This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/hRup2JJMWBOF-WiIMoiCnCzzApo.roa File: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (raw, json) Hash identifier: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M= Subject key identifier: 85:1B:A9:D8:92:4C:58:13:85:F9:68:88:32:88:82:9C:2C:F3:02:9A Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B791090DFA9C69152A8B4565BAFD3A9D1 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/hRup2JJMWBOF-WiIMoiCnCzzApo.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203329 IP address blocks: 2a00:b404:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:df:a9:c6:91:52:a8:b4:56:5b:af:d3:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=851ba9d8924c581385f968883288829c2cf3029a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:35:4d:9b:69:9e:86:2c:43:34:4a:5d:2d: 4c:a8:e6:6c:5f:29:ce:51:37:6c:d5:6b:9d:ee:22: b6:71:1f:0e:40:a3:09:31:7f:c1:e7:02:c8:4c:49: 75:22:96:be:91:55:de:3c:18:f5:6a:7a:00:76:ff: be:a1:57:ce:37:e4:40:23:d6:ac:50:85:a6:8b:bc: d7:17:86:ff:72:49:c2:06:26:85:e4:85:bc:15:64: 06:19:1c:4e:a0:f4:82:00:8a:4f:39:d2:6a:67:a4: d4:86:4d:5d:6c:0c:42:6d:23:ed:49:37:58:ab:76: 09:24:03:1e:ad:e6:e5:ab:33:df:2f:7c:52:38:44: 94:af:e9:2d:4e:a5:2f:f6:0a:75:a9:88:0f:8e:94: 5f:b2:6a:9b:e9:c4:a6:2f:cb:49:5e:29:72:31:17: b5:26:d6:d3:a5:bc:9e:9c:b6:64:53:3b:83:44:98: 0c:da:c1:27:06:11:43:62:94:54:1d:47:cd:74:9e: 33:33:15:57:14:04:da:34:3a:3c:8f:83:b3:2b:a4: 23:30:c7:c2:f0:90:d3:b2:9e:c2:a9:fa:47:1e:f0: cf:15:65:8f:f9:3b:70:38:f1:66:aa:6f:34:f6:3d: 60:ed:fc:c8:4d:bb:f1:6c:e3:5b:8c:af:81:b8:35: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1B:A9:D8:92:4C:58:13:85:F9:68:88:32:88:82:9C:2C:F3:02:9A X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/hRup2JJMWBOF-WiIMoiCnCzzApo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:b404:e000::/36 Signature Algorithm: sha256WithRSAEncryption 7d:eb:c0:34:b2:fd:0e:9d:b6:8a:90:5e:ba:b4:fe:ae:20:cc: 0c:37:78:4e:f6:11:8d:dc:29:bd:e8:1a:71:c7:5b:37:9b:11: 4c:ed:e7:24:e5:92:18:de:a9:8e:09:c7:e3:ef:75:06:52:5d: f6:97:09:ef:cf:b8:4f:9d:a9:0f:c9:cc:d9:13:34:5c:00:9b: b2:a1:dc:cc:16:ec:42:da:6b:6e:6b:ad:e7:16:12:78:67:2a: 59:c2:f9:99:df:8c:00:4e:0b:4d:39:45:54:2a:2e:cb:3b:7a: 05:a9:39:3e:b5:f8:2a:a7:6b:7f:fe:7e:bd:fb:d4:87:ab:37: 3b:4f:2a:8c:d9:11:41:4c:e9:a5:48:62:17:cc:97:4a:ba:1a: 00:9d:d7:8b:4b:c6:ea:55:8c:58:22:72:cf:8b:73:fc:d7:fd: 94:74:1e:a6:3e:3a:d5:87:8a:31:40:7c:b3:78:e7:3c:36:b9: f1:d0:39:1d:43:38:30:df:73:41:91:4e:cf:14:cf:76:be:74: 47:14:b8:61:9c:6a:c9:f4:8e:57:59:cd:2e:4f:9a:27:83:62: 71:b7:03:99:48:0a:fe:14:fe:40:52:0d:b2:12:22:ce:dd:b4: 5e:d9:c5:5a:3f:0e:63:eb:ec:ab:2c:59:56:b2:9c:63:6c:b0: 13:52:c7:32 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EJDfqcaRUqi0Vluv06nRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTFiYTlkODkyNGM1ODEzODVmOTY4ODgzMjg4ODI5YzJjZjMwMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCs1TZtpnoYsQzRKXS1MqOZsXynO UTds1Wud7iK2cR8OQKMJMX/B5wLITEl1Ipa+kVXePBj1anoAdv++oVfON+RAI9as UIWmi7zXF4b/cknCBiaF5IW8FWQGGRxOoPSCAIpPOdJqZ6TUhk1dbAxCbSPtSTdY q3YJJAMereblqzPfL3xSOESUr+ktTqUv9gp1qYgPjpRfsmqb6cSmL8tJXilyMRe1 JtbTpbyenLZkUzuDRJgM2sEnBhFDYpRUHUfNdJ4zMxVXFATaNDo8j4OzK6QjMMfC 8JDTsp7CqfpHHvDPFWWP+TtwOPFmqm809j1g7fzITbvxbONbjK+BuDUhWQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIUbqdiSTFgThfloiDKIgpws8wKaMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEvaFJ1cDJKSk1XQk9GLVdpSU1vaUNuQ3p6QXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgC0BOAw DQYJKoZIhvcNAQELBQADggEBAH3rwDSy/Q6dtoqQXrq0/q4gzAw3eE72EY3cKb3o GnHHWzebEUzt5yTlkhjeqY4Jx+PvdQZSXfaXCe/PuE+dqQ/JzNkTNFwAm7Kh3MwW 7ELaa25rrecWEnhnKlnC+ZnfjABOC005RVQqLss7egWpOT61+Cqna3/+fr371Ier NztPKozZEUFM6aVIYhfMl0q6GgCd14tLxupVjFgics+Lc/zX/ZR0HqY+OtWHijFA fLN45zw2ufHQOR1DODDfc0GRTs8Uz3a+dEcUuGGcasn0jldZzS5PmieDYnG3A5lI Cv4U/kBSDbISIs7dtF7ZxVo/DmPr7KssWVaynGNssBNSxzI= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:26 2026 by rpki-client