This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HTEwwJXggPVCTtXpl3xGnhmqkn0.roa File: HTEwwJXggPVCTtXpl3xGnhmqkn0.roa (raw, json) Hash identifier: YSU4EBpkbN+gqa9+B5kYBhgl7NfW3aMe4m6ihpFVIHY= Subject key identifier: 1D:31:30:C0:95:E0:80:F5:42:4E:D5:E9:97:7C:46:9E:19:AA:92:7D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D63F26C2E1B26A3B1080B380A98A8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HTEwwJXggPVCTtXpl3xGnhmqkn0.roa Signing time: Fri 02 Jan 2026 06:20:31 +0000 ROA not before: Fri 02 Jan 2026 06:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213443 IP address blocks: 2a0e:97c0:840::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:63:f2:6c:2e:1b:26:a3:b1:08:0b:38:0a:98:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d3130c095e080f5424ed5e9977c469e19aa927d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:9b:ec:1c:1f:e8:b2:f7:92:2a:2c:9e:3e: 40:48:a4:4e:ea:ce:16:08:a7:75:c7:63:78:8b:eb: e8:0b:12:c2:0a:27:46:57:a9:65:b0:da:b2:54:fb: 8c:14:a2:d5:71:5b:94:12:3d:10:14:57:14:18:c8: 76:33:6f:47:ae:3c:5b:5e:22:40:e1:5d:b4:86:00: 1c:90:1e:e0:02:ac:74:1b:98:44:29:c6:63:42:e9: 19:05:f5:99:62:ed:4a:1e:30:41:09:7f:a9:aa:05: 85:cd:10:a2:be:ee:78:d1:ce:e8:52:9b:a4:3d:99: 44:9f:b4:3b:b5:0b:d8:78:9d:08:0c:97:89:33:84: b8:5b:1a:ec:88:ba:d9:ef:a6:34:07:e9:d0:a6:3c: d3:7d:6c:fb:78:64:14:29:c2:c5:d9:ab:90:52:52: c4:06:b9:b9:64:45:ad:0b:b3:03:2c:f1:8e:13:21: 0f:12:b5:3c:d4:17:cb:80:a8:5f:11:fe:1c:93:f3: 37:d2:79:d6:9a:d7:10:e2:69:e5:f7:a4:ce:52:6a: ae:7c:20:a9:6b:59:74:7f:0c:21:f5:1b:15:db:bb: 75:a3:6f:2f:7a:fe:95:38:99:14:33:3b:e8:52:df: 4f:85:49:d9:9e:38:11:06:0a:7a:5a:eb:d8:82:dd: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:30:C0:95:E0:80:F5:42:4E:D5:E9:97:7C:46:9E:19:AA:92:7D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HTEwwJXggPVCTtXpl3xGnhmqkn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:840::/44 Signature Algorithm: sha256WithRSAEncryption 55:8f:24:42:33:9c:9c:5b:c3:33:38:01:73:c1:57:d2:25:91: 3b:39:8a:f1:50:72:35:5b:c2:f1:8e:c5:eb:c3:8c:09:67:4d: e7:bf:fd:6e:ba:ea:47:c3:9d:e1:2c:aa:95:39:03:8e:77:01: b3:17:6b:06:32:1b:87:bb:68:d9:2c:7d:c4:05:e3:96:ce:7c: 7f:6f:cd:3d:57:2f:9b:f0:8f:41:14:1c:7d:09:23:5e:d8:3e: ab:dc:24:ee:f1:b2:1d:5a:19:f1:fd:fc:b9:7a:88:58:b2:d2: b8:44:1f:6a:42:51:b7:f1:c0:9e:2a:9d:21:c4:e3:bd:5a:3d: b3:04:29:dd:7b:b9:15:70:8f:6c:fe:02:c3:e8:8c:20:15:61: ea:3b:f2:cd:c7:37:16:4c:1b:be:9d:ff:d4:46:e1:fe:7c:c6: 5f:6c:12:5e:9a:6a:6e:ca:32:af:05:24:00:f1:a8:8f:0e:94: cf:a3:60:1c:e8:ff:29:42:05:ca:c7:e6:a9:67:70:c3:28:a7: 7c:b8:16:8e:4c:14:45:09:ec:ea:9c:21:5f:8e:68:22:48:08: c1:be:1f:e0:9f:40:30:cf:7f:44:90:c8:d6:72:40:32:a6:21: 8f:05:3a:35:b7:5d:77:48:a4:92:c7:75:eb:86:11:a9:a0:da: da:e2:14:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWPybC4bJqOxCAs4CpioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDMxMzBjMDk1ZTA4MGY1NDI0ZWQ1ZTk5NzdjNDY5ZTE5YWE5MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5yb7Bwf6LL3kiosnj5ASKRO6s4W CKd1x2N4i+voCxLCCidGV6llsNqyVPuMFKLVcVuUEj0QFFcUGMh2M29HrjxbXiJA 4V20hgAckB7gAqx0G5hEKcZjQukZBfWZYu1KHjBBCX+pqgWFzRCivu540c7oUpuk PZlEn7Q7tQvYeJ0IDJeJM4S4WxrsiLrZ76Y0B+nQpjzTfWz7eGQUKcLF2auQUlLE Brm5ZEWtC7MDLPGOEyEPErU81BfLgKhfEf4ck/M30nnWmtcQ4mnl96TOUmqufCCp a1l0fwwh9RsV27t1o28vev6VOJkUMzvoUt9PhUnZnjgRBgp6WuvYgt0MPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB0xMMCV4ID1Qk7V6Zd8Rp4ZqpJ9MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSFRFd3dKWGdnUFZDVHRYcGwzeEduaG1xa24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAhA MA0GCSqGSIb3DQEBCwUAA4IBAQBVjyRCM5ycW8MzOAFzwVfSJZE7OYrxUHI1W8Lx jsXrw4wJZ03nv/1uuupHw53hLKqVOQOOdwGzF2sGMhuHu2jZLH3EBeOWznx/b809 Vy+b8I9BFBx9CSNe2D6r3CTu8bIdWhnx/fy5eohYstK4RB9qQlG38cCeKp0hxOO9 Wj2zBCnde7kVcI9s/gLD6IwgFWHqO/LNxzcWTBu+nf/URuH+fMZfbBJemmpuyjKv BSQA8aiPDpTPo2Ac6P8pQgXKx+apZ3DDKKd8uBaOTBRFCezqnCFfjmgiSAjBvh/g n0Awz39EkMjWckAypiGPBTo1t113SKSSx3XrhhGpoNra4hTQ -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client