This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/H-qQrCrAktzV-DbBsgXII5ecG6E.roa File: H-qQrCrAktzV-DbBsgXII5ecG6E.roa (raw, json) Hash identifier: erbHrqWEc0I2T4g+aCnNjuIZqyQhXGo0pcfKHlJM7/M= Subject key identifier: 1F:EA:90:AC:2A:C0:92:DC:D5:F8:36:C1:B2:05:C8:23:97:9C:1B:A1 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CC7190380B1F343DD805EA9804AA Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/H-qQrCrAktzV-DbBsgXII5ecG6E.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207852 IP address blocks: 2a01:e281:aa00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cc:71:90:38:0b:1f:34:3d:d8:05:ea:98:04:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fea90ac2ac092dcd5f836c1b205c823979c1ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:5c:9d:c2:ab:b3:15:6d:2a:7a:20:c8:fb: 62:b6:c8:3c:d0:bc:e8:bd:7d:85:bb:3b:2e:23:0d: eb:2a:bc:50:f5:fe:d3:57:71:23:b2:9a:93:ab:0c: 49:fe:8d:c8:c7:6e:58:f2:ce:bf:f5:13:11:fd:4b: 30:19:bc:63:72:4e:b0:b1:de:8e:fe:8f:d9:c8:e9: de:32:41:d4:d6:aa:13:e2:0f:24:00:18:b2:59:04: 0f:df:f3:a3:46:68:1e:7a:e9:10:9a:29:a2:db:5c: bb:4d:e0:19:eb:fb:0e:70:53:dc:27:ff:4d:7f:37: 6b:d4:c4:cd:95:27:9e:50:5e:c3:72:68:21:17:e3: 3c:9d:eb:c9:46:54:e0:5a:e9:8b:2a:20:a7:95:b6: 00:9a:f3:e4:ab:9b:ed:ec:7c:c8:b9:44:a6:b9:77: 8f:d6:d2:f6:a3:83:99:81:73:e4:6b:5c:e1:0c:6c: c9:5c:93:4f:e2:d7:4e:a7:7f:8d:9b:27:88:e5:37: 01:d8:9e:a5:d9:e6:77:a9:97:bb:23:80:f8:9d:a9: fd:f9:a2:51:3b:3f:3f:07:83:d2:10:01:87:c8:3d: 25:32:c4:e1:17:fb:35:8a:99:82:75:8d:02:5c:c7: 16:db:7d:77:54:4a:6b:56:9f:f0:27:78:4f:e8:11: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EA:90:AC:2A:C0:92:DC:D5:F8:36:C1:B2:05:C8:23:97:9C:1B:A1 X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/H-qQrCrAktzV-DbBsgXII5ecG6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:aa00::/40 Signature Algorithm: sha256WithRSAEncryption 21:f8:83:c7:d7:7b:86:1e:0f:a0:1f:fe:00:84:c4:6e:06:06: 28:82:23:84:d0:00:9c:23:9f:62:c0:59:5b:21:49:93:4e:ed: 1b:f6:d6:93:56:f4:1f:56:cc:01:3f:c1:16:99:de:8d:6c:ce: 82:2a:b2:df:5d:00:84:08:7f:1e:0c:0c:31:31:de:b9:cd:b3: b5:dd:5e:64:c0:0d:2e:94:a8:27:92:c2:f2:07:a4:78:ec:fc: 8e:1e:5b:8e:a5:5c:dd:55:f8:52:8c:7e:10:b8:f5:c7:d3:04: 50:3b:9a:16:b4:4d:0d:7f:4f:7e:19:18:0a:cb:4f:fc:c0:9e: 4e:a8:3a:4d:a9:93:8a:89:0d:3d:d0:59:32:7a:99:fc:d2:5c: 97:e3:88:f1:3d:64:8c:44:4c:24:7e:61:d5:0e:a1:4a:3d:af: 46:5f:a7:2a:2c:ff:b8:3a:e3:34:15:dd:3a:14:5c:c2:8f:81: 31:50:60:42:ba:96:b8:fe:a3:7e:79:e6:1d:d3:9d:55:ee:e4: c6:55:5e:f8:9d:9f:32:95:0b:41:86:37:94:9d:ec:8d:81:c7: dd:8e:f6:c8:9c:18:01:5e:c7:f0:81:7b:f9:ab:1a:fb:07:25: 00:eb:7e:38:d6:0e:39:8e:9a:a2:c8:db:6d:56:b4:98:96:ad: d2:8d:31:28 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+psxxkDgLHzQ92AXqmASqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmVhOTBhYzJhYzA5MmRjZDVmODM2YzFiMjA1YzgyMzk3OWMxYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2NcncKrsxVtKnogyPtitsg80Lzo vX2FuzsuIw3rKrxQ9f7TV3EjspqTqwxJ/o3Ix25Y8s6/9RMR/UswGbxjck6wsd6O /o/ZyOneMkHU1qoT4g8kABiyWQQP3/OjRmgeeukQmimi21y7TeAZ6/sOcFPcJ/9N fzdr1MTNlSeeUF7DcmghF+M8nevJRlTgWumLKiCnlbYAmvPkq5vt7HzIuUSmuXeP 1tL2o4OZgXPka1zhDGzJXJNP4tdOp3+NmyeI5TcB2J6l2eZ3qZe7I4D4nan9+aJR Oz8/B4PSEAGHyD0lMsThF/s1ipmCdY0CXMcW2313VEprVp/wJ3hP6BFioQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB/qkKwqwJLc1fg2wbIFyCOXnBuhMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvSC1xUXJDckFrdHpWLURiQnNnWElJNWVjRzZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigaow DQYJKoZIhvcNAQELBQADggEBACH4g8fXe4YeD6Af/gCExG4GBiiCI4TQAJwjn2LA WVshSZNO7Rv21pNW9B9WzAE/wRaZ3o1szoIqst9dAIQIfx4MDDEx3rnNs7XdXmTA DS6UqCeSwvIHpHjs/I4eW46lXN1V+FKMfhC49cfTBFA7mha0TQ1/T34ZGArLT/zA nk6oOk2pk4qJDT3QWTJ6mfzSXJfjiPE9ZIxETCR+YdUOoUo9r0Zfpyos/7g64zQV 3ToUXMKPgTFQYEK6lrj+o3555h3TnVXu5MZVXvidnzKVC0GGN5Sd7I2Bx92O9sic GAFex/CBe/mrGvsHJQDrfjjWDjmOmqLI221WtJiWrdKNMSg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:30 2026 by rpki-client