This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/nHgifZHPBcIw6s06tGKLHCI4zgw.roa File: nHgifZHPBcIw6s06tGKLHCI4zgw.roa (raw, json) Hash identifier: c7ejrTFJgQw1yik3Spq12DDz0GK+Gtiw+nh8SdakP2I= Subject key identifier: 9C:78:22:7D:91:CF:05:C2:30:EA:CD:3A:B4:62:8B:1C:22:38:CE:0C Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F156B801F9D1D690FAA0E4B33E3B965 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/nHgifZHPBcIw6s06tGKLHCI4zgw.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44050 IP address blocks: 2a02:c6c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6b:80:1f:9d:1d:69:0f:aa:0e:4b:33:e3:b9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c78227d91cf05c230eacd3ab4628b1c2238ce0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:96:55:7f:92:79:da:55:93:ec:ea:38:6d: d9:82:7f:ec:bf:1e:4f:c2:d6:e8:e8:7d:86:5c:83: 21:45:62:16:4a:96:18:d2:88:9d:b0:6f:c5:04:61: c1:a1:6d:68:a7:28:e9:30:89:82:38:86:d3:10:aa: 3f:6a:8b:20:7b:7a:0d:73:43:ba:96:00:45:48:19: a9:92:50:6f:4d:f6:57:56:fb:89:0d:11:e3:9a:38: 6b:e3:ac:17:1e:a8:0c:fd:db:69:6b:de:ba:88:b4: 83:00:45:6a:2f:02:00:c0:48:97:ff:63:3f:f9:37: f1:ae:18:47:3a:32:e0:ff:cf:08:1d:6c:23:22:03: b5:c8:65:88:45:68:76:06:b0:83:ba:e2:92:e7:78: 47:3e:b4:c4:f9:be:89:cb:bf:c7:a1:d9:74:c5:e7: 55:c7:bd:4f:fd:af:54:5f:ea:c5:a2:a4:29:79:e1: b0:0b:03:fc:a6:1b:ba:10:ce:05:31:27:c8:b9:00: 6e:66:a6:5a:b5:53:57:8e:36:72:61:ee:be:8c:b6: ce:4f:7d:e6:59:8d:fb:8c:b4:55:15:c4:bd:4b:31: 6f:9e:f3:a2:ca:aa:8d:42:da:0e:46:4f:5e:db:cf: 80:58:e1:3e:0d:e9:46:1f:97:7a:e4:d7:27:81:86: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:22:7D:91:CF:05:C2:30:EA:CD:3A:B4:62:8B:1C:22:38:CE:0C X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/nHgifZHPBcIw6s06tGKLHCI4zgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:c6c1::/48 Signature Algorithm: sha256WithRSAEncryption 61:cf:3d:87:3e:3b:88:56:5b:12:f0:41:01:0a:e9:6c:00:50: 73:ea:f8:88:04:4d:eb:b1:84:4b:bb:60:b0:df:1d:c4:5f:2c: dd:c4:1d:54:e3:12:c3:04:ad:fe:ee:44:d5:c8:1b:05:6e:92: 4d:8e:25:5a:5c:9f:b7:70:f1:ae:9f:96:3d:c2:ab:d1:2a:82: c6:28:20:45:7c:14:81:6f:37:4c:fa:1c:46:43:cf:9e:9b:03: 99:f8:74:ec:a1:93:a7:e6:86:0e:c2:cf:eb:73:e2:d2:c9:3d: dc:0e:00:b1:a1:04:a7:d9:f0:bb:56:25:60:ec:7d:13:5b:2a: 6a:44:fe:0e:ca:27:e9:78:5b:e7:9e:57:57:92:cc:b0:a8:90: de:0b:34:12:f4:a1:e1:63:e4:49:7a:df:ef:d7:fa:7b:c3:59: 3e:82:f1:66:41:32:cb:03:42:b0:74:e9:ab:d8:87:2e:6b:9b: f2:64:81:a4:8b:01:a4:a2:94:5f:84:ce:64:e1:e1:8b:da:0f: fb:8e:ee:0b:2f:c5:a2:7d:2f:1d:b9:4e:f0:f0:58:ee:d1:1e: 17:ac:a8:73:62:34:cc:fc:16:24:3e:83:7e:7e:ba:78:ab:f5: 22:91:cb:e1:eb:15:b4:2b:04:b5:25:ec:b9:7b:8a:cf:14:36: 88:32:fa:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FWuAH50daQ+qDksz47llMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzc4MjI3ZDkxY2YwNWMyMzBlYWNkM2FiNDYyOGIxYzIyMzhjZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfmWVX+SedpVk+zqOG3Zgn/svx5P wtbo6H2GXIMhRWIWSpYY0oidsG/FBGHBoW1opyjpMImCOIbTEKo/aosge3oNc0O6 lgBFSBmpklBvTfZXVvuJDRHjmjhr46wXHqgM/dtpa966iLSDAEVqLwIAwEiX/2M/ +TfxrhhHOjLg/88IHWwjIgO1yGWIRWh2BrCDuuKS53hHPrTE+b6Jy7/Hodl0xedV x71P/a9UX+rFoqQpeeGwCwP8phu6EM4FMSfIuQBuZqZatVNXjjZyYe6+jLbOT33m WY37jLRVFcS9SzFvnvOiyqqNQtoORk9e28+AWOE+DelGH5d65NcngYZsbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJx4In2RzwXCMOrNOrRiixwiOM4MMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvbkhnaWZaSFBCY0l3NnMwNnRHS0xIQ0k0emd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLGwQAA MA0GCSqGSIb3DQEBCwUAA4IBAQBhzz2HPjuIVlsS8EEBCulsAFBz6viIBE3rsYRL u2Cw3x3EXyzdxB1U4xLDBK3+7kTVyBsFbpJNjiVaXJ+3cPGun5Y9wqvRKoLGKCBF fBSBbzdM+hxGQ8+emwOZ+HTsoZOn5oYOws/rc+LSyT3cDgCxoQSn2fC7ViVg7H0T WypqRP4OyifpeFvnnldXksywqJDeCzQS9KHhY+RJet/v1/p7w1k+gvFmQTLLA0Kw dOmr2Icua5vyZIGkiwGkopRfhM5k4eGL2g/7ju4LL8WifS8duU7w8Fju0R4XrKhz YjTM/BYkPoN+frp4q/Uikcvh6xW0KwS1Jey5e4rPFDaIMvoA -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:24 2026 by rpki-client