This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/HW1ashBasiojQ_LVw9DqjgRziMs.roa File: HW1ashBasiojQ_LVw9DqjgRziMs.roa (raw, json) Hash identifier: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA= Subject key identifier: 1D:6D:5A:B2:10:5A:B2:2A:23:43:F2:D5:C3:D0:EA:8E:04:73:88:CB Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3 Certificate serial: 019B77C66CCE0E7A5777842D42C686342003 Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/HW1ashBasiojQ_LVw9DqjgRziMs.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206740 IP address blocks: 2001:678:2b9::/48 maxlen: 48 2001:678:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:ce:0e:7a:57:77:84:2d:42:c6:86:34:20:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6d5ab2105ab22a2343f2d5c3d0ea8e047388cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:74:10:11:f6:2b:88:90:ec:3a:77:b6:12: 34:22:d5:57:c6:96:76:e2:5e:a9:59:75:7d:43:71: af:38:ce:62:f2:7a:8d:aa:e6:92:4f:a4:e2:f2:56: 83:3e:09:39:8b:a5:c6:64:a1:46:2e:9c:86:42:bf: f2:af:0d:b3:69:72:b0:94:23:ed:8d:9c:07:d0:b5: 6e:78:05:58:39:39:c8:33:d9:3a:81:20:2d:df:95: 1c:9b:d7:cf:77:1e:92:20:09:94:08:41:d6:9b:e3: 28:b6:75:ec:e5:e1:79:f3:d3:1c:95:ee:8f:cd:9f: 75:62:e0:c0:1d:95:c0:7d:db:70:4a:8c:93:6f:51: c2:24:09:84:36:96:d9:de:b9:ad:41:e1:02:af:e6: 62:56:ca:6c:83:29:24:89:b0:c7:4f:c3:12:62:01: 62:57:52:28:fa:57:ce:a9:7e:89:ff:ea:95:b3:ce: 69:ac:dd:1d:25:8c:5e:35:87:22:cb:95:5f:9f:05: 2b:e7:d5:35:54:5e:1b:0d:2a:18:a2:d6:f7:ea:7e: fc:85:91:08:67:1d:5e:7b:87:ba:0d:b0:ff:00:88: 70:01:56:b3:ee:4f:bf:ff:f2:d2:cb:df:60:62:b2: 09:48:e5:69:f1:04:50:1f:6e:6e:3e:68:b5:f7:ad: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6D:5A:B2:10:5A:B2:2A:23:43:F2:D5:C3:D0:EA:8E:04:73:88:CB X509v3 Authority Key Identifier: keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/HW1ashBasiojQ_LVw9DqjgRziMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:2b9::/48 2001:678:2c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:c8:21:82:52:a8:be:60:55:6f:bd:1b:72:fe:bd:f1:1c:ce: 57:9a:13:cc:a8:c3:b7:86:ba:0a:25:01:6b:9e:ef:20:31:80: 3e:d4:85:a1:a6:f7:f8:f6:7b:6e:6a:23:a7:ab:3f:93:55:a8: a7:23:79:bb:f7:a9:ee:53:08:92:1c:89:8c:5a:01:1a:ba:21: 3c:2f:17:d2:eb:d7:e5:a6:46:30:89:1a:b8:bb:c3:b0:01:83: 77:c6:52:8f:66:9e:27:8d:08:72:f2:fe:8b:21:85:74:ca:10: 84:a9:9a:b2:54:df:df:e8:12:db:bb:d8:e9:f4:aa:c9:db:2c: bc:9f:2b:98:64:2b:d0:b0:60:ad:22:f8:9b:59:bc:b3:b5:0b: 71:fd:74:ce:90:24:25:dc:3c:b2:19:fb:0c:7a:ec:a1:ce:54: 7b:d1:71:81:e9:95:e8:a7:bf:46:c1:43:0e:a2:9c:50:af:10: 16:6f:b3:dd:eb:83:1a:39:d9:e7:ca:90:a3:93:54:ab:c7:9c: 35:04:15:57:b8:91:c6:17:ba:df:4a:27:f7:b1:ea:54:31:d0: 9c:5d:6e:7f:a9:a2:25:65:67:51:93:31:a4:9d:4c:4d:d5:7a: 82:10:47:33:a5:b7:cc:69:78:23:b8:94:d4:43:08:b2:b1:ee: fa:8a:f1:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xmzODnpXd4QtQsaGNCADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4 NjVmZDMwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDZkNWFiMjEwNWFiMjJhMjM0M2YyZDVjM2QwZWE4ZTA0NzM4OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH90EBH2K4iQ7Dp3thI0ItVXxpZ2 4l6pWXV9Q3GvOM5i8nqNquaST6Ti8laDPgk5i6XGZKFGLpyGQr/yrw2zaXKwlCPt jZwH0LVueAVYOTnIM9k6gSAt35Ucm9fPdx6SIAmUCEHWm+MotnXs5eF589Mcle6P zZ91YuDAHZXAfdtwSoyTb1HCJAmENpbZ3rmtQeECr+ZiVspsgykkibDHT8MSYgFi V1Io+lfOqX6J/+qVs85prN0dJYxeNYciy5VfnwUr59U1VF4bDSoYotb36n78hZEI Zx1ee4e6DbD/AIhwAVaz7k+///LSy99gYrIJSOVp8QRQH25uPmi1963NBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB1tWrIQWrIqI0Py1cPQ6o4Ec4jLMB8GA1UdIwQY MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt MzkyYTc1MjQ2NGIxLzEvSFcxYXNoQmFzaW9qUV9MVnc5RHFqZ1J6aU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUtMzkyYTc1MjQ2NGIx LzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAK5 AwcAIAEGeALAMA0GCSqGSIb3DQEBCwUAA4IBAQCmyCGCUqi+YFVvvRty/r3xHM5X mhPMqMO3hroKJQFrnu8gMYA+1IWhpvf49ntuaiOnqz+TVainI3m796nuUwiSHImM WgEauiE8LxfS69flpkYwiRq4u8OwAYN3xlKPZp4njQhy8v6LIYV0yhCEqZqyVN/f 6BLbu9jp9KrJ2yy8nyuYZCvQsGCtIvibWbyztQtx/XTOkCQl3DyyGfsMeuyhzlR7 0XGB6ZXop79GwUMOopxQrxAWb7Pd64MaOdnnypCjk1Srx5w1BBVXuJHGF7rfSif3 sepUMdCcXW5/qaIlZWdRkzGknUxN1XqCEEczpbfMaXgjuJTUQwiyse76ivEb -----END CERTIFICATE-----Generated at Wed Jan 21 04:40:05 2026 by rpki-client