This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa File: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (raw, json) Hash identifier: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU= Subject key identifier: 1E:8E:A6:35:FF:FD:67:68:73:A1:74:2B:14:5B:AE:FC:9D:16:7D:13 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A9678E9ABF24CBDB9E0042B39E55 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151690 IP address blocks: 2001:978:b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a9:67:8e:9a:bf:24:cb:db:9e:00:42:b3:9e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e8ea635fffd676873a1742b145baefc9d167d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ff:7b:8b:63:68:c3:d8:64:b1:61:76:c4:e2: 13:61:87:ef:2c:d1:21:e4:ad:ab:15:88:78:8d:37: 2a:03:22:b9:7d:0a:c7:4a:c0:9a:57:ee:6b:e7:56: 31:f7:ce:0d:4a:f4:68:c5:03:f8:b6:33:5b:1c:9f: 3a:91:d4:b9:df:db:29:bb:f7:3b:73:50:9e:a8:a6: 06:54:f2:c4:df:aa:fe:1a:f2:7f:e9:13:9f:3a:30: 31:40:c2:13:05:ff:c8:fd:27:b5:1b:66:5f:ad:10: 15:58:40:e9:60:70:c7:09:0c:eb:c6:a4:2d:23:d6: cc:23:ac:f1:29:79:c0:e0:c5:03:60:ff:17:22:b4: 38:82:c3:e6:46:8e:4f:72:ae:fd:64:4e:a8:9a:3a: 44:c8:6e:98:3f:6b:79:8e:b6:fa:2e:bb:aa:ef:8a: f1:d7:aa:8f:a0:b8:af:cd:65:30:0e:a1:3e:e5:1d: 4d:67:d9:11:1c:da:0e:aa:39:9e:f4:d7:b5:4b:52: 63:b1:dd:8a:1a:91:56:e3:c9:e9:55:1d:63:65:08: 3a:4f:11:77:09:07:71:dd:fe:5c:20:8e:3b:b3:6e: 5f:80:77:b4:aa:94:38:0c:76:5c:90:6f:c4:f4:0c: 67:ef:63:bd:7c:c2:19:36:dd:6f:42:29:c5:b3:7c: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8E:A6:35:FF:FD:67:68:73:A1:74:2B:14:5B:AE:FC:9D:16:7D:13 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:978:b00::/48 Signature Algorithm: sha256WithRSAEncryption 4c:84:57:1f:85:96:5e:a4:58:3f:cc:77:d8:eb:85:ab:9d:de: f1:17:2a:b5:42:ee:58:fb:34:d0:b7:42:16:58:46:d7:46:21: d8:97:72:a5:df:d0:4b:48:dc:5f:c7:9d:82:81:c1:fb:40:92: f1:a6:b5:bc:e3:e0:20:22:8c:1b:60:e4:4c:44:6f:0c:ef:bc: 0c:18:ef:a5:e2:93:0f:1f:72:3a:d2:f7:b4:8e:56:fc:bb:3e: df:ad:3d:1e:5f:23:12:1e:25:de:8f:5f:f9:f3:e4:86:6a:93: f0:ec:9f:47:f1:69:0a:67:8f:1f:f7:dd:50:bd:ee:64:c5:c0: 1f:91:0d:31:36:08:d7:74:38:9a:81:7b:a1:b8:51:87:3a:ab: 33:83:6e:ba:c9:08:62:eb:6b:1e:2e:11:8e:81:61:dc:bf:0c: 43:f4:da:a0:bf:0f:22:52:d4:81:4e:1f:b2:a5:98:61:15:7b: cb:ff:69:17:76:13:d8:c8:6d:2c:25:76:f7:44:ad:4f:14:a9: d1:27:07:9d:af:c9:f5:81:74:06:08:df:98:4b:4d:b7:c5:dd: 6f:57:f1:b6:05:e2:60:01:04:f3:71:30:ba:3a:02:20:7f:4e: ea:34:1d:2e:53:97:c8:01:b3:7c:38:30:61:85:0b:0b:fb:a0: f0:b5:32:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pqlnjpq/JMvbngBCs55VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZThlYTYzNWZmZmQ2NzY4NzNhMTc0MmIxNDViYWVmYzlkMTY3ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP97i2Now9hksWF2xOITYYfvLNEh 5K2rFYh4jTcqAyK5fQrHSsCaV+5r51Yx984NSvRoxQP4tjNbHJ86kdS539spu/c7 c1CeqKYGVPLE36r+GvJ/6ROfOjAxQMITBf/I/Se1G2ZfrRAVWEDpYHDHCQzrxqQt I9bMI6zxKXnA4MUDYP8XIrQ4gsPmRo5Pcq79ZE6omjpEyG6YP2t5jrb6Lruq74rx 16qPoLivzWUwDqE+5R1NZ9kRHNoOqjme9Ne1S1Jjsd2KGpFW48npVR1jZQg6TxF3 CQdx3f5cII47s25fgHe0qpQ4DHZckG/E9Axn72O9fMIZNt1vQinFs3xTWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB6OpjX//Wdoc6F0KxRbrvydFn0TMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvSG82bU5mXzlaMmh6b1hRckZGdXVfSjBXZlJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEJeAsA MA0GCSqGSIb3DQEBCwUAA4IBAQBMhFcfhZZepFg/zHfY64Wrnd7xFyq1Qu5Y+zTQ t0IWWEbXRiHYl3Kl39BLSNxfx52CgcH7QJLxprW84+AgIowbYORMRG8M77wMGO+l 4pMPH3I60ve0jlb8uz7frT0eXyMSHiXej1/58+SGapPw7J9H8WkKZ48f991Qve5k xcAfkQ0xNgjXdDiagXuhuFGHOqszg266yQhi62seLhGOgWHcvwxD9Nqgvw8iUtSB Th+ypZhhFXvL/2kXdhPYyG0sJXb3RK1PFKnRJwedr8n1gXQGCN+YS023xd1vV/G2 BeJgAQTzcTC6OgIgf07qNB0uU5fIAbN8ODBhhQsL+6DwtTJI -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:32 2026 by rpki-client