This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa File: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (raw, json) Hash identifier: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY= Subject key identifier: 85:08:BF:DA:FE:0F:55:A5:36:0F:12:BF:B9:B9:BA:F8:D5:C9:67:9E Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB3EC7FF8EF8C7FDE44F82097F4F2E Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42093 IP address blocks: 2a06:c3c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3e:c7:ff:8e:f8:c7:fd:e4:4f:82:09:7f:4f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8508bfdafe0f55a5360f12bfb9b9baf8d5c9679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:21:60:af:e9:ed:0b:c0:0e:f8:c5:dd:0e:7f: cd:4c:56:6d:31:92:8c:aa:09:a7:e9:3d:2d:6b:eb: ae:f8:82:9a:ea:04:f4:7b:03:9e:90:62:4c:78:13: d2:c2:69:ed:87:d8:a6:6b:bf:30:d7:06:88:ff:cd: 52:34:fa:f0:22:b3:9a:19:75:03:a0:47:b5:92:dd: 4f:c0:9d:ac:5f:c2:ca:24:85:e3:b1:f7:cd:73:93: 03:c3:21:41:90:0a:78:95:b6:1b:c4:78:a5:76:fe: 24:be:59:f6:e7:95:18:81:1a:e2:f9:8f:5b:38:08: 41:64:f0:ef:3c:39:7f:5b:c0:69:9f:73:ff:67:85: ad:e1:bb:e5:f8:95:45:29:e7:3c:e0:e4:ae:d1:23: 4a:00:63:8e:cb:e5:6d:c0:0b:12:0e:17:e9:74:2d: 70:10:d2:b8:28:3d:a9:e9:23:50:68:0f:7c:6f:b5: 7c:fe:0a:07:b3:3e:7a:1e:44:41:1a:28:a5:d9:86: 78:c5:7e:48:13:10:ef:60:cb:1b:b4:af:11:dc:09: fd:19:79:8c:c4:98:55:c2:c2:3d:3f:69:e0:ef:27: 8f:a0:5b:80:46:dd:b0:43:14:ef:76:42:81:93:5d: 2a:3e:13:37:93:03:4c:2d:a7:9c:13:5e:2c:a7:b5: 91:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:BF:DA:FE:0F:55:A5:36:0F:12:BF:B9:B9:BA:F8:D5:C9:67:9E X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:c3c0:3::/48 Signature Algorithm: sha256WithRSAEncryption 74:3f:37:68:22:93:f1:0d:57:83:4d:95:73:3b:56:55:f7:4a: fb:04:2a:df:11:59:21:ad:c7:36:27:c7:80:51:c5:70:02:52: 6f:77:e2:bf:0e:55:8b:d6:9b:c4:fa:35:e1:c9:63:a2:3b:a7: ea:7a:71:08:4e:31:29:74:14:83:0e:db:7f:ed:8a:f3:11:31: b1:2d:8c:98:dc:5b:f8:ba:62:46:a3:76:96:67:0f:4d:56:07: d2:13:3f:57:94:26:66:f1:b3:85:ec:37:e2:1c:07:83:2d:ac: fa:bc:e6:f5:5d:0d:32:62:e1:1e:5e:5b:3c:e0:32:13:41:52: 8c:29:f4:fb:8b:38:c2:53:c7:91:94:31:ed:6f:e1:f9:a3:82: a9:2b:b6:5e:6d:2f:82:fc:15:57:a2:6b:6b:43:91:ba:59:b0: 4f:a4:08:43:65:6f:e4:44:05:79:23:f0:82:9d:43:1b:bc:8c: 05:3f:be:32:c2:93:ad:73:6b:de:75:28:2d:f5:1b:37:83:5d: 02:5e:26:04:d0:aa:c5:88:fc:36:0a:f3:42:37:f8:ba:e1:08: 5f:6a:a1:c1:98:1c:9d:29:5f:73:47:00:6e:f3:ab:6f:b4:5d: bd:eb:de:56:cb:6d:b9:40:38:a2:fc:c9:4b:47:48:c4:47:c1: 92:84:b6:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yz7H/474x/3kT4IJf08uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTA4YmZkYWZlMGY1NWE1MzYwZjEyYmZiOWI5YmFmOGQ1Yzk2NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iFgr+ntC8AO+MXdDn/NTFZtMZKM qgmn6T0ta+uu+IKa6gT0ewOekGJMeBPSwmnth9ima78w1waI/81SNPrwIrOaGXUD oEe1kt1PwJ2sX8LKJIXjsffNc5MDwyFBkAp4lbYbxHildv4kvln255UYgRri+Y9b OAhBZPDvPDl/W8Bpn3P/Z4Wt4bvl+JVFKec84OSu0SNKAGOOy+VtwAsSDhfpdC1w ENK4KD2p6SNQaA98b7V8/goHsz56HkRBGiil2YZ4xX5IExDvYMsbtK8R3An9GXmM xJhVwsI9P2ng7yePoFuARt2wQxTvdkKBk10qPhM3kwNMLaecE14sp7WR1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIUIv9r+D1WlNg8Sv7m5uvjVyWeeMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvaFFpXzJ2NFBWYVUyRHhLX3VibTYtTlhKWjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbDwAAD MA0GCSqGSIb3DQEBCwUAA4IBAQB0PzdoIpPxDVeDTZVzO1ZV90r7BCrfEVkhrcc2 J8eAUcVwAlJvd+K/DlWL1pvE+jXhyWOiO6fqenEITjEpdBSDDtt/7YrzETGxLYyY 3Fv4umJGo3aWZw9NVgfSEz9XlCZm8bOF7DfiHAeDLaz6vOb1XQ0yYuEeXls84DIT QVKMKfT7izjCU8eRlDHtb+H5o4KpK7ZebS+C/BVXomtrQ5G6WbBPpAhDZW/kRAV5 I/CCnUMbvIwFP74ywpOtc2vedSgt9Rs3g10CXiYE0KrFiPw2CvNCN/i64QhfaqHB mBydKV9zRwBu86tvtF29695Wy225QDii/MlLR0jER8GShLYO -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:18 2026 by rpki-client