eea7960e1df6b8b234ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:66:21:a6:73:55:54:ab:0b:77:8e:c7:ac: 39:91:46:d2:43:c3:40:12:e9:3a:ae:54:f3:16:ef: 41:49:5a:ef:f6:55:a8:f9:53:67:90:65:a8:6a:a8: dc:20:56:4e:07:3e:05:56:52:b3:5b:8d:73:d0:cf: 09:34:93:3f:27:2b:a9:e6:21:bf:63:40:65:61:4a: 7c:93:ea:a2:1e:25:fd:da:02:c7:5b:dc:71:d4:95: 60:96:1a:7b:38:5b:50:3e:a8:e3:92:ea:2a:3d:85: 0e:9c:ed:d5:6e:d2:d7:fd:7f:fc:30:ec:af:bd:7e: 09:78:03:76:1c:1a:37:0c:fa:54:51:2f:d7:2a:c6: cd:5c:06:35:cc:0a:11:bf:a3:13:e8:df:55:5d:ad: 5f:b5:2f:c3:0e:d2:ae:1e:32:5d:3d:66:57:bf:b9: ec:97:63:b0:89:1b:8a:e6:17:c8:18:bd:1f:3d:ff: de:01:43:18:b9:f3:0f:e8:02:90:cd:47:82:56:f8: 97:52:37:0f:18:c1:99:0f:4d:ce:4e:fb:22:d5:87: b5:7f:6f:c9:de:be:8a:37:ed:83:19:0a:1f:06:da: 51:e4:e9:87:89:87:20:51:f8:51:f4:30:7c:88:27: fc:48:23:30:5e:8f:e2:e8:25:6c:75:5e:8b:94:25: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1B:26:09:0D:3F:1D:FC:68:A1:EE:A7:96:0E:1D:F6:B8:B2:34:ED X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:640::/29 2a0c:9380::/29 2a0c:f480::/29 2a0d:2480::/29 Signature Algorithm: sha256WithRSAEncryption 47:5d:d2:d2:cb:90:e6:3b:e1:0c:7d:81:f8:af:9c:39:ac:40: cb:a5:9f:97:56:5b:c3:a1:6e:01:db:23:e5:95:bd:fb:bb:67: 71:1c:a0:0f:97:7a:1b:5f:af:9c:02:2a:ce:74:9e:ef:bd:d1: e1:6a:d9:bb:b9:4b:03:87:e9:76:40:2d:b7:d2:2a:01:17:22: 5b:61:be:d0:87:4b:c0:fa:1f:60:57:2f:86:d3:74:1d:2c:de: c9:f3:03:63:9d:c5:a5:5d:aa:f6:81:8f:1d:a5:5b:dc:37:ed: 69:dc:7a:1f:c7:5d:42:77:67:80:a2:3b:5d:b4:53:72:68:10: 3a:f3:ba:62:f1:73:cf:15:00:70:aa:80:1d:91:de:ec:1f:41: e5:f3:d6:15:81:75:25:56:66:b5:5f:bc:de:6b:2f:50:ba:47: 42:e9:f6:5a:c0:83:c3:b6:2e:97:99:74:de:6a:b6:67:d7:72: a9:f7:5c:84:94:5e:09:68:5c:3d:7c:fc:65:49:5c:3a:9b:c4: ae:5f:ba:1e:48:e1:59:bb:fc:cf:98:6c:97:98:03:ce:1e:52: 4f:74:d6:e7:71:21:85:3d:b7:cb:06:49:5e:46:23:37:04:23: 2b:b2:91:fa:74:8e:06:2d:81:64:a9:da:94:10:e6:56:84:92: d1:f5:52:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8ExmMKJBZRmP5vsjKvDMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjFiMjYwOTBkM2YxZGZjNjhhMWVlYTc5NjBlMWRmNmI4YjIzNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cJmIaZzVVSrC3eOx6w5kUbSQ8NA Euk6rlTzFu9BSVrv9lWo+VNnkGWoaqjcIFZOBz4FVlKzW41z0M8JNJM/Jyup5iG/ Y0BlYUp8k+qiHiX92gLHW9xx1JVglhp7OFtQPqjjkuoqPYUOnO3VbtLX/X/8MOyv vX4JeAN2HBo3DPpUUS/XKsbNXAY1zAoRv6MT6N9VXa1ftS/DDtKuHjJdPWZXv7ns l2OwiRuK5hfIGL0fPf/eAUMYufMP6AKQzUeCVviXUjcPGMGZD03OTvsi1Ye1f2/J 3r6KN+2DGQofBtpR5OmHiYcgUfhR9DB8iCf8SCMwXo/i6CVsdV6LlCWdXQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFOIbJgkNPx38aKHup5YOHfa4sjTtMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvNGhzbUNRMF9IZnhvb2U2bmxnNGQ5cml5Tk8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgwGQAMF AyoMk4ADBQMqDPSAAwUDKg0kgDANBgkqhkiG9w0BAQsFAAOCAQEAR13S0suQ5jvh DH2B+K+cOaxAy6Wfl1Zbw6FuAdsj5ZW9+7tncRygD5d6G1+vnAIqznSe773R4WrZ u7lLA4fpdkAtt9IqARciW2G+0IdLwPofYFcvhtN0HSzeyfMDY53FpV2q9oGPHaVb 3Dftadx6H8ddQndngKI7XbRTcmgQOvO6YvFzzxUAcKqAHZHe7B9B5fPWFYF1JVZm tV+83msvULpHQun2WsCDw7Yul5l03mq2Z9dyqfdchJReCWhcPXz8ZUlcOpvErl+6 HkjhWbv8z5hsl5gDzh5ST3TW53EhhT23ywZJXkYjNwQjK7KR+nSOBi2BZKnalBDm VoSS0fVSRg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:19 2026 by rpki-client