This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/122r5D9hg8_HADqcPzhfHNNyyQI.roa File: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (raw, json) Hash identifier: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw= Subject key identifier: D7:6D:AB:E4:3F:61:83:CF:C7:00:3A:9C:3F:38:5F:1C:D3:72:C9:02 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019B775908BF5C6EFBB9D7C8C95AE13EE628 Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/122r5D9hg8_HADqcPzhfHNNyyQI.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43465 IP address blocks: 2a03:e140:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:bf:5c:6e:fb:b9:d7:c8:c9:5a:e1:3e:e6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76dabe43f6183cfc7003a9c3f385f1cd372c902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:6c:88:ad:df:a0:cd:93:25:04:7e:aa:cc: b0:9b:84:a5:7b:7c:a5:73:12:d0:54:55:eb:b0:0e: 08:d1:c9:b4:5d:4d:2f:25:9d:24:ae:ee:fe:f5:c6: 60:80:e0:bb:ea:80:35:7e:1a:0c:7c:be:64:4d:db: 9e:44:0f:0e:05:fa:c7:66:df:a1:c0:b3:76:58:f4: 11:f1:9e:cf:76:f0:77:ae:76:23:e4:37:58:c1:be: 40:e4:29:a3:4d:7d:25:3b:22:99:cd:64:e2:1c:3c: 68:14:81:40:55:0d:e5:7d:2b:fe:48:c3:7b:53:6c: 95:8f:37:ab:91:f8:c5:2d:a7:c4:ae:99:14:c3:e6: 32:86:42:69:b0:c4:02:59:a9:6e:08:c8:eb:68:fe: e6:ba:36:c5:51:20:a2:e8:17:56:7b:f1:e7:49:f9: 35:91:45:0b:c2:be:13:ab:e0:86:44:2d:04:4e:56: ed:5c:84:90:f6:16:4b:12:07:d8:63:19:d6:4b:13: 4e:c8:ed:08:a2:a6:46:69:f5:44:b9:ed:65:ac:85: 39:88:5d:48:a1:71:ce:1b:5f:5c:5f:24:db:d3:31: b6:46:cd:b5:ac:dd:10:ce:51:c1:d7:b4:f2:04:8e: 0e:67:0d:ed:c0:d6:5b:67:e1:2e:03:5f:a4:da:b1: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6D:AB:E4:3F:61:83:CF:C7:00:3A:9C:3F:38:5F:1C:D3:72:C9:02 X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/122r5D9hg8_HADqcPzhfHNNyyQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:e140:5::/48 Signature Algorithm: sha256WithRSAEncryption 9b:3b:c8:40:37:57:86:e3:70:3b:8d:ee:a6:a0:71:42:03:bd: c1:ea:1b:9e:1e:62:3d:0f:95:66:d5:0a:63:f0:80:5c:cb:7e: 9a:82:dc:1c:97:61:05:a2:24:ae:04:b0:07:b3:c0:b1:36:a5: 4d:66:45:ff:f4:37:cd:90:ce:47:69:2b:f1:cd:92:cc:0c:40: e3:ac:ac:30:af:71:78:6e:96:15:23:7d:b1:f0:73:98:4f:f8: 01:aa:bc:1e:d5:22:a0:51:e6:e0:bf:3d:ce:dd:e3:bb:13:f5: 21:5b:e4:2f:1b:61:5a:36:cd:ca:c5:11:28:02:2d:e4:f4:4e: b8:d0:fe:7c:d8:b6:03:ed:83:92:87:82:36:a0:6c:52:bb:4a: b2:15:92:d3:27:b3:fe:b5:ab:99:73:9d:c3:54:23:64:e3:17: c6:34:6e:6a:9b:ed:74:70:cd:f0:51:d5:ae:da:88:89:4d:5f: 09:98:87:03:30:05:a2:e2:cc:13:22:45:83:3b:1c:44:1c:8c: b1:8c:31:5a:bf:0f:bc:db:b9:92:3f:fb:d5:94:27:50:73:7f: 26:c0:af:dd:ff:fb:42:98:28:c4:fb:68:7f:f5:19:58:5e:ef: 11:fa:4b:6f:56:76:38:d3:bf:78:27:d5:40:26:bb:8f:a0:1e: 7b:4e:e7:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WQi/XG77udfIyVrhPuYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZkYWJlNDNmNjE4M2NmYzcwMDNhOWMzZjM4NWYxY2QzNzJjOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ1siK3foM2TJQR+qsywm4Sle3yl cxLQVFXrsA4I0cm0XU0vJZ0kru7+9cZggOC76oA1fhoMfL5kTdueRA8OBfrHZt+h wLN2WPQR8Z7PdvB3rnYj5DdYwb5A5CmjTX0lOyKZzWTiHDxoFIFAVQ3lfSv+SMN7 U2yVjzerkfjFLafErpkUw+YyhkJpsMQCWaluCMjraP7mujbFUSCi6BdWe/HnSfk1 kUULwr4Tq+CGRC0ETlbtXISQ9hZLEgfYYxnWSxNOyO0IoqZGafVEue1lrIU5iF1I oXHOG19cXyTb0zG2Rs21rN0QzlHB17TyBI4OZw3twNZbZ+EuA1+k2rFQUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNdtq+Q/YYPPxwA6nD84XxzTcskCMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvMTIycjVEOWhnOF9IQURxY1B6aGZITk55eVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPhQAAF MA0GCSqGSIb3DQEBCwUAA4IBAQCbO8hAN1eG43A7je6moHFCA73B6hueHmI9D5Vm 1Qpj8IBcy36agtwcl2EFoiSuBLAHs8CxNqVNZkX/9DfNkM5HaSvxzZLMDEDjrKww r3F4bpYVI32x8HOYT/gBqrwe1SKgUebgvz3O3eO7E/UhW+QvG2FaNs3KxREoAi3k 9E640P582LYD7YOSh4I2oGxSu0qyFZLTJ7P+tauZc53DVCNk4xfGNG5qm+10cM3w UdWu2oiJTV8JmIcDMAWi4swTIkWDOxxEHIyxjDFavw+827mSP/vVlCdQc38mwK/d //tCmCjE+2h/9RlYXu8R+ktvVnY40794J9VAJruPoB57Tuea -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:40 2026 by rpki-client