This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/HDxp4-KB2dPA-NyP02GCjWFt6QA.roa File: HDxp4-KB2dPA-NyP02GCjWFt6QA.roa (raw, json) Hash identifier: LTY7QxSQBnngm+poB1EEJ8+hiVTNU5U5ClZkRC7Y7Uk= Subject key identifier: 1C:3C:69:E3:E2:81:D9:D3:C0:F8:DC:8F:D3:61:82:8D:61:6D:E9:00 Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57 Certificate serial: 019B7A5A68659AFCF8E88EBDED2F821C27D3 Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/HDxp4-KB2dPA-NyP02GCjWFt6QA.roa Signing time: Thu 01 Jan 2026 16:18:23 +0000 ROA not before: Thu 01 Jan 2026 16:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196960 IP address blocks: 2001:67c:268::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:68:65:9a:fc:f8:e8:8e:bd:ed:2f:82:1c:27:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57 Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c3c69e3e281d9d3c0f8dc8fd361828d616de900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7a:d8:a0:f6:bc:1f:33:a7:5b:2d:d4:fb:01: 16:b8:84:7e:69:a1:b5:12:9c:d9:81:84:27:03:f9: ce:50:f2:cc:36:1c:73:a4:b5:3d:c5:97:82:06:2e: 67:ff:2a:4f:64:b7:b7:c6:69:b7:fe:b8:f8:1c:b3: e2:33:3b:86:cb:39:05:71:8f:9b:34:fa:f0:23:b7: 34:e5:85:18:cd:3b:88:ce:ca:84:56:13:fa:3d:3d: 0f:c8:16:dc:a1:94:a8:c3:32:89:48:a5:f2:93:a9: 5d:fd:4d:08:a4:1f:50:71:e5:6a:39:b7:ef:0c:4a: 25:35:ed:01:2d:9a:73:b2:49:15:40:f0:a2:a8:bb: ba:f6:4d:21:56:6e:86:63:f3:1f:6e:1d:86:5c:23: 28:14:cf:a2:08:52:ba:28:86:e1:21:f9:b8:17:76: 32:06:d8:19:d8:ea:75:18:dc:9e:6a:cc:d2:10:14: 75:b0:24:9c:96:75:e0:38:78:4c:6a:24:c9:0a:1d: 85:22:19:2f:e5:0d:a2:20:14:12:99:31:3b:ee:ca: ed:f5:b2:ac:a3:68:8e:7a:5c:97:91:b4:22:0a:30: 74:25:f0:25:b0:6f:3a:40:29:14:13:5b:50:01:58: eb:fd:61:6b:da:4a:97:de:08:11:d8:f5:59:db:5f: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:69:E3:E2:81:D9:D3:C0:F8:DC:8F:D3:61:82:8D:61:6D:E9:00 X509v3 Authority Key Identifier: keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/HDxp4-KB2dPA-NyP02GCjWFt6QA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:268::/48 Signature Algorithm: sha256WithRSAEncryption 08:3b:6f:4e:8e:55:0f:96:90:22:ab:cf:2b:df:64:b9:ca:66: ae:a5:98:be:d5:8a:eb:5d:54:cb:a9:78:ed:c2:e9:fe:0a:a0: 0f:ce:36:61:f1:ec:43:91:b5:76:bf:49:e4:ae:1d:3c:06:7a: 7c:1d:32:4a:f9:ab:83:44:16:e1:40:d5:e2:15:4b:7a:ec:bd: 50:3f:12:9f:46:1d:97:52:6f:82:dd:c4:a3:d1:95:aa:6e:82: e4:65:93:9f:44:53:bd:a0:b8:7f:f3:bb:59:78:83:aa:73:b4: dc:ee:9e:97:5c:f0:d9:f4:70:0d:49:55:14:8a:19:be:b6:c6: 61:b9:2b:2b:83:bb:bd:53:bf:1d:8c:2f:ba:67:47:8b:46:e5: 32:6d:62:eb:ce:9f:8f:5b:24:bd:18:25:29:8e:f5:e3:ce:e6: be:fd:55:a1:35:a8:08:c0:a3:4d:d1:5d:bc:25:e0:dd:73:ec: a1:8e:e7:e1:4b:4d:bc:0d:33:aa:1e:28:a4:d7:42:49:4d:48: 52:06:8a:11:85:d0:3e:4e:c5:13:e0:0e:08:38:3d:8f:7a:dc: e9:17:fc:9e:68:5f:8f:ba:54:8f:3f:ad:88:17:80:20:b0:60: cf:b8:88:69:a7:44:d4:63:34:8e:9c:e3:b7:02:8f:5c:fa:fb: 37:01:e1:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6Wmhlmvz46I697S+CHCfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl MTlhNTcwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzNjNjllM2UyODFkOWQzYzBmOGRjOGZkMzYxODI4ZDYxNmRlOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XrYoPa8HzOnWy3U+wEWuIR+aaG1 EpzZgYQnA/nOUPLMNhxzpLU9xZeCBi5n/ypPZLe3xmm3/rj4HLPiMzuGyzkFcY+b NPrwI7c05YUYzTuIzsqEVhP6PT0PyBbcoZSowzKJSKXyk6ld/U0IpB9QceVqObfv DEolNe0BLZpzskkVQPCiqLu69k0hVm6GY/Mfbh2GXCMoFM+iCFK6KIbhIfm4F3Yy BtgZ2Op1GNyeaszSEBR1sCSclnXgOHhMaiTJCh2FIhkv5Q2iIBQSmTE77srt9bKs o2iOelyXkbQiCjB0JfAlsG86QCkUE1tQAVjr/WFr2kqX3ggR2PVZ219spwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBw8aePigdnTwPjcj9Nhgo1hbekAMB8GA1UdIwQY MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt YjljYTc1NTVjMmM1LzEvSER4cDQtS0IyZFBBLU55UDAyR0NqV0Z0NlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1 LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAJo MA0GCSqGSIb3DQEBCwUAA4IBAQAIO29OjlUPlpAiq88r32S5ymaupZi+1YrrXVTL qXjtwun+CqAPzjZh8exDkbV2v0nkrh08Bnp8HTJK+auDRBbhQNXiFUt67L1QPxKf Rh2XUm+C3cSj0ZWqboLkZZOfRFO9oLh/87tZeIOqc7Tc7p6XXPDZ9HANSVUUihm+ tsZhuSsrg7u9U78djC+6Z0eLRuUybWLrzp+PWyS9GCUpjvXjzua+/VWhNagIwKNN 0V28JeDdc+yhjufhS028DTOqHiik10JJTUhSBooRhdA+TsUT4A4IOD2PetzpF/ye aF+PulSPP62IF4AgsGDPuIhpp0TUYzSOnOO3Ao9c+vs3AeGa -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:47 2026 by rpki-client