This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/sHT9uRMJFfzV4bMDWClaNZLXg6c.roa File: sHT9uRMJFfzV4bMDWClaNZLXg6c.roa (raw, json) Hash identifier: 1CccVeF+jPttRzzbL8y6u91VStwFjE2E+hkKFOv1shU= Subject key identifier: B0:74:FD:B9:13:09:15:FC:D5:E1:B3:03:58:29:5A:35:92:D7:83:A7 Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c Certificate serial: 019B7FF230F42F66F82FF3A58B673686FFF5 Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/sHT9uRMJFfzV4bMDWClaNZLXg6c.roa Signing time: Fri 02 Jan 2026 18:22:17 +0000 ROA not before: Fri 02 Jan 2026 18:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56621 IP address blocks: 2a13:b301::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:30:f4:2f:66:f8:2f:f3:a5:8b:67:36:86:ff:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c Validity Not Before: Jan 2 18:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b074fdb9130915fcd5e1b30358295a3592d783a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:6f:e9:a6:de:b1:24:5e:f5:05:6c:7f:8b: a6:55:0e:68:62:04:64:6c:3c:3b:d4:ab:79:e0:e9: cc:88:2b:fb:53:ec:f1:f9:0c:7c:1a:5a:c0:8b:3b: bc:2e:cd:06:b2:db:17:68:6e:9e:59:50:76:54:60: 3a:3e:97:51:84:7f:c4:65:0d:f2:af:20:2d:94:40: 10:88:28:d1:44:07:36:ae:4b:4c:62:e2:71:71:0d: d1:36:c0:df:d6:42:31:2e:2b:de:9d:67:98:03:85: dd:be:cc:93:21:7a:0e:e9:16:d8:b9:d2:34:5f:62: dd:9f:0e:9c:0f:1c:21:73:6d:eb:e6:19:94:41:58: 68:e4:7f:6e:e5:be:e9:ad:25:a1:af:c8:1d:be:63: 69:78:28:27:2d:ff:57:55:0a:67:70:bb:73:8b:6e: 3f:34:dc:15:7a:e4:6d:84:04:45:cf:f5:ca:17:76: 26:b1:53:c9:3a:3c:b0:75:23:69:d8:5f:a2:06:17: 58:47:38:18:7a:64:11:d9:e0:ed:59:d2:0c:bc:f4: a2:fb:87:28:ab:01:5d:51:ef:6b:2c:89:76:e4:27: f1:55:a7:5e:31:49:e3:52:51:18:02:62:fe:f7:c3: d3:0c:0d:ee:8b:d8:e7:3d:9f:46:28:d9:f3:88:4d: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:74:FD:B9:13:09:15:FC:D5:E1:B3:03:58:29:5A:35:92:D7:83:A7 X509v3 Authority Key Identifier: keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/sHT9uRMJFfzV4bMDWClaNZLXg6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b301::/32 Signature Algorithm: sha256WithRSAEncryption 07:f4:19:8e:58:7d:b1:66:6e:12:0d:bb:83:cc:c3:ac:63:be: 7b:ce:2a:e7:1d:bb:3c:41:99:25:41:94:17:2f:01:c4:80:81: 9e:95:54:5c:69:8c:5c:ec:75:cc:1c:9a:14:34:75:2b:4a:59: 90:1f:4b:5f:4f:66:5f:dc:72:ed:8e:a8:24:96:b1:4f:4a:4a: 43:3e:9e:9c:87:59:00:29:d7:2f:e3:8c:29:56:5d:39:5b:c0: 4e:9d:51:aa:3c:23:d2:66:a2:15:d3:04:6b:a8:4e:cf:14:11: 58:80:e2:26:ba:cc:a4:85:a7:ac:18:3a:42:4c:d3:d1:eb:f8: 41:fe:24:c8:02:41:8c:c5:46:0b:ef:4b:f7:90:67:d5:3a:c4: 89:1f:b5:50:78:aa:cf:f7:79:f5:65:48:85:83:2c:df:10:c1: f6:43:a5:ad:dd:15:ac:60:1d:4a:6a:0c:64:32:b2:36:9a:b0: ce:de:25:95:49:3d:54:e7:e6:52:5b:6a:43:95:4c:ba:6a:32: f2:6c:ba:3d:89:53:91:fd:a6:32:da:64:ea:e1:82:4d:95:ca: 9d:a3:10:ef:3e:be:51:31:c4:8c:f5:8b:33:8a:e3:4b:f9:89: 1b:0c:07:af:15:8d:f3:fa:4a:09:c4:92:49:36:0c:76:86:3f: e9:2d:02:a9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8jD0L2b4L/Oli2c2hv/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2 ZjBlMmMwHhcNMjYwMTAyMTgyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDc0ZmRiOTEzMDkxNWZjZDVlMWIzMDM1ODI5NWEzNTkyZDc4M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUpv6abesSRe9QVsf4umVQ5oYgRk bDw71Kt54OnMiCv7U+zx+Qx8GlrAizu8Ls0GstsXaG6eWVB2VGA6PpdRhH/EZQ3y ryAtlEAQiCjRRAc2rktMYuJxcQ3RNsDf1kIxLivenWeYA4XdvsyTIXoO6RbYudI0 X2Ldnw6cDxwhc23r5hmUQVho5H9u5b7prSWhr8gdvmNpeCgnLf9XVQpncLtzi24/ NNwVeuRthARFz/XKF3YmsVPJOjywdSNp2F+iBhdYRzgYemQR2eDtWdIMvPSi+4co qwFdUe9rLIl25CfxVadeMUnjUlEYAmL+98PTDA3ui9jnPZ9GKNnziE1rnwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLB0/bkTCRX81eGzA1gpWjWS14OnMB8GA1UdIwQY MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt OGJiZjhiZmM2ZDhlLzEvc0hUOXVSTUpGZnpWNGJNRFdDbGFOWkxYZzZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOzATAN BgkqhkiG9w0BAQsFAAOCAQEAB/QZjlh9sWZuEg27g8zDrGO+e84q5x27PEGZJUGU Fy8BxICBnpVUXGmMXOx1zByaFDR1K0pZkB9LX09mX9xy7Y6oJJaxT0pKQz6enIdZ ACnXL+OMKVZdOVvATp1Rqjwj0maiFdMEa6hOzxQRWIDiJrrMpIWnrBg6QkzT0ev4 Qf4kyAJBjMVGC+9L95Bn1TrEiR+1UHiqz/d59WVIhYMs3xDB9kOlrd0VrGAdSmoM ZDKyNpqwzt4llUk9VOfmUltqQ5VMumoy8my6PYlTkf2mMtpk6uGCTZXKnaMQ7z6+ UTHEjPWLM4rjS/mJGwwHrxWN8/pKCcSSSTYMdoY/6S0CqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:55 2026 by rpki-client