This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/hO6sJjGenFnuYxmlzduMju3aiho.roa File: hO6sJjGenFnuYxmlzduMju3aiho.roa (raw, json) Hash identifier: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU= Subject key identifier: 84:EE:AC:26:31:9E:9C:59:EE:63:19:A5:CD:DB:8C:8E:ED:DA:8A:1A Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400 Certificate serial: 019B7BA3A234E4110AEF234BFA7FCA6E170B Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/hO6sJjGenFnuYxmlzduMju3aiho.roa Signing time: Thu 01 Jan 2026 22:18:00 +0000 ROA not before: Thu 01 Jan 2026 22:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5524 IP address blocks: 2a10:b940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a2:34:e4:11:0a:ef:23:4b:fa:7f:ca:6e:17:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400 Validity Not Before: Jan 1 22:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84eeac26319e9c59ee6319a5cddb8c8eedda8a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:d5:b8:8d:b4:8a:50:a3:69:93:82:8c:3b: 71:03:55:08:b2:c5:87:41:65:9a:4e:12:f6:cc:2f: 15:d5:79:34:02:eb:7b:0c:e0:ff:34:5d:20:65:7c: 0e:14:77:77:4d:43:c4:93:74:fd:74:ef:c9:1c:2a: 58:29:9d:cf:b4:62:87:7c:fa:74:7d:e7:b1:e2:f4: 3f:b4:4e:54:2c:76:cc:17:02:1f:29:74:96:fb:07: 05:dd:86:c5:8f:9f:3c:d8:c9:36:7c:f8:36:4f:0d: 48:63:38:35:f0:d4:b1:6a:b8:ca:a4:c4:2a:d7:c0: a8:77:71:ba:a5:67:45:e2:8f:15:7e:b7:cf:58:ff: 93:20:9c:7c:63:59:a0:ab:9e:1c:ed:be:7d:ad:1b: 58:a9:1a:cf:6d:bf:80:28:8a:a7:46:57:b5:f1:09: 30:02:bb:86:e2:33:4a:fd:1e:f2:88:a5:d8:26:04: 1f:60:40:a8:31:d8:60:b7:1a:0e:36:97:eb:e9:41: 00:a0:f0:2b:cf:71:64:95:c9:05:44:a8:6b:fe:e1: f6:7f:9e:f0:73:3a:ca:50:71:52:8c:a9:46:73:76: 2f:e8:59:d4:2e:76:e1:de:94:db:42:9d:7f:c8:35: 08:c1:ad:e7:2c:87:41:69:47:4a:fe:0d:7d:59:e1: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EE:AC:26:31:9E:9C:59:EE:63:19:A5:CD:DB:8C:8E:ED:DA:8A:1A X509v3 Authority Key Identifier: keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/hO6sJjGenFnuYxmlzduMju3aiho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b940::/29 Signature Algorithm: sha256WithRSAEncryption 4a:66:95:a5:bd:06:15:83:85:d2:89:ae:45:c4:54:88:4e:9f: 54:75:90:35:56:4d:4f:88:b9:b1:df:9f:8e:71:c6:26:30:4b: 24:eb:38:d6:31:ab:83:cc:b4:87:35:be:15:cc:b5:15:61:9a: 17:8a:c7:1b:f3:17:39:55:6e:ac:47:6d:71:c0:17:6c:7b:83: ed:c0:47:16:a7:47:64:86:1b:50:20:69:4d:33:9a:a6:81:4a: 44:56:62:5c:6f:f6:d1:06:9a:92:a1:93:53:62:4f:47:bb:be: ee:b3:a7:0a:b5:39:09:9b:11:38:f5:62:18:f0:53:db:e4:f2: 11:2d:b6:03:9b:7a:a2:5b:4d:17:21:d9:19:ac:6c:f5:7b:7e: 49:b8:77:31:72:af:db:6d:e7:96:cc:b5:a2:16:9a:0c:28:15: f2:64:f8:1c:09:b1:47:ee:cf:e8:8f:84:94:8a:55:cd:29:41: 74:43:e8:3b:92:aa:47:48:55:06:34:11:18:c0:3d:d9:89:31: 37:5c:44:ca:45:79:4b:97:c6:ca:05:ba:1c:4a:6b:c7:95:3a: 77:59:41:56:b8:4f:2b:aa:79:ec:27:9a:d1:d6:2f:83:bd:4f: 16:6d:72:89:a6:b5:0b:72:38:e5:18:de:ba:fd:0a:b1:b9:c7: 42:a5:8c:2e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7o6I05BEK7yNL+n/KbhcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5 NGU0MDAwHhcNMjYwMTAxMjIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGVlYWMyNjMxOWU5YzU5ZWU2MzE5YTVjZGRiOGM4ZWVkZGE4YTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsrVuI20ilCjaZOCjDtxA1UIssWH QWWaThL2zC8V1Xk0Aut7DOD/NF0gZXwOFHd3TUPEk3T9dO/JHCpYKZ3PtGKHfPp0 feex4vQ/tE5ULHbMFwIfKXSW+wcF3YbFj5882Mk2fPg2Tw1IYzg18NSxarjKpMQq 18Cod3G6pWdF4o8VfrfPWP+TIJx8Y1mgq54c7b59rRtYqRrPbb+AKIqnRle18Qkw AruG4jNK/R7yiKXYJgQfYECoMdhgtxoONpfr6UEAoPArz3FklckFRKhr/uH2f57w czrKUHFSjKlGc3Yv6FnULnbh3pTbQp1/yDUIwa3nLIdBaUdK/g19WeGD5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFITurCYxnpxZ7mMZpc3bjI7t2ooaMB8GA1UdIwQY MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt NTAxMjU3NTkwZGU3LzEvaE82c0pqR2VuRm51WXhtbHpkdU1qdTNhaWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3 LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhC5QDAN BgkqhkiG9w0BAQsFAAOCAQEASmaVpb0GFYOF0omuRcRUiE6fVHWQNVZNT4i5sd+f jnHGJjBLJOs41jGrg8y0hzW+Fcy1FWGaF4rHG/MXOVVurEdtccAXbHuD7cBHFqdH ZIYbUCBpTTOapoFKRFZiXG/20QaakqGTU2JPR7u+7rOnCrU5CZsROPViGPBT2+Ty ES22A5t6oltNFyHZGaxs9Xt+Sbh3MXKv223nlsy1ohaaDCgV8mT4HAmxR+7P6I+E lIpVzSlBdEPoO5KqR0hVBjQRGMA92YkxN1xEykV5S5fGygW6HEprx5U6d1lBVrhP K6p57Cea0dYvg71PFm1yiaa1C3I45Rjeuv0KsbnHQqWMLg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:26 2026 by rpki-client