This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/hvksWYquVQkww1TDotOmWxBrWjI.roa File: hvksWYquVQkww1TDotOmWxBrWjI.roa (raw, json) Hash identifier: nhaA9eSuRm/SMrRb1+Pwx8kFdkbppf59fmbTn6Q6QqQ= Subject key identifier: 86:F9:2C:59:8A:AE:55:09:30:C3:54:C3:A2:D3:A6:5B:10:6B:5A:32 Certificate issuer: /CN=59bff5f16ecb268b1597da1b3ad30af40fce7717 Certificate serial: 019B7DCB429F726A2C6B826C53CE9E6B4E9C Authority key identifier: 59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/hvksWYquVQkww1TDotOmWxBrWjI.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36459 IP address blocks: 2a0a:a440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.mft rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:42:9f:72:6a:2c:6b:82:6c:53:ce:9e:6b:4e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59bff5f16ecb268b1597da1b3ad30af40fce7717 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f92c598aae550930c354c3a2d3a65b106b5a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:83:9d:33:d0:81:8c:28:34:a0:80:2d:74: c0:c9:2e:b7:7a:27:32:27:9b:ad:7e:f4:6c:b5:b2: 14:dc:d4:5c:5b:0f:8d:83:f8:24:1a:1e:17:5b:4b: a2:cf:6d:73:23:7f:fe:72:4a:7c:d8:cb:ee:51:fa: 84:49:79:fc:e4:c6:a9:5d:df:33:5c:9c:00:b1:1e: d8:51:06:ee:dd:79:68:de:14:56:a6:52:a7:9e:99: 81:ac:fc:8d:78:80:1f:62:23:2c:95:51:bd:22:7f: 01:45:c4:ca:3b:33:46:67:96:18:45:98:97:a6:a6: 43:53:c0:e9:bc:c6:8d:1f:3b:cf:31:6f:a0:97:98: 9a:76:af:e4:48:5e:c8:d7:c5:37:79:fd:3e:2a:e5: ab:c3:9d:c7:58:60:01:e5:2f:85:fa:43:f9:f4:0f: 51:3a:0a:d2:47:74:cd:39:b4:a1:a9:62:6e:55:01: 1c:a3:fe:45:3b:40:bb:ca:4e:37:38:90:1a:6d:f8: 88:39:c5:b8:17:2c:b6:42:2a:44:d8:75:78:83:fa: 08:81:0a:46:9c:aa:ab:37:a8:8a:fe:c1:80:32:5c: b1:01:a3:b8:73:24:fc:90:6a:57:1d:76:6d:8e:03: 9d:8b:c2:cb:44:95:3d:3c:2c:94:88:22:73:ae:1a: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:2C:59:8A:AE:55:09:30:C3:54:C3:A2:D3:A6:5B:10:6B:5A:32 X509v3 Authority Key Identifier: keyid:59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/hvksWYquVQkww1TDotOmWxBrWjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:a440::/29 Signature Algorithm: sha256WithRSAEncryption a2:36:70:f2:a3:6d:e5:d3:9b:cd:a9:cb:40:4b:0a:ce:8c:1b: 32:48:22:6a:3a:ea:22:59:92:48:06:fb:76:60:d5:cd:8b:b6: ab:9f:b5:a5:40:c4:34:3a:0b:0b:3c:95:b4:ff:88:f6:40:e7: c8:52:78:0a:3b:49:3d:21:f9:9e:1d:b7:6e:2f:ba:e6:df:b7: 4b:f6:3d:87:8f:c8:50:7f:93:f5:2b:2f:8a:3a:ea:dc:16:f8: fa:d9:06:1b:e1:3c:da:6d:d4:f6:e7:d6:3c:f0:21:dd:80:11: ee:91:c9:28:4b:ce:2c:ae:9c:5e:42:d0:bc:6e:5a:50:d8:91: 32:91:fa:da:58:6e:2b:ac:c1:85:75:9a:75:64:33:69:c0:e8: 60:2d:f6:1a:ba:1d:ab:f8:72:d9:be:d9:6b:ed:69:4a:f3:c0: be:46:d6:e7:e7:45:6d:66:d6:67:c2:e7:c5:01:03:a4:c1:1f: 7b:3b:26:8a:09:2c:3e:94:85:65:64:b1:c7:01:26:c8:15:f7: e4:77:e9:ca:ab:ec:3a:db:44:8d:eb:c6:21:c6:1a:f5:a6:df: 30:c2:66:8c:cb:60:f2:9e:10:1b:30:44:8f:ea:8a:50:e3:af: 27:e5:87:03:ca:00:75:1e:5d:0a:89:46:dc:80:5b:94:32:08: 6f:ff:86:8f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y0Kfcmosa4JsU86ea06cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YmZmNWYxNmVjYjI2OGIxNTk3ZGExYjNhZDMwYWY0MGZj ZTc3MTcwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmY5MmM1OThhYWU1NTA5MzBjMzU0YzNhMmQzYTY1YjEwNmI1YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnKDnTPQgYwoNKCALXTAyS63eicy J5utfvRstbIU3NRcWw+Ng/gkGh4XW0uiz21zI3/+ckp82MvuUfqESXn85MapXd8z XJwAsR7YUQbu3Xlo3hRWplKnnpmBrPyNeIAfYiMslVG9In8BRcTKOzNGZ5YYRZiX pqZDU8DpvMaNHzvPMW+gl5iadq/kSF7I18U3ef0+KuWrw53HWGAB5S+F+kP59A9R OgrSR3TNObShqWJuVQEco/5FO0C7yk43OJAabfiIOcW4Fyy2QipE2HV4g/oIgQpG nKqrN6iK/sGAMlyxAaO4cyT8kGpXHXZtjgOdi8LLRJU9PCyUiCJzrhpbsQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIb5LFmKrlUJMMNUw6LTplsQa1oyMB8GA1UdIwQY MBaAFFm/9fFuyyaLFZfaGzrTCvQPzncXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JfMThXN0xKb3NWbDlvYk90TUs5QV9PZHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDU0ODAtNjBhNy00MTkzLWJmMzQt YmQ4NDliMDRkMTBhLzEvaHZrc1dZcXVWUWt3dzFURG90T21XeEJyV2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZDU0ODAtNjBhNy00MTkzLWJmMzQtYmQ4NDliMDRkMTBh LzEvV2JfMThXN0xKb3NWbDlvYk90TUs5QV9PZHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgqkQDAN BgkqhkiG9w0BAQsFAAOCAQEAojZw8qNt5dObzanLQEsKzowbMkgiajrqIlmSSAb7 dmDVzYu2q5+1pUDENDoLCzyVtP+I9kDnyFJ4CjtJPSH5nh23bi+65t+3S/Y9h4/I UH+T9Ssvijrq3Bb4+tkGG+E82m3U9ufWPPAh3YAR7pHJKEvOLK6cXkLQvG5aUNiR MpH62lhuK6zBhXWadWQzacDoYC32Grodq/hy2b7Za+1pSvPAvkbW5+dFbWbWZ8Ln xQEDpMEfezsmigksPpSFZWSxxwEmyBX35HfpyqvsOttEjevGIcYa9abfMMJmjMtg 8p4QGzBEj+qKUOOvJ+WHA8oAdR5dColG3IBblDIIb/+Gjw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:07:34 2026 by rpki-client