This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa File: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (raw, json) Hash identifier: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E= Subject key identifier: 1E:AE:17:FF:BC:98:0F:F6:BC:11:82:38:6B:D3:41:96:74:15:73:7C Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E388E635129EB9332DE5F819A3043B1 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210686 IP address blocks: 2a0d:7d47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:63:51:29:eb:93:32:de:5f:81:9a:30:43:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eae17ffbc980ff6bc1182386bd341967415737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:11:d2:65:2f:d3:63:dd:57:a0:3f:66:49: 13:8d:10:6d:9f:99:22:35:f6:5d:cd:d7:39:c7:34: 66:c4:31:14:a7:18:f1:86:01:c7:3e:49:f9:cf:60: 4f:f2:12:bd:e0:0d:56:a9:87:f9:05:3a:cf:c5:1d: 11:e8:43:2b:04:02:05:49:aa:60:54:86:ca:ed:00: 07:c0:71:1e:dd:70:83:e9:a3:f6:22:39:55:dd:50: 20:a8:05:41:d9:3d:04:07:a4:8e:d1:13:f6:50:94: 42:d6:0e:06:02:84:14:e3:ce:41:e9:03:c6:1b:63: ef:b1:42:41:db:cf:ce:3d:6b:1a:3e:39:22:0c:5d: 8e:6c:f3:1b:0c:5e:a3:5a:d9:b5:fc:e8:b4:01:4c: ad:c4:5e:ea:4d:ea:af:77:a4:95:19:24:7f:ed:bb: 63:a9:97:09:18:92:e7:4b:72:c7:9c:1d:7e:54:7f: df:f7:12:d4:44:85:64:ba:0f:66:34:99:4e:0a:5e: 5f:f7:55:26:a2:62:2f:30:2f:c7:9d:67:39:b1:77: 4d:1b:ec:b5:e8:67:fa:83:29:ee:34:99:37:b2:5a: 1f:74:50:ac:4b:88:85:11:9f:dc:25:4d:d4:d8:ba: 53:f8:46:85:57:f6:53:b6:b4:98:42:d9:ee:29:1e: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AE:17:FF:BC:98:0F:F6:BC:11:82:38:6B:D3:41:96:74:15:73:7C X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7d47::/32 Signature Algorithm: sha256WithRSAEncryption 3f:37:c0:83:9b:f6:ad:86:7d:c7:e6:f3:bd:1b:dc:8b:c1:55: 87:2a:5d:55:3c:8f:1d:52:77:7f:35:f9:5b:86:d3:4c:e6:bb: 01:90:9b:43:e1:63:c4:5c:16:8b:0f:e2:aa:b7:31:4f:0f:1a: d8:3d:aa:62:21:2e:36:d9:8f:30:da:3f:da:01:d3:4c:86:f1: a0:30:b5:d7:ec:71:5d:e7:64:77:69:b8:fd:e1:92:eb:74:ec: b7:58:42:dc:0b:5e:01:b5:50:b5:80:7c:9f:48:10:fa:36:53: 21:44:38:b7:77:1f:ae:26:08:e7:de:f4:ad:55:34:92:83:42: 2c:7a:40:0b:e8:28:dc:1d:12:3c:58:ac:4c:b3:f8:72:05:2e: ea:16:6a:6e:c8:17:4f:59:f0:14:52:87:16:b1:14:b6:3c:be: 40:f0:d2:11:a2:61:df:59:c8:6b:7e:6d:65:8d:f4:ec:af:87: 8a:da:9c:73:62:57:7e:a6:22:4d:0d:49:a8:54:73:35:39:04: f3:59:b6:fe:df:df:8f:bf:e3:c7:2c:d5:58:a4:ce:c9:55:81: be:e5:99:4e:87:01:a8:02:eb:1a:de:aa:fe:af:76:b6:93:6b: 54:85:dc:c4:16:e2:0c:35:e3:fa:0c:c6:14:b1:75:da:14:7a: 25:c2:3a:ec -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OI5jUSnrkzLeX4GaMEOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWFlMTdmZmJjOTgwZmY2YmMxMTgyMzg2YmQzNDE5Njc0MTU3MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fcR0mUv02PdV6A/ZkkTjRBtn5ki NfZdzdc5xzRmxDEUpxjxhgHHPkn5z2BP8hK94A1WqYf5BTrPxR0R6EMrBAIFSapg VIbK7QAHwHEe3XCD6aP2IjlV3VAgqAVB2T0EB6SO0RP2UJRC1g4GAoQU485B6QPG G2PvsUJB28/OPWsaPjkiDF2ObPMbDF6jWtm1/Oi0AUytxF7qTeqvd6SVGSR/7btj qZcJGJLnS3LHnB1+VH/f9xLURIVkug9mNJlOCl5f91UmomIvMC/HnWc5sXdNG+y1 6Gf6gynuNJk3slofdFCsS4iFEZ/cJU3U2LpT+EaFV/ZTtrSYQtnuKR6wTwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFB6uF/+8mA/2vBGCOGvTQZZ0FXN8MB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvSHE0WF83eVlEX2E4RVlJNGE5TkJsblFWYzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg19RzAN BgkqhkiG9w0BAQsFAAOCAQEAPzfAg5v2rYZ9x+bzvRvci8FVhypdVTyPHVJ3fzX5 W4bTTOa7AZCbQ+FjxFwWiw/iqrcxTw8a2D2qYiEuNtmPMNo/2gHTTIbxoDC11+xx Xedkd2m4/eGS63Tst1hC3AteAbVQtYB8n0gQ+jZTIUQ4t3cfriYI5970rVU0koNC LHpAC+go3B0SPFisTLP4cgUu6hZqbsgXT1nwFFKHFrEUtjy+QPDSEaJh31nIa35t ZY307K+Hitqcc2JXfqYiTQ1JqFRzNTkE81m2/t/fj7/jxyzVWKTOyVWBvuWZTocB qALrGt6q/q92tpNrVIXcxBbiDDXj+gzGFLF12hR6JcI67A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:44:33 2026 by rpki-client