This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/hNzhPP9pxALzDAYAW7772yEyzhU.roa File: hNzhPP9pxALzDAYAW7772yEyzhU.roa (raw, json) Hash identifier: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg= Subject key identifier: 84:DC:E1:3C:FF:69:C4:02:F3:0C:06:00:5B:BE:FB:DB:21:32:CE:15 Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Certificate serial: 019B78A2CE3C51930479126483866B2C9410 Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/hNzhPP9pxALzDAYAW7772yEyzhU.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57795 IP address blocks: 2a04:1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ce:3c:51:93:04:79:12:64:83:86:6b:2c:94:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84dce13cff69c402f30c06005bbefbdb2132ce15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:de:cd:f3:8f:b2:19:52:85:6b:60:20:d7: 2d:20:0e:25:13:c9:bb:63:19:d9:24:2a:10:d4:17: 8c:d2:56:ba:65:e5:03:9b:e7:9c:64:91:97:9a:ad: 13:fa:d7:1e:2c:11:83:6a:7e:26:61:50:2d:7f:13: e8:f7:60:d7:fd:13:d5:8d:e1:6a:9c:35:86:7b:e6: 56:43:15:f3:7a:d1:7a:60:b6:ff:e2:d5:00:4f:f5: 1b:22:2f:1e:58:b4:8c:34:e9:dc:11:cb:83:23:c1: c2:11:1a:ac:13:eb:9a:bf:b8:d4:28:e9:1c:19:02: ca:f4:9f:b4:c6:7c:5a:67:5b:7d:e9:de:37:75:2b: b9:c9:3f:c2:c4:1b:84:ac:45:e1:b5:b2:3d:79:79: 80:51:c7:b2:79:2f:fa:d9:ec:6d:59:5d:78:31:bb: 90:47:26:58:3f:a3:d1:41:5e:06:62:a0:72:ee:8a: 26:6e:c5:22:f4:3c:61:a0:15:c6:ef:14:0c:09:82: e6:76:c7:2c:94:40:a1:d4:44:05:65:44:10:58:da: ec:97:09:1a:dc:37:e3:32:1c:12:ef:a4:55:98:36: ad:27:c7:07:fd:42:5f:5f:87:9c:94:e2:cc:65:76: b5:9b:f2:d5:be:6b:3d:45:c5:b1:47:5e:79:48:84: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DC:E1:3C:FF:69:C4:02:F3:0C:06:00:5B:BE:FB:DB:21:32:CE:15 X509v3 Authority Key Identifier: keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/hNzhPP9pxALzDAYAW7772yEyzhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:1c0::/29 Signature Algorithm: sha256WithRSAEncryption 69:ca:80:1c:6c:e0:63:39:ab:f1:58:09:99:77:dc:73:73:3e: ba:e8:37:d0:53:84:69:32:e0:ac:6c:a3:eb:15:06:05:ab:d0: 37:6c:f4:ba:fa:20:34:45:ce:27:8b:69:db:3f:b6:cf:2f:01: 0b:8c:b2:a4:5e:52:d6:24:12:e4:f4:3d:97:34:5a:6c:db:15: b8:fb:35:02:52:50:1b:90:3e:d6:03:7e:e9:d7:57:7c:a0:bc: 26:9d:57:f7:21:e1:16:c5:80:2d:8e:eb:04:07:6d:02:c2:c8: 9d:91:51:ff:dd:04:37:50:9d:2c:58:c9:98:1e:6a:d1:3b:5c: da:c0:63:e4:12:a9:c8:f2:f1:a8:85:51:d8:61:19:19:e0:70: d6:78:fb:0e:8d:f7:e4:69:3b:ed:f2:3d:18:f8:d7:57:fe:82: 72:48:4a:b8:4a:84:bb:3f:09:b1:81:0d:c6:a2:4a:de:a4:79: 35:71:f8:7d:2f:d2:94:ad:6a:d2:80:eb:94:f4:42:8e:a3:9e: 41:f3:05:83:b3:e9:c1:fe:f1:a5:fd:c7:2d:2e:4e:8c:96:2f: a4:67:77:38:fc:75:3c:41:16:f1:f8:db:82:0e:68:33:b7:c0: 2c:7d:2a:88:52:b7:48:03:5d:da:f2:83:3a:89:94:9c:c1:5f: 8a:0a:ef:19 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4os48UZMEeRJkg4ZrLJQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1 OTI2ZmQwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGRjZTEzY2ZmNjljNDAyZjMwYzA2MDA1YmJlZmJkYjIxMzJjZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNXezfOPshlShWtgINctIA4lE8m7 YxnZJCoQ1BeM0la6ZeUDm+ecZJGXmq0T+tceLBGDan4mYVAtfxPo92DX/RPVjeFq nDWGe+ZWQxXzetF6YLb/4tUAT/UbIi8eWLSMNOncEcuDI8HCERqsE+uav7jUKOkc GQLK9J+0xnxaZ1t96d43dSu5yT/CxBuErEXhtbI9eXmAUceyeS/62extWV14MbuQ RyZYP6PRQV4GYqBy7oombsUi9DxhoBXG7xQMCYLmdscslECh1EQFZUQQWNrslwka 3DfjMhwS76RVmDatJ8cH/UJfX4eclOLMZXa1m/LVvms9RcWxR155SITY1wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFITc4Tz/acQC8wwGAFu++9shMs4VMB8GA1UdIwQY MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt YWQxMzc4Mjg5YTEzLzEvaE56aFBQOXB4QUx6REFZQVc3NzcyeUV5emhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgQBwDAN BgkqhkiG9w0BAQsFAAOCAQEAacqAHGzgYzmr8VgJmXfcc3M+uug30FOEaTLgrGyj 6xUGBavQN2z0uvogNEXOJ4tp2z+2zy8BC4yypF5S1iQS5PQ9lzRabNsVuPs1AlJQ G5A+1gN+6ddXfKC8Jp1X9yHhFsWALY7rBAdtAsLInZFR/90EN1CdLFjJmB5q0Ttc 2sBj5BKpyPLxqIVR2GEZGeBw1nj7Do335Gk77fI9GPjXV/6CckhKuEqEuz8JsYEN xqJK3qR5NXH4fS/SlK1q0oDrlPRCjqOeQfMFg7Ppwf7xpf3HLS5OjJYvpGd3OPx1 PEEW8fjbgg5oM7fALH0qiFK3SANd2vKDOomUnMFfigrvGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:52 2026 by rpki-client