This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/HH7R7_mgRZ4jJhhX0iKYCX1Shg4.roa File: HH7R7_mgRZ4jJhhX0iKYCX1Shg4.roa (raw, json) Hash identifier: Ld8npwnrGzF1p9EafsI9H/f/LmZsGIBBwH4dfZK0Hdo= Subject key identifier: 1C:7E:D1:EF:F9:A0:45:9E:23:26:18:57:D2:22:98:09:7D:52:86:0E Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76690D4BF543377AE75A29B56D03E Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/HH7R7_mgRZ4jJhhX0iKYCX1Shg4.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199152 IP address blocks: 2a09:da40::/32 maxlen: 32 2a0d:adc4::/32 maxlen: 32 2a11:3d01::/32 maxlen: 32 2a12:3cc1::/32 maxlen: 32 2a14:9705::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:90:d4:bf:54:33:77:ae:75:a2:9b:56:d0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c7ed1eff9a0459e23261857d22298097d52860e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:03:7d:6d:09:8b:fd:f0:60:ac:b8:b4:7b: 59:92:9f:01:37:bd:9f:b8:83:48:68:8e:cc:f9:5b: d8:89:1d:34:4c:5c:1c:a7:d4:6b:35:5c:10:18:a0: 93:c7:e4:fa:c2:ef:6e:ea:dc:23:a8:3f:a9:2e:91: 82:5d:0a:0b:e6:27:f8:7d:54:81:5f:fd:86:9a:c7: 52:ee:a8:d1:5d:55:72:25:13:ac:14:20:17:c4:eb: 64:76:bd:f6:53:37:54:9d:0b:04:24:b5:1b:87:fd: a5:be:ad:fe:b5:b4:33:45:8b:f7:a0:6e:92:80:15: 90:0e:91:7f:55:d2:0b:b5:6c:30:a9:1a:85:52:7a: f0:6b:88:66:3b:10:4a:87:60:68:65:d3:02:2e:14: b9:b8:81:47:17:be:b2:15:09:07:fd:20:28:ac:55: bb:0c:00:8b:da:b8:42:39:37:90:5f:a7:b3:d3:bd: 8b:d0:b9:35:be:b8:66:1a:e6:ed:4b:24:77:25:e4: fc:58:03:11:b9:68:f8:da:9d:b7:b6:9e:90:c8:fa: c2:16:02:e3:db:6b:56:72:08:3a:86:43:c1:af:d2: 23:12:d6:17:13:b4:26:47:64:e6:61:16:a1:18:19: 8f:8a:57:83:07:d1:9a:66:a8:73:3c:aa:38:95:11: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7E:D1:EF:F9:A0:45:9E:23:26:18:57:D2:22:98:09:7D:52:86:0E X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/HH7R7_mgRZ4jJhhX0iKYCX1Shg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:da40::/32 2a0d:adc4::/32 2a11:3d01::/32 2a12:3cc1::/32 2a14:9705::/32 Signature Algorithm: sha256WithRSAEncryption 24:a0:cf:82:50:32:a1:7d:3f:b6:ee:82:aa:fb:ec:b2:95:b4: 2a:8a:d4:95:1d:6d:41:ab:bd:55:d5:83:da:09:4f:73:62:c4: b9:89:1f:d8:8d:ab:90:18:e7:66:eb:4a:b6:fd:48:55:be:7b: ac:79:53:b9:b2:6c:62:92:43:3b:31:cf:4e:e9:4d:49:a8:34: bc:76:5f:62:c9:d5:aa:46:45:00:d0:36:0a:0e:89:ec:cb:ef: 7a:b1:90:90:d1:6d:00:14:94:7c:9e:59:d0:12:1e:b0:50:ef: 14:d4:fd:4b:f9:90:95:97:48:a7:41:7e:51:44:a4:fc:9f:0c: a7:9d:63:9e:f1:e0:67:82:8b:0f:6a:d4:8e:4f:c7:d4:e5:54: 3c:30:1e:54:70:c1:e6:fa:35:95:99:48:f1:df:f3:22:dc:b4: 8e:c4:3f:b9:e0:26:04:02:f3:2c:7b:df:3f:80:69:56:26:6f: 79:68:9b:f2:66:09:f1:74:3f:31:80:9d:98:17:11:ff:97:b6: 68:b0:ed:3b:eb:50:b5:74:e8:18:18:d8:4a:e3:9e:71:ac:33: d6:92:63:fd:e6:a5:e8:ca:f9:e6:92:39:95:b7:2e:ba:73:34: d3:50:23:ca:bc:6e:22:94:65:ed:36:ba:52:5a:39:23:0e:da: 57:f7:3d:dd -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt3x2aQ1L9UM3eudaKbVtA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzdlZDFlZmY5YTA0NTllMjMyNjE4NTdkMjIyOTgwOTdkNTI4NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hgDfW0Ji/3wYKy4tHtZkp8BN72f uINIaI7M+VvYiR00TFwcp9RrNVwQGKCTx+T6wu9u6twjqD+pLpGCXQoL5if4fVSB X/2GmsdS7qjRXVVyJROsFCAXxOtkdr32UzdUnQsEJLUbh/2lvq3+tbQzRYv3oG6S gBWQDpF/VdILtWwwqRqFUnrwa4hmOxBKh2BoZdMCLhS5uIFHF76yFQkH/SAorFW7 DACL2rhCOTeQX6ez072L0Lk1vrhmGubtSyR3JeT8WAMRuWj42p23tp6QyPrCFgLj 22tWcgg6hkPBr9IjEtYXE7QmR2TmYRahGBmPileDB9GaZqhzPKo4lRHzqQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFBx+0e/5oEWeIyYYV9IimAl9UoYOMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvSEg3UjdfbWdSWjRqSmhoWDBpS1lDWDFTaGc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKgnaQAMF ACoNrcQDBQAqET0BAwUAKhI8wQMFACoUlwUwDQYJKoZIhvcNAQELBQADggEBACSg z4JQMqF9P7bugqr77LKVtCqK1JUdbUGrvVXVg9oJT3NixLmJH9iNq5AY52brSrb9 SFW+e6x5U7mybGKSQzsxz07pTUmoNLx2X2LJ1apGRQDQNgoOiezL73qxkJDRbQAU lHyeWdASHrBQ7xTU/Uv5kJWXSKdBflFEpPyfDKedY57x4GeCiw9q1I5Px9TlVDww HlRwweb6NZWZSPHf8yLctI7EP7ngJgQC8yx73z+AaVYmb3lom/JmCfF0PzGAnZgX Ef+Xtmiw7TvrULV06BgY2ErjnnGsM9aSY/3mpejK+eaSOZW3LrpzNNNQI8q8biKU Ze02ulJaOSMO2lf3Pd0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:47 2026 by rpki-client