This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HJtpjvWnY2zrChYpEo-UfhHA5_w.roa File: HJtpjvWnY2zrChYpEo-UfhHA5_w.roa (raw, json) Hash identifier: Dp1KSYZlQOFEq8QooxK07D1jc9heNof1j8Fmgf3LBKc= Subject key identifier: 1C:9B:69:8E:F5:A7:63:6C:EB:0A:16:29:12:8F:94:7E:11:C0:E7:FC Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E391D2FA90BEAAB60658DE27C376200 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HJtpjvWnY2zrChYpEo-UfhHA5_w.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3280 IP address blocks: 2a0c:b642:1a0b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1d:2f:a9:0b:ea:ab:60:65:8d:e2:7c:37:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c9b698ef5a7636ceb0a1629128f947e11c0e7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:a7:c1:09:70:07:e5:f4:e5:7c:0c:ee:62: 5e:01:b3:fd:4f:56:40:c1:36:4f:9d:2f:34:03:ef: e6:db:47:56:ce:95:17:a1:3a:fd:52:5b:0c:ac:48: 65:09:e1:eb:4d:f2:9e:fb:ea:de:38:31:0c:2c:eb: fb:29:66:f8:50:dd:e9:6a:a1:dd:f2:0a:9e:32:fa: 59:b3:23:c0:dc:85:c2:45:25:75:a9:8b:d2:3b:aa: 4c:64:76:f5:69:9c:28:f1:f8:9d:a6:f3:7e:56:fb: 3a:0a:69:87:68:35:c6:8f:f9:d3:71:7e:b1:0b:57: 4f:27:32:a0:ab:a0:dd:d3:50:27:55:ae:8a:75:ff: dc:c0:2d:b7:b3:5f:b3:b5:85:12:2c:5b:fe:98:bd: 11:70:48:a2:8e:b6:d3:0a:51:d6:b2:78:21:ed:a1: 9b:c6:98:5e:66:e4:5a:94:60:7c:7d:21:61:60:33: 00:c3:ab:99:6e:d5:39:57:b4:c6:47:40:68:1b:bf: 22:20:58:f5:f2:97:2a:81:a1:af:a0:23:c7:ab:7f: 1e:5a:f4:df:1c:4b:0d:d5:2f:fc:0a:51:ed:21:a6: 29:a2:ef:45:ac:25:73:00:bc:ca:26:8b:f2:c2:3f: 2c:a3:33:67:ee:4e:50:b6:fe:b9:3b:13:a3:ab:d9: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:69:8E:F5:A7:63:6C:EB:0A:16:29:12:8F:94:7E:11:C0:E7:FC X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HJtpjvWnY2zrChYpEo-UfhHA5_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a0b::/48 Signature Algorithm: sha256WithRSAEncryption 5c:4d:33:f9:5c:e0:ba:ea:ca:ec:2d:a8:52:5e:4e:11:65:88: e6:97:97:67:ff:5a:2c:1a:37:9b:35:04:ba:8a:13:95:d7:57: 57:1c:1a:d4:01:9f:15:55:eb:1f:15:5f:6b:75:10:33:0e:eb: ae:cf:ca:c7:87:47:4b:03:b5:4f:95:e3:4d:89:ed:ec:df:92: 5d:ce:03:e8:d9:1a:d6:70:d4:1f:51:dc:25:68:07:f9:a1:86: 9c:91:22:14:cc:26:c6:3f:59:86:79:98:8d:dc:46:00:34:21: cb:54:53:71:41:6a:68:3b:20:71:e3:32:6e:12:c3:a2:b8:0a: 88:d5:b0:0a:1c:71:c8:5f:38:4b:75:eb:87:f8:0d:8e:80:fb: 11:0a:6f:a0:9d:00:c4:e1:24:ff:bc:89:d1:bf:c3:ae:4f:d8: a2:8e:df:9f:d6:61:ca:77:ac:b9:77:c7:a4:72:46:43:e0:4b: 55:67:b9:98:e1:50:58:4f:7b:4b:00:1d:dd:05:59:ec:d3:f8: 81:db:6e:1e:fc:9b:cb:b5:ec:45:67:50:e4:61:a8:89:b9:b3: c6:7d:d4:50:19:b4:07:67:1a:db:34:27:d0:6a:2c:af:61:e7: 81:60:e3:96:09:b6:72:d7:9f:8a:fe:b6:8e:c8:bd:c8:03:66: 57:ef:5f:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OR0vqQvqq2BljeJ8N2IAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzliNjk4ZWY1YTc2MzZjZWIwYTE2MjkxMjhmOTQ3ZTExYzBlN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbenwQlwB+X05XwM7mJeAbP9T1ZA wTZPnS80A+/m20dWzpUXoTr9UlsMrEhlCeHrTfKe++reODEMLOv7KWb4UN3paqHd 8gqeMvpZsyPA3IXCRSV1qYvSO6pMZHb1aZwo8fidpvN+Vvs6CmmHaDXGj/nTcX6x C1dPJzKgq6Dd01AnVa6Kdf/cwC23s1+ztYUSLFv+mL0RcEiijrbTClHWsngh7aGb xpheZuRalGB8fSFhYDMAw6uZbtU5V7TGR0BoG78iIFj18pcqgaGvoCPHq38eWvTf HEsN1S/8ClHtIaYpou9FrCVzALzKJovywj8sozNn7k5Qtv65OxOjq9mWcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBybaY71p2Ns6woWKRKPlH4RwOf8MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvSEp0cGp2V25ZMnpyQ2hZcEVvLVVmaEhBNV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoL MA0GCSqGSIb3DQEBCwUAA4IBAQBcTTP5XOC66srsLahSXk4RZYjml5dn/1osGjeb NQS6ihOV11dXHBrUAZ8VVesfFV9rdRAzDuuuz8rHh0dLA7VPleNNie3s35JdzgPo 2RrWcNQfUdwlaAf5oYackSIUzCbGP1mGeZiN3EYANCHLVFNxQWpoOyBx4zJuEsOi uAqI1bAKHHHIXzhLdeuH+A2OgPsRCm+gnQDE4ST/vInRv8OuT9iijt+f1mHKd6y5 d8ekckZD4EtVZ7mY4VBYT3tLAB3dBVns0/iB224e/JvLtexFZ1DkYaiJubPGfdRQ GbQHZxrbNCfQaiyvYeeBYOOWCbZy15+K/raOyL3IA2ZX71++ -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:54 2026 by rpki-client