This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/HMA2ZtQEUUESlekRi4gag5MnMYg.roa File: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (raw, json) Hash identifier: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA= Subject key identifier: 1C:C0:36:66:D4:04:51:41:12:95:E9:11:8B:88:1A:83:93:27:31:88 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B77594AFBBD920B7F0A7FA992E8A0C9C0 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/HMA2ZtQEUUESlekRi4gag5MnMYg.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213948 IP address blocks: 2a13:cc82:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4a:fb:bd:92:0b:7f:0a:7f:a9:92:e8:a0:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cc03666d40451411295e9118b881a8393273188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:b7:d9:96:21:38:9e:9d:c4:13:2c:4c:c0: 64:a8:f0:34:5a:6a:58:5a:3e:e1:4b:4b:48:e1:79: 08:43:93:0b:0d:bd:ef:89:f1:68:9c:f1:b0:b1:b9: d6:67:87:3e:98:97:f0:0f:37:4f:07:08:a9:7f:f1: 65:d0:19:84:04:4f:56:b7:72:9c:97:90:0a:67:2d: d9:7e:cd:a4:fb:e9:a9:37:f3:d4:7d:13:f9:e7:66: 20:e4:f1:c6:3c:8a:75:9d:99:24:06:9b:ef:bc:df: 2b:22:26:d1:12:eb:d6:74:6a:51:6f:fb:d1:21:66: 0b:f4:13:0a:3a:d7:f5:7f:9a:8a:86:25:44:2b:9b: 8f:96:84:b1:8b:c9:17:d8:62:f0:04:9a:41:63:ac: 41:19:6b:bc:fe:39:f7:85:8e:f3:7b:6f:fa:ef:0d: 88:7e:cb:1b:d9:8f:2e:dd:42:80:bf:25:93:9d:74: 33:05:f9:f3:29:09:83:3f:55:41:75:7c:49:e3:09: 01:d4:1f:03:03:5b:9a:3e:22:78:8c:fb:9f:64:71: e1:8c:3e:1e:f6:53:9e:a5:89:db:56:0d:b6:2d:04: 81:9f:6d:7f:87:e3:a9:13:98:d1:07:17:34:f9:a3: c8:83:29:22:b0:0c:c8:97:b9:38:dd:9d:d1:3c:52: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C0:36:66:D4:04:51:41:12:95:E9:11:8B:88:1A:83:93:27:31:88 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/HMA2ZtQEUUESlekRi4gag5MnMYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:cc82:3::/48 Signature Algorithm: sha256WithRSAEncryption 16:13:3f:8c:d2:6b:e8:16:41:76:43:c7:ad:33:a3:94:4d:4b: 73:e7:dd:14:7b:b9:ee:90:e0:9c:4a:4b:e3:f2:33:29:7b:b6: 1f:74:52:2c:36:88:18:b0:4a:52:4c:fc:85:70:5d:38:b1:de: 84:37:8d:87:33:4b:45:37:84:8f:82:fa:05:3a:3b:af:ea:24: 53:a0:fd:57:0f:12:1c:b7:e7:34:a3:e0:37:1b:42:41:68:ba: 86:4a:24:60:50:85:e3:2d:33:7f:4a:3d:e0:20:ef:df:14:6e: 27:94:ab:3b:a3:bb:f8:a9:c2:65:f0:82:08:9a:4c:d2:13:e2: f0:8b:61:af:11:27:24:7e:db:68:10:32:8b:66:e3:8a:54:b9: 77:19:e1:07:2a:45:22:09:1d:c9:ba:0e:69:fd:bf:48:de:64: aa:8a:60:6d:c7:4b:e4:9c:66:59:fd:e1:1e:2e:be:ff:c1:f1: 34:aa:f0:51:e7:fc:e1:38:f1:e8:f2:51:33:47:f0:ec:94:b6: e1:c7:99:08:67:8a:9f:cd:3a:96:cf:91:61:6e:13:45:87:eb: ba:b8:7a:8e:7f:53:32:15:79:3e:fc:6d:bd:a3:ae:dd:77:9f: 82:01:b8:8c:3e:87:85:0e:35:23:27:9c:61:d2:2d:27:a9:c7: ba:40:25:39 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WUr7vZILfwp/qZLooMnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2MwMzY2NmQ0MDQ1MTQxMTI5NWU5MTE4Yjg4MWE4MzkzMjczMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl632ZYhOJ6dxBMsTMBkqPA0WmpY Wj7hS0tI4XkIQ5MLDb3vifFonPGwsbnWZ4c+mJfwDzdPBwipf/Fl0BmEBE9Wt3Kc l5AKZy3Zfs2k++mpN/PUfRP552Yg5PHGPIp1nZkkBpvvvN8rIibREuvWdGpRb/vR IWYL9BMKOtf1f5qKhiVEK5uPloSxi8kX2GLwBJpBY6xBGWu8/jn3hY7ze2/67w2I fssb2Y8u3UKAvyWTnXQzBfnzKQmDP1VBdXxJ4wkB1B8DA1uaPiJ4jPufZHHhjD4e 9lOepYnbVg22LQSBn21/h+OpE5jRBxc0+aPIgykisAzIl7k43Z3RPFKSsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBzANmbUBFFBEpXpEYuIGoOTJzGIMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvSE1BMlp0UUVVVUVTbGVrUmk0Z2FnNU1uTVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPMggAD MA0GCSqGSIb3DQEBCwUAA4IBAQAWEz+M0mvoFkF2Q8etM6OUTUtz590Ue7nukOCc Skvj8jMpe7YfdFIsNogYsEpSTPyFcF04sd6EN42HM0tFN4SPgvoFOjuv6iRToP1X DxIct+c0o+A3G0JBaLqGSiRgUIXjLTN/Sj3gIO/fFG4nlKs7o7v4qcJl8IIImkzS E+Lwi2GvESckfttoEDKLZuOKVLl3GeEHKkUiCR3Jug5p/b9I3mSqimBtx0vknGZZ /eEeLr7/wfE0qvBR5/zhOPHo8lEzR/DslLbhx5kIZ4qfzTqWz5FhbhNFh+u6uHqO f1MyFXk+/G29o67dd5+CAbiMPoeFDjUjJ5xh0i0nqce6QCU5 -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:40 2026 by rpki-client