This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HIkpyUvabziv2fXptvUMgKsRTNM.roa File: HIkpyUvabziv2fXptvUMgKsRTNM.roa (raw, json) Hash identifier: RWPRlnS31VrCvYYdzcw3ZV/dxZWeL6HRbIHyTCvX/PM= Subject key identifier: 1C:89:29:C9:4B:DA:6F:38:AF:D9:F5:E9:B6:F5:0C:80:AB:11:4C:D3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B6F4A9D60177862C982DA20E71450986F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HIkpyUvabziv2fXptvUMgKsRTNM.roa Signing time: Tue 30 Dec 2025 12:45:19 +0000 ROA not before: Tue 30 Dec 2025 12:45:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51217 IP address blocks: 2a06:de01:90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:4a:9d:60:17:78:62:c9:82:da:20:e7:14:50:98:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 30 12:45:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c8929c94bda6f38afd9f5e9b6f50c80ab114cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:3e:20:16:1e:9e:65:e3:e0:41:31:17:d2: 6d:7c:bb:9a:65:93:2f:73:9e:75:b8:ec:a6:8d:ba: cd:d7:02:e8:b6:3e:17:14:f4:9b:7b:54:3d:93:a4: d2:06:f0:14:42:1e:6a:76:7c:e8:67:aa:fa:b7:44: 65:97:e9:de:e4:8f:41:dc:71:2d:a2:d0:1c:24:ce: 5a:4e:71:57:62:18:20:d4:8c:8f:05:6b:2e:38:96: ea:8b:48:43:20:01:da:1e:80:e1:d7:91:2b:4e:46: 97:bd:40:83:4f:29:fd:3b:dd:b7:91:54:0f:40:f7: b1:cc:a0:53:70:fc:b3:b5:33:21:5c:6c:f6:b1:36: 0d:79:00:c5:30:ff:ae:63:97:0b:b4:83:49:f8:d0: 1d:7e:47:8b:a7:88:1f:d6:85:9d:c4:9d:78:7d:93: 67:f9:e7:fb:6c:d0:9b:14:18:9b:cb:87:b9:47:c3: 3d:71:79:15:32:3a:02:df:73:79:49:d7:d5:47:e9: ae:e7:a3:33:cc:28:36:3d:fd:7b:17:7a:e6:46:71: 49:f1:f1:53:53:b2:8a:62:44:ae:07:2a:15:98:c9: f9:6f:06:15:7b:11:98:76:82:bf:b4:78:cb:74:03: c1:84:81:25:ca:9b:25:7c:92:c9:91:e6:c5:fd:3b: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:89:29:C9:4B:DA:6F:38:AF:D9:F5:E9:B6:F5:0C:80:AB:11:4C:D3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HIkpyUvabziv2fXptvUMgKsRTNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:90::/48 Signature Algorithm: sha256WithRSAEncryption b0:71:17:e3:d6:59:bd:43:ff:df:52:ee:46:60:2a:58:29:68: 7f:87:3c:0c:a9:ab:b6:51:6d:94:d0:d4:d7:35:93:e3:ab:6c: 6e:ff:f7:eb:20:ae:c3:99:62:aa:4a:ee:64:29:dd:2b:6e:dc: e0:5d:5c:8e:4e:f0:44:78:3d:bc:07:56:31:7d:60:82:00:50: bc:93:88:47:c1:8f:d3:96:dd:0f:9a:02:ad:a1:df:95:e8:d5: 38:b5:e5:2b:0b:82:e1:a3:c4:b5:ec:4f:89:fd:13:31:da:a2: b2:0f:74:8e:1c:f5:04:c4:04:11:c3:28:fd:74:78:7f:b2:d9: ad:03:2f:e5:17:51:7a:21:a6:9f:02:5a:78:0d:c7:79:ee:f9: 52:68:ea:69:06:53:f9:ed:76:30:46:31:09:6e:fc:f2:47:7c: 3b:6e:e8:63:b5:e1:1d:c1:fe:84:c9:63:75:bc:e0:c7:d0:a6: fa:a5:c7:c9:16:ae:df:78:80:16:6a:6d:a6:1c:e3:22:a4:4c: 3e:71:0e:75:06:e3:f5:f7:49:8a:fd:06:aa:64:46:ab:fc:3d: 88:87:1c:f7:3c:a8:38:5f:88:e9:2a:b8:9d:1d:22:15:8e:05: ef:a0:df:ed:5e:5f:59:84:a4:90:da:06:5b:0c:7a:26:c3:d0: 59:fa:ea:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtvSp1gF3hiyYLaIOcUUJhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjMwMTI0NTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzg5MjljOTRiZGE2ZjM4YWZkOWY1ZTliNmY1MGM4MGFiMTE0Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomE+IBYenmXj4EExF9JtfLuaZZMv c551uOymjbrN1wLotj4XFPSbe1Q9k6TSBvAUQh5qdnzoZ6r6t0Rll+ne5I9B3HEt otAcJM5aTnFXYhgg1IyPBWsuOJbqi0hDIAHaHoDh15ErTkaXvUCDTyn9O923kVQP QPexzKBTcPyztTMhXGz2sTYNeQDFMP+uY5cLtINJ+NAdfkeLp4gf1oWdxJ14fZNn +ef7bNCbFBiby4e5R8M9cXkVMjoC33N5SdfVR+mu56MzzCg2Pf17F3rmRnFJ8fFT U7KKYkSuByoVmMn5bwYVexGYdoK/tHjLdAPBhIElypslfJLJkebF/Tsl7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFByJKclL2m84r9n16bb1DICrEUzTMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSElrcHlVdmFieml2MmZYcHR2VU1nS3NSVE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAQCQ MA0GCSqGSIb3DQEBCwUAA4IBAQCwcRfj1lm9Q//fUu5GYCpYKWh/hzwMqau2UW2U 0NTXNZPjq2xu//frIK7DmWKqSu5kKd0rbtzgXVyOTvBEeD28B1YxfWCCAFC8k4hH wY/Tlt0PmgKtod+V6NU4teUrC4Lho8S17E+J/RMx2qKyD3SOHPUExAQRwyj9dHh/ stmtAy/lF1F6IaafAlp4Dcd57vlSaOppBlP57XYwRjEJbvzyR3w7buhjteEdwf6E yWN1vODH0Kb6pcfJFq7feIAWam2mHOMipEw+cQ51BuP190mK/QaqZEar/D2Ihxz3 PKg4X4jpKridHSIVjgXvoN/tXl9ZhKSQ2gZbDHomw9BZ+uqp -----END CERTIFICATE-----Generated at Wed Dec 31 12:45:33 2025 by rpki-client