This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/HPyXpgvZq0DmF5lYqywyaXxXuLs.roa File: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (raw, json) Hash identifier: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM= Subject key identifier: 1C:FC:97:A6:0B:D9:AB:40:E6:17:99:58:AB:2C:32:69:7C:57:B8:BB Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Certificate serial: 019B7D5C24BC5B10A1DE0C687F4C907B78B1 Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/HPyXpgvZq0DmF5lYqywyaXxXuLs.roa Signing time: Fri 02 Jan 2026 06:19:09 +0000 ROA not before: Fri 02 Jan 2026 06:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.41.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:24:bc:5b:10:a1:de:0c:68:7f:4c:90:7b:78:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Validity Not Before: Jan 2 06:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cfc97a60bd9ab40e6179958ab2c32697c57b8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:a3:e0:93:0d:b7:0a:98:b9:ea:6f:17:59: b0:35:59:fa:34:b2:8a:42:1a:b9:5f:5a:b2:6e:bb: 91:7a:a9:ef:71:66:4b:f4:37:5e:a8:c9:15:f9:a6: 0b:18:49:e2:7a:34:ba:c6:36:01:95:24:cb:d1:8d: 5c:a7:27:1e:f6:0f:5b:6b:2c:50:bf:a3:d4:23:b0: ae:29:fe:79:1b:6a:23:e3:73:95:93:24:c8:c5:74: e3:a5:e2:c9:cb:d4:44:d4:13:44:be:53:3e:44:64: 1e:53:bc:4e:d5:a0:39:96:b4:06:0e:b2:9c:bc:12: ec:2e:f3:46:d8:fa:d9:a9:48:91:6b:92:a1:a4:70: 89:52:a3:27:cd:d0:0a:81:76:eb:5c:16:f5:bc:13: 69:19:3f:dd:b2:29:8b:32:a7:fc:0d:b2:0a:cc:0d: ac:95:f0:de:c0:5e:2e:fa:22:e8:54:55:9b:8c:71: 1b:fb:29:98:87:4d:a4:4b:2b:32:c3:42:10:c0:db: af:90:3f:1d:f9:2f:ee:55:0d:3c:1b:2d:3a:b8:2f: 8b:36:71:7e:c5:f2:9c:46:9b:64:c7:83:4d:0f:ac: 4b:b6:03:b7:1a:ff:d4:bf:03:e9:95:5d:7e:20:37: cc:29:73:ee:18:1e:91:ff:2a:b6:cf:ae:5e:91:13: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FC:97:A6:0B:D9:AB:40:E6:17:99:58:AB:2C:32:69:7C:57:B8:BB X509v3 Authority Key Identifier: keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/HPyXpgvZq0DmF5lYqywyaXxXuLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.41.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:da:f0:9b:34:e6:fc:1f:4f:68:fc:8d:1e:8a:0d:97:c9:7e: 0b:42:43:50:bf:4b:73:80:5f:81:d9:39:13:cf:cd:49:03:0c: 0e:a8:d5:46:9d:50:34:ce:96:83:8c:42:d6:5c:cb:0c:ab:c1: 52:52:9d:c9:86:e5:d6:e4:f5:0c:16:31:7d:fa:2f:2b:3a:f5: 03:76:fe:ad:03:ad:fa:a4:32:54:66:3a:93:bc:c7:08:4c:8a: ec:33:d5:aa:bc:44:20:aa:a9:a1:b1:87:ec:5c:7b:2f:ba:ee: a1:af:f9:1a:79:31:14:6d:77:57:2d:9d:a6:cb:18:31:6b:3f: a2:3f:a6:46:1d:cc:9c:b8:aa:b2:1f:8b:8c:66:22:00:c5:f4: 82:10:ea:e4:f4:6a:8a:40:f3:af:07:a2:f0:0d:7c:a9:b5:b4: ac:25:18:f6:33:c0:de:f3:dd:94:49:3a:31:79:6e:db:29:d4: a8:de:73:6d:31:9d:e1:9e:ab:b5:4f:37:4f:2b:c1:8a:6a:0d: 99:4b:dd:84:eb:ab:f0:d6:45:30:aa:62:29:8e:c3:2e:5f:53: b6:b8:9a:27:8a:a8:57:eb:89:a8:73:67:f0:ca:57:5d:11:bb: 69:8f:76:44:16:9b:ca:7a:10:de:70:7e:db:4a:ce:a0:70:7c: cf:ae:1a:f6 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9XCS8WxCh3gxof0yQe3ixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWVmYzQ5ZTZjZDY3ZTI1OTk2YTJjMGZjNTdiODBjYzIz ZGJhNDQwHhcNMjYwMTAyMDYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2ZjOTdhNjBiZDlhYjQwZTYxNzk5NThhYjJjMzI2OTdjNTdiOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Raj4JMNtwqYuepvF1mwNVn6NLKK Qhq5X1qybruReqnvcWZL9DdeqMkV+aYLGEniejS6xjYBlSTL0Y1cpyce9g9bayxQ v6PUI7CuKf55G2oj43OVkyTIxXTjpeLJy9RE1BNEvlM+RGQeU7xO1aA5lrQGDrKc vBLsLvNG2PrZqUiRa5KhpHCJUqMnzdAKgXbrXBb1vBNpGT/dsimLMqf8DbIKzA2s lfDewF4u+iLoVFWbjHEb+ymYh02kSysyw0IQwNuvkD8d+S/uVQ08Gy06uC+LNnF+ xfKcRptkx4NND6xLtgO3Gv/UvwPplV1+IDfMKXPuGB6R/yq2z65ekRPN6wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBz8l6YL2atA5heZWKssMml8V7i7MB8GA1UdIwQY MBaAFE6u/EnmzWfiWZaiwPxXuAzCPbpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMt ZTcwNzNjZmUxMzRmLzEvSFB5WHBndlpxMERtRjVsWXF5d3lhWHhYdUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMtZTcwNzNjZmUxMzRm LzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjSkwDQYJ KoZIhvcNAQELBQADggEBAAna8Js05vwfT2j8jR6KDZfJfgtCQ1C/S3OAX4HZORPP zUkDDA6o1UadUDTOloOMQtZcywyrwVJSncmG5dbk9QwWMX36Lys69QN2/q0Drfqk MlRmOpO8xwhMiuwz1aq8RCCqqaGxh+xcey+67qGv+Rp5MRRtd1ctnabLGDFrP6I/ pkYdzJy4qrIfi4xmIgDF9IIQ6uT0aopA868HovANfKm1tKwlGPYzwN7z3ZRJOjF5 btsp1Kjec20xneGeq7VPN08rwYpqDZlL3YTrq/DWRTCqYimOwy5fU7a4mieKqFfr iahzZ/DKV10Ru2mPdkQWm8p6EN5wfttKzqBwfM+uGvY= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:45 2026 by rpki-client