This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa File: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (raw, json) Hash identifier: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk= Subject key identifier: 1E:C9:E1:B5:6D:D5:A3:54:9C:31:70:E6:FF:4E:2B:0E:B7:2B:3B:C0 Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A26409BC7FB907706E38A27A70F3A8 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211998 IP address blocks: 2a0e:1cc0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:64:09:bc:7f:b9:07:70:6e:38:a2:7a:70:f3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ec9e1b56dd5a3549c3170e6ff4e2b0eb72b3bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:10:2e:9c:e1:6c:77:07:45:9f:f2:00:87: d0:4a:0d:d8:7b:89:fc:ae:df:43:f2:7b:42:7d:2e: 4c:41:05:83:80:ed:3a:8a:f3:7e:a6:2d:1d:7c:1f: 44:8b:00:e2:f6:81:c1:c6:a9:6a:c2:60:83:77:5e: 00:b7:d5:3a:a2:1b:0e:c4:80:33:bb:c6:6a:62:e5: 49:68:20:b2:cc:88:bf:01:1f:0b:98:d4:15:ff:f6: 24:2b:9d:60:84:ef:ff:e4:a8:ac:ad:b4:64:af:24: 3d:81:6c:b2:31:b4:68:4e:70:87:3d:72:84:fb:d6: 5e:58:ed:a8:e2:82:3d:5c:4f:97:eb:1c:48:d6:fd: e6:67:d6:99:4f:09:a3:5e:20:9f:2f:8a:90:11:5b: 83:8f:80:cb:39:f0:1a:fe:64:da:a3:3a:1a:df:95: e5:b1:b7:7d:18:59:90:dd:ab:c3:2c:e6:fa:32:54: 08:3e:67:b5:a3:fc:5e:33:98:73:f6:09:84:72:45: 47:53:fe:6d:ad:3c:77:2a:c4:8c:41:98:d8:3a:1e: 08:47:ea:54:88:4e:16:dc:49:4b:a8:4d:2d:af:30: 0c:5a:4b:0b:8b:fb:be:31:ee:ee:6f:e9:78:c9:03: 79:57:a9:dc:51:04:f7:00:a3:de:11:a5:9f:2a:18: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:E1:B5:6D:D5:A3:54:9C:31:70:E6:FF:4E:2B:0E:B7:2B:3B:C0 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1cc0:5::/48 Signature Algorithm: sha256WithRSAEncryption 5e:1a:94:23:e1:5c:11:6d:05:c9:d0:9c:41:02:be:fe:63:2d: 69:66:95:60:27:df:2b:e1:80:88:c5:f1:ac:82:ee:4b:34:65: 3f:ed:a0:ea:a5:1f:9b:d9:07:81:68:85:56:cf:b9:b9:77:5a: 5d:4f:9d:67:d3:d8:6e:da:8b:54:ee:56:8e:07:d2:7b:57:15: f7:ed:1f:ba:f4:34:3c:f2:f4:24:eb:5b:52:97:2a:74:11:85: 85:cf:95:81:5d:93:12:cc:83:3f:c3:4e:29:77:91:dc:7c:59: 17:38:d9:a8:21:f3:1e:6b:ef:39:aa:41:17:57:8f:8e:c2:ce: 37:46:33:39:e0:42:9b:32:69:22:9f:94:aa:d4:cb:21:ae:ad: 2b:05:c3:76:6a:6f:9d:cb:d1:df:3f:f2:f6:25:07:24:48:5f: d1:d4:17:21:42:c5:f4:0a:58:9f:04:2a:0c:8d:af:ac:96:5c: c2:d3:d3:1f:f3:55:5f:db:25:4a:d5:24:43:af:bc:66:eb:6c: b6:0f:9b:70:5a:37:f2:d5:50:c9:5b:6d:31:5d:66:9c:28:db: e4:e7:4e:e3:9c:57:0d:ee:11:39:99:a7:32:02:16:94:59:ed: e5:57:53:ea:e3:05:0c:ce:c9:07:2c:c7:cf:bd:5f:8c:2e:82: d2:7d:0f:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4omQJvH+5B3BuOKJ6cPOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWM5ZTFiNTZkZDVhMzU0OWMzMTcwZTZmZjRlMmIwZWI3MmIzYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxngQLpzhbHcHRZ/yAIfQSg3Ye4n8 rt9D8ntCfS5MQQWDgO06ivN+pi0dfB9EiwDi9oHBxqlqwmCDd14At9U6ohsOxIAz u8ZqYuVJaCCyzIi/AR8LmNQV//YkK51ghO//5KisrbRkryQ9gWyyMbRoTnCHPXKE +9ZeWO2o4oI9XE+X6xxI1v3mZ9aZTwmjXiCfL4qQEVuDj4DLOfAa/mTaozoa35Xl sbd9GFmQ3avDLOb6MlQIPme1o/xeM5hz9gmEckVHU/5trTx3KsSMQZjYOh4IR+pU iE4W3ElLqE0trzAMWksLi/u+Me7ub+l4yQN5V6ncUQT3AKPeEaWfKhjSKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB7J4bVt1aNUnDFw5v9OKw63KzvAMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvSHNuaHRXM1ZvMVNjTVhEbV8wNHJEcmNyTzhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cwAAF MA0GCSqGSIb3DQEBCwUAA4IBAQBeGpQj4VwRbQXJ0JxBAr7+Yy1pZpVgJ98r4YCI xfGsgu5LNGU/7aDqpR+b2QeBaIVWz7m5d1pdT51n09hu2otU7laOB9J7VxX37R+6 9DQ88vQk61tSlyp0EYWFz5WBXZMSzIM/w04pd5HcfFkXONmoIfMea+85qkEXV4+O ws43RjM54EKbMmkin5Sq1Mshrq0rBcN2am+dy9HfP/L2JQckSF/R1BchQsX0Clif BCoMja+sllzC09Mf81Vf2yVK1SRDr7xm62y2D5twWjfy1VDJW20xXWacKNvk507j nFcN7hE5macyAhaUWe3lV1Pq4wUMzskHLMfPvV+MLoLSfQ/t -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:49 2026 by rpki-client