This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/_nHQVX4gUfRcsyUXq5yHaGKdYhU.roa File: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (raw, json) Hash identifier: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU= Subject key identifier: FE:71:D0:55:7E:20:51:F4:5C:B3:25:17:AB:9C:87:68:62:9D:62:15 Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db Certificate serial: 019B7D5BC25AB60C1576112A8BF4041E8BC0 Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/_nHQVX4gUfRcsyUXq5yHaGKdYhU.roa Signing time: Fri 02 Jan 2026 06:18:43 +0000 ROA not before: Fri 02 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62442 IP address blocks: 2a04:aa01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c2:5a:b6:0c:15:76:11:2a:8b:f4:04:1e:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db Validity Not Before: Jan 2 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe71d0557e2051f45cb32517ab9c8768629d6215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:47:bd:c5:c6:97:12:93:99:82:15:a4:0b: 17:c7:27:3c:30:28:dd:bb:ed:fe:cd:83:83:85:e9: 73:ad:5e:3a:7e:97:1a:a9:94:79:2f:f6:e6:17:7b: a1:4e:0a:b8:fc:c9:47:06:34:22:e2:2c:fe:8c:a1: 31:f4:cd:d0:ea:a1:05:76:0a:5d:12:72:c9:53:11: c5:ab:b1:c8:05:cd:f1:70:0a:f1:e0:c2:54:e4:68: 9b:22:a9:f7:a6:30:28:14:15:0d:76:73:39:b0:3a: 25:8a:5f:0c:43:d6:33:58:47:16:98:ed:05:15:d4: ed:2c:cb:85:d4:d3:6a:26:e5:52:45:78:2e:23:ab: 94:66:be:90:73:15:99:fb:54:b4:dc:2a:61:a0:b8: 63:b8:c7:5c:f8:43:b8:0c:e0:d7:12:b3:7f:5d:37: 89:15:79:6d:0b:93:74:8b:a7:1e:09:c8:cd:1a:6f: a1:3f:37:53:92:f9:9d:81:9a:c0:cb:93:22:f0:cf: e9:01:97:a8:f6:95:68:08:03:51:f4:5b:e2:d6:58: 3f:12:bc:d3:20:76:6e:e6:33:99:29:89:2e:c0:e1: 33:4a:f4:93:35:0e:9b:6e:c2:4c:46:c3:a6:ff:ce: 63:f4:86:10:52:39:f1:63:72:35:a4:c7:e9:50:0d: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:D0:55:7E:20:51:F4:5C:B3:25:17:AB:9C:87:68:62:9D:62:15 X509v3 Authority Key Identifier: keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/_nHQVX4gUfRcsyUXq5yHaGKdYhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:aa01::/32 Signature Algorithm: sha256WithRSAEncryption 7a:10:84:c7:e9:fb:17:fe:64:25:86:56:89:79:9c:45:cd:88: 62:87:5a:26:6b:29:c6:37:15:8f:8e:4c:5e:95:c4:73:81:e6: 75:1e:d9:03:bb:09:f6:9b:52:75:f3:09:46:5e:5f:2d:e0:98: 70:53:69:7d:66:1a:ff:ad:e2:a4:30:35:cf:05:97:d9:12:a4: af:84:77:af:d3:8a:53:78:82:9c:f4:53:b9:82:9c:5d:b0:8d: 10:07:78:f4:f1:e0:bf:f4:6c:c9:02:22:b0:4a:ad:a9:de:38: f2:54:39:d9:a9:a0:f2:f9:35:28:3b:8f:26:ad:f8:e8:b2:88: 7a:67:40:41:4d:2d:b1:e1:8e:4d:62:ea:e5:bb:f1:0a:dd:34: f3:80:c5:fb:0b:8a:a3:ec:74:d6:59:f3:bf:44:c7:8b:53:86: 69:53:96:1e:90:21:a9:82:9c:c2:92:b6:1f:34:d4:88:ab:46: a4:12:44:05:71:f9:d1:26:b3:c6:bd:39:50:ed:f7:3a:a2:3c: bc:82:e3:db:4b:ba:69:41:5e:60:56:39:6c:ef:b0:50:bc:25: 5d:af:96:30:fa:fc:60:03:84:7e:06:6c:e3:af:91:0a:47:40: ff:fa:51:9d:11:8a:5a:d0:f8:40:60:9f:b0:4b:c9:6b:ad:72: dd:e9:bd:c8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W8JatgwVdhEqi/QEHovAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2Y3MjYwNjUwMDI2Yjk3M2ExOGE3ZjNlOTk1OGQzMjFl Y2UxZGIwHhcNMjYwMTAyMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTcxZDA1NTdlMjA1MWY0NWNiMzI1MTdhYjljODc2ODYyOWQ2MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfRHvcXGlxKTmYIVpAsXxyc8MCjd u+3+zYODhelzrV46fpcaqZR5L/bmF3uhTgq4/MlHBjQi4iz+jKEx9M3Q6qEFdgpd EnLJUxHFq7HIBc3xcArx4MJU5GibIqn3pjAoFBUNdnM5sDolil8MQ9YzWEcWmO0F FdTtLMuF1NNqJuVSRXguI6uUZr6QcxWZ+1S03CphoLhjuMdc+EO4DODXErN/XTeJ FXltC5N0i6ceCcjNGm+hPzdTkvmdgZrAy5Mi8M/pAZeo9pVoCANR9Fvi1lg/ErzT IHZu5jOZKYkuwOEzSvSTNQ6bbsJMRsOm/85j9IYQUjnxY3I1pMfpUA04dQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFP5x0FV+IFH0XLMlF6uch2hinWIVMB8GA1UdIwQY MBaAFIg/cmBlACa5c6GKfz6ZWNMh7OHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDkt YzA5ZmYxNmZjMzRiLzEvX25IUVZYNGdVZlJjc3lVWHE1eUhhR0tkWWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDktYzA5ZmYxNmZjMzRi LzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgSqATAN BgkqhkiG9w0BAQsFAAOCAQEAehCEx+n7F/5kJYZWiXmcRc2IYodaJmspxjcVj45M XpXEc4HmdR7ZA7sJ9ptSdfMJRl5fLeCYcFNpfWYa/63ipDA1zwWX2RKkr4R3r9OK U3iCnPRTuYKcXbCNEAd49PHgv/RsyQIisEqtqd448lQ52amg8vk1KDuPJq346LKI emdAQU0tseGOTWLq5bvxCt0084DF+wuKo+x01lnzv0THi1OGaVOWHpAhqYKcwpK2 HzTUiKtGpBJEBXH50Sazxr05UO33OqI8vILj20u6aUFeYFY5bO+wULwlXa+WMPr8 YAOEfgZs46+RCkdA//pRnRGKWtD4QGCfsEvJa61y3em9yA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:27 2026 by rpki-client