This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/RgHavWhVul9MXfBOmfyz_teJB6A.roa File: RgHavWhVul9MXfBOmfyz_teJB6A.roa (raw, json) Hash identifier: VPEV4xov/EC4qaijUlWkTnH3ETZO17Eb9gp45zu3FEk= Subject key identifier: 46:01:DA:BD:68:55:BA:5F:4C:5D:F0:4E:99:FC:B3:FE:D7:89:07:A0 Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Certificate serial: 019B7F84F93F041ECDC5F4167BD8F75156C9 Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/RgHavWhVul9MXfBOmfyz_teJB6A.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200216 IP address blocks: 2a13:2880::/29 maxlen: 29 2a13:d3c0::/29 maxlen: 29 2a13:dec0::/29 maxlen: 29 2a14:1300::/29 maxlen: 29 2a14:1500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f9:3f:04:1e:cd:c5:f4:16:7b:d8:f7:51:56:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4601dabd6855ba5f4c5df04e99fcb3fed78907a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:2a:b6:57:ab:45:85:47:01:4c:e3:84:df: 38:ad:b9:ac:51:49:6b:24:51:b8:67:87:af:90:26: 17:20:c3:fd:46:10:c9:fc:d5:72:bd:0a:d0:b9:fc: e4:e5:b6:67:53:d8:85:a8:22:4f:9b:8a:12:e2:7b: 94:3f:22:f4:93:cd:a1:3e:17:ba:28:99:53:6b:d3: e5:7f:45:3a:86:6a:d6:8a:10:9a:b6:ef:64:8f:07: 49:69:dd:52:7c:c1:d0:7b:b3:b2:6a:e2:3a:66:85: 9e:e6:fa:ce:ab:08:04:70:67:ee:e8:4f:93:b5:e4: cd:c0:84:b3:87:61:93:66:6e:2c:87:1b:b3:32:6c: 07:80:d3:90:31:bc:81:ca:d1:2e:38:0d:f7:c4:f0: 3a:f9:c4:b8:c9:8b:92:c5:1b:63:fb:98:2c:f9:57: b3:62:d6:18:af:81:33:10:ab:a3:4a:60:c1:fc:1c: a3:64:43:05:f1:23:c9:21:ae:4b:2f:a8:88:eb:d5: b6:24:33:9d:22:ec:e8:90:6d:a3:7f:26:9a:32:a4: 5d:44:94:9c:ef:c6:7b:ff:41:e4:ad:b0:5e:f8:f6: 92:aa:d7:07:4c:1e:78:ed:db:71:5a:51:c8:32:58: 0d:12:80:60:96:6e:78:ed:65:89:19:ce:fd:fa:f7: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:DA:BD:68:55:BA:5F:4C:5D:F0:4E:99:FC:B3:FE:D7:89:07:A0 X509v3 Authority Key Identifier: keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/RgHavWhVul9MXfBOmfyz_teJB6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2880::/29 2a13:d3c0::/29 2a13:dec0::/29 2a14:1300::/29 2a14:1500::/29 Signature Algorithm: sha256WithRSAEncryption 56:9b:85:36:aa:c3:1d:b4:a6:eb:20:f8:16:01:bc:fd:7a:e8: 45:fb:71:2c:99:42:a0:81:62:5c:f9:43:d2:8b:05:56:c6:cc: 98:b8:71:c9:d1:3c:21:b0:54:79:69:bb:3d:99:44:94:bc:8c: 25:66:74:37:3e:68:24:65:b6:57:7f:88:01:6f:a8:9f:d1:38: a9:23:a3:52:52:59:7c:05:5d:bd:5d:bc:4f:c4:d4:28:60:f4: 7e:be:a8:d0:f1:b0:d3:18:5b:46:ab:9b:e0:a3:48:f5:9e:5c: 4f:8e:d2:10:69:86:30:6d:aa:ee:a7:83:b4:1c:dd:a0:02:47: 69:da:45:d3:17:4a:ee:98:6c:75:af:17:ec:db:eb:18:87:12: 69:4b:7d:bf:03:7d:3c:92:29:82:ab:15:7a:1f:e1:fa:4a:6f: dd:32:57:66:fd:82:22:02:c0:c3:29:f4:40:13:1f:42:a0:f8: d8:dd:ab:51:6a:00:b3:d9:ad:7a:62:95:bc:3b:01:8c:97:36: 64:78:d8:1f:d2:f1:e0:bc:2f:ad:25:b6:b2:cb:f7:24:db:b0: c6:d6:72:a1:24:28:2c:99:e8:2a:8b:5d:13:d8:8e:81:d7:8c: b4:0c:f0:32:88:74:9f:4f:37:c2:f9:f9:6e:5e:16:e1:9b:ce: 30:2c:76:c5 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/hPk/BB7NxfQWe9j3UVbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm YmUwOTkwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjAxZGFiZDY4NTViYTVmNGM1ZGYwNGU5OWZjYjNmZWQ3ODkwN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva8qtlerRYVHAUzjhN84rbmsUUlr JFG4Z4evkCYXIMP9RhDJ/NVyvQrQufzk5bZnU9iFqCJPm4oS4nuUPyL0k82hPhe6 KJlTa9Plf0U6hmrWihCatu9kjwdJad1SfMHQe7OyauI6ZoWe5vrOqwgEcGfu6E+T teTNwISzh2GTZm4shxuzMmwHgNOQMbyBytEuOA33xPA6+cS4yYuSxRtj+5gs+Vez YtYYr4EzEKujSmDB/ByjZEMF8SPJIa5LL6iI69W2JDOdIuzokG2jfyaaMqRdRJSc 78Z7/0HkrbBe+PaSqtcHTB547dtxWlHIMlgNEoBglm547WWJGc79+vcvSQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEYB2r1oVbpfTF3wTpn8s/7XiQegMB8GA1UdIwQY MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt M2FhMjIyN2JhZGZlLzEvUmdIYXZXaFZ1bDlNWGZCT21meXpfdGVKQjZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKhMogAMF AyoT08ADBQMqE97AAwUDKhQTAAMFAyoUFQAwDQYJKoZIhvcNAQELBQADggEBAFab hTaqwx20pusg+BYBvP166EX7cSyZQqCBYlz5Q9KLBVbGzJi4ccnRPCGwVHlpuz2Z RJS8jCVmdDc+aCRltld/iAFvqJ/ROKkjo1JSWXwFXb1dvE/E1Chg9H6+qNDxsNMY W0arm+CjSPWeXE+O0hBphjBtqu6ng7Qc3aACR2naRdMXSu6YbHWvF+zb6xiHEmlL fb8DfTySKYKrFXof4fpKb90yV2b9giICwMMp9EATH0Kg+Njdq1FqALPZrXpilbw7 AYyXNmR42B/S8eC8L60ltrLL9yTbsMbWcqEkKCyZ6CqLXRPYjoHXjLQM8DKIdJ9P N8L5+W5eFuGbzjAsdsU= -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:14 2026 by rpki-client