This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa File: hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa (raw, json) Hash identifier: Tyh/z0nHaYyQHgjz1bbuG9Z7KXkDQwBPffpAutwwQZI= Subject key identifier: 86:0C:D6:61:7E:F9:60:85:6B:F7:E1:5A:F8:AE:67:D5:58:04:CE:1E Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf Certificate serial: 019B7834EFCFFAA95D8B40D3656BBAD8E49E Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208745 IP address blocks: 2a01:f900:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ef:cf:fa:a9:5d:8b:40:d3:65:6b:ba:d8:e4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=860cd6617ef960856bf7e15af8ae67d55804ce1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:1f:4a:46:7a:7c:73:22:72:09:f6:8b:7e: ad:f9:1a:4d:e7:28:17:64:63:3b:e3:a7:da:a7:88: 93:45:e4:f9:b6:d1:49:fd:63:f6:81:a7:b9:56:3c: 7d:c7:4c:a9:ac:f7:25:a8:ae:ac:60:46:1a:e8:85: 86:e7:37:c3:53:9c:be:78:cb:6c:b4:fd:8f:19:24: 93:27:87:f1:8c:2b:f8:9a:40:41:43:cd:c0:2d:f6: 53:b2:2e:2d:b9:f0:62:45:ba:d3:78:63:87:49:1f: 56:f5:87:05:b0:25:52:27:00:a3:5d:c3:7b:52:77: 2d:c3:ce:f0:0d:14:a6:f5:4e:97:e5:04:5b:db:1f: 53:b3:3c:4d:2c:72:13:1b:c1:74:e9:ce:0a:72:31: 8e:f1:ce:4d:b0:c4:b2:d3:55:6c:53:e4:45:59:7f: e4:0b:db:21:d0:80:3f:71:2e:ab:99:97:ce:b6:3b: 10:88:1d:19:98:ae:4d:81:5b:d1:20:f6:a2:ac:ac: 00:78:fa:dc:c0:9c:b7:ff:6b:fb:01:e2:c7:fe:e6: 07:16:f5:03:f8:20:32:de:bc:8c:9a:86:12:5d:1f: 0a:ad:bd:47:97:29:b3:88:86:68:10:01:79:30:df: 66:86:89:26:ca:6e:15:c7:05:d9:cd:24:f8:8f:c8: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:D6:61:7E:F9:60:85:6B:F7:E1:5A:F8:AE:67:D5:58:04:CE:1E X509v3 Authority Key Identifier: keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f900:102::/48 Signature Algorithm: sha256WithRSAEncryption 01:70:83:05:0e:b6:eb:40:fd:4d:f2:83:2e:1e:33:e4:8a:54: 60:2c:b1:d7:51:97:08:98:ac:bc:16:91:f9:0a:0f:84:7f:59: a9:15:b0:39:4e:88:53:cc:03:c7:d0:f6:08:3e:bf:09:56:f0: 48:48:63:0f:ca:6c:6f:06:d3:7c:5b:87:01:4d:7a:1a:25:00: 99:64:f7:d8:d8:8c:a0:15:03:41:c8:e3:76:37:53:8b:ce:e4: d5:32:fa:cd:5e:d0:af:7b:2e:c5:ad:55:8b:e3:18:56:2a:6c: 30:b2:78:de:6d:c0:6d:e5:1b:db:c2:08:8a:ac:6c:c3:f6:1f: e3:73:63:68:1c:a5:7a:db:52:50:5b:09:c5:dc:e4:ab:1b:ff: ad:db:4f:3b:f7:49:37:e6:f5:d3:f9:fc:c1:07:b3:55:3f:99: 0a:22:8e:ee:c8:3c:5e:bf:a8:7d:31:c8:b4:26:42:1c:4f:a5: ee:b3:ac:f6:f1:fd:09:23:3c:26:cd:c2:11:5b:23:a1:26:df: ea:d4:a0:10:c4:e8:3f:36:b5:2a:c6:53:98:c2:dd:23:d4:6b: 77:a8:84:6b:d4:30:a0:48:a8:c3:fb:0d:16:a2:35:ae:1d:e0: f1:e1:d1:07:11:16:6a:12:ac:f3:a8:5d:ba:1c:95:3f:65:a9: 4d:24:90:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NO/P+qldi0DTZWu62OSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4 MmFjYmYwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjBjZDY2MTdlZjk2MDg1NmJmN2UxNWFmOGFlNjdkNTU4MDRjZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmMfSkZ6fHMicgn2i36t+RpN5ygX ZGM746fap4iTReT5ttFJ/WP2gae5Vjx9x0yprPclqK6sYEYa6IWG5zfDU5y+eMts tP2PGSSTJ4fxjCv4mkBBQ83ALfZTsi4tufBiRbrTeGOHSR9W9YcFsCVSJwCjXcN7 Unctw87wDRSm9U6X5QRb2x9TszxNLHITG8F06c4KcjGO8c5NsMSy01VsU+RFWX/k C9sh0IA/cS6rmZfOtjsQiB0ZmK5NgVvRIPairKwAePrcwJy3/2v7AeLH/uYHFvUD +CAy3ryMmoYSXR8Krb1HlymziIZoEAF5MN9mhokmym4VxwXZzST4j8gejQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIYM1mF++WCFa/fhWviuZ9VYBM4eMB8GA1UdIwQY MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt YTE5Y2M4YTc2ZDA0LzEvaGd6V1lYNzVZSVZyOS1GYS1LNW4xVmdFemg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0 LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgH5AAEC MA0GCSqGSIb3DQEBCwUAA4IBAQABcIMFDrbrQP1N8oMuHjPkilRgLLHXUZcImKy8 FpH5Cg+Ef1mpFbA5TohTzAPH0PYIPr8JVvBISGMPymxvBtN8W4cBTXoaJQCZZPfY 2IygFQNByON2N1OLzuTVMvrNXtCvey7FrVWL4xhWKmwwsnjebcBt5RvbwgiKrGzD 9h/jc2NoHKV621JQWwnF3OSrG/+t208790k35vXT+fzBB7NVP5kKIo7uyDxev6h9 Mci0JkIcT6Xus6z28f0JIzwmzcIRWyOhJt/q1KAQxOg/NrUqxlOYwt0j1Gt3qIRr 1DCgSKjD+w0WojWuHeDx4dEHERZqEqzzqF26HJU/ZalNJJAE -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:34 2026 by rpki-client