This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa File: huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa (raw, json) Hash identifier: yMEbieQN4mmr0B4PHYgIfIopNkBH4Ovpl20WF2oTeLc= Subject key identifier: 86:E3:3E:1A:4A:A1:06:4D:11:7B:C5:CF:1D:29:CA:16:99:C8:D5:54 Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5 Certificate serial: 019B7BA51AE099B8ACD0E0204855192A3C52 Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 2001:67c:2ffc::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1a:e0:99:b8:ac:d0:e0:20:48:55:19:2a:3c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86e33e1a4aa1064d117bc5cf1d29ca1699c8d554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:0a:32:1d:ed:8e:40:58:10:20:8e:ce:8c: 44:e1:f9:05:ce:ed:56:6a:79:96:b8:d8:1c:33:60: eb:78:ee:21:17:f4:10:a5:60:64:39:3c:f8:47:78: 66:76:01:5b:b1:2e:0a:60:9c:99:38:b2:45:d3:c6: b0:3e:3b:1e:96:e1:82:4e:cc:f6:d0:58:5f:34:09: 2e:d3:85:15:67:0a:66:9f:2c:c9:7f:41:ae:e7:35: 2f:49:b4:7d:0c:76:c4:54:1c:d2:a9:a9:ab:e1:39: 9e:c4:c5:31:ab:a4:2d:44:93:58:ed:4c:53:66:e3: 79:69:44:e2:ac:0c:ba:06:37:7a:30:cd:a9:e0:61: 01:cb:6c:6f:99:01:65:aa:99:18:44:56:66:21:8a: 94:cc:fc:b1:14:84:88:93:10:0a:f0:b8:a2:e7:f9: 22:d0:46:b0:9f:9b:73:7d:8b:97:67:95:67:a2:2b: 63:05:1c:d0:4d:eb:ce:2e:c1:44:8c:4b:53:b4:a7: f5:81:93:f6:81:00:ba:b6:45:ee:df:7d:26:ec:f4: 06:50:3c:82:40:a5:d4:15:25:ef:10:b9:f2:16:e5: 37:44:e5:2f:bf:24:ea:75:ee:7b:a0:e0:06:a7:d9: a2:03:b1:05:6c:39:dd:8e:46:d8:a8:0c:52:25:27: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E3:3E:1A:4A:A1:06:4D:11:7B:C5:CF:1D:29:CA:16:99:C8:D5:54 X509v3 Authority Key Identifier: keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ffc::/48 Signature Algorithm: sha256WithRSAEncryption d1:cc:79:92:1b:e7:bf:b4:a2:e6:0e:08:b9:3f:19:a7:ae:44: 29:f5:40:7f:de:c6:79:75:8e:54:0d:49:de:aa:2f:22:d7:35: 09:2c:28:3a:aa:dd:ed:89:f1:5a:37:5d:ff:4c:78:38:29:c4: c2:51:3c:68:0b:0a:86:04:58:42:27:e6:51:f4:be:d1:24:f9: 8b:6b:37:31:b3:a1:e3:2d:22:b9:71:a7:d6:52:81:08:03:0d: f2:f8:ad:03:76:c2:92:35:40:65:00:ba:79:1a:25:5c:41:cd: 9a:63:11:e2:aa:11:1e:0c:4a:98:24:15:87:1d:18:ff:d5:7a: d7:35:69:e9:2a:64:50:89:3b:e5:a0:e7:fa:8e:e5:12:1e:57: f4:d7:cc:d3:c8:05:a9:f3:be:f5:67:f9:a0:12:bb:1f:e2:1d: 1e:51:cf:27:c8:11:67:62:02:61:bf:18:92:59:62:f1:e0:a0: 47:ee:43:26:68:4c:77:ae:70:21:57:02:0d:ab:4b:db:66:b6: 2a:ff:d6:b1:3f:d0:04:cd:44:60:77:8b:80:7d:c9:8d:4b:19: 5a:1d:1d:76:55:23:3d:37:aa:1d:2b:aa:f4:e2:fa:de:5c:69: 18:d1:14:cd:e5:59:fe:3a:2e:92:fa:a3:e5:f2:b7:da:c7:6b: 77:fd:34:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pRrgmbis0OAgSFUZKjxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2Y2U2MzdkNDdiNzgwMDRkMGNjZmFlMzcxZTY4MTg3Njhh YzNmYTUwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmUzM2UxYTRhYTEwNjRkMTE3YmM1Y2YxZDI5Y2ExNjk5YzhkNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS8KMh3tjkBYECCOzoxE4fkFzu1W anmWuNgcM2DreO4hF/QQpWBkOTz4R3hmdgFbsS4KYJyZOLJF08awPjseluGCTsz2 0FhfNAku04UVZwpmnyzJf0Gu5zUvSbR9DHbEVBzSqamr4TmexMUxq6QtRJNY7UxT ZuN5aUTirAy6Bjd6MM2p4GEBy2xvmQFlqpkYRFZmIYqUzPyxFISIkxAK8Lii5/ki 0Eawn5tzfYuXZ5VnoitjBRzQTevOLsFEjEtTtKf1gZP2gQC6tkXu330m7PQGUDyC QKXUFSXvELnyFuU3ROUvvyTqde57oOAGp9miA7EFbDndjkbYqAxSJSckJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIbjPhpKoQZNEXvFzx0pyhaZyNVUMB8GA1UdIwQY MBaAFHbOY31Ht4AE0Mz643HmgYdorD+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt ODQwODgxYTRkMzBkLzEvaHVNLUdrcWhCazBSZThYUEhTbktGcG5JMVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk LzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/8 MA0GCSqGSIb3DQEBCwUAA4IBAQDRzHmSG+e/tKLmDgi5PxmnrkQp9UB/3sZ5dY5U DUneqi8i1zUJLCg6qt3tifFaN13/THg4KcTCUTxoCwqGBFhCJ+ZR9L7RJPmLazcx s6HjLSK5cafWUoEIAw3y+K0DdsKSNUBlALp5GiVcQc2aYxHiqhEeDEqYJBWHHRj/ 1XrXNWnpKmRQiTvloOf6juUSHlf018zTyAWp8771Z/mgErsf4h0eUc8nyBFnYgJh vxiSWWLx4KBH7kMmaEx3rnAhVwINq0vbZrYq/9axP9AEzURgd4uAfcmNSxlaHR12 VSM9N6odK6r04vreXGkY0RTN5Vn+Oi6S+qPl8rfax2t3/TT/ -----END CERTIFICATE-----Generated at Tue Jan 13 02:30:27 2026 by rpki-client