This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/hKABsk9R3ual0SAgA_RoQAJK-Ss.roa File: hKABsk9R3ual0SAgA_RoQAJK-Ss.roa (raw, json) Hash identifier: LPGqLFiU6Q6gycTMXFmkeg9Hl/W1u11tyU44+pVVPT0= Subject key identifier: 84:A0:01:B2:4F:51:DE:E6:A5:D1:20:20:03:F4:68:40:02:4A:F9:2B Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C8012022D5FB1B39155CBFD86BCC413 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/hKABsk9R3ual0SAgA_RoQAJK-Ss.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204677 IP address blocks: 2a13:2200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:12:02:2d:5f:b1:b3:91:55:cb:fd:86:bc:c4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a001b24f51dee6a5d1202003f46840024af92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:c3:31:82:c4:93:55:b8:4d:e0:14:58:24: 18:4a:9b:04:f9:45:4f:77:81:4a:17:f5:40:3f:55: f3:ec:90:5a:c6:ff:d3:21:20:3c:87:a8:8b:68:cc: 15:71:9b:ff:2f:97:6a:57:ed:77:51:b1:4f:fb:02: 42:c4:34:ea:b1:9a:44:55:2a:57:fd:f8:bf:be:a8: 3a:e0:c8:70:d0:39:31:83:a5:05:4a:a8:5b:59:ac: b2:ed:ad:64:11:d7:b9:71:4f:5e:25:51:23:0d:b0: f1:f5:58:99:97:f3:1a:38:38:72:f3:4f:a6:80:4e: 1e:fa:12:29:89:48:b2:a6:52:34:41:b7:c7:88:84: d1:e8:1d:7a:8f:e4:9e:5b:0a:8f:10:d9:33:69:2b: 23:d2:7f:64:b8:a5:63:27:9e:ef:87:35:93:5f:0c: cb:66:ec:4d:5d:e0:8c:30:b2:b0:d7:4e:c5:d0:b5: ea:ea:99:65:92:03:ec:ab:31:66:5f:de:f5:05:c7: 5a:f6:26:12:31:ec:87:d4:7d:9c:6e:21:1f:7c:b7: 0a:d3:82:c5:39:cc:b0:fe:76:a3:c7:c0:2e:24:80: 9d:cb:4e:d4:08:ab:30:57:c0:0f:bb:9b:65:9a:f6: 2f:5a:6a:53:5e:4a:84:b5:9b:e7:13:8e:03:ef:65: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A0:01:B2:4F:51:DE:E6:A5:D1:20:20:03:F4:68:40:02:4A:F9:2B X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/hKABsk9R3ual0SAgA_RoQAJK-Ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200::/29 Signature Algorithm: sha256WithRSAEncryption 3e:a4:c0:da:59:47:17:12:a3:44:39:a4:0e:2a:c5:10:66:a6: 01:70:14:56:43:ec:43:48:ba:31:23:83:90:33:93:5b:04:40: 2b:ee:f8:48:5c:cd:06:fa:14:f4:79:d7:7e:55:9f:fc:9a:08: 89:03:d7:16:5c:b5:d3:f1:2d:74:b6:04:1b:52:0f:56:a0:8d: ef:14:58:40:d2:33:e4:9c:bb:47:78:8e:34:14:d9:b9:ad:bf: ac:71:8a:ec:ff:d6:b7:67:ff:f7:7c:db:0f:f8:57:4a:82:20: 5d:02:6c:79:f6:4e:2a:aa:83:6b:e5:a1:ad:8b:a6:39:47:0e: 1c:7a:7e:ca:ea:66:bd:af:f0:4c:e5:bc:b8:04:47:ef:46:68: f4:a1:20:bd:4d:16:95:6d:a6:29:14:57:d7:65:4f:76:54:c1: 83:fe:ab:ae:1c:7f:0f:db:64:c7:88:bd:a1:89:69:1a:03:01: 82:b8:b4:8d:11:4f:45:5e:fc:67:07:5b:d9:eb:45:f4:71:ab: 52:81:ad:aa:66:5d:6f:dc:95:fe:9c:ab:03:1b:fd:3b:42:a9: 95:10:dd:df:e6:ed:07:83:89:06:37:10:ae:21:0f:80:c6:1e: b7:7c:61:4b:54:68:20:be:f6:17:e7:30:3f:80:84:86:a5:31: e1:49:e8:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gBICLV+xs5FVy/2GvMQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGEwMDFiMjRmNTFkZWU2YTVkMTIwMjAwM2Y0Njg0MDAyNGFmOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWLDMYLEk1W4TeAUWCQYSpsE+UVP d4FKF/VAP1Xz7JBaxv/TISA8h6iLaMwVcZv/L5dqV+13UbFP+wJCxDTqsZpEVSpX /fi/vqg64Mhw0Dkxg6UFSqhbWayy7a1kEde5cU9eJVEjDbDx9ViZl/MaODhy80+m gE4e+hIpiUiyplI0QbfHiITR6B16j+SeWwqPENkzaSsj0n9kuKVjJ57vhzWTXwzL ZuxNXeCMMLKw107F0LXq6pllkgPsqzFmX971Bcda9iYSMeyH1H2cbiEffLcK04LF Ocyw/najx8AuJICdy07UCKswV8APu5tlmvYvWmpTXkqEtZvnE44D72XMPwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFISgAbJPUd7mpdEgIAP0aEACSvkrMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvaEtBQnNrOVIzdWFsMFNBZ0FfUm9RQUpLLVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMiADAN BgkqhkiG9w0BAQsFAAOCAQEAPqTA2llHFxKjRDmkDirFEGamAXAUVkPsQ0i6MSOD kDOTWwRAK+74SFzNBvoU9HnXflWf/JoIiQPXFly10/EtdLYEG1IPVqCN7xRYQNIz 5Jy7R3iONBTZua2/rHGK7P/Wt2f/93zbD/hXSoIgXQJsefZOKqqDa+WhrYumOUcO HHp+yupmva/wTOW8uARH70Zo9KEgvU0WlW2mKRRX12VPdlTBg/6rrhx/D9tkx4i9 oYlpGgMBgri0jRFPRV78Zwdb2etF9HGrUoGtqmZdb9yV/pyrAxv9O0KplRDd3+bt B4OJBjcQriEPgMYet3xhS1RoIL72F+cwP4CEhqUx4UnoFA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:54 2026 by rpki-client