This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa File: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (raw, json) Hash identifier: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU= Subject key identifier: 85:1B:CD:7F:87:00:C6:29:50:0B:E3:59:F1:6A:A4:C4:C9:85:CD:9C Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B7910CA1122C43079A7934C9DAC1E14B6 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15585 IP address blocks: 2a07:2904::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ca:11:22:c4:30:79:a7:93:4c:9d:ac:1e:14:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=851bcd7f8700c629500be359f16aa4c4c985cd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:35:c0:cb:f6:27:fa:94:de:87:b8:3b:96: f0:f8:d5:b9:a4:ef:11:6b:fd:1c:04:ba:20:67:50: 95:59:7f:6f:c6:42:08:dd:fd:6b:bf:da:a5:70:b2: d7:e8:e2:fc:ce:e1:e7:25:2c:b1:b1:8c:3a:ec:b5: 05:96:90:96:66:a2:96:47:50:c0:d6:3d:22:27:ec: 99:9a:27:42:8f:0b:ae:d7:54:ce:b2:c6:74:d5:a7: 62:e6:79:06:76:b7:6d:54:bd:37:0e:b6:af:5d:0c: d1:3c:64:28:11:62:26:f7:88:de:b7:de:39:82:37: cd:e0:ec:89:2b:2f:9c:35:46:aa:6f:d3:9d:4a:13: cc:be:b5:98:af:14:fb:81:f5:e7:bb:db:6a:19:7b: 5e:71:1b:b8:fa:10:c2:49:25:cf:80:60:3e:c3:31: 01:bd:1e:d7:6b:96:c1:3d:e9:ef:3e:e9:b5:53:18: 0a:b7:98:ce:01:dc:8a:9e:62:0a:17:70:c9:41:ba: c7:89:bb:d4:e1:fb:3a:f2:b8:6d:7d:91:26:c0:54: d7:a6:97:9e:e6:7b:fb:35:a9:dd:2e:8b:1c:2d:94: f9:4b:b0:dc:06:11:9a:46:3e:b8:b7:48:ee:c1:6c: e6:03:8f:3e:8d:7e:a6:6e:40:ee:76:66:24:a9:85: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1B:CD:7F:87:00:C6:29:50:0B:E3:59:F1:6A:A4:C4:C9:85:CD:9C X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2904::/32 Signature Algorithm: sha256WithRSAEncryption 8b:71:27:54:e0:d2:4b:4d:69:9c:94:87:7a:66:43:82:0b:fc: b4:b4:ad:1a:ab:7c:12:59:99:fd:a1:0e:41:88:ac:d9:3d:c1: 5b:07:e3:8e:06:33:93:fa:03:f7:7d:22:34:08:6c:ad:a9:c2: 65:09:c2:91:5a:58:e5:20:77:7d:b8:54:17:1c:43:61:aa:ba: 05:9a:c6:45:6f:45:2e:74:e5:4d:dd:08:56:74:19:29:87:68: ae:1f:09:6a:bf:af:3d:b6:19:02:98:76:92:2c:67:30:cb:2d: 51:1b:75:a8:5b:d7:07:c9:e2:00:7a:b9:19:3d:8e:57:76:b7: 2d:2b:83:9a:97:e1:34:89:c9:68:66:2b:a5:4d:fe:d6:1d:60: e6:03:9c:ab:e4:9a:5f:98:61:0d:9e:e0:00:cf:63:f2:44:a4: 84:71:8c:c7:70:6f:f3:fe:7b:49:66:a9:9a:27:a0:b2:c7:2b: e4:e1:87:87:14:a2:86:94:fd:78:b9:08:33:11:2f:5a:85:12: 4f:ef:42:77:d0:5e:09:a5:27:b4:b7:bd:12:7a:a1:7b:67:21: fe:43:93:df:ca:21:01:7a:be:26:54:1b:c6:eb:c3:f5:a9:1a: 4b:4b:5c:44:1d:ba:65:67:4c:66:bd:dd:12:7a:56:60:6f:24: 7d:99:c2:bc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EMoRIsQweaeTTJ2sHhS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTFiY2Q3Zjg3MDBjNjI5NTAwYmUzNTlmMTZhYTRjNGM5ODVjZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGo1wMv2J/qU3oe4O5bw+NW5pO8R a/0cBLogZ1CVWX9vxkII3f1rv9qlcLLX6OL8zuHnJSyxsYw67LUFlpCWZqKWR1DA 1j0iJ+yZmidCjwuu11TOssZ01adi5nkGdrdtVL03DravXQzRPGQoEWIm94jet945 gjfN4OyJKy+cNUaqb9OdShPMvrWYrxT7gfXnu9tqGXtecRu4+hDCSSXPgGA+wzEB vR7Xa5bBPenvPum1UxgKt5jOAdyKnmIKF3DJQbrHibvU4fs68rhtfZEmwFTXppee 5nv7NandLoscLZT5S7DcBhGaRj64t0juwWzmA48+jX6mbkDudmYkqYUSdQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIUbzX+HAMYpUAvjWfFqpMTJhc2cMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEvaFJ2TmY0Y0F4aWxRQy1OWjhXcWt4TW1Gelp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgcpBDAN BgkqhkiG9w0BAQsFAAOCAQEAi3EnVODSS01pnJSHemZDggv8tLStGqt8ElmZ/aEO QYis2T3BWwfjjgYzk/oD930iNAhsranCZQnCkVpY5SB3fbhUFxxDYaq6BZrGRW9F LnTlTd0IVnQZKYdorh8Jar+vPbYZAph2kixnMMstURt1qFvXB8niAHq5GT2OV3a3 LSuDmpfhNInJaGYrpU3+1h1g5gOcq+SaX5hhDZ7gAM9j8kSkhHGMx3Bv8/57SWap miegsscr5OGHhxSihpT9eLkIMxEvWoUST+9Cd9BeCaUntLe9Enqhe2ch/kOT38oh AXq+JlQbxuvD9akaS0tcRB26ZWdMZr3dEnpWYG8kfZnCvA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:55 2026 by rpki-client