This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hBKD5RYRcPpUs1lqDWljadDEDZ0.roa File: hBKD5RYRcPpUs1lqDWljadDEDZ0.roa (raw, json) Hash identifier: MYkT6rWI36C/QnYGDKBSl0fh2QFK4zLoSmnwvB11R3U= Subject key identifier: 84:12:83:E5:16:11:70:FA:54:B3:59:6A:0D:69:63:69:D0:C4:0D:9D Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758F17AC71F47C181008DF43B1B0C97 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hBKD5RYRcPpUs1lqDWljadDEDZ0.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213388 IP address blocks: 2a0f:5707:fff7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:7a:c7:1f:47:c1:81:00:8d:f4:3b:1b:0c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=841283e5161170fa54b3596a0d696369d0c40d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:18:e7:0d:5f:fe:99:8f:eb:cf:dc:54:8f: 01:4f:67:c9:0c:ea:54:e7:7d:cd:d8:85:4b:7f:8e: 63:38:db:9b:6e:58:24:f4:df:c5:e7:da:79:2b:bf: 4b:f4:9d:52:14:43:7c:d7:59:0c:6b:d2:7d:c1:80: 2b:d5:82:4f:3c:78:f5:40:03:b6:86:4d:72:79:ea: d6:21:d0:32:3a:4e:ca:03:fb:e4:35:3b:9a:e4:62: d7:85:5d:10:b0:29:f0:35:09:b7:a7:03:13:5c:e6: 56:a3:44:39:54:70:ed:d3:a2:78:76:be:2b:0c:c0: 6b:fc:1f:3c:0a:2f:03:f0:de:c5:1e:75:aa:2d:59: ec:f5:3f:ee:07:67:5b:97:3c:86:b4:18:3c:c2:de: e6:13:03:50:c6:17:b8:a1:ab:9b:71:ef:b8:ec:cc: 48:d1:a5:87:b5:c2:22:37:e7:b0:c7:20:9c:e5:33: 77:a4:77:9e:24:f0:6c:93:74:d8:0b:71:39:44:fc: 5b:c8:97:56:27:70:00:54:66:4e:fc:07:fb:67:e2: b8:fd:23:e8:19:00:e2:e8:94:af:83:68:9e:32:28: 02:c2:47:5a:f7:fa:2e:78:b5:f6:a5:32:1f:31:db: 9f:23:a5:e4:cd:f4:52:58:02:94:bf:b9:d5:64:5b: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:83:E5:16:11:70:FA:54:B3:59:6A:0D:69:63:69:D0:C4:0D:9D X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hBKD5RYRcPpUs1lqDWljadDEDZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:fff7::/48 Signature Algorithm: sha256WithRSAEncryption 5c:be:66:b0:d2:ef:51:cf:32:92:de:9b:94:43:ec:8d:89:13: 85:65:67:a3:33:85:81:62:04:14:fd:4e:f5:26:ff:ed:f9:1c: 21:68:03:aa:13:38:ec:f4:94:08:32:d9:7c:1a:fc:07:4f:09: c8:32:ed:8a:74:f0:f8:e0:8d:da:01:45:f2:5d:6a:2c:07:5e: e0:53:66:f7:a7:35:bc:b4:f1:28:e7:45:1e:b7:be:74:b4:fd: 58:4e:60:da:77:d7:62:17:30:f9:f3:c5:be:30:1a:6c:2d:60: 33:36:e3:5a:c3:70:34:44:bf:fa:5f:9b:1b:57:54:89:67:cb: 92:8f:18:ef:ec:dd:22:80:c2:cf:5a:9c:95:c8:9d:1c:30:7d: 88:24:9e:b4:63:7f:d1:c4:c1:40:e4:37:c3:f5:ff:bb:d0:70: c8:21:b5:7e:50:ec:30:42:7c:31:19:d7:2c:0f:2b:4d:bf:86: fb:fa:8c:b0:9c:ec:cd:f4:9e:fd:46:39:84:71:c1:a9:57:54: cc:7c:9d:0d:2e:68:7c:f8:71:bc:bc:b9:68:c9:8e:f7:51:e5: f1:5c:93:d9:c0:c6:18:bd:03:07:6e:9e:6f:99:08:c8:9b:4f: 24:7b:6a:6c:43:65:86:db:03:77:c3:65:1a:cd:99:b1:e9:77: 22:25:e3:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPF6xx9HwYEAjfQ7GwyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDEyODNlNTE2MTE3MGZhNTRiMzU5NmEwZDY5NjM2OWQwYzQwZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xoY5w1f/pmP68/cVI8BT2fJDOpU 533N2IVLf45jONubblgk9N/F59p5K79L9J1SFEN811kMa9J9wYAr1YJPPHj1QAO2 hk1yeerWIdAyOk7KA/vkNTua5GLXhV0QsCnwNQm3pwMTXOZWo0Q5VHDt06J4dr4r DMBr/B88Ci8D8N7FHnWqLVns9T/uB2dblzyGtBg8wt7mEwNQxhe4oaubce+47MxI 0aWHtcIiN+ewxyCc5TN3pHeeJPBsk3TYC3E5RPxbyJdWJ3AAVGZO/Af7Z+K4/SPo GQDi6JSvg2ieMigCwkda9/oueLX2pTIfMdufI6XkzfRSWAKUv7nVZFtmRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIQSg+UWEXD6VLNZag1pY2nQxA2dMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvaEJLRDVSWVJjUHBVczFscURXbGphZERFRFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XB//3 MA0GCSqGSIb3DQEBCwUAA4IBAQBcvmaw0u9RzzKS3puUQ+yNiROFZWejM4WBYgQU /U71Jv/t+RwhaAOqEzjs9JQIMtl8GvwHTwnIMu2KdPD44I3aAUXyXWosB17gU2b3 pzW8tPEo50Uet750tP1YTmDad9diFzD588W+MBpsLWAzNuNaw3A0RL/6X5sbV1SJ Z8uSjxjv7N0igMLPWpyVyJ0cMH2IJJ60Y3/RxMFA5DfD9f+70HDIIbV+UOwwQnwx GdcsDytNv4b7+oywnOzN9J79RjmEccGpV1TMfJ0NLmh8+HG8vLloyY73UeXxXJPZ wMYYvQMHbp5vmQjIm08ke2psQ2WG2wN3w2UazZmx6XciJePV -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:23 2026 by rpki-client