This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/h3bGoqeRFSMTUyuhGqbYpfwxfqE.roa File: h3bGoqeRFSMTUyuhGqbYpfwxfqE.roa (raw, json) Hash identifier: C/WkAn9ZisvCfv8kKxfOfN2pz9lqCtnDj8CgMz0djsg= Subject key identifier: 87:76:C6:A2:A7:91:15:23:13:53:2B:A1:1A:A6:D8:A5:FC:31:7E:A1 Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5 Certificate serial: 019B79ECE0906C8C00F070B2042CAB1A0673 Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/h3bGoqeRFSMTUyuhGqbYpfwxfqE.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209187 IP address blocks: 2a0a:68c0:109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e0:90:6c:8c:00:f0:70:b2:04:2c:ab:1a:06:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8776c6a2a791152313532ba11aa6d8a5fc317ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:44:72:9c:bc:57:2c:37:40:18:d8:55:87: fc:1f:e0:26:81:6d:94:7e:fb:00:85:f5:70:d7:83: 5b:3d:63:ac:4d:ad:df:bb:cd:0b:00:28:27:27:48: 23:ac:7c:fd:df:98:f0:47:1a:47:2d:e4:52:0d:30: 7a:53:10:72:22:57:94:cf:84:f6:11:73:a8:c6:6f: 6b:22:12:11:0e:13:ef:6f:e9:c7:4f:07:21:de:a1: c6:b0:25:f3:00:99:da:db:d5:f7:b7:72:5d:03:d8: 5a:40:4e:9a:21:22:a7:a2:58:a2:d0:65:5a:62:45: 33:0c:76:4e:a1:d0:4e:a0:84:56:29:a0:d7:d5:f5: 56:68:cd:9f:fb:56:ac:2c:7c:b9:37:70:94:01:a9: 0f:95:77:f0:fb:5e:67:bc:fe:01:e0:f5:3d:cb:29: 6f:7e:48:03:f3:e8:a8:1d:b9:0a:6a:d1:65:62:6c: 90:61:69:97:9f:e4:5e:42:bc:79:67:be:23:13:a9: 48:ef:c7:d8:89:ab:ef:df:a2:ef:cf:bc:fc:43:f0: ac:46:41:18:a0:1d:fe:94:c7:25:ca:45:73:08:d2: da:87:ed:b5:bd:f0:10:df:df:ff:74:3c:b9:af:91: cd:b8:33:88:62:29:95:56:c2:31:79:f7:3b:d5:ba: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:76:C6:A2:A7:91:15:23:13:53:2B:A1:1A:A6:D8:A5:FC:31:7E:A1 X509v3 Authority Key Identifier: keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/h3bGoqeRFSMTUyuhGqbYpfwxfqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:68c0:109::/48 Signature Algorithm: sha256WithRSAEncryption ac:8e:92:1f:a5:d5:4e:b5:f4:d1:32:ef:d0:05:ba:84:19:69: 2b:ed:ba:ff:17:2d:8f:a1:bc:ea:c1:17:70:4e:85:2e:73:99: 8d:52:b2:52:5b:40:b3:86:1f:d9:b9:37:ea:33:2e:1f:52:90: 7d:ea:c6:0e:03:90:46:63:f7:02:e1:e0:23:b3:87:79:fd:92: 9e:dd:82:8b:57:d1:8f:f7:58:92:2e:3f:f6:01:03:c7:ba:16: 13:33:b2:d7:24:e9:0e:a9:34:92:46:2d:40:05:ea:6f:ab:21: 0f:7d:be:3b:d0:f0:56:12:8f:c8:4c:11:05:7a:2d:53:37:61: 85:01:1f:a1:16:22:2c:c8:e5:eb:f2:96:9c:66:1a:12:d4:7c: 07:0f:c5:37:73:7a:d8:e1:97:76:1c:57:ea:1f:c9:3b:c0:42: a3:59:8c:15:3b:92:19:25:7b:3b:81:5f:b6:48:cc:c9:8f:4a: 88:47:e0:7d:28:75:5c:cc:aa:a9:78:de:f4:76:7a:47:5f:2a: bc:20:62:41:e6:a8:aa:6a:c7:ae:53:59:8c:95:87:bf:03:54: 13:15:d6:c5:f7:14:c7:b8:d6:35:79:6b:a1:9e:2e:be:c8:5e: f5:ba:29:54:ee:4f:30:f3:3f:6b:3f:f7:4b:00:90:a8:78:8d: 58:6c:90:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57OCQbIwA8HCyBCyrGgZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmVkMTM5ZGYwZmFkNmZkZTBkODI4NjkxNDQxMDRkMjA0 YjkyYjUwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzc2YzZhMmE3OTExNTIzMTM1MzJiYTExYWE2ZDhhNWZjMzE3ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyZEcpy8Vyw3QBjYVYf8H+AmgW2U fvsAhfVw14NbPWOsTa3fu80LACgnJ0gjrHz935jwRxpHLeRSDTB6UxByIleUz4T2 EXOoxm9rIhIRDhPvb+nHTwch3qHGsCXzAJna29X3t3JdA9haQE6aISKnolii0GVa YkUzDHZOodBOoIRWKaDX1fVWaM2f+1asLHy5N3CUAakPlXfw+15nvP4B4PU9yylv fkgD8+ioHbkKatFlYmyQYWmXn+ReQrx5Z74jE6lI78fYiavv36Lvz7z8Q/CsRkEY oB3+lMclykVzCNLah+21vfAQ39//dDy5r5HNuDOIYimVVsIxefc71bpewwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFId2xqKnkRUjE1MroRqm2KX8MX6hMB8GA1UdIwQY MBaAFLr+0TnfD61v3g2ChpFEEE0gS5K1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMt ZDgyYTkwZTM0YzJkLzEvaDNiR29xZVJGU01UVXl1aEdxYllwZnd4ZnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMtZDgyYTkwZTM0YzJk LzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpowAEJ MA0GCSqGSIb3DQEBCwUAA4IBAQCsjpIfpdVOtfTRMu/QBbqEGWkr7br/Fy2Pobzq wRdwToUuc5mNUrJSW0Czhh/ZuTfqMy4fUpB96sYOA5BGY/cC4eAjs4d5/ZKe3YKL V9GP91iSLj/2AQPHuhYTM7LXJOkOqTSSRi1ABepvqyEPfb470PBWEo/ITBEFei1T N2GFAR+hFiIsyOXr8pacZhoS1HwHD8U3c3rY4Zd2HFfqH8k7wEKjWYwVO5IZJXs7 gV+2SMzJj0qIR+B9KHVczKqpeN70dnpHXyq8IGJB5qiqaseuU1mMlYe/A1QTFdbF 9xTHuNY1eWuhni6+yF71uilU7k8w8z9rP/dLAJCoeI1YbJCH -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:36 2026 by rpki-client