This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/1-Hu9W0FmiG82NC7-tjuK0EgepjY.roa File: 1-Hu9W0FmiG82NC7-tjuK0EgepjY.roa (raw, json) Hash identifier: 7s+sH/SAKFRmku03mgi9bj0bc7250BG+Tn/rh7WZuyY= Subject key identifier: F8:7B:BD:5B:41:66:88:6F:36:34:2E:FE:B6:3B:8A:D0:48:1E:A6:36 Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Certificate serial: 019B79ED08A465DEDA78517433F3FC1C4DEA Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/1-Hu9W0FmiG82NC7-tjuK0EgepjY.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36411 IP address blocks: 2a00:79e1:820::/45 maxlen: 45 2a00:79e1:820::/47 maxlen: 47 2a00:79e1:821::/48 maxlen: 48 2a00:79e1:822::/47 maxlen: 47 2a00:79e1:823::/48 maxlen: 48 2a00:79e1:824::/48 maxlen: 48 2a00:79e1:825::/48 maxlen: 48 2a00:79e1:826::/48 maxlen: 48 2a00:79e1:827::/48 maxlen: 48 2a00:79e1:840::/48 maxlen: 48 2a00:79e1:841::/48 maxlen: 48 2a00:79e1:2000::/35 maxlen: 35 2a00:79e1:2000::/38 maxlen: 38 2a00:79e1:2200::/39 maxlen: 39 2a00:79e1:2400::/39 maxlen: 39 2a00:79e1:2600::/39 maxlen: 39 2a00:79e1:2800::/38 maxlen: 38 2a00:79e1:2a00::/39 maxlen: 39 2a00:79e1:2c00::/39 maxlen: 39 2a00:79e1:2e00::/39 maxlen: 39 2a00:79e1:3000::/38 maxlen: 38 2a00:79e1:3200::/39 maxlen: 39 2a00:79e1:3400::/39 maxlen: 39 2a00:79e1:3600::/39 maxlen: 39 2a00:79e1:3800::/38 maxlen: 38 2a00:79e1:3a00::/39 maxlen: 39 2a00:79e1:3c00::/39 maxlen: 39 2a00:79e1:3e00::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:08:a4:65:de:da:78:51:74:33:f3:fc:1c:4d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f87bbd5b4166886f36342efeb63b8ad0481ea636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:45:01:ac:b4:75:aa:6c:41:35:d4:22:8d: b6:b6:87:63:04:41:91:a1:b5:38:d0:d9:3b:a0:f9: d4:f5:71:9d:79:52:50:84:7c:92:ef:d1:98:86:d3: e9:ba:55:8f:eb:45:8b:e6:88:48:0c:0c:b3:bd:ba: 6c:e7:1a:ab:b2:5b:8d:2a:58:94:40:6c:50:fb:f7: 99:9d:f9:bc:a0:c1:2c:86:50:d7:d3:a8:67:26:b1: b8:e4:38:9e:58:c3:78:86:26:62:fd:8b:ea:87:4f: 64:ba:5a:98:d7:34:53:0b:d1:ef:e6:f9:ee:16:c7: 55:33:1a:1d:c6:0a:7a:3b:32:0c:0d:06:0b:e7:e3: 97:93:63:da:5d:2f:a8:be:fa:ee:9c:ee:ed:8d:66: 8b:56:07:a6:b1:1f:40:e8:d0:0a:23:7c:70:97:6f: 61:88:80:6f:42:ca:34:08:35:61:2e:e8:e9:85:96: 09:92:46:5e:a2:8c:5f:ce:a0:cc:69:83:32:74:fa: 8e:b0:56:ea:c8:4f:b4:5d:eb:9b:69:72:8c:ce:03: 17:bd:5f:32:3c:b6:31:43:29:ee:87:09:c9:4b:5d: f1:fe:35:92:16:85:ae:5d:a7:a5:0d:4e:bb:d6:81: 45:d7:a7:67:e3:76:c5:6f:dc:db:b2:b2:5b:09:b2: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7B:BD:5B:41:66:88:6F:36:34:2E:FE:B6:3B:8A:D0:48:1E:A6:36 X509v3 Authority Key Identifier: keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/1-Hu9W0FmiG82NC7-tjuK0EgepjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:79e1:820::/45 2a00:79e1:840::/47 2a00:79e1:2000::/35 Signature Algorithm: sha256WithRSAEncryption 84:98:f7:93:e1:e6:a0:22:b0:55:18:af:0c:75:8e:0c:63:be: 59:63:a4:f1:74:7d:48:b9:2c:98:36:0b:48:9f:a7:e8:06:c6: 45:65:f7:1d:6e:da:1a:64:10:f8:e8:f6:24:18:ec:a2:76:c3: 02:b8:b7:f7:74:35:75:f7:bc:d2:9a:0b:c6:4a:fd:f5:c0:e2: 54:87:ad:96:cd:90:5b:6e:59:72:6a:93:db:74:49:f1:fd:9c: 21:fa:db:46:b8:6d:a0:54:3f:ea:06:1d:d1:43:c2:7a:cc:35: 57:f9:f7:ac:68:44:8c:7a:53:99:f1:fe:75:a7:19:81:dd:91: 09:94:b8:56:77:98:ca:33:b7:19:32:34:29:a4:e2:b3:37:fa: 2d:58:77:0c:0c:e7:20:da:41:5a:2b:7b:5a:25:bd:f8:7d:7d: 88:2d:7e:91:d1:9d:c4:a3:54:b0:bf:a3:da:84:e8:1a:d9:17: 88:e8:12:a6:e7:c0:e0:c7:c2:c4:64:28:4b:12:48:44:d5:0b: bd:29:ef:b7:82:53:0e:a3:bb:d5:b5:fb:ed:63:9a:7f:60:2f: d8:6d:06:47:95:7f:ce:49:ac:32:e3:23:35:d9:56:f1:e6:f3: 21:17:c4:2f:b2:26:cd:e8:2a:8e:b4:dd:6e:b7:36:88:7b:1f: 30:2a:47:3e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57QikZd7aeFF0M/P8HE3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzQ3ZmJlMjZjOWNkZDc2MjhhZGZlZGI1N2I3OGJlOGRl NzVlMjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODdiYmQ1YjQxNjY4ODZmMzYzNDJlZmViNjNiOGFkMDQ4MWVhNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+5FAay0dapsQTXUIo22todjBEGR obU40Nk7oPnU9XGdeVJQhHyS79GYhtPpulWP60WL5ohIDAyzvbps5xqrsluNKliU QGxQ+/eZnfm8oMEshlDX06hnJrG45DieWMN4hiZi/Yvqh09kulqY1zRTC9Hv5vnu FsdVMxodxgp6OzIMDQYL5+OXk2PaXS+ovvrunO7tjWaLVgemsR9A6NAKI3xwl29h iIBvQso0CDVhLujphZYJkkZeooxfzqDMaYMydPqOsFbqyE+0XeubaXKMzgMXvV8y PLYxQynuhwnJS13x/jWSFoWuXaelDU671oFF16dn43bFb9zbsrJbCbKEYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPh7vVtBZohvNjQu/rY7itBIHqY2MB8GA1UdIwQY MBaAFMB0f74myc3XYorf7bV7eL6N514pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt MzY4NjA4Mzg1ODgzLzEvMS1IdTlXMEZtaUc4Mk5DNy10anVLMEVnZXBqWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWQvMjQwNmFiLTNiY2ItNDFiYy1hOTQyLTM2ODYwODM4NTg4 My8xL3dIUl92aWJKemRkaWl0X3R0WHQ0dm8zblhpay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAIwGgMHAyoAeeEI IAMHASoAeeEIQAMGBSoAeeEgMA0GCSqGSIb3DQEBCwUAA4IBAQCEmPeT4eagIrBV GK8MdY4MY75ZY6TxdH1IuSyYNgtIn6foBsZFZfcdbtoaZBD46PYkGOyidsMCuLf3 dDV197zSmgvGSv31wOJUh62WzZBbbllyapPbdEnx/Zwh+ttGuG2gVD/qBh3RQ8J6 zDVX+fesaESMelOZ8f51pxmB3ZEJlLhWd5jKM7cZMjQppOKzN/otWHcMDOcg2kFa K3taJb34fX2ILX6R0Z3Eo1Swv6PahOga2ReI6BKm58Dgx8LEZChLEkhE1Qu9Ke+3 glMOo7vVtfvtY5p/YC/YbQZHlX/OSawy4yM12Vbx5vMhF8QvsibN6CqOtN1utzaI ex8wKkc+ -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:39 2026 by rpki-client