This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMoXHP2OHjrqCKRVVfWB-N6emfU.roa File: HMoXHP2OHjrqCKRVVfWB-N6emfU.roa (raw, json) Hash identifier: TKhBbSkr8bsaEJvdDQOldAdcgPyvFxDzZdX8MiLL18w= Subject key identifier: 1C:CA:17:1C:FD:8E:1E:3A:EA:08:A4:55:55:F5:81:F8:DE:9E:99:F5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D39F83058B0A005516A020801C52A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMoXHP2OHjrqCKRVVfWB-N6emfU.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211267 IP address blocks: 2a0e:b107:1370::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:f8:30:58:b0:a0:05:51:6a:02:08:01:c5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cca171cfd8e1e3aea08a45555f581f8de9e99f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:98:fc:6e:a0:13:51:96:2d:92:23:55:26: 3c:13:04:ea:d3:1c:0a:65:18:29:1c:74:68:f1:7e: ea:10:ee:5f:38:4f:86:35:db:2e:e6:56:bd:92:64: d1:b6:8d:44:8b:7e:22:c1:60:a8:18:29:fb:54:f1: 19:54:e8:d1:b9:83:44:da:cb:02:8f:ab:38:b2:67: 5c:38:9c:37:a6:97:68:fa:e5:86:c8:31:fa:a1:b6: 3f:7f:6d:dd:43:7b:56:4d:8f:1f:bc:80:96:86:63: 54:a4:82:a9:b7:f1:a2:9f:52:a9:bc:01:e0:2f:a4: f6:4c:08:66:57:1d:76:00:e6:52:44:64:9a:f0:d8: e1:d2:8b:75:b4:d0:f8:e0:18:d8:35:c0:92:8b:e9: f9:d9:6d:8f:de:42:01:d5:a9:a2:9d:89:57:ed:05: b6:ee:41:df:01:e6:56:e3:4b:3c:af:37:d4:b9:e4: fd:eb:e6:b3:bb:42:d6:a6:a7:e2:fb:c6:44:c2:18: 6e:af:48:b0:b4:fb:6f:70:de:af:22:34:8c:0a:1c: ab:5c:be:63:3a:84:9f:08:f1:e6:2d:fd:99:31:a2: a9:38:df:05:c8:e8:88:02:0e:10:56:be:f6:57:ea: 90:3d:b1:9a:fc:bc:bf:18:48:b8:1b:aa:a9:05:81: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:17:1C:FD:8E:1E:3A:EA:08:A4:55:55:F5:81:F8:DE:9E:99:F5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMoXHP2OHjrqCKRVVfWB-N6emfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1370::/44 Signature Algorithm: sha256WithRSAEncryption 44:94:e8:a1:df:1d:41:70:f0:1c:6b:1c:16:c7:7f:68:1a:e2: a7:81:22:87:b2:cd:b7:2d:a6:87:a8:db:81:08:af:9f:df:b1: e4:93:25:b5:2a:d3:0c:f2:89:7e:7c:bb:74:dd:b2:36:d9:b5: 4e:33:fd:e2:4d:75:4b:0b:bb:27:f5:28:44:ba:e1:f2:49:e8: 4d:b1:9e:4a:3e:39:4b:d9:c1:f0:63:8b:fb:16:77:74:85:88: db:8b:43:08:8b:64:8b:9c:a1:e8:26:c2:ab:1b:e2:e2:a3:9d: 15:5e:5f:49:3e:8d:bb:49:f8:d0:d2:8f:20:7b:bd:2d:b4:10: b2:9f:e7:36:27:65:af:af:9c:5b:e3:ae:09:6a:8c:50:85:81: 9f:95:60:66:81:e2:ae:4f:41:7a:38:3a:93:eb:38:f2:a5:48: 45:26:ac:22:d1:e0:83:5a:5e:78:89:3d:15:4d:65:e8:6f:91: 2d:19:f1:25:64:f2:57:3f:00:00:41:8c:61:7d:2c:9f:c2:cf: 24:66:91:11:e5:24:24:1c:9a:29:f0:7d:e0:33:c6:f1:cc:e8: a4:62:7b:8c:b2:d5:2c:36:4c:96:b1:ac:c0:a5:29:f8:5a:75: 19:cf:eb:fe:9e:45:98:75:72:66:d9:bf:21:2c:fc:61:6d:72: 4c:27:81:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTn4MFiwoAVRagIIAcUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2NhMTcxY2ZkOGUxZTNhZWEwOGE0NTU1NWY1ODFmOGRlOWU5OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ryY/G6gE1GWLZIjVSY8EwTq0xwK ZRgpHHRo8X7qEO5fOE+GNdsu5la9kmTRto1Ei34iwWCoGCn7VPEZVOjRuYNE2ssC j6s4smdcOJw3ppdo+uWGyDH6obY/f23dQ3tWTY8fvICWhmNUpIKpt/Gin1KpvAHg L6T2TAhmVx12AOZSRGSa8Njh0ot1tND44BjYNcCSi+n52W2P3kIB1aminYlX7QW2 7kHfAeZW40s8rzfUueT96+azu0LWpqfi+8ZEwhhur0iwtPtvcN6vIjSMChyrXL5j OoSfCPHmLf2ZMaKpON8FyOiIAg4QVr72V+qQPbGa/Ly/GEi4G6qpBYF7mwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBzKFxz9jh466gikVVX1gfjenpn1MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSE1vWEhQMk9IanJxQ0tSVlZmV0ItTjZlbWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNw MA0GCSqGSIb3DQEBCwUAA4IBAQBElOih3x1BcPAcaxwWx39oGuKngSKHss23LaaH qNuBCK+f37HkkyW1KtMM8ol+fLt03bI22bVOM/3iTXVLC7sn9ShEuuHySehNsZ5K PjlL2cHwY4v7Fnd0hYjbi0MIi2SLnKHoJsKrG+Lio50VXl9JPo27SfjQ0o8ge70t tBCyn+c2J2Wvr5xb464JaoxQhYGflWBmgeKuT0F6ODqT6zjypUhFJqwi0eCDWl54 iT0VTWXob5EtGfElZPJXPwAAQYxhfSyfws8kZpER5SQkHJop8H3gM8bxzOikYnuM stUsNkyWsazApSn4WnUZz+v+nkWYdXJm2b8hLPxhbXJMJ4Hp -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:37 2026 by rpki-client