This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/khuyur07z0KIfw77cPqiILd6kWM.roa File: khuyur07z0KIfw77cPqiILd6kWM.roa (raw, json) Hash identifier: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0= Subject key identifier: 92:1B:B2:BA:BD:3B:CF:42:88:7F:0E:FB:70:FA:A2:20:B7:7A:91:63 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019B7AC8E52F8C5F428F8D1200BF28E5196E Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/khuyur07z0KIfw77cPqiILd6kWM.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198408 IP address blocks: 2a02:f7f:4::/46 maxlen: 46 2a02:f7f:4::/48 maxlen: 48 2a02:f7f:5::/48 maxlen: 48 2a02:f7f:6::/48 maxlen: 48 2a02:f7f:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e5:2f:8c:5f:42:8f:8d:12:00:bf:28:e5:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=921bb2babd3bcf42887f0efb70faa220b77a9163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:a6:c9:9d:43:5e:f3:95:c8:20:92:0c:79: 6e:7d:7a:77:ea:04:cc:9d:7f:7d:d7:1c:f0:0c:9d: 2a:c1:92:d4:a9:d8:64:d4:59:4c:6b:1b:5e:e5:51: 1f:de:c6:90:18:bf:fb:c8:e8:c6:dd:db:08:4f:ba: 2b:12:35:c1:2d:de:a2:c7:9f:8a:b8:dd:0e:92:dd: fa:91:eb:be:5d:58:61:03:bc:08:1f:7b:e5:ae:74: 48:bb:10:64:d1:cf:0b:f1:d5:2c:6e:08:42:bb:11: b5:1e:91:45:f2:7b:f8:59:25:08:5b:84:ed:67:86: 8d:a8:b6:07:e8:6d:ed:0d:b7:8b:d6:68:10:62:00: 16:e2:50:05:93:a5:d9:8b:12:d7:4b:56:a7:81:54: 4c:a0:b3:ff:ef:ed:82:90:2e:03:a1:18:26:4b:7c: aa:cd:04:8b:02:c9:83:50:f6:b7:e0:d9:a8:a4:14: 17:ad:c5:46:75:f1:b7:e7:13:4f:75:de:d2:a3:8b: 29:6e:54:7f:48:b7:a6:72:4b:24:87:91:aa:ec:a7: 1a:e1:f6:0f:5a:33:52:2c:4a:b1:8e:c1:27:63:40: 2d:2c:e2:e5:ed:9a:37:1a:20:6f:b5:74:38:79:0f: dc:cc:fd:96:19:76:10:44:61:6e:e3:cb:66:c9:d9: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:B2:BA:BD:3B:CF:42:88:7F:0E:FB:70:FA:A2:20:B7:7A:91:63 X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/khuyur07z0KIfw77cPqiILd6kWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f7f:4::/46 Signature Algorithm: sha256WithRSAEncryption 6f:f4:b2:02:43:9a:19:96:af:80:a0:8e:6b:dc:b3:51:74:24: 01:2d:cd:ea:7d:6b:1c:5a:84:f7:3c:6a:06:95:56:f1:ad:24: 02:42:2f:f1:68:6e:0e:c2:dd:c6:e9:e0:05:72:de:6c:7f:75: 3b:8c:b3:1b:c1:57:d7:64:7c:ac:4e:37:f3:16:06:26:ac:ef: 3b:e0:41:ff:a9:03:38:39:7a:93:27:29:e5:f6:0c:dc:3a:65: 4c:fa:48:bc:1a:9b:2f:77:4d:71:74:2f:9b:7a:2e:79:13:54: 5c:ba:1f:fe:60:84:0a:b2:32:83:50:98:5f:98:ee:67:be:a6: 37:a9:6c:b3:2a:22:8e:ea:e8:d5:30:5c:d4:e7:bf:83:72:fc: 40:9d:ed:50:b7:1e:51:ce:a8:ab:53:0c:9d:36:5d:06:45:14: a3:dd:d8:78:19:7a:d8:30:eb:1c:97:41:74:c1:15:c6:4e:20: 70:0e:aa:1d:93:e9:3d:73:9a:09:09:13:2b:5c:6d:17:ab:d4: 6e:85:50:df:69:fb:8b:eb:78:e4:76:4c:dc:b5:df:cf:ea:d0: 5f:bd:84:dc:2a:e5:81:f7:78:d1:5d:fa:6b:0d:74:c8:e6:33: a0:b1:41:72:03:40:13:aa:eb:34:b4:d7:89:b3:c3:a9:84:4b: f4:38:d2:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yOUvjF9Cj40SAL8o5RluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjFiYjJiYWJkM2JjZjQyODg3ZjBlZmI3MGZhYTIyMGI3N2E5MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7mmyZ1DXvOVyCCSDHlufXp36gTM nX991xzwDJ0qwZLUqdhk1FlMaxte5VEf3saQGL/7yOjG3dsIT7orEjXBLd6ix5+K uN0Okt36keu+XVhhA7wIH3vlrnRIuxBk0c8L8dUsbghCuxG1HpFF8nv4WSUIW4Tt Z4aNqLYH6G3tDbeL1mgQYgAW4lAFk6XZixLXS1angVRMoLP/7+2CkC4DoRgmS3yq zQSLAsmDUPa34NmopBQXrcVGdfG35xNPdd7So4spblR/SLemckskh5Gq7Kca4fYP WjNSLEqxjsEnY0AtLOLl7Zo3GiBvtXQ4eQ/czP2WGXYQRGFu48tmydlsHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJIbsrq9O89CiH8O+3D6oiC3epFjMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEva2h1eXVyMDd6MEtJZnc3N2NQcWlJTGQ2a1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgIPfwAE MA0GCSqGSIb3DQEBCwUAA4IBAQBv9LICQ5oZlq+AoI5r3LNRdCQBLc3qfWscWoT3 PGoGlVbxrSQCQi/xaG4Owt3G6eAFct5sf3U7jLMbwVfXZHysTjfzFgYmrO874EH/ qQM4OXqTJynl9gzcOmVM+ki8Gpsvd01xdC+bei55E1Rcuh/+YIQKsjKDUJhfmO5n vqY3qWyzKiKO6ujVMFzU57+DcvxAne1Qtx5RzqirUwydNl0GRRSj3dh4GXrYMOsc l0F0wRXGTiBwDqodk+k9c5oJCRMrXG0Xq9RuhVDfafuL63jkdkzctd/P6tBfvYTc KuWB93jRXfprDXTI5jOgsUFyA0ATqus0tNeJs8OphEv0ONId -----END CERTIFICATE-----Generated at Mon Jan 26 07:31:40 2026 by rpki-client