This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/hGF5HckbV_mO1zNnnUvLaxvGgg0.roa File: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (raw, json) Hash identifier: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk= Subject key identifier: 84:61:79:1D:C9:1B:57:F9:8E:D7:33:67:9D:4B:CB:6B:1B:C6:82:0D Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019B7F1585984EC6CDE95A7415A754A758BC Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/hGF5HckbV_mO1zNnnUvLaxvGgg0.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 195524 IP address blocks: 2a03:90c0:888a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:85:98:4e:c6:cd:e9:5a:74:15:a7:54:a7:58:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8461791dc91b57f98ed733679d4bcb6b1bc6820d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:18:5b:11:08:41:59:92:e8:f4:06:34:27: c6:ff:17:b9:65:d7:f6:8a:6d:b4:28:76:2c:ea:ac: 5e:0c:f7:5d:80:3a:a9:ed:d2:b8:6b:fe:46:e0:6d: 3d:50:be:20:fe:21:3f:2a:fd:cf:9b:b9:41:dd:f0: 18:f5:e4:48:d7:0f:9d:9a:7a:46:0d:ae:8e:a6:18: 2d:b1:f1:0a:06:93:9e:8c:9f:df:53:71:fd:74:9a: 6d:f4:f6:a8:72:8d:32:12:37:a0:0b:00:90:80:ca: 83:9d:dd:ec:8c:41:7b:ea:e3:a5:bb:cf:8e:a4:7d: 82:40:2b:49:9b:3e:3f:da:66:46:80:f9:ca:69:05: 56:fc:4d:1e:0f:ba:9d:ae:ac:25:89:59:87:44:d0: 24:f1:f3:7a:7d:3c:6f:55:ac:b7:7f:16:72:93:73: e9:65:d5:fd:04:3a:23:88:f8:ad:1c:42:fe:a6:50: 28:5c:a8:42:6f:03:c3:d0:6f:68:29:e8:70:f2:09: d7:10:ac:68:7e:73:ef:93:ed:c3:39:5b:39:4c:43: 72:de:b9:9f:9a:65:3d:5c:96:e9:3e:9b:1b:2e:be: 79:29:52:be:00:10:10:1b:23:43:41:75:19:af:32: 94:dd:91:85:c0:45:82:b9:89:c3:08:64:88:54:ae: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:79:1D:C9:1B:57:F9:8E:D7:33:67:9D:4B:CB:6B:1B:C6:82:0D X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/hGF5HckbV_mO1zNnnUvLaxvGgg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:90c0:888a::/48 Signature Algorithm: sha256WithRSAEncryption a7:0f:fa:97:c2:ca:b4:30:3c:6a:29:ae:8e:8f:39:5f:62:9a: a8:a5:6e:47:f3:cf:ad:c5:ec:41:93:ca:73:05:14:5d:e1:f0: e1:86:d6:c3:30:d5:d8:1b:2a:5d:da:6e:27:e7:7f:2a:a9:91: 0d:ba:8b:38:92:9c:b3:70:a9:c3:89:c9:af:b2:4f:0e:71:c1: e8:29:ee:71:72:a4:69:5a:1b:56:b4:99:0d:49:81:18:1b:f1: ba:a4:61:7f:9e:8d:f1:27:81:78:0b:57:f5:e0:02:39:0c:95: 38:9f:1a:5b:77:05:3c:83:8c:19:23:56:63:f3:6c:6d:9b:9d: 60:51:93:7d:80:89:40:43:bf:fc:aa:91:f9:d1:84:79:d0:77: 61:a0:c5:f9:50:19:f9:b1:1c:57:6f:2e:eb:47:21:14:2e:42: 41:bd:79:8c:74:a8:4c:a1:cd:9c:3f:5d:bd:77:4f:20:ca:35: 72:bd:24:26:b6:c5:6a:c0:22:1f:6a:b5:e4:7b:44:48:08:a0: b5:1c:e9:e6:5a:0a:c9:c2:23:85:e5:7a:d5:ce:81:80:3a:aa: 4b:19:ec:30:d2:14:82:5a:e2:ba:db:af:83:91:92:bf:0f:09: 85:0a:e6:cb:e1:62:9d:b2:87:14:90:c1:27:e0:d6:1b:af:a7: fd:9c:3a:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FYWYTsbN6Vp0FadUp1i8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDYxNzkxZGM5MWI1N2Y5OGVkNzMzNjc5ZDRiY2I2YjFiYzY4MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TQYWxEIQVmS6PQGNCfG/xe5Zdf2 im20KHYs6qxeDPddgDqp7dK4a/5G4G09UL4g/iE/Kv3Pm7lB3fAY9eRI1w+dmnpG Da6OphgtsfEKBpOejJ/fU3H9dJpt9Paoco0yEjegCwCQgMqDnd3sjEF76uOlu8+O pH2CQCtJmz4/2mZGgPnKaQVW/E0eD7qdrqwliVmHRNAk8fN6fTxvVay3fxZyk3Pp ZdX9BDojiPitHEL+plAoXKhCbwPD0G9oKehw8gnXEKxofnPvk+3DOVs5TENy3rmf mmU9XJbpPpsbLr55KVK+ABAQGyNDQXUZrzKU3ZGFwEWCuYnDCGSIVK4uIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIRheR3JG1f5jtczZ51Ly2sbxoINMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvaEdGNUhja2JWX21PMXpObm5VdkxheHZHZ2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOQwIiK MA0GCSqGSIb3DQEBCwUAA4IBAQCnD/qXwsq0MDxqKa6OjzlfYpqopW5H88+txexB k8pzBRRd4fDhhtbDMNXYGypd2m4n538qqZENuos4kpyzcKnDicmvsk8OccHoKe5x cqRpWhtWtJkNSYEYG/G6pGF/no3xJ4F4C1f14AI5DJU4nxpbdwU8g4wZI1Zj82xt m51gUZN9gIlAQ7/8qpH50YR50HdhoMX5UBn5sRxXby7rRyEULkJBvXmMdKhMoc2c P129d08gyjVyvSQmtsVqwCIfarXke0RICKC1HOnmWgrJwiOF5XrVzoGAOqpLGeww 0hSCWuK626+DkZK/DwmFCubL4WKdsocUkMEn4NYbr6f9nDrM -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:40 2026 by rpki-client