This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hffsMr8fKwJvR5R9y-KrBb7ueH0.roa File: hffsMr8fKwJvR5R9y-KrBb7ueH0.roa (raw, json) Hash identifier: tULeGX0xvDThIcOtk+jyHxe/pfnBkvZjw6kh8YCJ+Mo= Subject key identifier: 85:F7:EC:32:BF:1F:2B:02:6F:47:94:7D:CB:E2:AB:05:BE:EE:78:7D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC4CE1600349E03B38B24E19C9352 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hffsMr8fKwJvR5R9y-KrBb7ueH0.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134666 IP address blocks: 2a0e:b107:30f::/48 maxlen: 48 2a10:2f01:3dc::/48 maxlen: 48 2a10:2f01:3df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c4:ce:16:00:34:9e:03:b3:8b:24:e1:9c:93:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f7ec32bf1f2b026f47947dcbe2ab05beee787d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:59:20:85:85:e3:4f:e2:72:0b:c8:76:eb: b1:5e:ed:80:9c:0c:3e:61:15:38:ef:c0:53:9b:4a: 27:8d:a2:6b:db:ff:e6:a4:ea:b9:bb:4d:e1:75:c1: de:c6:1e:8d:2e:2b:7c:cb:6d:a8:90:89:fc:46:7a: 3d:57:9c:93:df:4a:f9:c0:ee:b6:b0:9c:ed:42:86: 22:97:f4:48:32:0c:02:f1:7b:9a:8a:80:b3:92:83: f0:e1:5a:fb:5c:c4:1c:a4:1e:1a:99:b5:15:ff:95: 08:a2:9d:d9:50:33:2b:d0:e4:e8:ec:78:4c:6f:e5: 95:47:fe:d3:f5:10:95:4d:1a:62:67:45:f4:89:24: aa:60:4f:83:30:15:4e:1c:fe:58:d2:eb:35:1b:cf: 3b:0e:87:b8:28:3f:9c:27:2a:99:6e:dc:27:78:86: 17:94:9d:c8:27:f2:c9:53:d5:3f:93:d6:65:96:51: 54:1e:f4:7e:d7:8d:44:9f:1e:f7:1d:d3:01:31:90: bf:d2:9c:3a:36:74:8b:bb:31:eb:53:6d:8c:4e:48: ce:d6:f4:d5:dd:c1:0f:c1:11:be:cc:bf:f7:87:6c: 56:b9:6b:dc:56:2f:7b:64:f0:7d:cb:69:11:73:ce: 9b:59:e6:f3:13:20:ca:73:f5:11:45:a9:40:0f:6d: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F7:EC:32:BF:1F:2B:02:6F:47:94:7D:CB:E2:AB:05:BE:EE:78:7D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hffsMr8fKwJvR5R9y-KrBb7ueH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:30f::/48 2a10:2f01:3dc::/48 2a10:2f01:3df::/48 Signature Algorithm: sha256WithRSAEncryption 1d:a4:73:d8:f2:5a:0f:74:fb:b0:cd:e8:22:2d:cd:5c:e0:9e: 1f:6b:34:fb:b0:06:47:8a:44:60:c6:4f:48:2c:e3:0b:0f:34: bc:32:44:db:a0:cf:8a:ba:b2:1a:db:b9:7f:c5:4c:19:0e:55: a2:3c:00:a5:a1:c1:15:12:ee:94:66:50:8e:a1:d2:cd:f2:5e: dc:96:3d:52:2b:35:44:18:a2:69:ab:74:cd:55:f7:c3:56:ad: 3f:1a:77:63:30:39:ac:c7:3a:fc:55:46:0a:ca:ab:96:4a:d3: 19:c1:8e:cb:c4:58:26:11:7c:2d:d5:3c:3e:a7:41:9e:0a:87: 4e:bf:22:cc:00:cd:e9:0b:c1:10:86:1a:21:b6:99:86:66:f8: 6a:75:7f:e4:88:b5:07:96:24:7f:0b:ba:4b:26:01:19:43:e6: c6:c7:af:e7:53:11:23:2a:17:ca:33:7d:6e:f6:81:fb:37:11: 9c:f3:a5:5e:96:ce:ed:35:3d:33:4b:47:a4:52:31:2a:5d:f3: 39:a4:42:e8:ac:85:e1:72:0e:46:f2:c9:04:af:82:12:f5:c6: f5:12:20:51:fc:8b:81:a4:53:61:69:d4:e1:4b:9f:54:a4:b2: 68:e0:86:3b:9e:ff:12:bf:ab:68:4d:5b:d0:79:1e:47:fb:d7: 16:33:cc:24 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XMTOFgA0ngOziyThnJNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWY3ZWMzMmJmMWYyYjAyNmY0Nzk0N2RjYmUyYWIwNWJlZWU3ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39ZZIIWF40/icgvIduuxXu2AnAw+ YRU478BTm0onjaJr2//mpOq5u03hdcHexh6NLit8y22okIn8Rno9V5yT30r5wO62 sJztQoYil/RIMgwC8XuaioCzkoPw4Vr7XMQcpB4ambUV/5UIop3ZUDMr0OTo7HhM b+WVR/7T9RCVTRpiZ0X0iSSqYE+DMBVOHP5Y0us1G887Doe4KD+cJyqZbtwneIYX lJ3IJ/LJU9U/k9ZlllFUHvR+141Enx73HdMBMZC/0pw6NnSLuzHrU22MTkjO1vTV 3cEPwRG+zL/3h2xWuWvcVi97ZPB9y2kRc86bWebzEyDKc/URRalAD200mQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIX37DK/HysCb0eUfcviqwW+7nh9MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaGZmc01yOGZLd0p2UjVSOXktS3JCYjd1ZUgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6xBwMP AwcAKhAvAQPcAwcAKhAvAQPfMA0GCSqGSIb3DQEBCwUAA4IBAQAdpHPY8loPdPuw zegiLc1c4J4fazT7sAZHikRgxk9ILOMLDzS8MkTboM+KurIa27l/xUwZDlWiPACl ocEVEu6UZlCOodLN8l7clj1SKzVEGKJpq3TNVffDVq0/GndjMDmsxzr8VUYKyquW StMZwY7LxFgmEXwt1Tw+p0GeCodOvyLMAM3pC8EQhhohtpmGZvhqdX/kiLUHliR/ C7pLJgEZQ+bGx6/nUxEjKhfKM31u9oH7NxGc86Vels7tNT0zS0ekUjEqXfM5pELo rIXhcg5G8skEr4IS9cb1EiBR/IuBpFNhadThS59UpLJo4IY7nv8Sv6toTVvQeR5H +9cWM8wk -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:40 2026 by rpki-client